This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/osFhLlRHFGwfKLpsV50Rjvp_9Ds.roa File: osFhLlRHFGwfKLpsV50Rjvp_9Ds.roa (raw, json) Hash identifier: uL7wqYgThc5bmPjNZmNt1te0zFr+Z2xMdvjLAunveII= Subject key identifier: A2:C1:61:2E:54:47:14:6C:1F:28:BA:6C:57:9D:11:8E:FA:7F:F4:3B Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Certificate serial: 019B7C12907165E6C46089BBD416B5BD5688 Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/osFhLlRHFGwfKLpsV50Rjvp_9Ds.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12930 IP address blocks: 128.65.128.0/21 maxlen: 21 185.102.228.0/22 maxlen: 22 2a03:8a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:90:71:65:e6:c4:60:89:bb:d4:16:b5:bd:56:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2c1612e5447146c1f28ba6c579d118efa7ff43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:7d:b8:68:d6:64:52:c4:9f:cf:0c:26:ae: 0b:67:6a:b7:92:3c:6a:d1:f7:55:3e:c5:eb:06:ab: ec:0c:3d:8f:1c:83:73:08:09:5a:53:5d:32:88:6e: 6a:c6:ea:6c:4a:08:c0:03:c5:59:fb:5d:ad:c3:96: 4e:8e:0f:42:5d:a6:d2:2b:18:1f:f7:a6:92:e7:93: 7f:c2:dc:a7:66:c8:bb:a9:42:f9:e9:21:57:e3:4a: 4f:af:c9:e3:a8:33:18:db:a7:04:3c:78:e9:b2:4f: a9:ed:1b:7c:8d:a9:3e:72:92:3d:d4:ca:3a:25:ce: 22:f6:e8:50:f8:fe:6f:e9:ab:ae:be:1c:32:49:f2: c1:f1:8b:8f:d5:98:c3:19:2e:90:00:e4:27:fd:e3: 6c:77:6d:71:e4:67:f7:ba:ef:a5:9d:67:ce:15:43: 31:e0:39:69:88:2b:55:4c:63:68:02:9e:1c:44:d5: d6:d2:4b:37:36:7a:4e:3c:56:dc:3e:c8:e2:c3:50: 02:05:c5:61:80:4c:4f:f1:31:f6:77:7d:d2:0e:e4: 81:e1:9c:f2:f0:27:33:ff:09:dd:3f:2b:80:5d:25: 8f:d8:4c:34:f1:cd:e5:55:af:55:6c:1e:60:66:9c: 40:0d:dd:b7:96:6d:1c:0a:5a:28:1b:1e:77:de:3f: 0b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C1:61:2E:54:47:14:6C:1F:28:BA:6C:57:9D:11:8E:FA:7F:F4:3B X509v3 Authority Key Identifier: keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/osFhLlRHFGwfKLpsV50Rjvp_9Ds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.65.128.0/21 185.102.228.0/22 IPv6: 2a03:8a80::/32 Signature Algorithm: sha256WithRSAEncryption 09:95:12:7b:68:51:ff:e2:ed:6e:41:a1:b0:a3:45:d8:91:d4: 37:2a:93:b3:c8:46:9c:50:43:06:c7:ef:90:89:b2:0e:ae:17: bd:69:41:02:d3:1d:18:62:06:bb:e2:ad:07:28:17:f3:82:63: 2e:20:90:d9:90:68:64:72:5e:a6:5a:3b:b7:1f:cc:ae:df:04: 12:ab:ae:00:75:87:05:6a:14:e6:5b:1d:52:ef:ac:cb:2a:e0: 63:3b:1e:20:6c:e5:de:49:d3:cb:a5:c7:98:f2:ae:d1:9c:ca: d2:20:b5:0d:82:fd:1b:75:14:0b:4f:dc:39:21:d3:97:f6:b7: 3f:6e:09:8e:00:3b:ea:08:83:0c:be:ca:e6:85:7a:04:8e:63: 3b:44:18:b4:cd:48:fe:2c:f2:be:53:ad:ec:a6:3f:1c:f7:d7: 44:4b:12:76:ab:37:f9:f6:71:a6:18:03:a4:55:d2:25:42:63: 84:3b:0e:a9:e4:71:2c:23:77:95:95:59:91:c9:49:bc:d5:6f: bc:81:d8:2e:82:8d:92:af:51:2c:a0:54:2d:99:d6:e2:ff:ef: 3f:6f:53:20:a7:bc:e1:fd:39:50:65:03:b8:98:42:59:58:2d: a9:d7:c7:99:01:30:01:40:21:78:48:43:7c:73:dd:de:8d:b9: 39:54:98:3f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EpBxZebEYIm71Ba1vVaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMzZlOTFiNjJkM2RjN2MxMzdhMjhhYWEwMDZlZGU5Yjll YTFmZTQwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmMxNjEyZTU0NDcxNDZjMWYyOGJhNmM1NzlkMTE4ZWZhN2ZmNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Z9uGjWZFLEn88MJq4LZ2q3kjxq 0fdVPsXrBqvsDD2PHINzCAlaU10yiG5qxupsSgjAA8VZ+12tw5ZOjg9CXabSKxgf 96aS55N/wtynZsi7qUL56SFX40pPr8njqDMY26cEPHjpsk+p7Rt8jak+cpI91Mo6 Jc4i9uhQ+P5v6auuvhwySfLB8YuP1ZjDGS6QAOQn/eNsd21x5Gf3uu+lnWfOFUMx 4DlpiCtVTGNoAp4cRNXW0ks3NnpOPFbcPsjiw1ACBcVhgExP8TH2d33SDuSB4Zzy 8Ccz/wndPyuAXSWP2Ew08c3lVa9VbB5gZpxADd23lm0cClooGx533j8LdQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKLBYS5URxRsHyi6bFedEY76f/Q7MB8GA1UdIwQY MBaAFJ026Rti09x8E3ooqqAG7em56h/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGIt YjJjZWE3NjkwODM3LzEvb3NGaExsUkhGR3dmS0xwc1Y1MFJqdnBfOURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGItYjJjZWE3NjkwODM3 LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDgEGAAwQC uWbkMA0EAgACMAcDBQAqA4qAMA0GCSqGSIb3DQEBCwUAA4IBAQAJlRJ7aFH/4u1u QaGwo0XYkdQ3KpOzyEacUEMGx++QibIOrhe9aUEC0x0YYga74q0HKBfzgmMuIJDZ kGhkcl6mWju3H8yu3wQSq64AdYcFahTmWx1S76zLKuBjOx4gbOXeSdPLpceY8q7R nMrSILUNgv0bdRQLT9w5IdOX9rc/bgmOADvqCIMMvsrmhXoEjmM7RBi0zUj+LPK+ U63spj8c99dESxJ2qzf59nGmGAOkVdIlQmOEOw6p5HEsI3eVlVmRyUm81W+8gdgu go2Sr1EsoFQtmdbi/+8/b1Mgp7zh/TlQZQO4mEJZWC2p18eZATABQCF4SEN8c93e jbk5VJg/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:34 2026 by rpki-client