This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa File: z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa (raw, json) Hash identifier: HhotdTCLEhBn/XmQ52b2JJFeeMZwYQqW5x7lcVcO9bQ= Subject key identifier: CF:D7:D3:70:9E:81:C0:71:9A:7C:0C:4A:81:5F:26:D9:C0:14:3E:AB Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Certificate serial: 019B7F8482315F02CAE8600C2C79BB0D81B0 Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213035 IP address blocks: 185.28.37.0/24 maxlen: 24 185.28.39.0/24 maxlen: 24 185.126.34.0/24 maxlen: 24 2a10:1440::/29 maxlen: 29 2a10:1440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:82:31:5f:02:ca:e8:60:0c:2c:79:bb:0d:81:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfd7d3709e81c0719a7c0c4a815f26d9c0143eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:9c:0c:c8:16:27:60:ea:78:5a:12:e5:e5: 55:73:da:a1:2a:68:90:d8:12:fd:f4:c7:87:54:90: 19:32:d8:2c:7e:3c:e9:5a:7a:7e:ea:1b:29:7e:aa: d8:07:f5:df:c5:ef:95:52:f8:05:8e:2b:7e:83:2e: 9c:61:54:96:ac:9d:6e:a4:6b:85:95:46:1a:2a:3a: af:1c:28:65:66:a7:92:c0:1a:33:8e:c4:27:ce:8c: cd:f9:b6:69:a2:17:e0:ed:fe:c3:6c:d2:a9:d7:d5: 1d:2a:26:cb:3c:bb:cd:14:df:82:bd:ad:16:e5:a3: 6a:41:f4:ba:4a:b6:e1:7c:49:7d:b7:50:85:ce:8d: b1:0c:32:28:e8:10:79:44:c0:1f:67:9d:d8:dd:ec: 06:54:1e:81:87:20:f0:62:02:b9:b3:40:dd:24:90: e7:02:f8:e1:60:d2:c6:5b:f1:e0:8e:fd:ef:33:4b: cc:fb:85:44:c1:9a:bf:a8:18:24:c4:61:2a:04:2b: 27:38:f9:76:10:26:c2:85:01:d4:20:16:0a:e2:43: 5c:bc:2f:bf:bc:be:31:d8:78:73:b3:d3:4b:1d:d4: 70:3b:70:3a:dc:50:a5:90:91:7e:1c:39:ad:0c:31: e7:e2:24:61:2a:8e:47:c0:05:83:11:43:86:a0:96: ee:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D7:D3:70:9E:81:C0:71:9A:7C:0C:4A:81:5F:26:D9:C0:14:3E:AB X509v3 Authority Key Identifier: keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.37.0/24 185.28.39.0/24 185.126.34.0/24 IPv6: 2a10:1440::/29 Signature Algorithm: sha256WithRSAEncryption 17:44:7a:fc:a1:ab:21:77:c2:98:17:06:75:7d:3b:e9:93:61: a4:cb:4d:7e:7b:5c:e4:cd:d1:46:b5:1d:b2:25:76:c4:74:6b: f1:1e:62:7b:13:cd:61:d2:0c:dc:08:3e:3e:39:20:17:a1:92: 4c:a6:8c:02:f7:09:c6:40:04:a1:41:59:23:99:2d:7b:d9:3c: e2:f6:33:07:9f:99:ae:cb:81:06:a9:2f:4e:3b:4b:e7:55:49: 35:bc:89:54:68:ef:67:97:40:86:fd:5b:18:9e:77:14:e5:9e: c6:04:12:2a:6b:f2:0a:8d:c7:38:e1:2b:78:c6:58:3e:1c:5d: d3:4e:52:0a:15:bc:6c:26:97:81:40:69:71:8e:2a:0e:ef:d6: 9e:f0:ec:c7:ea:62:5c:5c:ff:61:62:b3:0c:5f:86:05:f9:20: a8:d2:b5:07:cd:a1:ae:18:89:ff:a4:5e:59:0b:c8:79:82:38: 73:99:34:e2:8a:61:25:1d:1d:7d:83:d2:1d:2a:a6:7b:ca:b4: 4c:04:6a:76:b9:b1:6e:8f:c8:b6:e5:25:26:fa:af:fe:f2:42: 6c:f6:56:75:f3:12:e5:f1:7c:31:84:10:1e:09:13:26:67:12: a7:ac:49:7a:98:67:e5:58:40:3b:29:48:0c:0b:93:31:c4:35: b7:74:07:7c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/hIIxXwLK6GAMLHm7DYGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5 NzMzOTAwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmQ3ZDM3MDllODFjMDcxOWE3YzBjNGE4MTVmMjZkOWMwMTQzZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOacDMgWJ2DqeFoS5eVVc9qhKmiQ 2BL99MeHVJAZMtgsfjzpWnp+6hspfqrYB/Xfxe+VUvgFjit+gy6cYVSWrJ1upGuF lUYaKjqvHChlZqeSwBozjsQnzozN+bZpohfg7f7DbNKp19UdKibLPLvNFN+Cva0W 5aNqQfS6SrbhfEl9t1CFzo2xDDIo6BB5RMAfZ53Y3ewGVB6BhyDwYgK5s0DdJJDn AvjhYNLGW/Hgjv3vM0vM+4VEwZq/qBgkxGEqBCsnOPl2ECbChQHUIBYK4kNcvC+/ vL4x2Hhzs9NLHdRwO3A63FClkJF+HDmtDDHn4iRhKo5HwAWDEUOGoJbuhwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFM/X03CegcBxmnwMSoFfJtnAFD6rMB8GA1UdIwQY MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt YWU5OTllZDdjNWQ0LzEvejlmVGNKNkJ3SEdhZkF4S2dWOG0yY0FVUHFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0 LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAuRwlAwQA uRwnAwQAuX4iMA0EAgACMAcDBQMqEBRAMA0GCSqGSIb3DQEBCwUAA4IBAQAXRHr8 oashd8KYFwZ1fTvpk2Gky01+e1zkzdFGtR2yJXbEdGvxHmJ7E81h0gzcCD4+OSAX oZJMpowC9wnGQAShQVkjmS172Tzi9jMHn5muy4EGqS9OO0vnVUk1vIlUaO9nl0CG /VsYnncU5Z7GBBIqa/IKjcc44St4xlg+HF3TTlIKFbxsJpeBQGlxjioO79ae8OzH 6mJcXP9hYrMMX4YF+SCo0rUHzaGuGIn/pF5ZC8h5gjhzmTTiimElHR19g9IdKqZ7 yrRMBGp2ubFuj8i25SUm+q/+8kJs9lZ18xLl8XwxhBAeCRMmZxKnrEl6mGflWEA7 KUgMC5MxxDW3dAd8 -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:23 2026 by rpki-client