This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/9R0cNh7tpRGDeQddrrwgSyExnk4.roa File: 9R0cNh7tpRGDeQddrrwgSyExnk4.roa (raw, json) Hash identifier: PqbwlQKDPSasGMUXgw1wOQWlaHSoiKJ6p6YuOnnchI8= Subject key identifier: F5:1D:1C:36:1E:ED:A5:11:83:79:07:5D:AE:BC:20:4B:21:31:9E:4E Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Certificate serial: 019B775952D88CF3B4BDD7D7A55B97DF92E5 Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/9R0cNh7tpRGDeQddrrwgSyExnk4.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205889 IP address blocks: 185.185.172.0/24 maxlen: 24 185.185.173.0/24 maxlen: 24 185.185.174.0/24 maxlen: 24 185.185.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:52:d8:8c:f3:b4:bd:d7:d7:a5:5b:97:df:92:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f51d1c361eeda5118379075daebc204b21319e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:04:a5:78:b0:6c:3e:6f:ca:c7:66:d3:3e: 19:d1:a0:f0:3d:bb:5c:9c:d8:41:10:bb:e3:0f:19: ec:0f:e9:74:d3:c3:1c:6f:d5:6b:0f:6a:e7:15:00: 17:32:37:77:ac:2b:8c:c2:eb:62:cd:09:6e:50:53: a3:fd:eb:f6:ca:a2:10:38:66:1c:91:0c:8d:2a:aa: c9:3f:3f:20:ff:9c:b2:03:e9:e0:ce:3d:1b:d6:a7: 65:ce:82:6e:88:fb:b1:98:7e:e3:92:59:93:89:c7: f2:80:da:10:8f:a4:31:9f:aa:0f:23:42:f0:01:9e: 3c:66:fe:c1:8d:ec:ab:33:a0:65:6c:b3:bb:8c:f5: e0:c9:bd:19:ce:02:51:bf:a8:10:51:2c:03:8a:59: 30:e6:18:1c:99:be:c7:50:9e:d4:e6:c9:dd:bc:e9: 3b:6b:76:0f:a3:79:61:aa:b9:3d:e7:91:d2:60:df: 1e:08:de:6c:48:dc:8e:da:f3:78:1b:6a:7f:12:62: ba:9e:f8:28:07:94:69:08:2d:7d:ae:ce:0b:b6:7c: ff:57:7c:70:15:72:33:f3:5d:f1:14:5a:de:97:14: ab:a9:6f:9c:90:0e:af:22:39:cc:49:ce:b2:2e:2f: 5d:31:db:49:db:42:02:aa:51:50:a7:20:2f:9e:cc: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1D:1C:36:1E:ED:A5:11:83:79:07:5D:AE:BC:20:4B:21:31:9E:4E X509v3 Authority Key Identifier: keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/9R0cNh7tpRGDeQddrrwgSyExnk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.172.0/22 Signature Algorithm: sha256WithRSAEncryption 33:17:dc:95:48:5b:09:52:d6:2f:92:59:3a:7a:7b:f3:5b:7b: 7e:71:6e:86:f8:47:47:eb:e2:a4:03:1b:91:f2:ac:c4:9d:d3: 95:8d:e8:af:b5:ff:bb:f6:1c:ac:b4:39:0a:c8:24:af:f8:d6: 58:9a:bf:a3:13:c4:e3:69:62:56:a3:92:9d:e4:9a:5b:05:e8: 43:96:ad:29:73:cc:7f:0e:4e:1b:d5:47:f5:ff:6a:f4:53:07: 99:f0:05:57:5f:84:29:0c:d3:c4:46:29:25:a0:00:79:81:4d: 92:72:2e:23:0d:7c:f8:6b:4e:11:20:ba:d4:e5:aa:50:71:40: 2d:0b:2d:fe:5b:a9:f3:b2:c5:b1:67:7d:6f:27:5b:e8:28:8d: 2a:32:18:f2:05:af:34:fe:e8:cf:a9:28:53:eb:8f:c3:26:d8: 83:49:fe:20:d5:f7:89:04:72:14:c7:80:1f:c1:7e:d9:67:90: 73:fe:4e:de:bf:0c:1c:20:c0:eb:3c:44:62:05:70:4e:3a:ec: d0:90:a1:98:9d:31:e6:d9:9c:a1:5a:5b:2d:c2:45:77:95:af: 9f:2f:54:b9:8d:ff:51:5b:02:7e:cc:a8:35:4e:6e:f5:fc:b5: d2:c4:0e:a5:eb:4b:87:fc:4a:85:b5:72:cd:00:2e:0f:73:05: 24:86:8e:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVLYjPO0vdfXpVuX35LlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDRhNWE1ZDE0YzhhM2I4Y2I5NGQxY2I0NmMwZDZlMmEx YzQ4NDcwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTFkMWMzNjFlZWRhNTExODM3OTA3NWRhZWJjMjA0YjIxMzE5ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXQEpXiwbD5vysdm0z4Z0aDwPbtc nNhBELvjDxnsD+l008Mcb9VrD2rnFQAXMjd3rCuMwutizQluUFOj/ev2yqIQOGYc kQyNKqrJPz8g/5yyA+ngzj0b1qdlzoJuiPuxmH7jklmTicfygNoQj6Qxn6oPI0Lw AZ48Zv7BjeyrM6BlbLO7jPXgyb0ZzgJRv6gQUSwDilkw5hgcmb7HUJ7U5sndvOk7 a3YPo3lhqrk955HSYN8eCN5sSNyO2vN4G2p/EmK6nvgoB5RpCC19rs4Ltnz/V3xw FXIz813xFFrelxSrqW+ckA6vIjnMSc6yLi9dMdtJ20ICqlFQpyAvnsyw8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUdHDYe7aURg3kHXa68IEshMZ5OMB8GA1UdIwQY MBaAFKXUpaXRTIo7jLlNHLRsDW4qHEhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTIt MjJjMDhkY2JmNTcyLzEvOVIwY05oN3RwUkdEZVFkZHJyd2dTeUV4bms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTItMjJjMDhkY2JmNTcy LzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubmsMA0G CSqGSIb3DQEBCwUAA4IBAQAzF9yVSFsJUtYvklk6envzW3t+cW6G+EdH6+KkAxuR 8qzEndOVjeivtf+79hystDkKyCSv+NZYmr+jE8TjaWJWo5Kd5JpbBehDlq0pc8x/ Dk4b1Uf1/2r0UweZ8AVXX4QpDNPERikloAB5gU2Sci4jDXz4a04RILrU5apQcUAt Cy3+W6nzssWxZ31vJ1voKI0qMhjyBa80/ujPqShT64/DJtiDSf4g1feJBHIUx4Af wX7ZZ5Bz/k7evwwcIMDrPERiBXBOOuzQkKGYnTHm2ZyhWlstwkV3la+fL1S5jf9R WwJ+zKg1Tm71/LXSxA6l60uH/EqFtXLNAC4PcwUkho5M -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:12 2026 by rpki-client