This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/9mOuuvijZnA_STwkYngVMPsH8JY.roa File: 9mOuuvijZnA_STwkYngVMPsH8JY.roa (raw, json) Hash identifier: fX3y4W7rd9iSm1Vwp+9QVvzxdTPDv1ImVwXNUL4pyB8= Subject key identifier: F6:63:AE:BA:F8:A3:66:70:3F:49:3C:24:62:78:15:30:FB:07:F0:96 Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Certificate serial: 019B77C722E2F4DB099F0696E701869D894E Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/9mOuuvijZnA_STwkYngVMPsH8JY.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.222.116.0/22 maxlen: 22 2a0c:3800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:e2:f4:db:09:9f:06:96:e7:01:86:9d:89:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f663aebaf8a366703f493c2462781530fb07f096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:67:76:1d:63:17:ba:74:cf:86:7d:09:9c: 90:4c:30:69:f6:c3:5f:85:2d:d8:f7:17:73:a1:65: bc:47:87:71:41:66:36:a8:68:8b:e1:91:0c:c4:c6: c6:11:f9:ac:cf:60:e9:91:a7:44:d7:32:07:ef:07: 18:c4:63:2d:63:3d:45:ec:a2:36:8f:25:09:b0:ab: 82:33:ec:76:fa:f4:61:1b:00:59:bd:1d:fa:bc:51: 3f:87:94:f5:8d:4e:d2:17:25:c1:df:60:7f:e7:e7: cc:3d:44:79:6a:c9:ff:95:a3:66:62:6b:f2:a0:16: 1f:3e:70:69:7a:1c:5e:e9:9e:dc:48:1e:9a:4a:2a: cd:71:fb:ab:47:1b:9b:83:09:24:65:6b:69:6d:5e: a8:e1:2c:77:e9:74:b5:7c:78:85:71:f4:0b:5c:70: 63:91:c1:38:07:7b:26:58:88:b4:81:d9:43:ad:5e: 31:90:3b:7a:8a:98:e1:d2:5c:db:f9:0b:92:54:86: 17:3b:34:bb:21:e7:a0:58:48:2d:c5:76:66:18:6e: 9d:ed:3f:fd:ae:53:e8:c9:e8:d5:fb:b0:f1:ef:67: 54:e9:e9:a7:98:99:92:64:f9:eb:36:b9:60:df:08: 1d:b7:c8:e7:bd:df:cd:cb:53:24:70:16:83:ee:ba: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:63:AE:BA:F8:A3:66:70:3F:49:3C:24:62:78:15:30:FB:07:F0:96 X509v3 Authority Key Identifier: keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/9mOuuvijZnA_STwkYngVMPsH8JY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.116.0/22 IPv6: 2a0c:3800::/32 Signature Algorithm: sha256WithRSAEncryption 7c:c3:a6:ad:89:06:79:59:1b:81:c6:fe:7d:0b:b5:10:e1:7f: 51:34:6c:1e:b6:07:c5:72:68:52:a2:80:4d:a5:75:80:cc:f5: 8d:93:ea:10:0e:31:d3:bf:33:ef:1c:5a:58:0f:64:a6:c1:8d: dc:1d:59:25:b4:da:c9:64:50:7c:f0:d2:17:76:98:25:d9:47: e2:12:a2:b9:4d:a1:7d:c3:d4:b6:7a:f2:5d:65:54:f5:37:22: fc:8d:bf:8f:0e:ab:22:1a:9a:7f:2a:86:9b:c4:be:79:8e:b1: 98:2d:7c:34:95:b5:23:05:03:85:71:e3:78:4c:2c:85:af:95: 24:ef:50:8e:2f:d0:71:50:47:e7:e1:78:c7:ca:02:cc:40:e6: da:40:13:a3:39:fd:1b:c5:c8:40:f4:60:68:d6:47:86:bf:f9: d9:86:94:c2:ab:6e:72:1e:9e:84:f2:c6:95:c5:b9:44:68:05: 91:f2:0b:bb:5c:0c:17:e0:2f:be:e5:16:0b:18:3c:24:8e:01: 36:a4:f0:08:08:94:98:03:af:12:f7:0f:dc:c9:e3:d9:77:6f: 35:cd:a3:4f:cb:87:27:8f:7b:5f:96:71:f5:ad:ed:fd:91:40: 94:2e:bb:97:ba:3d:c4:dd:1c:9b:d4:ad:4c:f7:23:b0:f3:ea: 21:23:40:c3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xyLi9NsJnwaW5wGGnYlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy NmJhMGYwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjYzYWViYWY4YTM2NjcwM2Y0OTNjMjQ2Mjc4MTUzMGZiMDdmMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApitndh1jF7p0z4Z9CZyQTDBp9sNf hS3Y9xdzoWW8R4dxQWY2qGiL4ZEMxMbGEfmsz2DpkadE1zIH7wcYxGMtYz1F7KI2 jyUJsKuCM+x2+vRhGwBZvR36vFE/h5T1jU7SFyXB32B/5+fMPUR5asn/laNmYmvy oBYfPnBpehxe6Z7cSB6aSirNcfurRxubgwkkZWtpbV6o4Sx36XS1fHiFcfQLXHBj kcE4B3smWIi0gdlDrV4xkDt6ipjh0lzb+QuSVIYXOzS7IeegWEgtxXZmGG6d7T/9 rlPoyejV+7Dx72dU6emnmJmSZPnrNrlg3wgdt8jnvd/Ny1MkcBaD7rqYVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPZjrrr4o2ZwP0k8JGJ4FTD7B/CWMB8GA1UdIwQY MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut YzQ3MTE0ODIzODBlLzEvOW1PdXV2aWpabkFfU1R3a1luZ1ZNUHNIOEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud50MA0E AgACMAcDBQAqDDgAMA0GCSqGSIb3DQEBCwUAA4IBAQB8w6atiQZ5WRuBxv59C7UQ 4X9RNGwetgfFcmhSooBNpXWAzPWNk+oQDjHTvzPvHFpYD2SmwY3cHVkltNrJZFB8 8NIXdpgl2UfiEqK5TaF9w9S2evJdZVT1NyL8jb+PDqsiGpp/KoabxL55jrGYLXw0 lbUjBQOFceN4TCyFr5Uk71COL9BxUEfn4XjHygLMQObaQBOjOf0bxchA9GBo1keG v/nZhpTCq25yHp6E8saVxblEaAWR8gu7XAwX4C++5RYLGDwkjgE2pPAICJSYA68S 9w/cyePZd281zaNPy4cnj3tflnH1re39kUCULruXuj3E3Ryb1K1M9yOw8+ohI0DD -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:43 2026 by rpki-client