This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa File: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (raw, json) Hash identifier: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g= Subject key identifier: 03:D4:5F:42:90:4A:E0:B9:A2:E9:39:B1:D0:27:A3:40:9D:E2:FF:A8 Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52 Certificate serial: 019B76EBA642B42F96C72F1F4BE519B27242 Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198785 IP address blocks: 185.155.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a6:42:b4:2f:96:c7:2f:1f:4b:e5:19:b2:72:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03d45f42904ae0b9a2e939b1d027a3409de2ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:48:e6:c5:20:74:59:79:43:5d:86:4b:8c: 11:ff:78:85:42:f2:03:0f:69:d1:2a:f0:39:f5:2d: 1e:10:d8:f6:f0:fc:fa:2e:65:e4:fa:e3:5b:35:32: 95:dd:4a:c6:37:84:75:79:b0:40:51:e2:ac:59:09: 2e:8a:bc:6a:1c:6d:b3:f1:6b:1c:58:1c:30:1d:72: 81:49:cd:1e:42:27:b5:37:72:98:54:d2:a0:ff:0f: 9c:1b:d9:1a:4b:59:ff:68:f5:da:e6:40:00:e2:19: 39:e3:c6:55:81:66:f8:a1:7f:97:fe:06:98:36:9d: d4:2a:b7:e3:ed:17:d4:71:37:2f:c6:8b:be:d3:25: 3e:e6:47:7e:51:db:7b:fe:c8:c5:b7:55:c7:bc:16: 5f:16:0b:64:91:14:b8:66:42:16:23:59:38:a4:0c: d2:a4:0c:9e:95:03:85:0e:8e:bf:99:fa:19:5d:63: fa:f3:c8:5e:a2:9d:4e:6b:f7:fe:92:30:5d:8e:b1: 0f:89:71:88:d1:8c:32:5e:8a:da:d5:a4:c5:e4:12: d8:1c:52:88:0d:d2:ef:dd:9a:1e:62:32:86:50:49: f8:9b:0f:eb:54:7d:4f:1e:25:81:db:c5:67:c2:e4: cb:d8:8e:88:7d:e9:61:8a:0f:ad:46:90:49:3b:7c: db:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D4:5F:42:90:4A:E0:B9:A2:E9:39:B1:D0:27:A3:40:9D:E2:FF:A8 X509v3 Authority Key Identifier: keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.226.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:9d:7e:7d:f6:65:62:82:65:c6:33:9c:1f:d5:9d:62:8a:58: 2f:6a:b3:bc:c1:bf:d7:20:1a:c1:65:dd:f4:41:dd:98:a0:17: b8:bc:f0:a5:30:21:32:e4:2b:2d:21:31:99:26:4c:ab:b1:1a: 7d:24:9c:65:57:31:10:1d:b0:34:a5:09:17:93:7d:bb:00:5e: db:af:3b:b2:e9:68:f9:ea:7e:96:c0:28:f7:a9:93:99:0f:8e: 4d:06:44:4e:d4:7f:04:d9:e9:e9:d1:d1:f7:47:87:12:1e:8a: de:5f:75:2a:11:c0:b4:83:fa:93:7f:22:6b:70:f3:f8:45:3c: 8e:a1:16:fa:fb:2e:e1:84:39:be:e0:e0:a4:9d:d4:35:30:fc: 28:ba:46:a5:ff:b5:68:f9:d5:84:26:6b:8a:54:ad:93:20:6c: 8d:19:fc:6a:00:62:44:67:6d:f0:7f:76:11:97:62:e9:45:8c: 2c:bf:1d:93:ec:0f:86:66:73:d6:08:26:9a:af:31:35:a3:53: 5e:1c:c9:c1:07:68:9d:fd:9c:96:d8:31:51:07:88:ce:69:b8: 1d:96:a4:66:ec:96:5e:0e:63:8f:27:5a:aa:8b:6a:48:96:ed: a6:66:11:49:b2:be:8c:68:a6:59:88:7a:59:9e:4a:01:e0:c1: c8:f2:ba:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266ZCtC+Wxy8fS+UZsnJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj MGRhNTIwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2Q0NWY0MjkwNGFlMGI5YTJlOTM5YjFkMDI3YTM0MDlkZTJmZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKhI5sUgdFl5Q12GS4wR/3iFQvID D2nRKvA59S0eENj28Pz6LmXk+uNbNTKV3UrGN4R1ebBAUeKsWQkuirxqHG2z8Wsc WBwwHXKBSc0eQie1N3KYVNKg/w+cG9kaS1n/aPXa5kAA4hk548ZVgWb4oX+X/gaY Np3UKrfj7RfUcTcvxou+0yU+5kd+Udt7/sjFt1XHvBZfFgtkkRS4ZkIWI1k4pAzS pAyelQOFDo6/mfoZXWP688heop1Oa/f+kjBdjrEPiXGI0YwyXora1aTF5BLYHFKI DdLv3ZoeYjKGUEn4mw/rVH1PHiWB28VnwuTL2I6Ifelhig+tRpBJO3zbOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPUX0KQSuC5ouk5sdAno0Cd4v+oMB8GA1UdIwQY MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt MGU2YzFmZTlkMDE1LzEvQTlSZlFwQks0TG1pNlRteDBDZWpRSjNpXzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1 LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZviMA0G CSqGSIb3DQEBCwUAA4IBAQBLnX599mVigmXGM5wf1Z1iilgvarO8wb/XIBrBZd30 Qd2YoBe4vPClMCEy5CstITGZJkyrsRp9JJxlVzEQHbA0pQkXk327AF7brzuy6Wj5 6n6WwCj3qZOZD45NBkRO1H8E2enp0dH3R4cSHoreX3UqEcC0g/qTfyJrcPP4RTyO oRb6+y7hhDm+4OCkndQ1MPwoukal/7Vo+dWEJmuKVK2TIGyNGfxqAGJEZ23wf3YR l2LpRYwsvx2T7A+GZnPWCCaarzE1o1NeHMnBB2id/ZyW2DFRB4jOabgdlqRm7JZe DmOPJ1qqi2pIlu2mZhFJsr6MaKZZiHpZnkoB4MHI8rrW -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:41 2026 by rpki-client