This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/kt9wkvMfUjDBISQAMhIZ_H3acrA.roa File: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (raw, json) Hash identifier: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo= Subject key identifier: 92:DF:70:92:F3:1F:52:30:C1:21:24:00:32:12:19:FC:7D:DA:72:B0 Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86 Certificate serial: 019B7DCB065AF7FAEA8EFF0DAFFD24F469DE Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/kt9wkvMfUjDBISQAMhIZ_H3acrA.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60118 IP address blocks: 185.150.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:06:5a:f7:fa:ea:8e:ff:0d:af:fd:24:f4:69:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92df7092f31f5230c1212400321219fc7dda72b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:d4:1a:78:90:57:f7:5c:3c:88:be:54:11: cc:e8:d6:c0:33:50:16:c2:ea:80:d9:2e:3b:c9:6d: dc:71:5c:d5:ee:8b:15:57:ca:b7:42:3d:ba:bd:63: 95:41:51:83:16:db:8a:35:8a:96:31:9d:03:f1:f3: 00:e9:2c:8f:bf:1a:2c:53:e4:e0:e5:be:00:f5:92: 48:3f:89:38:6f:79:5e:c5:4a:f1:73:17:c1:5c:05: 5b:f7:7b:94:fe:a5:24:13:62:42:ec:c3:b5:fa:29: f6:b0:c4:95:1e:fa:e3:01:a4:c8:7f:6b:35:a5:46: 03:4b:74:ba:0e:43:74:f6:07:5d:56:9f:eb:7b:3b: 95:e1:4d:b7:80:f5:f4:8d:96:d7:c4:97:9b:19:36: 42:6d:0d:90:61:94:7c:21:30:85:d1:67:3a:a2:a6: 84:d1:c2:15:b9:a7:4f:a7:f6:e9:e3:c3:97:98:c1: c5:78:d3:82:04:9e:18:e0:18:e4:0c:05:1b:23:03: 4c:d8:5e:5d:5a:4f:2e:6d:c1:77:3a:62:7d:f0:ba: 73:ae:ee:9a:35:ed:7e:dc:bc:4f:03:f4:30:a4:c8: 86:1b:65:47:ca:9e:df:b5:6c:96:54:de:9f:bc:bf: 2d:91:c9:48:5e:5d:8d:71:a7:88:b2:1b:9c:a8:1b: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DF:70:92:F3:1F:52:30:C1:21:24:00:32:12:19:FC:7D:DA:72:B0 X509v3 Authority Key Identifier: keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/kt9wkvMfUjDBISQAMhIZ_H3acrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.17.0/24 Signature Algorithm: sha256WithRSAEncryption 91:b4:6b:18:80:2e:ba:74:02:fd:f5:ac:ff:10:1f:48:bc:1b: 7c:a4:61:74:fd:49:34:ce:bd:f7:c7:52:eb:82:9a:9a:d6:8b: 2b:d3:3e:e0:dc:d1:d5:94:24:df:10:24:4a:c2:51:57:d7:9c: cf:a6:0e:a2:f0:3d:fe:b3:8e:bb:85:0d:54:b5:69:ee:2d:07: 06:14:b2:ab:18:4d:76:df:de:e2:85:6b:45:da:25:d7:9f:a7: 3c:c8:67:dc:8c:4d:0b:38:40:f1:15:73:21:39:9b:87:6f:22: 4a:b5:a2:36:09:f9:d8:92:37:63:55:31:3b:ac:b4:ec:ad:48: 69:a2:85:b7:aa:a7:b9:00:8b:e8:82:c9:92:60:62:1e:06:31: c8:3e:34:e1:27:ee:df:1f:61:61:10:fc:14:86:04:20:27:53: e7:a0:50:9c:35:50:8f:5c:f1:60:1f:ef:a1:2e:e6:08:a8:c1: 55:af:24:10:b6:0b:48:80:e5:a8:88:c4:03:24:4c:8d:50:01: b7:62:cc:92:e4:eb:c1:4a:aa:6a:06:68:f6:c3:f9:57:a6:b7: 6a:f0:77:67:fa:4c:2c:f2:e5:c3:a3:75:4e:c5:d2:fb:e9:0f: 23:72:47:84:52:3e:00:81:bf:29:44:d1:3d:2a:fc:db:07:5d: ca:c7:e5:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywZa9/rqjv8Nr/0k9GneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTk3NThhMDg3ODc2ODE2ZGMxOTM2MWVhZjFlOTQxMmRl NzNmODYwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmRmNzA5MmYzMWY1MjMwYzEyMTI0MDAzMjEyMTlmYzdkZGE3MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDUGniQV/dcPIi+VBHM6NbAM1AW wuqA2S47yW3ccVzV7osVV8q3Qj26vWOVQVGDFtuKNYqWMZ0D8fMA6SyPvxosU+Tg 5b4A9ZJIP4k4b3lexUrxcxfBXAVb93uU/qUkE2JC7MO1+in2sMSVHvrjAaTIf2s1 pUYDS3S6DkN09gddVp/rezuV4U23gPX0jZbXxJebGTZCbQ2QYZR8ITCF0Wc6oqaE 0cIVuadPp/bp48OXmMHFeNOCBJ4Y4BjkDAUbIwNM2F5dWk8ubcF3OmJ98Lpzru6a Ne1+3LxPA/QwpMiGG2VHyp7ftWyWVN6fvL8tkclIXl2NcaeIshucqBtYYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJLfcJLzH1IwwSEkADISGfx92nKwMB8GA1UdIwQY MBaAFJsZdYoIeHaBbcGTYerx6UEt5z+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTkt NDEzZGE2NjdhOGJlLzEva3Q5d2t2TWZVakRCSVNRQU1oSVpfSDNhY3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTktNDEzZGE2NjdhOGJl LzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZYRMA0G CSqGSIb3DQEBCwUAA4IBAQCRtGsYgC66dAL99az/EB9IvBt8pGF0/Uk0zr33x1Lr gpqa1osr0z7g3NHVlCTfECRKwlFX15zPpg6i8D3+s467hQ1UtWnuLQcGFLKrGE12 397ihWtF2iXXn6c8yGfcjE0LOEDxFXMhOZuHbyJKtaI2CfnYkjdjVTE7rLTsrUhp ooW3qqe5AIvogsmSYGIeBjHIPjThJ+7fH2FhEPwUhgQgJ1PnoFCcNVCPXPFgH++h LuYIqMFVryQQtgtIgOWoiMQDJEyNUAG3YsyS5OvBSqpqBmj2w/lXprdq8Hdn+kws 8uXDo3VOxdL76Q8jckeEUj4Agb8pRNE9KvzbB13Kx+WH -----END CERTIFICATE-----Generated at Mon Jan 26 05:00:49 2026 by rpki-client