This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/9tcHbPB03Z8eEKZg676gB-TlqvI.roa File: 9tcHbPB03Z8eEKZg676gB-TlqvI.roa (raw, json) Hash identifier: 0EY6tBHpX7uJe3hmSPPM5eq+qwso1DAT1la3CCjjUOs= Subject key identifier: F6:D7:07:6C:F0:74:DD:9F:1E:10:A6:60:EB:BE:A0:07:E4:E5:AA:F2 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B7DC9D3E778744E117EC364F3A93DD6A2 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/9tcHbPB03Z8eEKZg676gB-TlqvI.roa Signing time: Fri 02 Jan 2026 08:18:57 +0000 ROA not before: Fri 02 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262254 IP address blocks: 185.129.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d3:e7:78:74:4e:11:7e:c3:64:f3:a9:3d:d6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jan 2 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d7076cf074dd9f1e10a660ebbea007e4e5aaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:08:60:b4:af:4a:12:5f:59:68:f3:4c:8d:10: af:8c:9f:ce:49:3a:61:6a:95:5c:60:86:12:aa:6d: ec:c8:c5:67:ed:7d:e9:9b:f4:57:60:b0:82:e4:88: f9:8f:d6:2e:40:1d:a2:3d:af:75:50:be:5d:99:29: 2e:5c:af:84:83:33:ee:50:dc:04:f1:6b:ac:b6:fb: bf:62:0c:a9:b5:31:f1:b2:97:d3:03:82:3f:7c:90: ea:09:c3:a0:ad:dd:81:a2:0a:ea:1c:61:81:3d:c3: a0:fe:68:e9:09:81:b7:fd:c9:42:16:01:c2:4c:f0: 21:08:21:a6:f3:c9:1c:5c:43:11:73:d4:5b:54:34: c3:38:ac:03:a9:bb:df:19:db:4a:58:9e:44:e3:b3: 1c:6a:e4:ce:fe:68:d0:4f:ed:b8:8c:10:9b:c1:a9: fe:fd:26:05:ef:7f:bf:16:e7:1a:63:3c:67:99:93: 26:30:8f:23:5d:11:a9:2e:2e:70:b1:09:d1:f1:0a: c2:8f:68:12:8b:91:08:63:55:80:ee:ea:4f:39:16: b4:36:07:b2:5a:cf:89:47:dd:1a:62:ca:16:cc:7b: c9:ce:3d:5d:44:28:e3:c3:fb:ec:2f:19:5c:23:bc: 5b:e4:09:42:8d:26:97:60:1b:66:b3:60:f0:41:6f: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D7:07:6C:F0:74:DD:9F:1E:10:A6:60:EB:BE:A0:07:E4:E5:AA:F2 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/9tcHbPB03Z8eEKZg676gB-TlqvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.48.0/24 Signature Algorithm: sha256WithRSAEncryption a1:21:72:06:a8:5e:1a:32:c8:7c:7b:df:4c:72:14:a2:a6:eb: be:91:74:1a:09:2c:f4:9e:12:f6:d1:be:d2:61:f1:a7:b8:82: 21:cc:3f:43:4c:58:0d:f8:a8:24:7b:73:8b:1e:fe:77:f8:ab: 0f:e8:af:b1:a5:30:9b:4c:49:d3:f4:c0:24:09:96:89:1e:81: c5:d6:b3:0d:1a:a8:ec:5e:ec:95:3d:b3:dd:cf:d9:98:3d:46: 0f:de:c2:84:18:35:33:fd:15:ae:be:79:fe:94:0d:e2:fb:46: 89:18:ec:b5:37:a9:a9:91:a8:3d:b2:48:9e:7e:63:26:e3:ff: 8b:6a:5a:60:86:c0:44:4b:93:51:f7:83:2f:df:04:24:5e:2c: f0:50:68:3f:84:21:45:8e:f4:b3:42:53:c1:ce:47:22:57:df: bf:65:70:e0:e3:74:49:9a:d5:aa:0b:cb:c8:03:0e:c1:78:91: bc:15:46:9e:21:ec:18:c9:88:05:3f:27:02:aa:a1:6b:67:9b: 90:72:fb:98:a1:36:5c:b7:3d:b1:df:da:f0:59:90:f3:38:b5: 24:ab:fe:85:5c:55:1f:78:a4:b4:b4:22:03:75:a9:ec:57:2b: 3c:63:b3:4d:00:40:18:5b:cb:51:a9:6a:b5:12:d8:24:78:60: f6:86:4c:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ydPneHROEX7DZPOpPdaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMTAyMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ3MDc2Y2YwNzRkZDlmMWUxMGE2NjBlYmJlYTAwN2U0ZTVhYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8whgtK9KEl9ZaPNMjRCvjJ/OSTph apVcYIYSqm3syMVn7X3pm/RXYLCC5Ij5j9YuQB2iPa91UL5dmSkuXK+EgzPuUNwE 8Wustvu/YgyptTHxspfTA4I/fJDqCcOgrd2BogrqHGGBPcOg/mjpCYG3/clCFgHC TPAhCCGm88kcXEMRc9RbVDTDOKwDqbvfGdtKWJ5E47McauTO/mjQT+24jBCbwan+ /SYF73+/FucaYzxnmZMmMI8jXRGpLi5wsQnR8QrCj2gSi5EIY1WA7upPORa0Ngey Ws+JR90aYsoWzHvJzj1dRCjjw/vsLxlcI7xb5AlCjSaXYBtms2DwQW8mDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbXB2zwdN2fHhCmYOu+oAfk5aryMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvOXRjSGJQQjAzWjhlRUtaZzY3NmdCLVRscXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYEwMA0G CSqGSIb3DQEBCwUAA4IBAQChIXIGqF4aMsh8e99MchSipuu+kXQaCSz0nhL20b7S YfGnuIIhzD9DTFgN+Kgke3OLHv53+KsP6K+xpTCbTEnT9MAkCZaJHoHF1rMNGqjs XuyVPbPdz9mYPUYP3sKEGDUz/RWuvnn+lA3i+0aJGOy1N6mpkag9skiefmMm4/+L alpghsBES5NR94Mv3wQkXizwUGg/hCFFjvSzQlPBzkciV9+/ZXDg43RJmtWqC8vI Aw7BeJG8FUaeIewYyYgFPycCqqFrZ5uQcvuYoTZctz2x39rwWZDzOLUkq/6FXFUf eKS0tCIDdansVys8Y7NNAEAYW8tRqWq1EtgkeGD2hkwA -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:34 2026 by rpki-client