This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/g9skLhoTngKF84leEtNBNhGZn9Q.roa File: g9skLhoTngKF84leEtNBNhGZn9Q.roa (raw, json) Hash identifier: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E= Subject key identifier: 83:DB:24:2E:1A:13:9E:02:85:F3:89:5E:12:D3:41:36:11:99:9F:D4 Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Certificate serial: 019B7F8007175B67782B9E8B2C02CF0B78A4 Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/g9skLhoTngKF84leEtNBNhGZn9Q.roa Signing time: Fri 02 Jan 2026 16:17:35 +0000 ROA not before: Fri 02 Jan 2026 16:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 185.59.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:07:17:5b:67:78:2b:9e:8b:2c:02:cf:0b:78:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d Validity Not Before: Jan 2 16:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83db242e1a139e0285f3895e12d3413611999fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:c5:43:46:19:c0:4e:8c:38:7a:ba:9a:50: 19:b6:57:58:ee:31:7c:7a:67:fb:f4:30:9f:fa:fb: 03:30:78:d9:f1:b0:25:71:f8:33:6e:87:c5:41:86: 70:8c:1b:ce:06:67:35:96:66:8e:1b:81:e2:d6:57: fd:f8:57:2e:b1:04:ab:69:17:f5:e9:31:13:2a:7f: 84:fd:1b:62:cd:be:1a:0c:8e:a5:8d:f0:eb:52:04: a2:97:c2:e0:d0:77:9d:c4:a7:83:18:17:a6:e7:94: cc:22:a8:33:17:5d:96:42:cb:dd:f3:c1:ab:58:21: 73:85:a4:4b:80:68:37:1e:56:87:c0:30:bc:e7:8b: 02:32:a1:52:4d:e3:9e:d5:59:27:a0:88:43:38:12: fe:af:34:19:4f:9a:02:90:c4:e8:b9:8e:76:00:c5: 2e:fb:43:1b:e7:4c:46:39:ae:34:4e:9f:98:37:e4: 4a:5d:31:a6:5b:f1:82:37:cf:15:fa:d9:94:ea:a3: bc:51:2b:10:8a:23:73:18:8c:50:19:03:a7:e3:b4: 2f:95:01:86:e7:5c:45:12:07:54:85:93:87:6b:a3: 7a:c1:66:16:8f:17:a8:64:41:cf:9b:ab:7d:98:3c: 39:bd:48:a3:a0:27:4a:20:88:9e:dd:83:88:9a:db: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DB:24:2E:1A:13:9E:02:85:F3:89:5E:12:D3:41:36:11:99:9F:D4 X509v3 Authority Key Identifier: keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/g9skLhoTngKF84leEtNBNhGZn9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.59.218.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:1c:37:e2:46:5b:82:89:2a:e6:c9:fe:19:89:fa:43:e5:8f: f1:0b:28:eb:53:b3:84:0b:45:dc:9f:ae:67:f4:90:b5:b5:29: ec:d2:ca:84:4e:40:97:8c:c1:ca:52:93:f2:fd:72:52:35:04: fc:98:e3:13:93:58:22:d4:4c:14:a5:38:91:5c:41:3c:5e:68: 00:36:a2:51:87:43:ac:0c:8e:cf:0f:de:ee:b2:e1:a8:9a:21: dd:50:26:53:90:85:66:be:31:d5:bf:b6:18:3b:6e:fa:69:60: 36:ec:c3:66:13:35:de:1a:2e:47:09:f7:88:fb:6f:12:d9:9b: 6e:cf:3e:23:74:c2:f3:bd:ef:92:0e:90:22:59:14:1c:0b:4c: e3:e3:52:46:b1:3c:9b:6b:02:23:70:66:d4:9c:5a:6d:a7:75: d8:8d:68:bf:94:cc:dc:93:24:c5:9f:cb:9b:04:7f:b6:8e:8f: 30:a5:17:4e:db:f4:f1:37:22:01:98:66:28:16:78:bb:ef:54: a1:9e:48:3a:a1:03:0d:7a:e5:69:cf:2f:22:64:ad:21:cd:b6: 6f:a9:53:08:dd:85:10:35:97:77:d8:98:5e:a5:f4:8e:29:5f: 43:77:ea:8f:31:79:73:5d:f9:3d:c1:c8:1e:18:a7:0e:e2:ed: a6:95:bc:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gAcXW2d4K56LLALPC3ikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDFjZDQ3YTUzZWY1N2ViYjU2N2JjODgyYWQyOTg2ZmFh YzVmMGQwHhcNMjYwMTAyMTYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2RiMjQyZTFhMTM5ZTAyODVmMzg5NWUxMmQzNDEzNjExOTk5ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgXFQ0YZwE6MOHq6mlAZtldY7jF8 emf79DCf+vsDMHjZ8bAlcfgzbofFQYZwjBvOBmc1lmaOG4Hi1lf9+FcusQSraRf1 6TETKn+E/Rtizb4aDI6ljfDrUgSil8Lg0HedxKeDGBem55TMIqgzF12WQsvd88Gr WCFzhaRLgGg3HlaHwDC854sCMqFSTeOe1VknoIhDOBL+rzQZT5oCkMTouY52AMUu +0Mb50xGOa40Tp+YN+RKXTGmW/GCN88V+tmU6qO8USsQiiNzGIxQGQOn47QvlQGG 51xFEgdUhZOHa6N6wWYWjxeoZEHPm6t9mDw5vUijoCdKIIie3YOImtvqIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIPbJC4aE54ChfOJXhLTQTYRmZ/UMB8GA1UdIwQY MBaAFNXRzUelPvV+u1Z7yIKtKYb6rF8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYt ZjRkMDcxZjUwZjFkLzEvZzlza0xob1RuZ0tGODRsZUV0TkJOaEdabjlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYtZjRkMDcxZjUwZjFk LzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTvaMA0G CSqGSIb3DQEBCwUAA4IBAQAOHDfiRluCiSrmyf4ZifpD5Y/xCyjrU7OEC0Xcn65n 9JC1tSns0sqETkCXjMHKUpPy/XJSNQT8mOMTk1gi1EwUpTiRXEE8XmgANqJRh0Os DI7PD97usuGomiHdUCZTkIVmvjHVv7YYO276aWA27MNmEzXeGi5HCfeI+28S2Ztu zz4jdMLzve+SDpAiWRQcC0zj41JGsTybawIjcGbUnFptp3XYjWi/lMzckyTFn8ub BH+2jo8wpRdO2/TxNyIBmGYoFni771Shnkg6oQMNeuVpzy8iZK0hzbZvqVMI3YUQ NZd32JhepfSOKV9Dd+qPMXlzXfk9wcgeGKcO4u2mlbzk -----END CERTIFICATE-----Generated at Sun Jan 25 12:47:08 2026 by rpki-client