This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/ir9SuLduq8J9bIwWBVKAyAFiwvk.roa File: ir9SuLduq8J9bIwWBVKAyAFiwvk.roa (raw, json) Hash identifier: LeNR5QQthmrMSFvWNxLjb0RXrLTd6w9z7OeC3M8gneo= Subject key identifier: 8A:BF:52:B8:B7:6E:AB:C2:7D:6C:8C:16:05:52:80:C8:01:62:C2:F9 Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f Certificate serial: 019B7DC99EA4C96F2795AD7C05E10F250CCC Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/ir9SuLduq8J9bIwWBVKAyAFiwvk.roa Signing time: Fri 02 Jan 2026 08:18:43 +0000 ROA not before: Fri 02 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44407 IP address blocks: 185.111.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:9e:a4:c9:6f:27:95:ad:7c:05:e1:0f:25:0c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f Validity Not Before: Jan 2 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8abf52b8b76eabc27d6c8c16055280c80162c2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:15:c4:a6:b4:c6:f5:b9:9b:06:0a:15:75: 34:3a:fe:3d:c3:bc:97:5f:1b:07:6f:1f:52:7f:e5: ec:f5:aa:2c:41:48:4b:7e:ea:c1:c1:45:8a:16:3b: e7:41:18:15:d4:39:e8:bc:c9:28:79:27:06:08:b8: 25:8d:e9:4d:5b:9a:8f:2e:2c:f7:8a:e9:ee:c7:0c: 14:86:31:b0:cf:ec:f2:06:08:18:9b:a2:27:8a:3c: f0:5b:62:90:94:7e:9f:04:82:20:a1:66:4a:c2:39: 05:48:aa:74:b1:cf:c3:4d:7d:b1:14:3d:45:61:70: f5:25:d6:ac:70:93:f2:ad:b6:9a:c3:5c:81:73:00: ac:a7:d3:65:9f:7c:d5:b2:58:8b:d6:4a:fe:d7:47: cd:f0:97:b6:b4:47:95:62:42:1d:5d:5b:73:f1:b4: 0f:c4:9d:4e:a5:e4:a4:24:01:26:81:db:80:64:74: 11:c8:d5:8e:80:82:15:ec:01:cb:bc:e5:5e:57:e7: ff:06:59:ec:95:b3:1c:89:ff:05:c5:09:3d:30:70: 49:85:c3:a4:da:94:22:f3:c0:46:16:b3:76:d0:c0: c8:2f:b8:d6:f0:3d:4f:87:1e:c9:c9:0a:36:87:78: 03:ed:59:1f:dd:6c:17:ca:10:31:cf:51:61:57:e4: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BF:52:B8:B7:6E:AB:C2:7D:6C:8C:16:05:52:80:C8:01:62:C2:F9 X509v3 Authority Key Identifier: keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/ir9SuLduq8J9bIwWBVKAyAFiwvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.16.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:68:64:c3:e3:6d:3b:52:4d:d1:23:47:2d:68:39:29:db:92: 51:b4:f9:54:04:5e:a7:28:27:55:cf:c8:3b:2c:88:83:3c:d6: 29:36:8c:07:e9:5d:4f:bb:b0:0f:3d:30:76:40:40:6e:a8:7a: dd:ac:be:38:07:a6:c9:ed:ba:96:7c:b3:f7:65:ef:cf:81:09: d7:e6:cf:f2:f8:4a:37:5d:7c:55:9e:a8:d3:63:96:3b:9b:1b: b3:04:e6:29:7f:b1:d4:b3:91:29:fb:2d:2c:ab:11:26:9d:ad: 14:b7:ae:6c:28:31:44:7a:d1:15:15:af:6d:0d:a8:0d:c8:82: cd:04:00:c6:3d:87:75:6f:84:5e:56:49:99:77:44:30:09:75: e0:e3:81:b8:09:63:84:be:96:50:d3:fe:85:26:e1:1e:0d:2c: 62:a2:2c:5f:be:c9:14:40:ef:42:b6:08:28:97:38:6d:12:ff: c8:c1:9f:73:af:20:51:92:e2:e0:a1:0b:24:10:63:26:8c:f5: 8a:51:c9:7c:b2:5e:f4:53:d9:25:97:69:4f:06:0f:91:9c:f3: 90:7d:8b:8f:73:e3:98:d7:51:7d:d2:95:a2:04:7b:26:32:76: 46:79:14:3e:3e:b1:e4:c7:7f:91:4e:c3:6a:e0:13:1f:5f:bf: 0e:ea:c3:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yZ6kyW8nla18BeEPJQzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMDE0MGFkMzk0MTRjNGVhYjAyYWM1NTQyMmI0NDE2M2Vk MzRiMGYwHhcNMjYwMTAyMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWJmNTJiOGI3NmVhYmMyN2Q2YzhjMTYwNTUyODBjODAxNjJjMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWsVxKa0xvW5mwYKFXU0Ov49w7yX XxsHbx9Sf+Xs9aosQUhLfurBwUWKFjvnQRgV1DnovMkoeScGCLgljelNW5qPLiz3 iunuxwwUhjGwz+zyBggYm6InijzwW2KQlH6fBIIgoWZKwjkFSKp0sc/DTX2xFD1F YXD1JdascJPyrbaaw1yBcwCsp9Nln3zVsliL1kr+10fN8Je2tEeVYkIdXVtz8bQP xJ1OpeSkJAEmgduAZHQRyNWOgIIV7AHLvOVeV+f/BlnslbMcif8FxQk9MHBJhcOk 2pQi88BGFrN20MDIL7jW8D1Phx7JyQo2h3gD7Vkf3WwXyhAxz1FhV+SW6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIq/Uri3bqvCfWyMFgVSgMgBYsL5MB8GA1UdIwQY MBaAFCsBQK05QUxOqwKsVUIrRBY+00sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUt MmU3NTIyOGY5MjYxLzEvaXI5U3VMZHVxOEo5Ykl3V0JWS0F5QUZpd3ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OWMzZTQtYjYxMy00OWVjLWFlMjUtMmU3NTIyOGY5MjYx LzEvS3dGQXJUbEJURTZyQXF4VlFpdEVGajdUU3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW8QMA0G CSqGSIb3DQEBCwUAA4IBAQBKaGTD4207Uk3RI0ctaDkp25JRtPlUBF6nKCdVz8g7 LIiDPNYpNowH6V1Pu7APPTB2QEBuqHrdrL44B6bJ7bqWfLP3Ze/PgQnX5s/y+Eo3 XXxVnqjTY5Y7mxuzBOYpf7HUs5Ep+y0sqxEmna0Ut65sKDFEetEVFa9tDagNyILN BADGPYd1b4ReVkmZd0QwCXXg44G4CWOEvpZQ0/6FJuEeDSxioixfvskUQO9Ctggo lzhtEv/IwZ9zryBRkuLgoQskEGMmjPWKUcl8sl70U9kll2lPBg+RnPOQfYuPc+OY 11F90pWiBHsmMnZGeRQ+PrHkx3+RTsNq4BMfX78O6sPI -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:58 2026 by rpki-client