This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/gOI9QAjx9asUoiBanW_Q7AH65eE.roa File: gOI9QAjx9asUoiBanW_Q7AH65eE.roa (raw, json) Hash identifier: btRqTQNfT6qG4Ogb/fwuOqtaLET+qOPfh8v3EgSP/yU= Subject key identifier: 80:E2:3D:40:08:F1:F5:AB:14:A2:20:5A:9D:6F:D0:EC:01:FA:E5:E1 Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa Certificate serial: 019B7EA73EAD233241200656DADEFE485E43 Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/gOI9QAjx9asUoiBanW_Q7AH65eE.roa Signing time: Fri 02 Jan 2026 12:20:48 +0000 ROA not before: Fri 02 Jan 2026 12:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263759 IP address blocks: 185.91.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3e:ad:23:32:41:20:06:56:da:de:fe:48:5e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80e23d4008f1f5ab14a2205a9d6fd0ec01fae5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:c9:6a:54:32:6d:ab:c0:de:41:b4:eb:05: c6:4b:d3:43:51:4b:72:37:eb:a7:3f:b0:9e:55:6c: 33:2c:1a:46:65:2a:8c:ec:d0:0e:a5:33:c7:7f:80: a5:ea:25:da:5b:9b:73:f6:f6:80:e4:d7:d7:ca:c6: 31:37:1c:c3:93:a5:e4:7d:b1:1b:1b:08:66:72:53: ac:ab:86:12:c0:05:65:80:be:86:a9:1d:b7:4c:81: f8:8c:e7:bd:39:ab:df:ac:9f:e8:bf:67:b7:35:46: 9d:41:8f:2a:25:12:af:af:1c:62:a6:99:4c:c7:a7: 41:c0:44:c9:b2:0a:fa:0b:cd:8d:f8:97:94:b8:bb: 5e:6b:93:2d:f1:ef:bb:bd:d5:5e:41:22:61:2e:e6: 63:8e:12:9a:e4:f5:67:3e:6e:12:c4:8d:c6:d6:2a: 0a:87:38:2d:15:1d:8a:4a:7f:36:f3:e3:4d:a1:9a: b0:55:e9:cf:91:84:f2:1d:d0:87:d3:e5:b4:86:3b: f0:0e:1c:86:9b:0d:6c:96:89:6c:18:a6:f5:d9:c6: e1:4d:73:1a:b3:e3:c2:33:6a:c4:03:13:00:3f:67: f6:72:dc:92:74:9d:fa:08:0f:ec:fc:7e:d0:60:98: f1:a2:1b:27:87:9b:c6:33:a3:5d:1d:26:c8:0d:63: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:3D:40:08:F1:F5:AB:14:A2:20:5A:9D:6F:D0:EC:01:FA:E5:E1 X509v3 Authority Key Identifier: keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/gOI9QAjx9asUoiBanW_Q7AH65eE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.206.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:9f:e9:17:41:20:ef:e3:b3:f3:0a:c9:9f:b1:4f:f8:7b:70: 21:76:ac:08:7b:24:3f:20:b1:70:48:27:97:cb:94:73:fa:a5: 59:3e:a3:88:fd:7c:f2:b1:78:b2:51:74:ca:6f:21:51:28:11: 14:e5:25:94:62:f1:08:d4:13:aa:9c:70:82:7e:c3:5f:2a:5a: 87:71:8b:3c:1c:bf:99:f3:f7:ff:ae:7b:4e:6b:7b:c9:be:90: cf:d6:a4:de:89:f2:a8:b2:09:ad:e3:c6:8c:91:06:e7:da:fe: ea:a0:db:ec:96:41:b4:63:ce:52:cf:69:98:7a:b1:3c:80:ce: 05:4f:cd:70:24:28:25:ff:09:ef:1b:38:94:4a:7d:80:24:c8: 40:ad:35:ee:d9:40:e5:f0:f0:05:52:cf:b9:58:ee:e3:89:d2: 84:59:15:21:b9:c8:f8:a5:d2:5c:77:0b:c0:05:59:0f:11:20: e3:bf:0f:3d:4d:d0:50:55:75:c3:d7:0d:f0:7e:33:c4:43:4a: 78:18:c4:e8:e2:74:f4:cd:da:41:9f:39:83:14:4c:aa:58:a0: 3f:6b:6e:5d:b4:d6:e3:98:ab:4a:98:f1:c8:bb:43:f5:12:ae: c9:25:ce:6d:1b:96:12:aa:31:d5:a5:a6:25:2d:6e:4b:27:d9: 98:54:35:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pz6tIzJBIAZW2t7+SF5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYWYwYmY5M2ZjNDM4MWZmZjdlN2FhODZiNDA3NmMwMzMy NDJmZmEwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGUyM2Q0MDA4ZjFmNWFiMTRhMjIwNWE5ZDZmZDBlYzAxZmFlNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNzJalQybavA3kG06wXGS9NDUUty N+unP7CeVWwzLBpGZSqM7NAOpTPHf4Cl6iXaW5tz9vaA5NfXysYxNxzDk6XkfbEb GwhmclOsq4YSwAVlgL6GqR23TIH4jOe9OavfrJ/ov2e3NUadQY8qJRKvrxxipplM x6dBwETJsgr6C82N+JeUuLtea5Mt8e+7vdVeQSJhLuZjjhKa5PVnPm4SxI3G1ioK hzgtFR2KSn828+NNoZqwVenPkYTyHdCH0+W0hjvwDhyGmw1slolsGKb12cbhTXMa s+PCM2rEAxMAP2f2ctySdJ36CA/s/H7QYJjxohsnh5vGM6NdHSbIDWM3zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDiPUAI8fWrFKIgWp1v0OwB+uXhMB8GA1UdIwQY MBaAFJ+vC/k/xDgf/356qGtAdsAzJC/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgt ZjUyMGE3ZDcxZWY1LzEvZ09JOVFBang5YXNVb2lCYW5XX1E3QUg2NWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgtZjUyMGE3ZDcxZWY1 LzEvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVvOMA0G CSqGSIb3DQEBCwUAA4IBAQAdn+kXQSDv47PzCsmfsU/4e3AhdqwIeyQ/ILFwSCeX y5Rz+qVZPqOI/XzysXiyUXTKbyFRKBEU5SWUYvEI1BOqnHCCfsNfKlqHcYs8HL+Z 8/f/rntOa3vJvpDP1qTeifKosgmt48aMkQbn2v7qoNvslkG0Y85Sz2mYerE8gM4F T81wJCgl/wnvGziUSn2AJMhArTXu2UDl8PAFUs+5WO7jidKEWRUhucj4pdJcdwvA BVkPESDjvw89TdBQVXXD1w3wfjPEQ0p4GMTo4nT0zdpBnzmDFEyqWKA/a25dtNbj mKtKmPHIu0P1Eq7JJc5tG5YSqjHVpaYlLW5LJ9mYVDWr -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:50 2026 by rpki-client