This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa File: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (raw, json) Hash identifier: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs= Subject key identifier: 0B:D4:CF:87:98:C7:CB:93:62:3E:1A:EA:1C:CB:F3:0C:83:80:EF:96 Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Certificate serial: 019B7B36B17F3BE366291D5209E4F493882A Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56643 IP address blocks: 185.131.48.0/24 maxlen: 24 185.131.49.0/24 maxlen: 24 185.131.50.0/24 maxlen: 24 185.131.51.0/24 maxlen: 24 185.241.136.0/24 maxlen: 24 185.241.137.0/24 maxlen: 24 185.241.138.0/24 maxlen: 24 185.241.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b1:7f:3b:e3:66:29:1d:52:09:e4:f4:93:88:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bd4cf8798c7cb93623e1aea1ccbf30c8380ef96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:e0:b7:b1:eb:a1:6f:e2:e0:0e:3c:6a:2d: 14:54:43:78:a7:bd:8f:5c:42:fb:65:55:c7:0c:76: 88:40:22:7f:ef:80:4b:d5:91:4f:b4:8b:1b:60:cf: a4:c7:9c:10:a7:dc:f1:9f:b9:95:37:7b:f5:da:c0: 63:be:e2:ea:7d:aa:eb:b5:cf:52:4c:b6:69:7e:aa: 81:ff:a9:b0:04:a4:b5:43:c7:60:ec:9a:d2:2a:28: 69:f9:bf:99:3e:bc:08:40:9b:bd:a6:40:24:37:90: 19:ef:27:0e:70:57:b5:85:6a:4a:4b:fb:a1:30:0f: 74:a7:7c:c9:96:c8:64:72:20:51:d9:7f:bd:3d:b0: 94:8b:7b:ea:20:87:a9:5b:82:b8:9a:a4:ac:f3:41: 90:76:f9:4b:d6:0d:84:4b:46:97:83:c8:44:ad:c7: 24:79:e9:b1:47:0a:d3:9c:78:e7:bf:6e:ca:16:d2: 23:73:ba:e5:82:21:47:b8:ec:31:9b:09:36:1f:c0: c0:a8:6a:f2:f2:46:c1:30:93:e4:3c:ae:22:c0:65: 7f:a0:14:8a:e3:49:d1:f4:fc:7e:b9:01:82:71:7b: c9:f5:d8:63:23:dc:ab:db:74:22:bf:10:ce:00:9c: 4b:f5:f7:d1:13:1c:08:b6:14:6a:1c:05:b2:51:66: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D4:CF:87:98:C7:CB:93:62:3E:1A:EA:1C:CB:F3:0C:83:80:EF:96 X509v3 Authority Key Identifier: keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.48.0/22 185.241.136.0/22 Signature Algorithm: sha256WithRSAEncryption 05:90:34:aa:8f:fa:e2:ef:67:e7:e2:0f:cf:5a:24:3f:66:dc: 9b:17:b3:be:fe:a5:f8:26:e9:74:e4:09:43:33:e3:96:7c:9d: 7d:69:e1:3b:35:da:6e:23:07:c5:c1:d4:4f:bc:1b:a6:8d:34: 8d:de:a5:28:c9:4d:07:76:6d:85:03:5d:d0:45:4c:4f:7c:5d: 46:de:19:71:a7:57:46:77:27:f9:d0:74:24:dd:8d:1b:81:a1: 75:98:ea:bf:f8:22:f5:54:be:73:47:db:38:d5:13:88:77:00: dc:ba:f9:b6:bd:f7:08:a8:83:16:43:3a:7c:58:de:31:59:11: a4:e6:78:29:ea:29:df:6e:2a:96:a3:51:17:52:c9:78:32:77: cf:40:da:48:8d:7b:16:fb:8a:4d:1d:b4:51:e4:d2:61:79:ea: a0:47:72:a4:f1:a7:bd:76:0e:1e:57:11:35:99:48:ab:d5:33: 08:aa:11:34:e7:6b:c2:62:ef:0b:f1:b5:05:c3:b0:ae:03:46: fd:0e:e5:50:3d:39:bd:30:bb:81:aa:a4:35:18:23:55:8b:e2: 44:ac:96:a9:49:5f:dd:39:f2:0f:f0:8c:55:e8:12:5c:a6:bf: 4b:57:0b:2c:85:7c:bc:a0:76:ec:52:73:af:3b:93:8d:11:35: 28:26:c0:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NrF/O+NmKR1SCeT0k4gqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTIxNjFkN2YwMWZhNmZkMDg0MmMyMTEwODA2MzNmM2Vk MzZiYTUwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmQ0Y2Y4Nzk4YzdjYjkzNjIzZTFhZWExY2NiZjMwYzgzODBlZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIzgt7HroW/i4A48ai0UVEN4p72P XEL7ZVXHDHaIQCJ/74BL1ZFPtIsbYM+kx5wQp9zxn7mVN3v12sBjvuLqfarrtc9S TLZpfqqB/6mwBKS1Q8dg7JrSKihp+b+ZPrwIQJu9pkAkN5AZ7ycOcFe1hWpKS/uh MA90p3zJlshkciBR2X+9PbCUi3vqIIepW4K4mqSs80GQdvlL1g2ES0aXg8hErcck eemxRwrTnHjnv27KFtIjc7rlgiFHuOwxmwk2H8DAqGry8kbBMJPkPK4iwGV/oBSK 40nR9Px+uQGCcXvJ9dhjI9yr23QivxDOAJxL9ffRExwIthRqHAWyUWbwwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAvUz4eYx8uTYj4a6hzL8wyDgO+WMB8GA1UdIwQY MBaAFKPiFh1/Afpv0IQsIRCAYz8+02ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEt N2UwMzQwZWM5NjY3LzEvQzlUUGg1akh5NU5pUGhycUhNdnpESU9BNzVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82YTY0ZWEtOWYxZS00YjQzLWJmMmEtN2UwMzQwZWM5NjY3 LzEvby1JV0hYOEItbV9RaEN3aEVJQmpQejdUYTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYMwAwQC ufGIMA0GCSqGSIb3DQEBCwUAA4IBAQAFkDSqj/ri72fn4g/PWiQ/ZtybF7O+/qX4 Jul05AlDM+OWfJ19aeE7NdpuIwfFwdRPvBumjTSN3qUoyU0Hdm2FA13QRUxPfF1G 3hlxp1dGdyf50HQk3Y0bgaF1mOq/+CL1VL5zR9s41ROIdwDcuvm2vfcIqIMWQzp8 WN4xWRGk5ngp6infbiqWo1EXUsl4MnfPQNpIjXsW+4pNHbRR5NJheeqgR3Kk8ae9 dg4eVxE1mUir1TMIqhE052vCYu8L8bUFw7CuA0b9DuVQPTm9MLuBqqQ1GCNVi+JE rJapSV/dOfIP8IxV6BJcpr9LVwsshXy8oHbsUnOvO5ONETUoJsDP -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:56 2026 by rpki-client