This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9QS9Wf0ibZwRF7MgFL0I4QA0zdc.roa File: 9QS9Wf0ibZwRF7MgFL0I4QA0zdc.roa (raw, json) Hash identifier: kxa72fKfgy3rZwIve6ZzmQMLYc+trduZk7iW6e2HJyA= Subject key identifier: F5:04:BD:59:FD:22:6D:9C:11:17:B3:20:14:BD:08:E1:00:34:CD:D7 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B791003B03B6C87B7D5E9A6A3ACA9DF9D Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9QS9Wf0ibZwRF7MgFL0I4QA0zdc.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204958 IP address blocks: 185.57.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:03:b0:3b:6c:87:b7:d5:e9:a6:a3:ac:a9:df:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f504bd59fd226d9c1117b32014bd08e10034cdd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:3b:33:37:31:bb:5c:84:c7:9f:60:fe:c2: 02:0f:1d:15:dd:68:42:af:db:a7:f3:4a:36:c8:ef: bd:0c:dc:62:40:95:31:86:4c:b8:0a:45:fc:bd:b3: da:5f:8d:6f:4d:51:c0:63:e2:1c:2c:ff:c2:8d:4f: 78:b9:50:a4:5b:f5:ae:c5:0f:82:a1:f9:b2:fb:5c: 63:94:58:7b:aa:dc:60:8a:f6:a5:d4:3b:62:08:a1: f3:80:97:51:d3:cd:4a:7e:e0:b1:b2:16:d6:b1:71: 24:f4:1c:ad:b2:6e:52:1d:bb:84:cb:be:69:bc:ac: ea:f7:32:f1:7b:fb:e7:fe:e2:2e:9d:3e:f5:8b:68: 42:24:f7:13:4d:ae:50:4e:5c:0b:0a:8f:01:82:b9: fd:bf:77:37:fb:c7:4c:87:e7:42:95:72:60:60:68: e1:31:b6:d2:53:cd:c2:4a:79:fd:67:aa:4e:3a:a3: f4:a0:d6:c5:68:43:41:27:75:47:fa:22:3e:f0:61: f2:1d:70:42:83:db:d0:db:e6:0b:e1:2d:4c:c7:ae: 9e:82:5f:48:16:2e:70:5f:08:09:34:46:e5:21:98: 2d:08:da:78:14:e7:f7:ed:8e:74:6d:e4:f9:dc:70: 83:93:a3:41:65:67:d0:0a:6f:c9:22:85:6e:b2:fe: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:04:BD:59:FD:22:6D:9C:11:17:B3:20:14:BD:08:E1:00:34:CD:D7 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9QS9Wf0ibZwRF7MgFL0I4QA0zdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.231.0/24 Signature Algorithm: sha256WithRSAEncryption 99:74:a3:cc:6e:01:92:7b:3b:74:06:e5:b8:2d:26:c1:f9:a7: cf:87:e4:2f:07:63:b5:e4:60:53:ec:3b:ee:ed:79:46:b3:30: 2d:71:99:1d:76:cf:9c:fa:a7:c3:e6:0c:47:f7:60:63:a8:4e: 78:96:bd:d8:ba:7f:f0:39:d1:73:ed:1e:9e:17:19:9d:26:0a: 87:f7:f3:06:34:8d:f5:f7:57:75:38:58:04:e8:26:5b:2f:00: 06:9c:93:d8:c3:95:59:b8:47:7e:70:19:ab:81:b0:f5:e4:ec: b8:eb:c8:36:ea:19:cd:a8:3e:6c:d0:15:38:9b:1e:45:ff:28: 10:cc:64:b7:da:81:fd:e2:3b:dd:a0:70:9c:72:d4:c4:f9:7b: e7:f2:80:bf:17:b5:1b:fb:7c:a3:73:ee:26:e9:e6:f5:48:08: 49:aa:99:67:70:ba:d0:50:7b:4b:04:8e:6c:c2:fb:17:62:eb: 6d:4b:2b:de:12:e8:38:f2:b3:7c:32:ce:65:4c:a1:75:18:68: 25:77:ed:93:63:22:cf:9b:ec:20:93:19:65:16:88:3f:cc:0f: 5e:8d:0f:91:db:11:a8:d9:78:5b:89:75:46:83:ef:61:4f:28: 78:6f:37:38:f5:e9:b5:c1:39:ff:79:4c:09:69:ab:a5:27:09: 5f:63:dd:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAOwO2yHt9XppqOsqd+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTA0YmQ1OWZkMjI2ZDljMTExN2IzMjAxNGJkMDhlMTAwMzRjZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bY7Mzcxu1yEx59g/sICDx0V3WhC r9un80o2yO+9DNxiQJUxhky4CkX8vbPaX41vTVHAY+IcLP/CjU94uVCkW/WuxQ+C ofmy+1xjlFh7qtxgival1DtiCKHzgJdR081KfuCxshbWsXEk9Bytsm5SHbuEy75p vKzq9zLxe/vn/uIunT71i2hCJPcTTa5QTlwLCo8Bgrn9v3c3+8dMh+dClXJgYGjh MbbSU83CSnn9Z6pOOqP0oNbFaENBJ3VH+iI+8GHyHXBCg9vQ2+YL4S1Mx66egl9I Fi5wXwgJNEblIZgtCNp4FOf37Y50beT53HCDk6NBZWfQCm/JIoVusv7LKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUEvVn9Im2cERezIBS9COEANM3XMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvOVFTOVdmMGliWndSRjdNZ0ZMMEk0UUEwemRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTnnMA0G CSqGSIb3DQEBCwUAA4IBAQCZdKPMbgGSezt0BuW4LSbB+afPh+QvB2O15GBT7Dvu 7XlGszAtcZkdds+c+qfD5gxH92BjqE54lr3Yun/wOdFz7R6eFxmdJgqH9/MGNI31 91d1OFgE6CZbLwAGnJPYw5VZuEd+cBmrgbD15Oy468g26hnNqD5s0BU4mx5F/ygQ zGS32oH94jvdoHCcctTE+Xvn8oC/F7Ub+3yjc+4m6eb1SAhJqplncLrQUHtLBI5s wvsXYuttSyveEug48rN8Ms5lTKF1GGgld+2TYyLPm+wgkxllFog/zA9ejQ+R2xGo 2XhbiXVGg+9hTyh4bzc49em1wTn/eUwJaaulJwlfY90F -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:43 2026 by rpki-client