This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/1m9vhqXwy7CGqJjqRjUuXJx7INY.roa File: 1m9vhqXwy7CGqJjqRjUuXJx7INY.roa (raw, json) Hash identifier: qE04gkM/s7vX8p51u5m0unnrB0JoxCvsTSSShhmlhmI= Subject key identifier: D6:6F:6F:86:A5:F0:CB:B0:86:A8:98:EA:46:35:2E:5C:9C:7B:20:D6 Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f Certificate serial: 019B7C11DC5AA846C50977C67692FFB935F7 Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/1m9vhqXwy7CGqJjqRjUuXJx7INY.roa Signing time: Fri 02 Jan 2026 00:18:23 +0000 ROA not before: Fri 02 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212257 IP address blocks: 185.160.96.0/22 maxlen: 22 185.160.96.0/24 maxlen: 24 185.160.97.0/24 maxlen: 24 185.160.98.0/24 maxlen: 24 185.160.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:dc:5a:a8:46:c5:09:77:c6:76:92:ff:b9:35:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d66f6f86a5f0cbb086a898ea46352e5c9c7b20d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:6d:d1:36:4e:48:ac:23:f5:d6:97:6d:58: 8e:a6:ba:9b:83:b3:ca:49:15:f7:79:53:e0:fa:aa: 52:f3:57:0f:91:32:b9:2a:b4:87:2e:b7:96:02:4c: 55:93:fa:7f:b5:f7:d7:b4:4d:05:e6:03:f4:7e:a8: 59:cf:71:61:52:29:15:b4:a8:57:ef:40:e5:4f:f0: 60:1c:73:db:3b:7f:5b:7d:af:47:3e:2e:d6:69:ed: e6:1f:86:01:f2:dd:2b:78:98:24:fe:67:04:8b:c1: bf:c9:28:21:d1:92:0a:0c:1b:4d:e9:20:df:a7:1e: 0d:a9:80:48:fe:56:da:ad:27:89:cf:68:ee:98:b5: d3:aa:2d:e2:04:c0:ec:62:5f:ab:60:94:4e:6b:b1: 25:4a:24:9f:ab:38:34:bb:32:65:ae:ab:86:84:77: 57:31:f0:9c:9e:b0:f0:5e:96:fd:9f:27:d7:3c:13: 32:33:d2:22:f4:bf:f0:ec:20:2c:42:0e:cf:be:79: 16:f1:f0:6a:3f:b8:91:2f:1d:ec:4e:81:df:08:82: 1b:2d:18:98:74:60:eb:8e:a4:30:f0:cb:0c:13:32: 30:ff:7f:4a:7f:ef:6d:da:13:45:88:00:be:f7:f6: a3:93:16:32:42:eb:6a:ec:9a:cb:93:e9:6b:74:8a: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:6F:86:A5:F0:CB:B0:86:A8:98:EA:46:35:2E:5C:9C:7B:20:D6 X509v3 Authority Key Identifier: keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/1m9vhqXwy7CGqJjqRjUuXJx7INY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.96.0/22 Signature Algorithm: sha256WithRSAEncryption 55:5b:c4:03:2c:52:98:3e:aa:4a:0a:ca:e2:99:a6:00:22:6b: cd:cd:83:9a:32:b4:5b:62:fa:f0:44:05:43:1c:a7:07:ba:a6: b7:fd:34:32:77:0d:57:55:71:61:3f:2c:ec:28:54:89:d6:81: bd:0c:0d:17:7d:a9:83:63:bd:72:64:27:88:a0:cc:b7:22:c4: 60:5c:d2:0a:8f:6c:0f:c1:0c:f2:23:50:ba:f3:69:9c:31:01: 9d:0e:59:da:09:8b:03:d1:87:bb:73:99:da:39:aa:8c:d1:68: f0:04:e8:bb:18:b7:e0:e4:cf:a9:42:82:44:99:5b:e1:38:a3: 8b:84:fd:cf:ea:7c:34:0d:a9:c0:ff:ad:45:fe:61:91:91:b0: 52:f7:ab:bf:4f:4b:3c:4e:5d:c7:d0:2a:11:05:2e:b1:82:26: 1c:cc:bf:e0:e8:a0:41:de:09:e7:2a:34:b1:25:97:4f:2b:c2: cc:3f:83:f2:fb:b3:90:be:f1:90:fc:67:eb:c9:73:b3:4b:06: b0:04:2e:25:bf:60:c0:68:a6:ae:f0:44:00:24:f8:85:db:92: 5c:e5:d9:20:9e:18:5e:3b:16:5e:22:45:76:9c:14:a5:34:15: 08:d3:b2:94:f7:29:d0:d5:a3:96:0e:07:60:4a:9e:f7:81:cb: 84:ec:f0:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EdxaqEbFCXfGdpL/uTX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMmJiZjM0NmViZDRhYTBiNzZlMTBjNTgzMjFhZDMzZDcy ZDUxOWYwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjZmNmY4NmE1ZjBjYmIwODZhODk4ZWE0NjM1MmU1YzljN2IyMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF9t0TZOSKwj9daXbViOprqbg7PK SRX3eVPg+qpS81cPkTK5KrSHLreWAkxVk/p/tffXtE0F5gP0fqhZz3FhUikVtKhX 70DlT/BgHHPbO39bfa9HPi7Wae3mH4YB8t0reJgk/mcEi8G/ySgh0ZIKDBtN6SDf px4NqYBI/lbarSeJz2jumLXTqi3iBMDsYl+rYJROa7ElSiSfqzg0uzJlrquGhHdX MfCcnrDwXpb9nyfXPBMyM9Ii9L/w7CAsQg7PvnkW8fBqP7iRLx3sToHfCIIbLRiY dGDrjqQw8MsMEzIw/39Kf+9t2hNFiAC+9/ajkxYyQutq7JrLk+lrdIrSBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZvb4al8MuwhqiY6kY1LlyceyDWMB8GA1UdIwQY MBaAFD4rvzRuvUqgt24QxYMhrTPXLVGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEt MWFhMjc3ZGYzNzY5LzEvMW05dmhxWHd5N0NHcUpqcVJqVXVYSng3SU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEtMWFhMjc3ZGYzNzY5 LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaBgMA0G CSqGSIb3DQEBCwUAA4IBAQBVW8QDLFKYPqpKCsrimaYAImvNzYOaMrRbYvrwRAVD HKcHuqa3/TQydw1XVXFhPyzsKFSJ1oG9DA0XfamDY71yZCeIoMy3IsRgXNIKj2wP wQzyI1C682mcMQGdDlnaCYsD0Ye7c5naOaqM0WjwBOi7GLfg5M+pQoJEmVvhOKOL hP3P6nw0DanA/61F/mGRkbBS96u/T0s8Tl3H0CoRBS6xgiYczL/g6KBB3gnnKjSx JZdPK8LMP4Py+7OQvvGQ/GfryXOzSwawBC4lv2DAaKau8EQAJPiF25Jc5dkgnhhe OxZeIkV2nBSlNBUI07KU9ynQ1aOWDgdgSp73gcuE7PCE -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:43 2026 by rpki-client