This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/9aA3iLX_dTChIPCO6PgksQti4b4.roa File: 9aA3iLX_dTChIPCO6PgksQti4b4.roa (raw, json) Hash identifier: fqGRMmb2kUR03lGLsFWhMcKnX+bdih5acXmK3pBtYbE= Subject key identifier: F5:A0:37:88:B5:FF:75:30:A1:20:F0:8E:E8:F8:24:B1:0B:62:E1:BE Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33 Certificate serial: 019B7E37804EA453E07DBF7737CD0734EE18 Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/9aA3iLX_dTChIPCO6PgksQti4b4.roa Signing time: Fri 02 Jan 2026 10:18:45 +0000 ROA not before: Fri 02 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209257 IP address blocks: 185.186.221.0/24 maxlen: 24 185.186.222.0/24 maxlen: 24 2a11:1e40:ba5e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:80:4e:a4:53:e0:7d:bf:77:37:cd:07:34:ee:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335ca521362226d03c1829003d81d498aa838f33 Validity Not Before: Jan 2 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5a03788b5ff7530a120f08ee8f824b10b62e1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:69:bf:52:c4:2c:17:89:aa:30:3a:39:3d:d7: 6b:7b:f2:ea:f5:6d:5a:e5:42:bf:d4:57:8e:db:08: ae:89:5c:e0:42:a5:55:c5:b5:6d:68:73:da:45:1f: ab:0d:bb:74:9f:d9:6e:7a:4b:ac:99:f9:f4:3f:90: ab:15:fa:11:95:8e:58:be:8a:9d:24:8b:7e:41:ee: 6f:0a:9d:95:ef:ce:89:41:13:51:21:19:10:a4:ed: 28:c5:bf:5f:e6:e3:84:f4:43:82:91:56:db:7a:b0: 2a:90:b2:54:06:36:0d:63:e9:49:0f:a8:56:0c:7d: 79:23:6b:df:a5:21:5e:eb:59:09:90:50:b9:a7:fc: e2:0e:d9:45:ce:95:70:9a:28:79:6e:be:78:29:5a: 4a:38:99:51:da:9c:d2:4a:73:4b:59:51:c8:82:fa: 63:fc:a8:00:3e:dc:a9:3a:c5:59:46:28:a3:bf:42: 3b:61:eb:ce:6f:ff:f0:e3:24:ea:f4:2b:77:6d:12: 53:80:91:45:63:66:a2:d0:a9:33:55:7f:ae:4e:bd: 52:47:9f:c6:76:b2:b9:c6:fc:77:21:5a:e6:26:65: 8a:91:8b:34:7f:4b:24:26:ca:3d:92:0c:de:bb:fc: 62:14:78:21:a5:54:38:44:73:31:9c:93:7a:34:43: f3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:37:88:B5:FF:75:30:A1:20:F0:8E:E8:F8:24:B1:0B:62:E1:BE X509v3 Authority Key Identifier: keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/9aA3iLX_dTChIPCO6PgksQti4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.221.0-185.186.222.255 IPv6: 2a11:1e40:ba5e::/48 Signature Algorithm: sha256WithRSAEncryption 94:01:39:86:f5:00:dc:1d:7f:27:66:2b:5f:1f:4d:a5:89:34: c6:f3:e1:d7:33:ab:21:a9:07:1c:f8:5d:75:c2:0c:c1:a0:14: bc:79:0b:21:ee:f6:03:25:40:01:30:7a:22:00:71:44:af:b9: b8:36:b1:83:21:fb:10:a2:de:1e:a2:f4:79:24:c9:e5:5f:9d: cc:0d:25:32:6c:54:e6:dc:4a:e1:0c:94:eb:78:93:4f:c7:05: 80:4c:34:d0:24:70:f7:d6:b9:53:53:2d:98:32:2b:0d:00:ff: ff:c9:dc:ae:eb:c5:de:8a:a2:d1:d1:01:0a:d4:79:e9:45:92: db:2b:b5:9d:7a:89:0c:19:8a:05:b7:fc:48:9d:35:0c:dd:98: c8:e7:49:52:a3:14:d1:30:58:cd:ff:8b:61:b4:6b:10:65:93: 62:9a:a4:85:2e:0e:19:03:d1:eb:9c:06:1d:ba:a4:ce:08:20: 14:b0:ab:b1:c3:1a:fd:55:48:2e:2e:df:7e:67:fa:44:2a:85: aa:f6:3d:6f:9c:9e:29:4c:0e:e7:cf:b9:bd:5a:05:55:77:7e: c5:9d:26:43:0b:70:b6:62:11:e9:83:22:ea:89:e5:da:96:a7: 1c:d7:e4:c2:08:38:10:96:87:9a:8a:df:3f:7e:c9:c6:dd:54: 8b:aa:0c:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+N4BOpFPgfb93N80HNO4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4 MzhmMzMwHhcNMjYwMTAyMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWEwMzc4OGI1ZmY3NTMwYTEyMGYwOGVlOGY4MjRiMTBiNjJlMWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42m/UsQsF4mqMDo5Pddre/Lq9W1a 5UK/1FeO2wiuiVzgQqVVxbVtaHPaRR+rDbt0n9luekusmfn0P5CrFfoRlY5Yvoqd JIt+Qe5vCp2V786JQRNRIRkQpO0oxb9f5uOE9EOCkVbberAqkLJUBjYNY+lJD6hW DH15I2vfpSFe61kJkFC5p/ziDtlFzpVwmih5br54KVpKOJlR2pzSSnNLWVHIgvpj /KgAPtypOsVZRiijv0I7YevOb//w4yTq9Ct3bRJTgJFFY2ai0KkzVX+uTr1SR5/G drK5xvx3IVrmJmWKkYs0f0skJso9kgzeu/xiFHghpVQ4RHMxnJN6NEPzywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWgN4i1/3UwoSDwjuj4JLELYuG+MB8GA1UdIwQY MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt OTc0YzQ0YWI5Y2ZiLzEvOWFBM2lMWF9kVENoSVBDTzZQZ2tzUXRpNGI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAC5ut0D BAC5ut4wDwQCAAIwCQMHACoRHkC6XjANBgkqhkiG9w0BAQsFAAOCAQEAlAE5hvUA 3B1/J2YrXx9NpYk0xvPh1zOrIakHHPhddcIMwaAUvHkLIe72AyVAATB6IgBxRK+5 uDaxgyH7EKLeHqL0eSTJ5V+dzA0lMmxU5txK4QyU63iTT8cFgEw00CRw99a5U1Mt mDIrDQD//8ncruvF3oqi0dEBCtR56UWS2yu1nXqJDBmKBbf8SJ01DN2YyOdJUqMU 0TBYzf+LYbRrEGWTYpqkhS4OGQPR65wGHbqkzgggFLCrscMa/VVILi7ffmf6RCqF qvY9b5yeKUwO58+5vVoFVXd+xZ0mQwtwtmIR6YMi6onl2panHNfkwgg4EJaHmorf P37Jxt1Ui6oM7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:51 2026 by rpki-client