This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa File: Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa (raw, json) Hash identifier: UYO/NtK9AfbvXNvm3O/IQCzfg04aFD89bh7YW2P92Vk= Subject key identifier: 43:D3:6D:F6:05:FC:0C:78:BD:D0:B4:F8:B4:C9:4E:67:49:BA:20:9A Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Certificate serial: 019B7759525042BBE62C6927A6CDEFB617C4 Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203409 IP address blocks: 185.185.172.0/24 maxlen: 24 185.185.173.0/24 maxlen: 24 185.185.174.0/24 maxlen: 24 185.185.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:52:50:42:bb:e6:2c:69:27:a6:cd:ef:b6:17:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d36df605fc0c78bdd0b4f8b4c94e6749ba209a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:2e:e2:2d:3a:c8:0d:f3:b5:88:1d:78:61: 13:d0:94:60:46:e9:61:8e:16:95:cb:d2:b2:87:6b: bd:b0:2e:fa:3e:5c:36:2c:c8:c6:5c:93:bb:94:d6: d9:a7:04:96:d5:08:36:b2:05:35:ba:f4:23:41:fb: 8c:4f:65:6e:12:a4:19:87:0c:13:bd:3e:9f:b5:5f: 9b:dd:85:71:89:ef:d8:f6:7f:ed:c2:25:f7:f3:0a: b3:cb:01:ae:ed:8f:e5:d1:8c:cc:f6:7e:4c:31:52: d7:77:a4:d5:40:66:92:71:81:e5:90:1f:96:dc:42: 15:ab:86:ff:6c:5f:84:bd:4b:f2:bc:04:92:53:d8: e3:42:ef:05:d1:ef:d4:18:bd:38:6f:ff:75:89:1b: 38:15:74:21:8a:e0:b2:c0:27:fa:c0:a1:03:89:b2: 12:a6:74:37:df:1c:7a:26:ec:9e:6d:dd:b9:76:49: 4b:9f:0c:b3:c8:c8:4c:73:f3:28:73:48:99:29:50: 83:9c:13:cc:8e:ff:64:7a:a7:03:e9:3d:55:bc:24: b9:77:b4:2f:d8:1a:cb:bb:a3:5a:25:36:e3:02:1e: a2:9f:76:59:0b:ea:03:46:b2:2a:c1:bc:87:78:97: e8:7e:13:4a:3c:cd:2d:7d:6b:3e:bc:a0:97:43:c2: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D3:6D:F6:05:FC:0C:78:BD:D0:B4:F8:B4:C9:4E:67:49:BA:20:9A X509v3 Authority Key Identifier: keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.172.0/22 Signature Algorithm: sha256WithRSAEncryption 80:fe:e3:11:77:74:66:51:a1:0e:f9:4c:ab:d3:49:41:23:78: 74:9f:67:6d:8d:24:ac:d0:c7:05:be:0d:d6:2a:ee:ea:f8:33: ad:4a:d2:c2:91:c4:01:cb:5b:8d:ba:bd:56:53:a1:68:c9:ea: 36:6c:02:76:40:05:f9:48:3b:11:6e:fd:31:a7:2a:2e:37:b5: 08:7b:3f:31:b4:3d:14:66:a2:fa:d0:ef:e0:02:78:36:1f:f0: 6c:9c:68:a5:66:8c:8e:6f:66:8e:ad:64:29:a3:42:c0:47:fa: 79:1c:05:30:9a:5d:96:c9:45:0c:5e:4f:81:58:f3:1c:95:1f: 4f:94:4f:4c:22:28:a5:40:ed:e0:bb:7c:9e:c4:4b:61:bb:00: 81:37:c0:0d:a5:b8:dc:c0:ac:c7:96:df:e8:d4:16:3c:ad:07: 3b:55:cd:f5:4f:5d:4b:cd:7c:b3:ce:e5:58:10:fb:34:ea:4a: 8f:d7:35:17:da:65:62:e4:ae:7c:ed:7f:9e:07:2c:d1:b0:71: a1:1a:5f:ee:ad:76:d8:cb:f7:64:7e:e7:7c:64:34:69:ce:88: 5d:26:4d:84:d0:7a:2f:0f:ae:ea:59:1e:65:e7:95:1a:84:7d: a3:05:d4:d0:ae:10:25:4b:2d:94:98:1a:9a:e7:44:5f:3a:d3: e3:3a:62:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVJQQrvmLGknps3vthfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDRhNWE1ZDE0YzhhM2I4Y2I5NGQxY2I0NmMwZDZlMmEx YzQ4NDcwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2QzNmRmNjA1ZmMwYzc4YmRkMGI0ZjhiNGM5NGU2NzQ5YmEyMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgIu4i06yA3ztYgdeGET0JRgRulh jhaVy9Kyh2u9sC76Plw2LMjGXJO7lNbZpwSW1Qg2sgU1uvQjQfuMT2VuEqQZhwwT vT6ftV+b3YVxie/Y9n/twiX38wqzywGu7Y/l0YzM9n5MMVLXd6TVQGaScYHlkB+W 3EIVq4b/bF+EvUvyvASSU9jjQu8F0e/UGL04b/91iRs4FXQhiuCywCf6wKEDibIS pnQ33xx6Juyebd25dklLnwyzyMhMc/Moc0iZKVCDnBPMjv9keqcD6T1VvCS5d7Qv 2BrLu6NaJTbjAh6in3ZZC+oDRrIqwbyHeJfofhNKPM0tfWs+vKCXQ8I/4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPTbfYF/Ax4vdC0+LTJTmdJuiCaMB8GA1UdIwQY MBaAFKXUpaXRTIo7jLlNHLRsDW4qHEhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTIt MjJjMDhkY2JmNTcyLzEvUTlOdDlnWDhESGk5MExUNHRNbE9aMG02SUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82ZDg1ZWEtZjc0YS00NjRiLWI0YTItMjJjMDhkY2JmNTcy LzEvcGRTbHBkRk1panVNdVUwY3RHd05iaW9jU0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubmsMA0G CSqGSIb3DQEBCwUAA4IBAQCA/uMRd3RmUaEO+Uyr00lBI3h0n2dtjSSs0McFvg3W Ku7q+DOtStLCkcQBy1uNur1WU6Foyeo2bAJ2QAX5SDsRbv0xpyouN7UIez8xtD0U ZqL60O/gAng2H/BsnGilZoyOb2aOrWQpo0LAR/p5HAUwml2WyUUMXk+BWPMclR9P lE9MIiilQO3gu3yexEthuwCBN8ANpbjcwKzHlt/o1BY8rQc7Vc31T11LzXyzzuVY EPs06kqP1zUX2mVi5K587X+eByzRsHGhGl/urXbYy/dkfud8ZDRpzohdJk2E0Hov D67qWR5l55UahH2jBdTQrhAlSy2UmBqa50RfOtPjOmJD -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:12 2026 by rpki-client