This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/T9aoETtBOnAVOsZczCvbKoC8bLo.roa File: T9aoETtBOnAVOsZczCvbKoC8bLo.roa (raw, json) Hash identifier: VbBc2wBHX0IMIYgXxrNNTjAei7gPUDMqr5TSGjCiTRo= Subject key identifier: 4F:D6:A8:11:3B:41:3A:70:15:3A:C6:5C:CC:2B:DB:2A:80:BC:6C:BA Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3 Certificate serial: 019B7A5B702F4D454800750D9C591F01CB4F Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/T9aoETtBOnAVOsZczCvbKoC8bLo.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29027 IP address blocks: 185.103.88.0/24 maxlen: 24 185.103.89.0/24 maxlen: 24 185.103.90.0/24 maxlen: 24 185.103.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:70:2f:4d:45:48:00:75:0d:9c:59:1f:01:cb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fd6a8113b413a70153ac65ccc2bdb2a80bc6cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:60:84:fa:40:5a:54:40:f5:14:f6:c9:d2: 0d:21:61:a2:29:97:83:60:af:ec:5e:d3:fc:92:f5: ac:f7:75:b6:93:0a:71:a4:da:44:6e:b1:b5:ac:7d: 75:13:b9:e0:c7:44:84:22:02:e7:da:31:d4:f1:81: 73:bf:78:dc:45:93:3f:0b:df:b5:0c:30:c0:63:8b: 66:6c:ca:9a:d3:cb:d1:70:c4:69:76:23:2a:91:74: 8b:09:bc:f3:55:14:82:99:9a:63:59:6f:63:cc:63: c8:02:87:6c:21:3a:bf:20:17:b5:83:40:01:2e:11: bb:6f:a8:81:3e:2e:36:89:9c:12:18:6d:61:87:f1: 31:f4:d9:71:22:25:d4:28:9c:b3:3e:e4:87:10:59: a4:87:a9:4f:cb:72:45:17:80:ca:a5:ea:c9:01:f0: 91:ae:52:a4:9b:a5:c8:63:b2:ee:ad:57:42:fb:4c: 42:23:61:de:32:95:6b:d1:c3:a4:e8:04:9a:0c:cd: b4:98:48:59:f7:8c:5f:07:e4:d1:e5:13:43:b7:9a: 08:29:f0:f0:b6:e5:d9:0d:b7:60:ab:d4:1b:30:6a: ed:21:5d:f5:d6:9c:94:b8:61:77:4b:3a:48:be:fc: 5a:85:7c:12:1a:ba:c4:bd:12:8c:01:43:de:71:d6: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:A8:11:3B:41:3A:70:15:3A:C6:5C:CC:2B:DB:2A:80:BC:6C:BA X509v3 Authority Key Identifier: keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/T9aoETtBOnAVOsZczCvbKoC8bLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.88.0/22 Signature Algorithm: sha256WithRSAEncryption 92:03:b0:22:ea:d9:d3:00:ab:eb:b4:f0:c2:31:bd:00:9a:63: 99:d4:1d:af:55:80:b4:c5:0c:cf:6d:c3:b1:3f:13:8d:1b:91: dd:ce:38:b6:72:35:0f:15:90:72:88:6b:f0:fc:49:12:34:34: 56:df:00:72:33:26:85:77:5b:db:ce:ec:d6:c0:22:ba:19:3a: 62:5f:5b:c8:34:bc:98:d2:02:8f:81:20:dd:b5:0a:03:7f:32: b2:1e:19:0b:06:fe:33:1c:58:e1:d9:fe:0e:f8:e6:39:31:e6: 3c:a8:dd:66:9a:26:30:7c:12:5a:f2:cf:50:0a:94:9d:80:27: 37:3f:5b:fb:52:c7:df:ba:a9:55:22:8e:66:39:fe:f4:d7:f3: bc:5a:b6:1a:2c:8e:9a:f7:d3:43:6b:0b:0e:75:bb:35:80:65: b4:8f:0a:f5:a5:4d:29:2d:bd:8e:45:47:9c:87:0c:7f:17:82: 83:9b:8d:b9:66:27:e0:c3:a4:d6:05:ca:2b:45:5e:05:3c:10: 67:78:63:34:19:9c:64:5a:a8:e4:f7:5c:67:99:f1:98:b4:ce: 75:9e:a3:0b:bf:7e:58:ca:57:91:9d:dd:46:37:12:78:ec:6d: 7c:6f:bc:b5:79:f7:99:54:67:9e:74:cf:99:61:b7:c5:e6:fa: 43:81:b7:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3AvTUVIAHUNnFkfActPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMDIwMzZhNDNkYWQwNmI2YzJjYzY0YmRlNzY3ODcwNjc2 Zjg3YjMwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQ2YTgxMTNiNDEzYTcwMTUzYWM2NWNjYzJiZGIyYTgwYmM2Y2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudNghPpAWlRA9RT2ydINIWGiKZeD YK/sXtP8kvWs93W2kwpxpNpEbrG1rH11E7ngx0SEIgLn2jHU8YFzv3jcRZM/C9+1 DDDAY4tmbMqa08vRcMRpdiMqkXSLCbzzVRSCmZpjWW9jzGPIAodsITq/IBe1g0AB LhG7b6iBPi42iZwSGG1hh/Ex9NlxIiXUKJyzPuSHEFmkh6lPy3JFF4DKperJAfCR rlKkm6XIY7LurVdC+0xCI2HeMpVr0cOk6ASaDM20mEhZ94xfB+TR5RNDt5oIKfDw tuXZDbdgq9QbMGrtIV311pyUuGF3SzpIvvxahXwSGrrEvRKMAUPecdY4zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/WqBE7QTpwFTrGXMwr2yqAvGy6MB8GA1UdIwQY MBaAFJICA2pD2tBrbCzGS952eHBnb4ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2dJRGFrUGEwR3RzTE1aTDNuWjRjR2R2aDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMjc2ODgtZDM5Yy00ODRhLWE0NTAt NzNkY2VkMzk3MDdmLzEvVDlhb0VUdEJPbkFWT3NaY3pDdmJLb0M4YkxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wMjc2ODgtZDM5Yy00ODRhLWE0NTAtNzNkY2VkMzk3MDdm LzEva2dJRGFrUGEwR3RzTE1aTDNuWjRjR2R2aDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWdYMA0G CSqGSIb3DQEBCwUAA4IBAQCSA7Ai6tnTAKvrtPDCMb0AmmOZ1B2vVYC0xQzPbcOx PxONG5Hdzji2cjUPFZByiGvw/EkSNDRW3wByMyaFd1vbzuzWwCK6GTpiX1vINLyY 0gKPgSDdtQoDfzKyHhkLBv4zHFjh2f4O+OY5MeY8qN1mmiYwfBJa8s9QCpSdgCc3 P1v7UsffuqlVIo5mOf701/O8WrYaLI6a99NDawsOdbs1gGW0jwr1pU0pLb2ORUec hwx/F4KDm425Zifgw6TWBcorRV4FPBBneGM0GZxkWqjk91xnmfGYtM51nqMLv35Y yleRnd1GNxJ47G18b7y1efeZVGeedM+ZYbfF5vpDgbfN -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:27 2026 by rpki-client