This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa File: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (raw, json) Hash identifier: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA= Subject key identifier: F6:26:3C:CD:93:36:19:2C:8F:4F:89:85:F1:A2:61:31:2E:4F:33:C6 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B7834408B8F4EA2539687EB5F7D29E099 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59692 IP address blocks: 185.9.185.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:40:8b:8f:4e:a2:53:96:87:eb:5f:7d:29:e0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6263ccd9336192c8f4f8985f1a261312e4f33c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:36:ec:37:65:d9:54:fd:8b:b9:1e:c3:3f: 20:02:bc:49:52:54:32:f0:6d:40:c9:69:7a:36:1e: a1:9c:35:d0:91:8d:fe:e5:0b:8b:6b:e9:ab:7b:ff: 32:9f:37:20:40:9e:a0:4f:30:98:e3:a8:64:92:fa: 7c:a8:06:db:8f:b9:26:ce:f4:a3:df:0f:ad:0a:6e: 48:30:3b:5d:c8:16:dc:8b:f8:fa:79:b4:e3:92:79: 2d:19:c6:aa:6d:4b:00:2c:75:52:0e:5d:7f:60:20: f8:72:36:2d:92:32:46:01:49:36:fd:ff:f1:f7:d1: 7b:5c:76:7e:e6:a7:0d:fd:44:dc:d6:1f:cd:11:80: 77:39:79:2a:87:ef:04:a6:41:b3:06:a3:bf:d9:02: 1c:f4:f3:0d:15:09:63:53:c2:73:b2:2a:21:0f:4b: 13:a7:dc:4e:06:cd:7f:95:67:fc:4f:e0:ea:60:c6: 57:e9:e8:93:c3:d0:dd:ce:1d:aa:32:a4:45:fb:ef: 0b:cd:83:09:6d:6d:d9:e6:74:96:9d:d5:2a:47:20: 35:8f:74:85:d5:c0:fc:92:6f:e7:5a:b0:ef:83:b4: 6b:44:83:24:9c:85:4a:99:8a:e4:cd:85:3a:c2:ea: 23:b3:a5:72:71:5f:0d:da:41:ef:3e:06:c5:96:0e: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:26:3C:CD:93:36:19:2C:8F:4F:89:85:F1:A2:61:31:2E:4F:33:C6 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.185.0/24 Signature Algorithm: sha256WithRSAEncryption 84:25:54:83:d9:6b:d9:02:03:cb:7c:eb:1f:0d:d0:28:27:0e: d8:40:b9:9d:4a:5f:f2:0b:d2:6c:32:76:21:b7:8a:c1:6d:65: c1:99:36:95:5c:24:22:6c:f1:b5:e6:b4:98:6e:3f:4e:50:4c: 66:01:97:0e:35:b4:a4:bf:15:ae:b4:e9:6d:1e:4b:4f:bd:5e: fc:52:92:77:2d:32:40:05:fe:13:38:94:52:96:b9:98:0d:c8: f5:71:36:74:01:74:c3:e0:a3:49:12:5a:40:e7:7b:3f:8d:5e: 9b:ad:5c:3b:97:ae:a1:3e:a3:f7:25:89:6f:7d:c6:18:30:24: 89:2b:ac:16:42:d1:f4:78:b8:b6:ef:c4:4b:7f:c5:ac:5a:c3: 95:f8:78:6b:18:d5:85:35:6f:c5:6c:55:17:c9:29:01:38:fd: 88:7f:ce:4d:97:78:25:4c:c5:1a:d8:b7:24:95:e4:e0:82:c8: 30:0e:fd:35:cd:49:0d:96:46:b2:39:08:cc:9d:9e:54:24:5a: 76:e1:32:86:d8:04:fb:0d:d5:ed:11:58:02:7d:aa:1f:06:4c: 6e:39:7e:86:0a:e1:e4:7f:f3:5b:52:51:ef:87:87:84:f5:0c: d3:ca:87:c9:50:81:53:fe:34:e5:bc:b9:dd:f0:21:a1:b7:f7: 58:86:79:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NECLj06iU5aH6199KeCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjI2M2NjZDkzMzYxOTJjOGY0Zjg5ODVmMWEyNjEzMTJlNGYzM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+g27Ddl2VT9i7kewz8gArxJUlQy 8G1AyWl6Nh6hnDXQkY3+5QuLa+mre/8ynzcgQJ6gTzCY46hkkvp8qAbbj7kmzvSj 3w+tCm5IMDtdyBbci/j6ebTjknktGcaqbUsALHVSDl1/YCD4cjYtkjJGAUk2/f/x 99F7XHZ+5qcN/UTc1h/NEYB3OXkqh+8EpkGzBqO/2QIc9PMNFQljU8JzsiohD0sT p9xOBs1/lWf8T+DqYMZX6eiTw9Ddzh2qMqRF++8LzYMJbW3Z5nSWndUqRyA1j3SF 1cD8km/nWrDvg7RrRIMknIVKmYrkzYU6wuojs6VycV8N2kHvPgbFlg6qVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYmPM2TNhksj0+JhfGiYTEuTzPGMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvOWlZOHpaTTJHU3lQVDRtRjhhSmhNUzVQTThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQm5MA0G CSqGSIb3DQEBCwUAA4IBAQCEJVSD2WvZAgPLfOsfDdAoJw7YQLmdSl/yC9JsMnYh t4rBbWXBmTaVXCQibPG15rSYbj9OUExmAZcONbSkvxWutOltHktPvV78UpJ3LTJA Bf4TOJRSlrmYDcj1cTZ0AXTD4KNJElpA53s/jV6brVw7l66hPqP3JYlvfcYYMCSJ K6wWQtH0eLi278RLf8WsWsOV+HhrGNWFNW/FbFUXySkBOP2If85Nl3glTMUa2Lck leTggsgwDv01zUkNlkayOQjMnZ5UJFp24TKG2AT7DdXtEVgCfaofBkxuOX6GCuHk f/NbUlHvh4eE9QzTyofJUIFT/jTlvLnd8CGht/dYhnmI -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:21 2026 by rpki-client