This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/i9fWQOWhpUgfOUgoRnU6I4hR1HM.roa File: i9fWQOWhpUgfOUgoRnU6I4hR1HM.roa (raw, json) Hash identifier: +tr4HPgYhPpjFtmeILAsvOgX2dmV3EzhnnQq/3JFybs= Subject key identifier: 8B:D7:D6:40:E5:A1:A5:48:1F:39:48:28:46:75:3A:23:88:51:D4:73 Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa Certificate serial: 019B7EA51697255FC375CAC880ECE3C7305D Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/i9fWQOWhpUgfOUgoRnU6I4hR1HM.roa Signing time: Fri 02 Jan 2026 12:18:26 +0000 ROA not before: Fri 02 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211809 IP address blocks: 185.96.32.0/22 maxlen: 24 2a13:eb00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:16:97:25:5f:c3:75:ca:c8:80:ec:e3:c7:30:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa Validity Not Before: Jan 2 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd7d640e5a1a5481f39482846753a238851d473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:2e:1d:76:49:48:b8:b1:5b:24:2d:99:11: 02:94:98:f4:93:02:f1:c0:50:a4:ba:01:14:75:82: 24:c5:34:1e:74:ab:3a:68:99:17:65:a9:9b:e6:e5: df:6f:fc:b9:12:13:f5:f0:1b:25:35:55:93:d3:e2: 8f:7b:ee:72:58:04:cb:95:7b:37:be:ff:5c:86:4d: 8a:35:50:a8:38:14:4b:cf:4f:5b:49:80:f2:03:33: d1:6a:33:94:a8:94:0c:9b:90:73:ee:df:4a:01:9c: aa:d3:3a:af:68:d6:b3:4c:02:7c:f2:8f:22:37:d4: 74:6a:75:a1:3a:09:1b:6b:1b:08:5c:ff:06:24:c0: 24:8f:80:43:81:a8:26:d4:e1:9c:a1:92:d4:34:b8: 1c:0a:45:e4:76:27:ca:b8:83:a0:18:88:33:c8:c2: b0:6c:1e:80:d8:09:95:83:32:c0:9b:9f:09:f5:44: 58:a0:39:15:db:fa:fe:4e:ea:6a:ad:6b:18:30:9f: 79:ac:1b:ae:47:34:39:87:65:70:18:7d:36:ef:3a: 6c:bd:bb:74:54:9b:c9:fa:e6:4c:99:1f:a8:24:73: 9d:f8:39:b0:76:63:a9:20:d6:69:bd:37:67:82:44: 7f:93:bb:b5:89:6b:7e:55:3c:1a:41:3e:9e:66:91: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:D6:40:E5:A1:A5:48:1F:39:48:28:46:75:3A:23:88:51:D4:73 X509v3 Authority Key Identifier: keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/i9fWQOWhpUgfOUgoRnU6I4hR1HM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.96.32.0/22 IPv6: 2a13:eb00::/29 Signature Algorithm: sha256WithRSAEncryption 11:1a:5f:6b:b1:ba:37:07:b6:c0:d9:4d:07:0e:ca:f8:b4:f4: 73:c7:e6:8c:61:71:d6:e3:46:1f:53:dd:e1:c9:53:2d:ee:b8: 19:ed:7d:9d:1b:f8:84:2c:3d:96:06:96:22:16:85:ed:d1:7b: b8:b8:3e:52:56:55:ce:1d:bf:d7:33:75:f8:1b:c4:4a:24:40: b5:07:f7:41:6b:35:11:d0:7b:d9:73:da:8f:ec:4b:a3:0b:88: ed:c1:76:09:d4:20:b4:70:68:3a:5f:60:28:ae:2d:a2:13:1a: c1:36:51:3a:a0:d4:23:00:59:dc:7b:78:47:49:bb:82:9d:f5: a1:a6:3a:84:00:5d:b8:3e:ce:ee:0f:de:e0:c6:93:2b:c6:4f: 59:5b:84:bd:c5:0a:00:67:5d:70:98:d1:bc:07:a9:26:69:ac: 9e:32:25:3f:e0:29:10:97:b8:30:7f:37:45:98:b3:b2:af:9a: 63:24:91:72:2c:57:80:1a:6d:f6:42:e3:fb:65:7c:5c:80:ab: 7a:21:80:e1:f2:f8:1b:31:0f:40:e4:de:84:c1:e2:6e:7c:c8: a8:20:6a:85:52:f4:61:73:de:20:6f:78:76:4a:3a:e7:92:cd: 34:a2:14:66:70:7e:10:21:15:ab:ba:79:26:07:d2:30:84:2b: 90:d7:12:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pRaXJV/DdcrIgOzjxzBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDczMWZhNGRkMjkyYzBjMDUzMmVlYTY5NjdjZWMwNzkw NzQ1YWEwHhcNMjYwMTAyMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQ3ZDY0MGU1YTFhNTQ4MWYzOTQ4Mjg0Njc1M2EyMzg4NTFkNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6MuHXZJSLixWyQtmREClJj0kwLx wFCkugEUdYIkxTQedKs6aJkXZamb5uXfb/y5EhP18BslNVWT0+KPe+5yWATLlXs3 vv9chk2KNVCoOBRLz09bSYDyAzPRajOUqJQMm5Bz7t9KAZyq0zqvaNazTAJ88o8i N9R0anWhOgkbaxsIXP8GJMAkj4BDgagm1OGcoZLUNLgcCkXkdifKuIOgGIgzyMKw bB6A2AmVgzLAm58J9URYoDkV2/r+TupqrWsYMJ95rBuuRzQ5h2VwGH027zpsvbt0 VJvJ+uZMmR+oJHOd+DmwdmOpINZpvTdngkR/k7u1iWt+VTwaQT6eZpFzZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIvX1kDloaVIHzlIKEZ1OiOIUdRzMB8GA1UdIwQY MBaAFGnXMfpN0pLAwFMu6mlnzsB5B0WqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt MzQzNjI0MTUxODJhLzEvaTlmV1FPV2hwVWdmT1Vnb1JuVTZJNGhSMUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh LzEvYWRjeC1rM1Nrc0RBVXk3cWFXZk93SGtIUmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWAgMA0E AgACMAcDBQMqE+sAMA0GCSqGSIb3DQEBCwUAA4IBAQARGl9rsbo3B7bA2U0HDsr4 tPRzx+aMYXHW40YfU93hyVMt7rgZ7X2dG/iELD2WBpYiFoXt0Xu4uD5SVlXOHb/X M3X4G8RKJEC1B/dBazUR0HvZc9qP7EujC4jtwXYJ1CC0cGg6X2Aori2iExrBNlE6 oNQjAFnce3hHSbuCnfWhpjqEAF24Ps7uD97gxpMrxk9ZW4S9xQoAZ11wmNG8B6km aayeMiU/4CkQl7gwfzdFmLOyr5pjJJFyLFeAGm32QuP7ZXxcgKt6IYDh8vgbMQ9A 5N6EweJufMioIGqFUvRhc94gb3h2Sjrnks00ohRmcH4QIRWrunkmB9IwhCuQ1xK9 -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:23 2026 by rpki-client