This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/i9flexhqEx97Z222ccLMRbXDEPw.roa File: i9flexhqEx97Z222ccLMRbXDEPw.roa (raw, json) Hash identifier: cP6+pJWqNAU5sBFt3VG0uM4nPQdnX2iy8esua5Kcm58= Subject key identifier: 8B:D7:E5:7B:18:6A:13:1F:7B:67:6D:B6:71:C2:CC:45:B5:C3:10:FC Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5 Certificate serial: 019B7C7F6EEE65F77205E7C4314B22B52423 Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/i9flexhqEx97Z222ccLMRbXDEPw.roa Signing time: Fri 02 Jan 2026 02:18:04 +0000 ROA not before: Fri 02 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25795 IP address blocks: 185.139.32.0/23 maxlen: 24 2a07:12c0::/29 maxlen: 29 2a07:12c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6e:ee:65:f7:72:05:e7:c4:31:4b:22:b5:24:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5 Validity Not Before: Jan 2 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd7e57b186a131f7b676db671c2cc45b5c310fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:a4:97:0c:eb:83:57:03:39:c2:31:35:98: f3:6b:d9:22:61:dd:41:5c:90:46:c3:b5:20:a3:17: a8:87:ab:d6:ee:5d:ba:7d:4b:75:b5:c1:25:77:70: f9:e1:75:92:de:25:20:3a:01:36:7b:d9:00:b7:9d: 7c:2b:19:75:14:8e:f7:8a:4e:6c:88:df:ca:06:38: 2a:43:ee:e3:98:ff:24:c4:90:49:c8:87:ef:2f:57: 0e:45:9c:ad:2d:92:12:f4:9d:1d:60:bd:0f:72:66: 07:88:7d:f3:6b:fa:c7:70:71:43:9d:e1:b7:32:c0: af:af:15:b0:82:ea:a9:c8:98:85:3e:8a:63:29:ca: a9:30:93:3e:9f:89:1a:c2:c9:f9:56:35:31:66:22: 8a:23:92:63:23:ad:66:ac:40:4c:1f:ac:09:f6:5f: 76:33:ca:0b:44:81:29:6f:be:2f:38:e4:ad:62:74: e8:07:9a:a1:b0:d6:f8:1d:df:c7:6c:31:3c:3d:9d: d7:0e:77:6e:34:80:de:31:4c:7e:72:87:f8:59:0b: 12:12:31:2d:b2:ae:11:c7:84:eb:f0:8d:39:74:75: b2:68:d5:5a:08:87:9f:5b:72:10:a9:64:62:b9:1d: b8:42:89:02:64:c3:70:50:3b:85:91:ed:94:4e:27: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:E5:7B:18:6A:13:1F:7B:67:6D:B6:71:C2:CC:45:B5:C3:10:FC X509v3 Authority Key Identifier: keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/i9flexhqEx97Z222ccLMRbXDEPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.32.0/23 IPv6: 2a07:12c0::/29 Signature Algorithm: sha256WithRSAEncryption 12:e6:07:b7:df:38:ab:ff:36:0e:ba:b3:ca:dc:83:61:e4:c0: 1b:7e:04:d4:b5:e5:5b:70:a0:fb:04:f4:05:49:90:30:b3:a3: bd:73:15:7f:b3:77:76:3b:60:01:15:69:73:f2:1b:13:d4:6b: 45:2a:69:83:4c:f7:a2:03:5a:e1:6c:9f:c1:f1:db:47:dc:23: f6:bb:9b:9b:37:cb:86:5b:7e:28:17:53:09:fb:67:31:27:cd: 06:5c:e9:e2:18:b6:0c:25:94:dd:d9:4f:2c:1e:7f:a3:13:0b: 9a:3c:a1:9b:3a:9f:69:b5:f3:ee:5f:0d:83:44:61:6a:65:e7: e2:ff:5d:62:88:a2:9a:3e:1f:42:7a:34:6f:b4:c7:a4:53:b2: 5e:13:d8:ce:cd:81:f5:28:c9:fb:84:b3:08:94:7a:c0:82:ad: a9:75:d7:de:ef:e7:9d:e5:4e:7b:75:5a:0d:2a:88:90:94:c3: 9e:de:6d:4b:15:38:82:f3:19:99:81:18:5c:00:b3:8a:17:2b: 60:c6:d3:95:d6:84:14:59:f1:2c:95:5d:7d:f6:c9:9e:92:5b: 4c:11:ef:77:26:32:98:33:a3:96:77:4d:bb:62:c2:0e:1c:72: b1:16:cb:e3:2e:cf:99:ab:48:83:65:3b:63:47:98:df:16:97: b9:5e:7c:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f27uZfdyBefEMUsitSQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NzYyZGIxMjgyZmZkMDg0NzYxMjMyMDM4ZjgxZjVkMjll NjQwZDUwHhcNMjYwMTAyMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQ3ZTU3YjE4NmExMzFmN2I2NzZkYjY3MWMyY2M0NWI1YzMxMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIeklwzrg1cDOcIxNZjza9kiYd1B XJBGw7Ugoxeoh6vW7l26fUt1tcEld3D54XWS3iUgOgE2e9kAt518Kxl1FI73ik5s iN/KBjgqQ+7jmP8kxJBJyIfvL1cORZytLZIS9J0dYL0PcmYHiH3za/rHcHFDneG3 MsCvrxWwguqpyJiFPopjKcqpMJM+n4kawsn5VjUxZiKKI5JjI61mrEBMH6wJ9l92 M8oLRIEpb74vOOStYnToB5qhsNb4Hd/HbDE8PZ3XDnduNIDeMUx+cof4WQsSEjEt sq4Rx4Tr8I05dHWyaNVaCIefW3IQqWRiuR24QokCZMNwUDuFke2UTieMGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIvX5XsYahMfe2dttnHCzEW1wxD8MB8GA1UdIwQY MBaAFLl2LbEoL/0IR2EjIDj4H10p5kDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQt NzBhNTU2YmE4YTExLzEvaTlmbGV4aHFFeDk3WjIyMmNjTE1SYlhERVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mODE5MTUtNDA1ZS00YjU0LTljYjQtNzBhNTU2YmE4YTEx LzEvdVhZdHNTZ3ZfUWhIWVNNZ09QZ2ZYU25tUU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuYsgMA0E AgACMAcDBQMqBxLAMA0GCSqGSIb3DQEBCwUAA4IBAQAS5ge33zir/zYOurPK3INh 5MAbfgTUteVbcKD7BPQFSZAws6O9cxV/s3d2O2ABFWlz8hsT1GtFKmmDTPeiA1rh bJ/B8dtH3CP2u5ubN8uGW34oF1MJ+2cxJ80GXOniGLYMJZTd2U8sHn+jEwuaPKGb Op9ptfPuXw2DRGFqZefi/11iiKKaPh9CejRvtMekU7JeE9jOzYH1KMn7hLMIlHrA gq2pddfe7+ed5U57dVoNKoiQlMOe3m1LFTiC8xmZgRhcALOKFytgxtOV1oQUWfEs lV199smekltMEe93JjKYM6OWd027YsIOHHKxFsvjLs+Zq0iDZTtjR5jfFpe5Xnwa -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:47 2026 by rpki-client