This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/i98BdSWrylmIpwd0WO9-Lb6hQBo.roa File: i98BdSWrylmIpwd0WO9-Lb6hQBo.roa (raw, json) Hash identifier: 83hgwfdE90Sqn7kTtBLvA4AFMcG3JNT7E8mAR3Newj8= Subject key identifier: 8B:DF:01:75:25:AB:CA:59:88:A7:07:74:58:EF:7E:2D:BE:A1:40:1A Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11 Certificate serial: 019B79EC3CAD9CF9FF8FD606810BC6186678 Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/i98BdSWrylmIpwd0WO9-Lb6hQBo.roa Signing time: Thu 01 Jan 2026 14:18:03 +0000 ROA not before: Thu 01 Jan 2026 14:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 185.168.149.0/24 maxlen: 24 2a12:b7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3c:ad:9c:f9:ff:8f:d6:06:81:0b:c6:18:66:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11 Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bdf017525abca5988a7077458ef7e2dbea1401a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:a7:c6:16:78:7e:35:b5:31:1d:0b:84:2d: f0:5f:28:f4:ee:f8:07:2f:f3:21:74:88:b6:59:26: 8a:55:53:b1:c7:0c:3f:fc:bd:58:9b:96:0b:a8:2a: a6:9b:7f:a4:1d:cb:1f:a3:13:f2:1c:51:88:ca:a5: a0:76:0a:64:f5:18:dc:74:86:87:c7:03:92:9c:33: af:c6:fd:ea:21:70:a1:5d:85:4c:5e:65:b5:46:c9: a4:27:20:22:c3:ad:5f:ef:b6:0c:33:0c:21:e8:43: cd:c8:45:6d:6d:e4:43:85:18:88:af:c5:22:9f:90: 09:61:e8:13:e5:d6:16:83:70:25:c8:7a:fd:63:47: 79:de:f1:06:72:8d:5a:0f:8f:e1:3d:f9:25:8a:02: 66:0c:30:c9:eb:17:26:44:2c:a6:fb:9b:e1:60:1a: 49:9c:01:e5:92:43:8c:01:8f:e7:b6:13:14:01:38: 9a:9f:85:88:a9:4b:14:da:f3:d4:8a:63:36:d6:1a: ac:ec:2b:8f:c6:91:b5:a6:57:50:f3:7c:c8:f0:81: 4e:5e:6a:2a:41:f9:2a:a1:2e:3a:9a:d2:20:41:31: 94:97:a5:71:cc:5e:1c:18:7a:b8:1d:98:22:8d:5b: b5:7d:60:93:e8:4f:c3:7a:b4:e5:70:5e:86:78:0c: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DF:01:75:25:AB:CA:59:88:A7:07:74:58:EF:7E:2D:BE:A1:40:1A X509v3 Authority Key Identifier: keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/i98BdSWrylmIpwd0WO9-Lb6hQBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.149.0/24 IPv6: 2a12:b7c0::/29 Signature Algorithm: sha256WithRSAEncryption 29:2b:83:a1:9b:ec:47:04:36:67:fd:d6:86:0e:99:77:dc:cf: 3b:d1:e8:13:e5:99:5f:46:4f:94:2e:cb:ba:74:ab:9f:2c:83: b4:3e:4c:85:8b:8e:5f:23:a5:97:1d:db:42:5b:90:91:eb:af: 3b:3c:a2:45:5b:04:23:7c:d0:fc:9d:ce:05:59:70:a8:b8:43: 71:24:9e:83:5e:60:96:eb:56:1a:8e:eb:61:cf:55:b4:4c:38: fa:7c:a8:33:05:0d:b5:36:c6:49:1b:97:c9:fe:eb:2a:ce:ae: b0:ab:e0:39:49:d8:ac:84:b8:a2:4d:6c:3c:58:c6:e0:b6:f0: 72:8c:06:69:2c:24:16:c9:3d:b5:e1:6d:50:22:c2:ef:b4:9d: c0:ff:4e:a1:5d:05:d2:84:c6:3b:42:d4:fc:7d:6c:78:08:f6: e7:98:b0:3f:f4:8f:ec:22:a4:74:1c:04:df:bf:5b:43:98:64: 5c:80:29:29:7f:31:e5:31:dc:c6:5c:42:0f:9d:3e:8f:8b:aa: 26:48:a2:f6:6c:3a:bf:29:9e:2d:fb:8c:c2:32:60:64:94:8e: 69:c8:d5:cf:8a:1f:6a:27:62:6d:67:1b:f3:04:6c:a5:a5:5e: 74:79:65:fd:8a:05:fe:81:6a:6e:0b:8d:2c:75:40:a8:d6:8f: 3a:e1:92:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57DytnPn/j9YGgQvGGGZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZGQ0MmNjZDEzZDdmOGE3YzNlZGE1YjU1MDJkOGQ2ZGNi YmJlMTEwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmRmMDE3NTI1YWJjYTU5ODhhNzA3NzQ1OGVmN2UyZGJlYTE0MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2enxhZ4fjW1MR0LhC3wXyj07vgH L/MhdIi2WSaKVVOxxww//L1Ym5YLqCqmm3+kHcsfoxPyHFGIyqWgdgpk9RjcdIaH xwOSnDOvxv3qIXChXYVMXmW1RsmkJyAiw61f77YMMwwh6EPNyEVtbeRDhRiIr8Ui n5AJYegT5dYWg3AlyHr9Y0d53vEGco1aD4/hPfkligJmDDDJ6xcmRCym+5vhYBpJ nAHlkkOMAY/nthMUATian4WIqUsU2vPUimM21hqs7CuPxpG1pldQ83zI8IFOXmoq QfkqoS46mtIgQTGUl6VxzF4cGHq4HZgijVu1fWCT6E/DerTlcF6GeAwL3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIvfAXUlq8pZiKcHdFjvfi2+oUAaMB8GA1UdIwQY MBaAFEvdQszRPX+KfD7aW1UC2Nbcu74RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUt MWNhMjEyMGVlNDM2LzEvaTk4QmRTV3J5bG1JcHdkMFdPOS1MYjZoUUJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUtMWNhMjEyMGVlNDM2 LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuaiVMA0E AgACMAcDBQMqErfAMA0GCSqGSIb3DQEBCwUAA4IBAQApK4Ohm+xHBDZn/daGDpl3 3M870egT5ZlfRk+ULsu6dKufLIO0PkyFi45fI6WXHdtCW5CR6687PKJFWwQjfND8 nc4FWXCouENxJJ6DXmCW61Yajuthz1W0TDj6fKgzBQ21NsZJG5fJ/usqzq6wq+A5 SdishLiiTWw8WMbgtvByjAZpLCQWyT214W1QIsLvtJ3A/06hXQXShMY7QtT8fWx4 CPbnmLA/9I/sIqR0HATfv1tDmGRcgCkpfzHlMdzGXEIPnT6Pi6omSKL2bDq/KZ4t +4zCMmBklI5pyNXPih9qJ2JtZxvzBGylpV50eWX9igX+gWpuC40sdUCo1o864ZIG -----END CERTIFICATE-----Generated at Sun Jan 25 21:02:59 2026 by rpki-client