This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/pth9nCfBOVCefSZjAlug7noCoiE.roa File: pth9nCfBOVCefSZjAlug7noCoiE.roa (raw, json) Hash identifier: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98= Subject key identifier: A6:D8:7D:9C:27:C1:39:50:9E:7D:26:63:02:5B:A0:EE:7A:02:A2:21 Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c Certificate serial: 019B7EA74A48AD0FB6017613451D806803E3 Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/pth9nCfBOVCefSZjAlug7noCoiE.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60537 IP address blocks: 185.29.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4a:48:ad:0f:b6:01:76:13:45:1d:80:68:03:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6d87d9c27c139509e7d2663025ba0ee7a02a221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:dc:3f:79:57:5c:78:d6:f7:98:85:cf:d1: 8e:43:28:c1:b1:98:50:d8:b7:1d:63:da:43:db:49: 71:b4:67:e8:2e:8b:b0:e5:d0:3b:72:8e:d9:9a:c0: e5:21:ba:e3:b2:4c:f7:a8:c2:e3:04:8e:e6:13:03: 12:22:87:a2:80:8d:0a:05:a1:c2:0d:ce:3b:ab:07: 27:54:d6:d9:e6:f1:52:43:06:6c:b5:cd:97:41:37: 68:f8:ab:5f:42:06:9e:50:9c:b4:c5:23:68:51:a7: ea:82:b2:44:25:b0:f4:0d:a6:e6:9d:17:f4:d9:81: fb:6c:8b:54:5d:d4:d1:5d:e1:84:50:20:39:67:50: d5:ad:27:81:d0:f7:de:2d:b7:69:75:7e:ca:47:5b: 6a:36:3d:25:13:94:be:3b:93:81:2c:2a:82:22:b8: 98:91:5c:4a:9f:4a:6c:2a:28:4e:4e:94:fb:89:7f: 45:35:d7:ce:6c:4c:53:be:5a:d7:04:cb:04:6f:e8: 49:6f:30:17:56:60:3e:a6:12:64:ec:bb:b5:d9:27: 7f:2c:9f:44:5d:dc:c6:f4:84:b0:b0:1d:27:b0:ea: ed:12:71:65:a2:5f:16:ed:30:7b:da:2b:9b:10:4a: 8b:85:0e:c1:5e:e1:fd:15:cc:77:6c:71:2a:d3:1e: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:7D:9C:27:C1:39:50:9E:7D:26:63:02:5B:A0:EE:7A:02:A2:21 X509v3 Authority Key Identifier: keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/pth9nCfBOVCefSZjAlug7noCoiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.192.0/22 Signature Algorithm: sha256WithRSAEncryption 99:5a:a4:8e:4b:7b:09:06:4f:e8:fd:d9:2d:96:a5:6a:45:2a: ab:80:12:51:65:13:47:af:9a:6b:f7:2b:f0:67:d7:f4:ef:2f: ff:83:d9:2a:e1:2d:96:42:ca:44:22:32:06:44:ac:ba:65:fa: 33:e8:92:a1:ea:58:5d:6a:cb:56:19:41:19:73:ec:fd:c1:2b: c7:12:a8:b7:16:38:2f:21:4d:20:f4:cb:c0:e8:bc:7b:2d:78: 6f:e0:8d:20:88:c5:8e:84:77:99:da:78:8d:69:9b:d4:d8:88: 00:1f:ca:2d:24:2b:45:3b:cf:3d:dd:7d:f8:be:97:2b:28:88: 13:85:99:25:2a:15:73:85:43:02:ea:c1:50:7f:bf:83:33:ec: 5e:49:f0:4a:28:38:e2:09:74:b1:44:4d:6a:a5:7a:b8:b2:bc: 76:95:10:d5:6f:10:72:e3:0e:ff:eb:cd:db:80:b8:dc:22:42: a7:47:66:56:cc:4a:e6:51:b2:78:ad:0d:d8:f1:3d:01:05:51: 85:ff:7e:fc:42:a1:d1:67:dd:6b:d4:1c:14:ce:a7:83:68:fc: 9a:61:44:3f:71:ae:74:d0:8b:13:c9:46:d5:e9:e0:e2:1c:12: d1:1a:5e:af:85:08:10:65:81:19:8c:67:20:64:db:df:1b:ae: 74:7b:b1:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p0pIrQ+2AXYTRR2AaAPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhODA5NTkyN2VlNTdjY2VlMjU2YWE0MzlmMTYzNjg2YjU4 YzU3MGMwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmQ4N2Q5YzI3YzEzOTUwOWU3ZDI2NjMwMjViYTBlZTdhMDJhMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6LcP3lXXHjW95iFz9GOQyjBsZhQ 2LcdY9pD20lxtGfoLouw5dA7co7ZmsDlIbrjskz3qMLjBI7mEwMSIoeigI0KBaHC Dc47qwcnVNbZ5vFSQwZstc2XQTdo+KtfQgaeUJy0xSNoUafqgrJEJbD0DabmnRf0 2YH7bItUXdTRXeGEUCA5Z1DVrSeB0PfeLbdpdX7KR1tqNj0lE5S+O5OBLCqCIriY kVxKn0psKihOTpT7iX9FNdfObExTvlrXBMsEb+hJbzAXVmA+phJk7Lu12Sd/LJ9E XdzG9ISwsB0nsOrtEnFlol8W7TB72iubEEqLhQ7BXuH9Fcx3bHEq0x5TGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKbYfZwnwTlQnn0mYwJboO56AqIhMB8GA1UdIwQY MBaAFEqAlZJ+5XzO4laqQ58WNoa1jFcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEt MGY5ZDQzZDg2NGJiLzEvcHRoOW5DZkJPVkNlZlNaakFsdWc3bm9Db2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jMWUzYjQtMmQ2MS00NGNjLTkwODEtMGY5ZDQzZDg2NGJi LzEvU29DVmtuN2xmTTdpVnFwRG54WTJocldNVnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuR3AMA0G CSqGSIb3DQEBCwUAA4IBAQCZWqSOS3sJBk/o/dktlqVqRSqrgBJRZRNHr5pr9yvw Z9f07y//g9kq4S2WQspEIjIGRKy6Zfoz6JKh6lhdastWGUEZc+z9wSvHEqi3Fjgv IU0g9MvA6Lx7LXhv4I0giMWOhHeZ2niNaZvU2IgAH8otJCtFO8893X34vpcrKIgT hZklKhVzhUMC6sFQf7+DM+xeSfBKKDjiCXSxRE1qpXq4srx2lRDVbxBy4w7/683b gLjcIkKnR2ZWzErmUbJ4rQ3Y8T0BBVGF/378QqHRZ91r1BwUzqeDaPyaYUQ/ca50 0IsTyUbV6eDiHBLRGl6vhQgQZYEZjGcgZNvfG650e7Hh -----END CERTIFICATE-----Generated at Wed Jan 21 20:23:53 2026 by rpki-client