This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/R9ygrs2HQAtVQtcaZVu-dTXrCYk.roa File: R9ygrs2HQAtVQtcaZVu-dTXrCYk.roa (raw, json) Hash identifier: 0HmtZ9l4leo/3Gwg/43c5IyXs8a6XOT9tX3GF2i1ZMo= Subject key identifier: 47:DC:A0:AE:CD:87:40:0B:55:42:D7:1A:65:5B:BE:75:35:EB:09:89 Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab Certificate serial: 019B7910AF7DFD9BE6D438E688B127F2FD83 Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/R9ygrs2HQAtVQtcaZVu-dTXrCYk.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8218 IP address blocks: 185.75.241.0/24 maxlen: 24 2a05:5504::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:af:7d:fd:9b:e6:d4:38:e6:88:b1:27:f2:fd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47dca0aecd87400b5542d71a655bbe7535eb0989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:02:ac:09:2c:08:c6:54:0f:38:57:64:3a: 75:e9:d5:43:22:24:22:a0:26:0a:cb:dc:00:ca:92: b1:b4:67:40:23:84:d2:77:91:8a:bf:e1:b7:f1:e7: e2:78:6e:0c:f0:1a:d4:84:0a:a1:8e:d8:75:68:0c: f8:b5:70:ab:36:64:79:6e:1f:12:1e:f0:e4:f5:72: ea:a7:4f:8b:b6:f2:56:bc:dd:c5:0c:c9:da:2c:6a: e2:52:f4:8d:08:81:e7:4d:46:e2:85:9d:34:70:55: ad:5b:d6:76:2d:79:ef:0f:87:ad:77:86:54:8e:48: 02:23:5f:5a:d5:3b:b2:57:ab:21:7b:fa:41:c2:32: 3e:cd:b6:63:5c:1d:16:36:ae:c4:33:a4:0e:d4:e2: fd:f5:83:2e:d6:d3:aa:b0:54:80:05:47:93:b9:9a: fa:b8:0f:e0:8e:17:6a:98:fd:3d:d1:8f:8f:68:ad: 12:37:23:59:fe:2c:82:67:46:7d:12:c4:85:dd:24: ec:cc:f7:52:62:59:77:f5:e1:70:8b:94:e8:67:99: f9:e9:4e:c8:bd:78:29:73:e8:a7:dc:bf:c8:f6:8e: 71:9f:e5:23:c5:bc:36:cc:bd:b9:03:47:3e:86:80: 91:76:6e:29:d3:e3:59:4b:8f:c3:22:89:dc:e7:3e: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:A0:AE:CD:87:40:0B:55:42:D7:1A:65:5B:BE:75:35:EB:09:89 X509v3 Authority Key Identifier: keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/R9ygrs2HQAtVQtcaZVu-dTXrCYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.241.0/24 IPv6: 2a05:5504::/32 Signature Algorithm: sha256WithRSAEncryption 08:83:1f:12:60:df:9b:56:e7:2b:d0:ee:ee:52:7d:65:f7:d1: 79:5a:14:bb:34:39:6a:5f:f7:08:fc:d5:00:6a:a3:22:ea:15: f1:4d:bb:0e:c1:d0:41:86:29:53:27:0c:a3:6a:d4:06:2c:8d: 35:5b:a6:6c:94:fc:d8:c3:4a:6b:79:07:37:6c:a6:d9:06:91: 78:0b:55:54:13:14:22:09:06:b2:9a:c8:e2:36:94:a1:77:74: 69:7f:e9:1c:85:6a:a5:5c:63:e3:0d:03:dd:75:1d:0c:68:66: 7d:f4:a6:cf:da:80:e2:db:73:a2:71:11:fb:da:d6:34:30:59: c9:6a:c0:14:0f:89:56:8c:48:85:46:7f:97:7c:9d:ed:72:3a: 21:f1:b7:a1:dc:46:dc:56:d4:76:36:c4:23:7b:88:d7:c6:ca: 41:82:cb:68:c5:90:92:c2:de:20:00:86:41:f5:31:53:75:2a: 65:c9:49:d0:79:21:1c:29:52:1f:88:57:5e:da:11:45:2d:0d: 30:8a:ec:b4:5c:03:c5:a1:33:f7:9a:67:d8:e8:94:0b:bb:dc: eb:ce:a6:a0:e6:ba:25:fa:ef:52:bc:4e:59:c6:bf:fb:f6:e2: 6b:10:4d:bb:63:91:e1:6a:bc:26:2a:1f:7d:15:c5:4a:d0:9c: 40:41:6a:10 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EK99/Zvm1DjmiLEn8v2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNjQ2OTFjMzE4OTJjYzk5MWFkNGU5YTk2NzExNDc3NTll NDE3YWIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RjYTBhZWNkODc0MDBiNTU0MmQ3MWE2NTViYmU3NTM1ZWIwOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EwCrAksCMZUDzhXZDp16dVDIiQi oCYKy9wAypKxtGdAI4TSd5GKv+G38efieG4M8BrUhAqhjth1aAz4tXCrNmR5bh8S HvDk9XLqp0+LtvJWvN3FDMnaLGriUvSNCIHnTUbihZ00cFWtW9Z2LXnvD4etd4ZU jkgCI19a1TuyV6she/pBwjI+zbZjXB0WNq7EM6QO1OL99YMu1tOqsFSABUeTuZr6 uA/gjhdqmP090Y+PaK0SNyNZ/iyCZ0Z9EsSF3STszPdSYll39eFwi5ToZ5n56U7I vXgpc+in3L/I9o5xn+Ujxbw2zL25A0c+hoCRdm4p0+NZS4/DIonc5z7rBQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEfcoK7Nh0ALVULXGmVbvnU16wmJMB8GA1UdIwQY MBaAFO1kaRwxiSzJka1OmpZxFHdZ5BerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjIt N2M3ZGIyMTIzMGEzLzEvUjl5Z3JzMkhRQXRWUXRjYVpWdS1kVFhyQ1lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjItN2M3ZGIyMTIzMGEz LzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUvxMA0E AgACMAcDBQAqBVUEMA0GCSqGSIb3DQEBCwUAA4IBAQAIgx8SYN+bVucr0O7uUn1l 99F5WhS7NDlqX/cI/NUAaqMi6hXxTbsOwdBBhilTJwyjatQGLI01W6ZslPzYw0pr eQc3bKbZBpF4C1VUExQiCQaymsjiNpShd3Rpf+kchWqlXGPjDQPddR0MaGZ99KbP 2oDi23OicRH72tY0MFnJasAUD4lWjEiFRn+XfJ3tcjoh8beh3EbcVtR2NsQje4jX xspBgstoxZCSwt4gAIZB9TFTdSplyUnQeSEcKVIfiFde2hFFLQ0wiuy0XAPFoTP3 mmfY6JQLu9zrzqag5rol+u9SvE5Zxr/79uJrEE27Y5HharwmKh99FcVK0JxAQWoQ -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:34 2026 by rpki-client