This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/9SiC8VvClFm5oj7EJB2aqFxam8E.roa File: 9SiC8VvClFm5oj7EJB2aqFxam8E.roa (raw, json) Hash identifier: jYfwOhgINxcVe6MhAnfE2LDgSX4sxkrgBuij/Vrgx3w= Subject key identifier: F5:28:82:F1:5B:C2:94:59:B9:A2:3E:C4:24:1D:9A:A8:5C:5A:9B:C1 Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Certificate serial: 019B7C1185999E1252048536E04D4F322C0B Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/9SiC8VvClFm5oj7EJB2aqFxam8E.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211003 IP address blocks: 185.253.111.0/24 maxlen: 24 2a12:1fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:85:99:9e:12:52:04:85:36:e0:4d:4f:32:2c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f52882f15bc29459b9a23ec4241d9aa85c5a9bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3e:b2:e4:71:d3:41:50:73:e7:d6:29:61:eb: 54:5e:a2:61:f2:5d:2a:a2:71:b6:3a:29:df:50:59: 5d:52:0a:77:7a:43:eb:c8:af:8f:72:10:62:91:29: d0:98:6f:07:bb:87:6a:50:a1:75:60:0d:06:c6:81: 25:73:f3:a0:53:2c:9d:a9:87:d2:3c:1b:a6:91:88: e4:bd:11:30:66:85:5f:1c:1c:d1:ce:59:c7:ea:35: d6:91:5d:27:31:62:d8:00:55:ca:19:21:85:e4:fe: 4d:08:04:f1:51:23:59:e5:1d:68:b5:49:4e:aa:23: 70:8b:5c:99:d4:89:f3:73:56:cb:b4:f5:db:41:04: 10:7e:43:c8:49:80:fd:6d:31:4b:5a:f7:df:03:c8: 16:48:2a:38:0e:0b:9e:1f:74:29:9f:a6:20:a4:ec: 30:e5:e5:0a:60:66:96:48:d1:37:d1:e0:e0:1c:64: a0:32:06:2a:26:8c:be:a2:7f:7c:92:68:a2:74:a1: f5:9a:a7:6d:ff:04:02:ac:56:d1:fc:a6:c2:07:7a: ea:14:55:15:df:d4:c7:9b:7f:07:70:de:86:49:2f: eb:45:83:1c:9f:09:59:24:96:ea:0e:c4:d0:e1:55: 78:8f:a3:d0:de:84:3c:9a:5d:54:08:d8:bb:ca:65: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:28:82:F1:5B:C2:94:59:B9:A2:3E:C4:24:1D:9A:A8:5C:5A:9B:C1 X509v3 Authority Key Identifier: keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/9SiC8VvClFm5oj7EJB2aqFxam8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.111.0/24 IPv6: 2a12:1fc0::/48 Signature Algorithm: sha256WithRSAEncryption 50:10:d0:ae:0f:5a:5d:02:73:c7:60:c3:7e:95:e3:a9:54:ce: 26:29:ea:39:fd:a9:dd:13:b0:e3:cd:47:b8:4f:02:2c:4a:91: 71:50:6c:a6:08:bb:5c:37:33:aa:6a:b7:7b:b6:6b:46:9e:85: 3a:3b:4a:2c:87:e5:bc:1c:60:85:73:7c:d6:38:24:82:a5:86: bd:16:a0:7a:25:5e:8e:0d:b5:1b:f0:0d:b1:f1:8d:fd:3d:f9: d1:80:9a:89:03:2a:c6:56:13:07:ae:31:45:63:43:46:e3:86: 18:4f:fb:95:60:42:0f:6e:06:34:19:9c:8b:a2:fb:4d:f1:d0: 03:ff:4f:b7:c4:87:7f:55:79:08:72:14:48:76:63:9a:d2:fe: 11:00:1b:de:66:e9:55:5b:2e:0c:ba:a8:e7:97:c3:c8:1e:31: 5c:08:9c:e6:89:49:6b:c7:e3:9f:1a:ad:42:58:05:73:1e:4e: 9d:ea:13:dd:b3:24:51:00:79:7a:c1:49:cf:aa:00:32:07:1a: 2a:9d:d9:79:55:74:1a:ac:d3:29:d3:64:6d:a3:18:47:40:56: d5:91:16:c5:8b:78:2e:97:01:94:c7:61:75:48:3a:0b:e3:10: b7:9e:cd:2c:08:6b:f9:26:1b:11:da:1c:b0:15:84:da:0b:2d: 35:d9:50:bc -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EYWZnhJSBIU24E1PMiwLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZWQxYTU2ODZiYTY4Mjg5YzZjZmU0YzdjMzZlMDM3YWRl MTFlY2EwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTI4ODJmMTViYzI5NDU5YjlhMjNlYzQyNDFkOWFhODVjNWE5YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z6y5HHTQVBz59YpYetUXqJh8l0q onG2OinfUFldUgp3ekPryK+PchBikSnQmG8Hu4dqUKF1YA0GxoElc/OgUyydqYfS PBumkYjkvREwZoVfHBzRzlnH6jXWkV0nMWLYAFXKGSGF5P5NCATxUSNZ5R1otUlO qiNwi1yZ1Inzc1bLtPXbQQQQfkPISYD9bTFLWvffA8gWSCo4DgueH3Qpn6YgpOww 5eUKYGaWSNE30eDgHGSgMgYqJoy+on98kmiidKH1mqdt/wQCrFbR/KbCB3rqFFUV 39THm38HcN6GSS/rRYMcnwlZJJbqDsTQ4VV4j6PQ3oQ8ml1UCNi7ymW7OQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPUogvFbwpRZuaI+xCQdmqhcWpvBMB8GA1UdIwQY MBaAFAjtGlaGumgonGz+THw24Det4R7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQt OTBhYjc5ZTdlZTIzLzEvOVNpQzhWdkNsRm01b2o3RUpCMmFxRnhhbThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mY2I3NzMtMWY1Yi00NDIxLWIxZDQtOTBhYjc5ZTdlZTIz LzEvQ08wYVZvYTZhQ2ljYlA1TWZEYmdONjNoSHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuf1vMA8E AgACMAkDBwAqEh/AAAAwDQYJKoZIhvcNAQELBQADggEBAFAQ0K4PWl0Cc8dgw36V 46lUziYp6jn9qd0TsOPNR7hPAixKkXFQbKYIu1w3M6pqt3u2a0aehTo7SiyH5bwc YIVzfNY4JIKlhr0WoHolXo4NtRvwDbHxjf09+dGAmokDKsZWEweuMUVjQ0bjhhhP +5VgQg9uBjQZnIui+03x0AP/T7fEh39VeQhyFEh2Y5rS/hEAG95m6VVbLgy6qOeX w8geMVwInOaJSWvH458arUJYBXMeTp3qE92zJFEAeXrBSc+qADIHGiqd2XlVdBqs 0ynTZG2jGEdAVtWRFsWLeC6XAZTHYXVIOgvjELeezSwIa/kmGxHaHLAVhNoLLTXZ ULw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:57 2026 by rpki-client