This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa File: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (raw, json) Hash identifier: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA= Subject key identifier: BB:D1:FC:C9:CA:09:27:BD:D7:2F:37:64:D6:61:B6:61:92:7A:62:50 Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2 Certificate serial: 019B79EBB22E63BD79521EC5AC787DDB0D47 Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa Signing time: Thu 01 Jan 2026 14:17:28 +0000 ROA not before: Thu 01 Jan 2026 14:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61180 IP address blocks: 185.46.173.0/24 maxlen: 24 185.46.173.0/27 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b2:2e:63:bd:79:52:1e:c5:ac:78:7d:db:0d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbd1fcc9ca0927bdd72f3764d661b661927a6250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:83:5e:63:cd:f2:9d:6e:eb:52:6c:96:c5: 6a:92:02:ff:88:ef:33:7c:1c:0d:30:6d:17:07:96: 6d:a2:25:51:06:94:47:3e:c0:de:3c:3e:dd:44:44: c8:a0:2b:91:09:39:cf:46:33:75:1b:e3:40:e2:b6: 27:e8:a5:85:ac:01:93:88:f2:9f:9b:d4:a0:42:41: 7e:e7:9e:fd:85:08:e1:d2:aa:8e:33:4a:9e:89:86: 97:b1:69:98:b9:c2:02:45:b0:de:a0:68:50:a4:b5: 39:63:39:1f:bc:0f:17:32:7c:dd:07:f4:b5:34:0b: 03:71:9a:51:21:53:a1:36:48:78:cb:7c:13:a1:8d: 8c:7b:76:62:a8:a5:37:d4:2e:55:27:cd:91:5f:98: af:e3:69:d2:1c:7e:27:9d:64:f0:2b:fc:50:07:d4: 26:8a:20:6c:5a:b0:17:e2:c5:ea:8b:7d:ff:f8:a7: cd:67:4e:9b:0f:7d:5f:7b:03:d8:2c:96:99:9c:b1: bc:0f:80:c0:0d:55:10:e2:83:e2:63:69:a6:9f:5b: 63:df:18:08:8a:ce:0a:b2:73:b2:9f:2b:5a:bc:48: 0c:d9:91:1e:ad:55:06:25:41:37:1e:1d:bb:5a:6f: 7f:70:69:68:84:fa:34:56:0e:f5:54:5c:31:76:16: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D1:FC:C9:CA:09:27:BD:D7:2F:37:64:D6:61:B6:61:92:7A:62:50 X509v3 Authority Key Identifier: keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.173.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:8b:c0:3a:b6:ff:0e:42:b3:76:b6:fb:96:39:03:78:58:58: d9:8a:2d:f3:47:94:c9:22:99:e5:30:4d:37:1b:0c:f4:bd:d7: 5c:3e:10:7e:b8:2d:d1:05:1b:ee:f3:9b:7c:7b:de:8c:d0:7a: e8:44:80:24:a0:27:38:25:1f:b7:77:49:4e:09:56:75:8b:45: f5:f1:c5:4a:14:61:45:7c:a3:54:05:8a:7d:07:fc:e0:8f:b3: 67:17:f9:7c:8b:2d:88:53:db:08:26:11:41:09:69:8a:3d:61: 0a:47:e9:2f:04:a5:19:50:9e:72:a5:5a:4f:df:19:fc:df:c5: 74:62:85:8f:c5:bc:f4:d5:af:1d:48:a9:ca:80:d5:82:4f:12: de:87:5b:9e:09:f9:ce:be:ff:e0:8f:29:10:4d:e8:12:ff:68: ad:8d:7e:69:11:e3:8d:ca:28:2c:6b:43:64:9c:0e:54:5d:c7: fc:1e:b6:45:17:49:fa:d1:9f:ca:39:91:62:64:3c:f3:7b:60: fe:80:ff:28:5c:f8:07:4d:bf:06:90:44:a9:bb:92:7b:ba:79: 09:ac:c9:b4:fe:00:32:ab:57:0e:29:5d:30:df:56:53:aa:a5: 83:fd:dc:00:eb:67:dd:27:20:6e:c6:98:47:42:29:25:0c:7b: 3c:93:10:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt567IuY715Uh7FrHh92w1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi OTNjYzIwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmQxZmNjOWNhMDkyN2JkZDcyZjM3NjRkNjYxYjY2MTkyN2E2MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbeDXmPN8p1u61JslsVqkgL/iO8z fBwNMG0XB5ZtoiVRBpRHPsDePD7dRETIoCuRCTnPRjN1G+NA4rYn6KWFrAGTiPKf m9SgQkF+5579hQjh0qqOM0qeiYaXsWmYucICRbDeoGhQpLU5YzkfvA8XMnzdB/S1 NAsDcZpRIVOhNkh4y3wToY2Me3ZiqKU31C5VJ82RX5iv42nSHH4nnWTwK/xQB9Qm iiBsWrAX4sXqi33/+KfNZ06bD31fewPYLJaZnLG8D4DADVUQ4oPiY2mmn1tj3xgI is4KsnOynytavEgM2ZEerVUGJUE3Hh27Wm9/cGlohPo0Vg71VFwxdhb+NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLvR/MnKCSe91y83ZNZhtmGSemJQMB8GA1UdIwQY MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et ZmYwNWQ0NDZlN2ZkLzEvdTlIOHljb0pKNzNYTHpkazFtRzJZWko2WWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2EtZmYwNWQ0NDZlN2Zk LzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS6tMA0G CSqGSIb3DQEBCwUAA4IBAQCdi8A6tv8OQrN2tvuWOQN4WFjZii3zR5TJIpnlME03 Gwz0vddcPhB+uC3RBRvu85t8e96M0HroRIAkoCc4JR+3d0lOCVZ1i0X18cVKFGFF fKNUBYp9B/zgj7NnF/l8iy2IU9sIJhFBCWmKPWEKR+kvBKUZUJ5ypVpP3xn838V0 YoWPxbz01a8dSKnKgNWCTxLeh1ueCfnOvv/gjykQTegS/2itjX5pEeONyigsa0Nk nA5UXcf8HrZFF0n60Z/KOZFiZDzze2D+gP8oXPgHTb8GkESpu5J7unkJrMm0/gAy q1cOKV0w31ZTqqWD/dwA62fdJyBuxphHQiklDHs8kxAo -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:20 2026 by rpki-client