This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/9i2FNq-ilnO82a12KCx8bZf9uj0.roa File: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (raw, json) Hash identifier: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE= Subject key identifier: F6:2D:85:36:AF:A2:96:73:BC:D9:AD:76:28:2C:7C:6D:97:FD:BA:3D Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Certificate serial: 019B7B367094607C61CA5EB03E15133C5668 Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/9i2FNq-ilnO82a12KCx8bZf9uj0.roa Signing time: Thu 01 Jan 2026 20:18:43 +0000 ROA not before: Thu 01 Jan 2026 20:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47543 IP address blocks: 185.29.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:70:94:60:7c:61:ca:5e:b0:3e:15:13:3c:56:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Validity Not Before: Jan 1 20:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f62d8536afa29673bcd9ad76282c7c6d97fdba3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a5:5f:4d:95:92:71:88:29:92:9d:bb:97:3d: 23:a2:22:b3:52:5a:a4:db:91:e7:e1:9c:d1:76:7e: 5f:53:44:3d:fb:9c:24:24:67:8c:b0:e3:b7:bb:94: 6a:25:33:28:ca:50:f1:9e:43:74:2b:63:de:63:e4: 80:83:6e:b6:49:30:79:ea:ba:73:00:f7:5a:63:98: be:1f:10:25:95:c6:03:89:45:43:db:83:23:33:d5: a6:e5:a8:5e:07:d8:41:9b:58:68:9c:e8:c8:fc:c2: 8b:52:0b:ab:11:c2:ca:84:46:68:c7:3b:cf:3f:d5: 83:a5:f7:6d:f4:93:df:56:a3:11:c7:e9:3e:b9:1e: 52:16:4d:e6:22:d7:fe:16:e2:e1:94:ce:1e:85:09: 65:7f:c4:22:4d:97:d7:ff:a0:2b:f1:b9:80:43:fb: 39:c0:7b:d7:6b:db:88:8c:b0:0e:58:a6:23:51:a6: 62:7c:c6:d2:01:a9:73:98:9b:bb:45:45:fc:dd:8f: 0f:9f:1a:71:70:44:23:cc:4a:be:07:ae:f5:87:bd: d8:ef:36:7f:93:55:0b:51:40:29:b6:c8:d3:0c:2b: b5:52:35:3e:80:b8:3a:e8:60:1f:5f:56:22:42:46: f8:98:94:b0:cb:af:79:38:f2:09:6c:89:c0:b3:63: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2D:85:36:AF:A2:96:73:BC:D9:AD:76:28:2C:7C:6D:97:FD:BA:3D X509v3 Authority Key Identifier: keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/9i2FNq-ilnO82a12KCx8bZf9uj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.133.0/24 Signature Algorithm: sha256WithRSAEncryption 60:dc:b4:e1:d7:2d:86:49:bd:9a:48:32:71:c4:a7:52:a4:54: 30:91:72:6c:34:c9:5a:2b:56:29:6e:7e:95:ce:4b:b4:89:aa: cc:5c:92:16:84:af:50:0a:69:3b:e6:45:4e:5d:80:07:c5:47: 1a:b4:fc:52:a9:b8:0b:2a:ed:d6:67:d8:ee:42:85:c0:a3:72: b7:bf:c9:d6:fe:b0:ec:b8:96:fd:1e:20:62:79:34:4a:3e:8d: 0c:dd:0e:5c:be:53:c7:11:a3:05:bf:0b:a3:6e:79:b6:29:fa: bf:54:f7:e4:ed:64:df:68:22:0f:d7:45:b2:b4:9c:5c:71:7f: 4a:65:3b:c5:ce:22:66:ce:86:06:8c:d7:45:17:c5:ac:ee:48: 1f:93:91:03:a3:99:65:71:95:c1:9a:d3:e7:c4:16:00:84:48: 97:a7:5b:fa:11:96:73:5a:f1:6a:9a:c6:83:b4:a0:0b:32:4b: d4:34:19:1c:e1:6e:aa:a4:15:d8:d4:71:84:a6:63:c8:a6:b1: 71:c8:68:65:14:bb:c2:a8:1e:43:a5:fd:95:a4:c4:08:ae:4c: c9:c4:ac:b1:dd:6d:17:73:ea:56:27:f9:28:1c:1e:70:c5:8d: 72:45:19:27:dc:7a:7c:3f:c8:8d:4b:05:dd:51:03:5e:b2:ba: 7b:d3:48:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnCUYHxhyl6wPhUTPFZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi ZjBhOTEwHhcNMjYwMTAxMjAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjJkODUzNmFmYTI5NjczYmNkOWFkNzYyODJjN2M2ZDk3ZmRiYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqVfTZWScYgpkp27lz0joiKzUlqk 25Hn4ZzRdn5fU0Q9+5wkJGeMsOO3u5RqJTMoylDxnkN0K2PeY+SAg262STB56rpz APdaY5i+HxAllcYDiUVD24MjM9Wm5aheB9hBm1honOjI/MKLUgurEcLKhEZoxzvP P9WDpfdt9JPfVqMRx+k+uR5SFk3mItf+FuLhlM4ehQllf8QiTZfX/6Ar8bmAQ/s5 wHvXa9uIjLAOWKYjUaZifMbSAalzmJu7RUX83Y8PnxpxcEQjzEq+B671h73Y7zZ/ k1ULUUAptsjTDCu1UjU+gLg66GAfX1YiQkb4mJSwy695OPIJbInAs2MUrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYthTavopZzvNmtdigsfG2X/bo9MB8GA1UdIwQY MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct MGUxZWZkNWEzNzQ2LzEvOWkyRk5xLWlsbk84MmExMktDeDhiWmY5dWowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2 LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR2FMA0G CSqGSIb3DQEBCwUAA4IBAQBg3LTh1y2GSb2aSDJxxKdSpFQwkXJsNMlaK1Ypbn6V zku0iarMXJIWhK9QCmk75kVOXYAHxUcatPxSqbgLKu3WZ9juQoXAo3K3v8nW/rDs uJb9HiBieTRKPo0M3Q5cvlPHEaMFvwujbnm2Kfq/VPfk7WTfaCIP10WytJxccX9K ZTvFziJmzoYGjNdFF8Ws7kgfk5EDo5llcZXBmtPnxBYAhEiXp1v6EZZzWvFqmsaD tKALMkvUNBkc4W6qpBXY1HGEpmPIprFxyGhlFLvCqB5Dpf2VpMQIrkzJxKyx3W0X c+pWJ/koHB5wxY1yRRkn3Hp8P8iNSwXdUQNesrp700gX -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:08 2026 by rpki-client