This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/iC9fUn104zY4OEHwbqWBMRhqfeY.roa File: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (raw, json) Hash identifier: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs= Subject key identifier: 88:2F:5F:52:7D:74:E3:36:38:38:41:F0:6E:A5:81:31:18:6A:7D:E6 Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Certificate serial: 019B7AC90E7A8FCA64B2827DE9CE0D5B5E20 Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/iC9fUn104zY4OEHwbqWBMRhqfeY.roa Signing time: Thu 01 Jan 2026 18:19:15 +0000 ROA not before: Thu 01 Jan 2026 18:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 84.252.112.0/24 maxlen: 24 84.252.113.0/24 maxlen: 24 84.252.114.0/24 maxlen: 24 84.252.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0e:7a:8f:ca:64:b2:82:7d:e9:ce:0d:5b:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=882f5f527d74e336383841f06ea58131186a7de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:54:b9:9d:f6:f7:66:26:eb:f2:42:78:bc: bd:4d:ca:c4:e4:1d:4e:0e:6b:42:a7:d9:38:fc:59: 1b:34:e8:3d:65:51:ea:9c:fc:4c:0e:84:ce:4f:f3: 89:ee:3c:e1:3b:b8:1e:8f:e4:2a:22:e2:ce:f1:ac: 1d:32:c4:28:aa:74:1c:7f:27:c5:d9:eb:b3:87:01: e6:42:f0:ba:f8:74:39:8e:64:c2:57:9d:ad:32:fc: 76:86:a5:dc:b4:fa:b7:a2:2f:3f:ac:d6:6b:c0:c2: cc:68:fd:53:7a:6e:31:da:79:44:bb:07:8d:7e:7d: 37:33:c5:0e:e1:42:fd:9e:3c:20:d9:3f:b0:b8:e5: fb:13:49:c7:25:6f:e3:41:bf:ff:a4:97:f2:08:e5: 33:db:2a:a2:20:b9:bb:3e:b9:35:61:4a:6e:0e:b5: 79:30:9e:7f:54:79:9b:ff:d8:fa:be:5a:76:a1:09: 37:fa:38:e2:2a:6f:c6:b7:1e:67:f8:67:2c:e7:88: 50:de:50:55:2a:14:35:e0:f5:9b:53:ca:16:50:3a: 0b:26:99:ea:eb:91:45:92:b4:d9:d4:fb:ed:50:d2: b1:0b:1c:b0:cc:59:f9:27:71:ac:fe:76:79:14:4e: 59:af:40:5c:64:a5:be:31:0e:8b:89:2c:a2:f4:41: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:5F:52:7D:74:E3:36:38:38:41:F0:6E:A5:81:31:18:6A:7D:E6 X509v3 Authority Key Identifier: keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/iC9fUn104zY4OEHwbqWBMRhqfeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.112.0/22 Signature Algorithm: sha256WithRSAEncryption 95:74:0b:a4:95:68:46:8a:14:18:9c:d1:3c:a0:75:3b:36:dc: 98:1d:0b:3b:49:f1:19:8c:b7:e3:ec:cc:61:14:01:91:eb:98: 8c:b3:69:73:64:b2:d8:84:71:1c:7e:31:08:a3:84:d9:66:0a: cf:e0:d8:21:0f:f6:22:a7:ab:45:0c:e9:79:33:69:e3:f0:4e: a3:a8:08:81:54:7b:5b:3b:79:e1:73:18:88:bf:bc:78:49:7a: f1:7e:49:59:24:36:f0:dc:4f:02:db:6b:1e:bb:49:8b:2b:46: 7f:b0:af:7f:79:ef:91:7f:cd:ec:93:ae:a4:da:cf:6f:bb:68: 6f:5c:38:a3:60:06:92:c5:63:46:0e:2b:fd:4c:5c:61:f2:a2: 21:90:27:5c:6c:2d:b6:d4:70:fb:d5:9c:55:7f:c2:42:ab:23: 70:8e:e2:b3:72:4c:16:b5:62:46:71:1d:fe:99:9a:4e:35:dc: 40:d9:51:76:17:53:80:53:65:57:d9:cb:21:3d:62:00:01:94: 5d:15:c2:e3:3b:a1:80:c2:05:62:d1:ff:5f:7b:2a:ca:23:6e: c9:25:84:e6:98:7f:e6:70:e6:cf:44:5c:29:0e:a5:67:18:cf: 4a:11:c4:27:ea:79:a8:49:ff:d6:95:b3:f4:61:56:9e:a2:41: 18:41:58:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQ56j8pksoJ96c4NW14gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2 YzQ2NTMwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODJmNWY1MjdkNzRlMzM2MzgzODQxZjA2ZWE1ODEzMTE4NmE3ZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0JUuZ3292Ym6/JCeLy9TcrE5B1O DmtCp9k4/FkbNOg9ZVHqnPxMDoTOT/OJ7jzhO7gej+QqIuLO8awdMsQoqnQcfyfF 2euzhwHmQvC6+HQ5jmTCV52tMvx2hqXctPq3oi8/rNZrwMLMaP1Tem4x2nlEuweN fn03M8UO4UL9njwg2T+wuOX7E0nHJW/jQb//pJfyCOUz2yqiILm7Prk1YUpuDrV5 MJ5/VHmb/9j6vlp2oQk3+jjiKm/Gtx5n+Gcs54hQ3lBVKhQ14PWbU8oWUDoLJpnq 65FFkrTZ1PvtUNKxCxywzFn5J3Gs/nZ5FE5Zr0BcZKW+MQ6LiSyi9EEw8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgvX1J9dOM2ODhB8G6lgTEYan3mMB8GA1UdIwQY MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt Zjg3OTJmNTc3YjlhLzEvaUM5ZlVuMTA0elk0T0VId2JxV0JNUmhxZmVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVPxwMA0G CSqGSIb3DQEBCwUAA4IBAQCVdAuklWhGihQYnNE8oHU7NtyYHQs7SfEZjLfj7Mxh FAGR65iMs2lzZLLYhHEcfjEIo4TZZgrP4NghD/Yip6tFDOl5M2nj8E6jqAiBVHtb O3nhcxiIv7x4SXrxfklZJDbw3E8C22seu0mLK0Z/sK9/ee+Rf83sk66k2s9vu2hv XDijYAaSxWNGDiv9TFxh8qIhkCdcbC221HD71ZxVf8JCqyNwjuKzckwWtWJGcR3+ mZpONdxA2VF2F1OAU2VX2cshPWIAAZRdFcLjO6GAwgVi0f9feyrKI27JJYTmmH/m cObPRFwpDqVnGM9KEcQn6nmoSf/WlbP0YVaeokEYQVj5 -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:53 2026 by rpki-client