This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/no_ORyMn9T6-xikFSqLg-Gz96M4.roa File: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (raw, json) Hash identifier: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0= Subject key identifier: 9E:8F:CE:47:23:27:F5:3E:BE:C6:29:05:4A:A2:E0:F8:6C:FD:E8:CE Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019B77C728CEA2A2555D65E59ADF390949BF Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/no_ORyMn9T6-xikFSqLg-Gz96M4.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204004 IP address blocks: 185.107.16.0/24 maxlen: 24 185.107.17.0/24 maxlen: 24 185.107.18.0/24 maxlen: 24 185.107.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:28:ce:a2:a2:55:5d:65:e5:9a:df:39:09:49:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e8fce472327f53ebec629054aa2e0f86cfde8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:6a:94:4a:98:ba:df:ce:06:ab:da:e3:78: 0d:9a:3b:83:93:72:bf:d8:e7:bd:c6:2f:36:48:69: b2:f0:73:0f:3a:2c:44:a9:85:37:d0:31:84:fa:a3: 4d:16:4f:1b:4e:a8:1b:58:df:ec:1c:d0:c1:b4:2f: 3e:0f:1f:cd:19:01:b5:b2:c2:75:b2:6f:24:c2:d6: 51:b4:5a:36:37:21:5e:45:51:20:4c:d0:7e:aa:5c: c1:c3:ad:a5:df:13:ab:b6:11:f8:a3:67:4a:34:a0: a2:13:ef:55:84:8b:6e:0a:50:43:8d:2b:52:81:43: fb:9d:f1:1c:59:9d:26:cc:40:97:e5:54:3c:ab:d9: bb:da:35:20:f5:f4:65:33:a4:4a:13:21:06:47:47: ea:32:96:35:b7:6e:15:6b:5a:f2:65:0d:49:01:d6: d1:67:04:5b:87:13:a0:36:35:29:06:2d:40:3e:87: 75:76:30:e1:82:58:46:7d:70:42:a2:df:3d:d8:ef: bd:86:74:9a:f1:59:fa:3a:e7:96:22:b2:5c:94:e6: d8:af:88:cc:47:f5:ad:f3:4a:82:6d:82:d7:e0:f7: 47:6b:3e:2e:70:ed:99:13:94:a7:8b:20:6e:3e:4b: 8a:34:25:83:00:b7:50:30:52:6c:fc:6c:ec:46:23: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8F:CE:47:23:27:F5:3E:BE:C6:29:05:4A:A2:E0:F8:6C:FD:E8:CE X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/no_ORyMn9T6-xikFSqLg-Gz96M4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.16.0/22 Signature Algorithm: sha256WithRSAEncryption 75:b9:fb:06:70:e7:1b:ef:fe:4f:99:ec:35:b9:a5:a7:28:58: 0a:a2:d0:93:07:45:4f:e4:99:22:7d:36:06:0d:87:d2:da:87: e0:74:70:d5:d5:bc:1b:91:cd:22:b3:8c:ff:1a:6e:90:13:c1: cb:1c:a5:cd:b9:20:4d:8e:02:5d:a4:ea:7c:3b:16:ae:b7:6c: 7a:07:70:f6:a1:a2:8e:04:9a:32:e3:f4:bd:29:75:60:4f:47: 4f:b3:d5:59:e7:5b:62:f7:69:c9:97:22:7b:05:01:9a:e5:30: 62:50:59:f9:93:18:75:2f:1b:b9:c3:2e:4f:9f:d2:e5:4f:e9: ad:38:b6:4c:b2:91:24:c6:dc:06:19:8b:9b:49:6e:4c:7e:42: 37:5e:a7:32:57:6c:61:98:1b:23:56:bd:d0:04:7e:31:6b:83: b9:9d:df:ed:85:c9:28:18:95:d5:bd:51:d0:c8:0b:2f:6e:45: c8:e0:77:ce:a7:b9:f5:17:9a:a3:98:61:31:ff:dc:76:97:42: e6:bd:29:0c:bf:bd:79:6c:56:35:cf:93:0e:94:3f:d3:0d:4b: 99:58:75:7e:b0:61:ff:fe:6a:eb:3d:eb:32:50:8b:a9:8c:13: ab:5b:21:5e:00:96:db:06:3c:59:ac:d1:5f:d1:3f:07:a2:e6: c5:b4:d4:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyjOoqJVXWXlmt85CUm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZThmY2U0NzIzMjdmNTNlYmVjNjI5MDU0YWEyZTBmODZjZmRlOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyudqlEqYut/OBqva43gNmjuDk3K/ 2Oe9xi82SGmy8HMPOixEqYU30DGE+qNNFk8bTqgbWN/sHNDBtC8+Dx/NGQG1ssJ1 sm8kwtZRtFo2NyFeRVEgTNB+qlzBw62l3xOrthH4o2dKNKCiE+9VhItuClBDjStS gUP7nfEcWZ0mzECX5VQ8q9m72jUg9fRlM6RKEyEGR0fqMpY1t24Va1ryZQ1JAdbR ZwRbhxOgNjUpBi1APod1djDhglhGfXBCot892O+9hnSa8Vn6OueWIrJclObYr4jM R/Wt80qCbYLX4PdHaz4ucO2ZE5SniyBuPkuKNCWDALdQMFJs/GzsRiPyeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6PzkcjJ/U+vsYpBUqi4Phs/ejOMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvbm9fT1J5TW45VDYteGlrRlNxTGctR3o5Nk00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWsQMA0G CSqGSIb3DQEBCwUAA4IBAQB1ufsGcOcb7/5Pmew1uaWnKFgKotCTB0VP5JkifTYG DYfS2ofgdHDV1bwbkc0is4z/Gm6QE8HLHKXNuSBNjgJdpOp8Oxaut2x6B3D2oaKO BJoy4/S9KXVgT0dPs9VZ51ti92nJlyJ7BQGa5TBiUFn5kxh1Lxu5wy5Pn9LlT+mt OLZMspEkxtwGGYubSW5MfkI3XqcyV2xhmBsjVr3QBH4xa4O5nd/thckoGJXVvVHQ yAsvbkXI4HfOp7n1F5qjmGEx/9x2l0LmvSkMv715bFY1z5MOlD/TDUuZWHV+sGH/ /mrrPesyUIupjBOrWyFeAJbbBjxZrNFf0T8HoubFtNT3 -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:59 2026 by rpki-client