This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa File: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (raw, json) Hash identifier: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I= Subject key identifier: 7C:8F:4F:07:18:A2:30:EB:0A:0A:D9:CE:5F:0A:B3:3F:95:99:DE:2C Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6 Certificate serial: 019B7910230A8EFAA360635138B6802584DF Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44243 IP address blocks: 185.178.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:23:0a:8e:fa:a3:60:63:51:38:b6:80:25:84:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c8f4f0718a230eb0a0ad9ce5f0ab33f9599de2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:77:ea:8b:7e:ad:1a:87:58:86:ba:e3:ee:08: 80:22:25:76:8e:6e:6c:a1:c8:4f:be:1d:1a:00:0b: 6e:e4:4e:2b:51:60:00:f3:87:f0:da:3d:0d:58:84: e6:32:29:be:b2:40:51:bc:66:a7:6a:5b:68:5a:80: de:3a:a1:83:e2:cd:ac:0d:47:4e:09:ef:57:08:82: 54:80:c2:de:ea:43:40:7b:82:e9:d7:d9:40:f5:19: 8a:4f:f9:4b:54:bf:65:99:1f:6d:7f:da:d0:59:47: c8:d5:77:1c:7e:ae:93:fe:85:79:4e:6f:be:91:50: 6f:67:12:ab:49:e7:51:ef:2a:43:05:3e:c4:89:44: d0:00:f3:75:3a:83:91:35:f9:4f:6b:1a:7b:da:fc: 45:7d:31:a6:26:76:ed:68:77:63:25:ca:6b:47:bb: cb:c8:59:b2:0a:8f:1a:cd:df:89:3c:bf:9b:ff:b9: b1:49:9c:94:55:1c:f3:85:7c:7b:b4:5d:ad:7e:e3: cd:bc:d5:4e:83:c3:7f:3a:ce:05:e9:ef:ba:62:83: a7:15:1c:5a:1e:89:79:ed:10:23:3f:09:27:20:78: 37:1e:a0:b0:4f:53:62:36:d3:3b:5e:b2:f3:1a:a9: 1b:d0:61:f4:25:ef:fc:d1:00:32:7a:ec:ef:e8:ee: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8F:4F:07:18:A2:30:EB:0A:0A:D9:CE:5F:0A:B3:3F:95:99:DE:2C X509v3 Authority Key Identifier: keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.104.0/22 Signature Algorithm: sha256WithRSAEncryption b7:b1:ae:8b:f1:5b:3a:0e:d2:67:bd:75:88:c8:e8:91:41:97: dc:8d:e0:ef:ff:30:3a:33:35:70:3e:e6:d5:2b:72:35:0c:02: 55:0f:71:ec:8f:21:e2:91:2a:22:08:09:54:41:8f:01:4a:5c: 4f:9e:d5:35:74:db:8a:6c:bc:f2:bd:eb:66:4f:ec:68:6c:c5: ec:dd:b8:30:fe:f9:65:93:5e:12:28:08:19:94:63:0c:f6:05: 1e:22:39:d2:ab:6f:cd:fc:b2:bf:4a:a1:58:6f:a5:ff:8a:43: db:1d:3c:e0:9a:c3:08:26:47:7a:33:6d:53:1e:59:93:d0:1c: 93:d8:63:d5:c2:e8:a9:1b:40:c8:1a:94:1f:d6:20:f6:48:fd: 41:b6:e2:ce:27:a6:4d:b7:50:04:81:29:0a:35:c4:7c:9b:34: e8:0d:1e:ff:0a:ea:49:14:3f:da:95:73:4e:53:33:c1:e0:0a: cd:d9:bd:a2:71:74:ee:4e:0d:dd:a8:22:7f:ab:c2:13:3b:b0: 90:80:44:2b:67:48:c8:b1:b5:a9:c4:45:4e:b9:d2:a9:c0:d3: 52:74:c5:f4:f5:b2:d9:b9:93:56:0e:9e:69:6a:03:62:09:0a: 16:a7:34:16:85:a6:85:ad:1f:49:71:af:96:b5:69:59:ca:32: a0:bc:c6:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECMKjvqjYGNROLaAJYTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTdmNzc3ZTcxYWMzNDEyMmVkYjM1ZWRkNjBjZjE0ZDc1 YjllZjYwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzhmNGYwNzE4YTIzMGViMGEwYWQ5Y2U1ZjBhYjMzZjk1OTlkZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73fqi36tGodYhrrj7giAIiV2jm5s ochPvh0aAAtu5E4rUWAA84fw2j0NWITmMim+skBRvGanaltoWoDeOqGD4s2sDUdO Ce9XCIJUgMLe6kNAe4Lp19lA9RmKT/lLVL9lmR9tf9rQWUfI1Xccfq6T/oV5Tm++ kVBvZxKrSedR7ypDBT7EiUTQAPN1OoORNflPaxp72vxFfTGmJnbtaHdjJcprR7vL yFmyCo8azd+JPL+b/7mxSZyUVRzzhXx7tF2tfuPNvNVOg8N/Os4F6e+6YoOnFRxa Hol57RAjPwknIHg3HqCwT1NiNtM7XrLzGqkb0GH0Je/80QAyeuzv6O55YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyPTwcYojDrCgrZzl8Ksz+Vmd4sMB8GA1UdIwQY MBaAFJkX93fnGsNBIu2zXt1gzxTXW572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTkt YTg4ZjU3NDE1MmI2LzEvZkk5UEJ4aWlNT3NLQ3RuT1h3cXpQNVdaM2l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9iZThkNTktNzcwNC00NWY4LWIzOTktYTg4ZjU3NDE1MmI2 LzEvbVJmM2QtY2F3MEVpN2JOZTNXRFBGTmRibnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubJoMA0G CSqGSIb3DQEBCwUAA4IBAQC3sa6L8Vs6DtJnvXWIyOiRQZfcjeDv/zA6MzVwPubV K3I1DAJVD3HsjyHikSoiCAlUQY8BSlxPntU1dNuKbLzyvetmT+xobMXs3bgw/vll k14SKAgZlGMM9gUeIjnSq2/N/LK/SqFYb6X/ikPbHTzgmsMIJkd6M21THlmT0ByT 2GPVwuipG0DIGpQf1iD2SP1BtuLOJ6ZNt1AEgSkKNcR8mzToDR7/CupJFD/alXNO UzPB4ArN2b2icXTuTg3dqCJ/q8ITO7CQgEQrZ0jIsbWpxEVOudKpwNNSdMX09bLZ uZNWDp5pagNiCQoWpzQWhaaFrR9Jca+WtWlZyjKgvMam -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:47 2026 by rpki-client