This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/f9jkPBByxWpkqaavwL8qGLxgr5Q.roa File: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (raw, json) Hash identifier: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE= Subject key identifier: 7F:D8:E4:3C:10:72:C5:6A:64:A9:A6:AF:C0:BF:2A:18:BC:60:AF:94 Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019B78A33F6BC22B896BB7E3B3A73D82E492 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/f9jkPBByxWpkqaavwL8qGLxgr5Q.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13032 IP address blocks: 185.12.8.0/23 maxlen: 23 2a03:5dc0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3f:6b:c2:2b:89:6b:b7:e3:b3:a7:3d:82:e4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fd8e43c1072c56a64a9a6afc0bf2a18bc60af94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:5e:6a:62:2c:75:65:b4:28:2d:3f:c1:51: e6:17:e5:b2:07:4d:3a:77:60:e2:3f:66:88:21:49: e6:93:c2:d8:31:25:62:31:5d:f4:fb:e9:84:3f:2b: 02:2f:7e:42:d1:dd:4b:72:8b:3d:bb:e4:90:cc:21: 19:49:be:93:91:68:25:c6:97:01:03:2a:54:01:51: 9c:13:16:35:ca:6d:9d:80:e0:95:18:95:1c:1c:4c: a6:90:55:02:3f:b4:78:02:4a:05:d0:eb:8b:ee:49: db:84:65:37:e8:ed:af:dd:3c:a7:2c:0e:09:49:13: 75:5a:72:35:c4:73:e4:e9:7d:f8:b4:fa:cd:dc:aa: 3f:19:d7:2e:f8:b6:83:5a:04:2c:91:90:12:1e:43: 04:81:85:d3:b9:af:cd:2f:68:c9:f8:3b:35:90:25: 3a:41:52:1f:d4:ec:34:aa:f0:81:89:6e:f6:0f:2c: 47:e4:8c:8c:c2:10:d3:18:c4:c3:38:17:20:e7:24: bb:90:77:14:d2:8e:44:58:19:64:84:3b:6e:d0:6e: f9:ac:e6:16:e9:e1:b3:34:dd:bd:9d:aa:00:f7:d2: ea:31:6b:ff:10:d8:c9:ff:59:f6:60:88:0b:09:f9: 9a:ab:71:18:39:7f:1d:44:9c:87:65:f8:81:fa:db: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D8:E4:3C:10:72:C5:6A:64:A9:A6:AF:C0:BF:2A:18:BC:60:AF:94 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/f9jkPBByxWpkqaavwL8qGLxgr5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.8.0/23 IPv6: 2a03:5dc0:6::/48 Signature Algorithm: sha256WithRSAEncryption 2c:02:02:ca:1c:72:cb:70:d5:93:9d:d7:39:6e:7d:f1:06:9e: f3:94:23:52:f1:7d:77:94:9c:ab:34:00:70:0a:2a:86:59:e0: 0d:9e:25:47:50:58:8e:56:a4:1a:4f:94:55:29:a9:4b:de:e5: a4:e8:1d:b2:7d:0b:9a:54:18:e9:84:59:e1:70:bf:4e:2a:4d: 71:c0:15:02:c6:c4:43:70:09:b4:54:aa:7d:18:4d:9d:1f:de: b4:2f:e6:2d:81:c9:2f:f5:f0:9b:f5:2a:4d:ff:7f:0a:05:91: 8e:94:25:11:b9:5e:ea:6f:85:5c:cd:57:bf:e7:ff:f8:8f:73: 82:92:ea:16:07:65:4b:00:27:82:41:e0:60:f1:00:df:c1:04: 8f:6a:21:96:03:7d:d2:7a:b7:98:bf:c8:5b:54:83:c7:67:d1: f4:a8:2c:35:3c:82:da:b5:fb:7f:de:9d:8a:35:11:88:4f:44: cb:9d:10:58:4d:d2:6d:92:b2:55:59:21:01:c4:9c:78:9f:56: 3b:3f:8d:ad:87:67:2a:9d:9d:9c:96:e6:d3:4c:1f:9e:44:c6: c5:82:19:95:5b:83:58:47:a8:05:1c:4e:eb:3c:c7:19:8c:b4: 18:90:4f:19:b8:5e:9a:90:f1:88:76:56:82:ee:d9:80:59:25: 3c:76:61:ec -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4oz9rwiuJa7fjs6c9guSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmQ4ZTQzYzEwNzJjNTZhNjRhOWE2YWZjMGJmMmExOGJjNjBhZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvpeamIsdWW0KC0/wVHmF+WyB006 d2DiP2aIIUnmk8LYMSViMV30++mEPysCL35C0d1Lcos9u+SQzCEZSb6TkWglxpcB AypUAVGcExY1ym2dgOCVGJUcHEymkFUCP7R4AkoF0OuL7knbhGU36O2v3TynLA4J SRN1WnI1xHPk6X34tPrN3Ko/Gdcu+LaDWgQskZASHkMEgYXTua/NL2jJ+Ds1kCU6 QVIf1Ow0qvCBiW72DyxH5IyMwhDTGMTDOBcg5yS7kHcU0o5EWBlkhDtu0G75rOYW 6eGzNN29naoA99LqMWv/ENjJ/1n2YIgLCfmaq3EYOX8dRJyHZfiB+tsWowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFH/Y5DwQcsVqZKmmr8C/Khi8YK+UMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvZjlqa1BCQnl4V3BrcWFhdndMOHFHTHhncjVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuQwIMA8E AgACMAkDBwAqA13AAAYwDQYJKoZIhvcNAQELBQADggEBACwCAsoccstw1ZOd1zlu ffEGnvOUI1LxfXeUnKs0AHAKKoZZ4A2eJUdQWI5WpBpPlFUpqUve5aToHbJ9C5pU GOmEWeFwv04qTXHAFQLGxENwCbRUqn0YTZ0f3rQv5i2ByS/18Jv1Kk3/fwoFkY6U JRG5XupvhVzNV7/n//iPc4KS6hYHZUsAJ4JB4GDxAN/BBI9qIZYDfdJ6t5i/yFtU g8dn0fSoLDU8gtq1+3/enYo1EYhPRMudEFhN0m2SslVZIQHEnHifVjs/ja2HZyqd nZyW5tNMH55ExsWCGZVbg1hHqAUcTus8xxmMtBiQTxm4XpqQ8Yh2VoLu2YBZJTx2 Yew= -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:11 2026 by rpki-client