This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/mQ0ACAyJhS24Ge7JfejryYjhrr4.roa File: mQ0ACAyJhS24Ge7JfejryYjhrr4.roa (raw, json) Hash identifier: vb4PW+qjvJj8W9hO5gMvw1SrDAuFxyDok45TJihaRuk= Subject key identifier: 99:0D:00:08:0C:89:85:2D:B8:19:EE:C9:7D:E8:EB:C9:88:E1:AE:BE Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d Certificate serial: 019B7C1282E223F453A86C11107FE7D782DC Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/mQ0ACAyJhS24Ge7JfejryYjhrr4.roa Signing time: Fri 02 Jan 2026 00:19:06 +0000 ROA not before: Fri 02 Jan 2026 00:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209836 IP address blocks: 185.209.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:82:e2:23:f4:53:a8:6c:11:10:7f:e7:d7:82:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=990d00080c89852db819eec97de8ebc988e1aebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:24:cf:b3:65:22:78:a7:b7:45:33:62:63: 49:b0:30:fa:c2:f3:34:8c:a9:2b:d1:72:b7:c4:dd: 19:5b:8c:96:1d:a8:ba:bd:49:28:a6:46:3e:f6:71: 39:4f:8a:8c:9f:81:6d:b6:15:9e:4d:79:52:5c:6c: e5:2a:3b:59:db:04:05:c0:fd:38:92:59:bf:2d:39: 8b:22:9f:0f:5e:f4:b1:dc:d3:cb:7e:dc:59:5f:d3: 34:2d:6f:af:d0:d2:af:46:9e:09:db:92:dc:e2:04: a4:87:43:32:7e:ce:74:f7:44:89:5f:ed:44:24:bc: 46:85:21:35:49:25:04:a0:6c:7d:a7:25:94:8a:7e: ac:09:ce:5b:7c:bb:4b:cf:b8:43:e5:57:0f:70:88: fc:f0:c8:4f:3b:c0:ea:40:0e:59:a4:ab:8f:ff:31: 98:56:6d:fc:60:3c:8f:8b:27:1b:b6:17:42:6d:67: 8f:45:9e:0f:84:95:68:c2:8d:71:70:d5:7a:bd:af: 78:8f:b7:b1:55:09:c2:f4:00:51:a8:dd:cb:99:8b: 33:9e:d5:87:87:88:88:15:6e:d5:d6:2e:64:1a:9b: 35:b7:aa:f8:e5:38:62:7e:b0:07:02:03:03:ca:02: 9b:e4:d4:9b:bd:56:58:2f:2f:d5:83:5f:b7:e2:66: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:00:08:0C:89:85:2D:B8:19:EE:C9:7D:E8:EB:C9:88:E1:AE:BE X509v3 Authority Key Identifier: keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/mQ0ACAyJhS24Ge7JfejryYjhrr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.42.0/24 Signature Algorithm: sha256WithRSAEncryption 18:87:2b:8b:6d:d8:96:e9:ae:1e:ea:d2:56:89:63:1f:5b:1a: f9:2e:b8:d0:37:82:79:e2:c9:a6:94:3d:de:cd:e7:5d:c4:18: ca:42:10:89:db:43:38:b8:5d:be:dc:96:cb:a1:ed:53:b9:c0: 78:61:02:06:55:a5:a9:06:27:d7:7c:88:49:43:93:a9:7f:07: a5:69:e9:28:ad:20:e2:4a:e3:03:ab:18:24:d9:97:c1:e6:a2: 2e:86:b4:7c:e1:ac:74:09:9f:74:62:55:0d:84:46:06:02:65: 64:76:a8:c9:63:24:ea:06:c9:54:ee:1c:4f:ea:1b:04:33:5a: a1:2f:2d:3d:75:35:b4:5a:e1:08:73:ad:fe:aa:21:08:d3:4c: 5c:fd:04:2e:a1:ad:84:3e:79:0c:65:cc:a9:39:ad:35:9f:87: 7b:e8:e4:b3:9c:6f:e3:3a:7f:9c:4a:4c:ed:e5:19:4b:db:dd: 23:d9:16:92:cd:b5:aa:83:9c:20:d5:34:6f:1d:d2:02:30:f0: 5b:1a:f7:a2:f7:4d:a9:02:cd:e3:1c:88:a3:d0:73:fa:3b:fe: 19:60:c6:42:b3:66:36:41:4f:2d:4d:73:0f:eb:f7:2e:64:c9: af:8a:82:f9:7e:c7:0b:b7:f4:4c:11:63:d1:df:88:d0:31:f7: 50:55:f3:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EoLiI/RTqGwREH/n14LcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjUyNWUyNjNhOTViMTY1MjA2NGJkZmY4OTY0ZDRiZjYy YjUzM2QwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTBkMDAwODBjODk4NTJkYjgxOWVlYzk3ZGU4ZWJjOTg4ZTFhZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N8kz7NlInint0UzYmNJsDD6wvM0 jKkr0XK3xN0ZW4yWHai6vUkopkY+9nE5T4qMn4FtthWeTXlSXGzlKjtZ2wQFwP04 klm/LTmLIp8PXvSx3NPLftxZX9M0LW+v0NKvRp4J25Lc4gSkh0Myfs5090SJX+1E JLxGhSE1SSUEoGx9pyWUin6sCc5bfLtLz7hD5VcPcIj88MhPO8DqQA5ZpKuP/zGY Vm38YDyPiycbthdCbWePRZ4PhJVowo1xcNV6va94j7exVQnC9ABRqN3LmYszntWH h4iIFW7V1i5kGps1t6r45ThifrAHAgMDygKb5NSbvVZYLy/Vg1+34mZ+UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkNAAgMiYUtuBnuyX3o68mI4a6+MB8GA1UdIwQY MBaAFMu1JeJjqVsWUgZL3/iWTUv2K1M9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdVbDRtT3BXeFpTQmt2Zi1KWk5TX1lyVXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQt Yjg5ZGM0ZmQ2ZWUwLzEvbVEwQUNBeUpoUzI0R2U3SmZlanJ5WWpocnI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQtYjg5ZGM0ZmQ2ZWUw LzEveTdVbDRtT3BXeFpTQmt2Zi1KWk5TX1lyVXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudEqMA0G CSqGSIb3DQEBCwUAA4IBAQAYhyuLbdiW6a4e6tJWiWMfWxr5LrjQN4J54smmlD3e zeddxBjKQhCJ20M4uF2+3JbLoe1TucB4YQIGVaWpBifXfIhJQ5OpfwelaekorSDi SuMDqxgk2ZfB5qIuhrR84ax0CZ90YlUNhEYGAmVkdqjJYyTqBslU7hxP6hsEM1qh Ly09dTW0WuEIc63+qiEI00xc/QQuoa2EPnkMZcypOa01n4d76OSznG/jOn+cSkzt 5RlL290j2RaSzbWqg5wg1TRvHdICMPBbGvei902pAs3jHIij0HP6O/4ZYMZCs2Y2 QU8tTXMP6/cuZMmvioL5fscLt/RMEWPR34jQMfdQVfMl -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:48 2026 by rpki-client