This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/9561YDYiFuwA3cK9_Ao81cqPzyw.roa File: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (raw, json) Hash identifier: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI= Subject key identifier: F7:9E:B5:60:36:22:16:EC:00:DD:C2:BD:FC:0A:3C:D5:CA:8F:CF:2C Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019B78345B0B24E44F171B7998020F6C3D57 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/9561YDYiFuwA3cK9_Ao81cqPzyw.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 212.231.178.0/23 maxlen: 23 212.231.180.0/23 maxlen: 23 212.231.182.0/23 maxlen: 23 212.231.208.0/22 maxlen: 22 212.231.212.0/22 maxlen: 22 212.231.216.0/22 maxlen: 22 212.231.220.0/22 maxlen: 22 212.231.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5b:0b:24:e4:4f:17:1b:79:98:02:0f:6c:3d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f79eb560362216ec00ddc2bdfc0a3cd5ca8fcf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:84:b6:3f:cc:89:1f:86:cf:61:d4:cd:53: 19:67:dc:3f:81:f5:fa:07:4f:61:b6:15:42:ff:d7: 22:89:01:73:83:36:8f:27:fa:a1:b8:41:9e:0c:1d: 38:4e:62:5d:d8:17:2e:64:8e:af:36:0d:8d:1d:ee: a1:59:b4:70:22:2a:4e:2e:ed:89:82:6d:1e:05:11: 82:20:9d:ef:24:7f:3f:f4:87:33:33:28:cf:5c:c2: 14:a1:58:24:95:46:ad:20:7b:6f:7b:61:37:ff:38: 0b:6c:21:8e:b9:3e:df:2d:16:d3:1b:e9:cd:25:01: e2:e7:0d:af:13:03:23:99:de:79:51:5a:bc:33:67: ca:07:41:3c:85:7e:16:0f:f7:e7:09:86:35:18:8b: e7:7e:3c:3c:d3:22:ac:08:92:63:14:8c:05:91:34: 66:13:54:c4:aa:b3:f3:c3:e9:8f:4e:09:65:d3:2a: 45:88:81:7e:1b:a4:4a:14:7c:16:1c:59:14:c5:72: 8b:ba:9b:af:43:01:68:6c:31:7b:9b:d4:a3:de:e3: a6:42:d6:3b:1e:28:9e:32:55:3e:ea:0b:e0:f9:fb: ce:52:75:48:8b:0e:54:7c:54:00:d1:19:b6:d0:ed: 2a:13:8d:82:c5:8e:60:7d:d4:54:28:a4:9a:d1:67: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9E:B5:60:36:22:16:EC:00:DD:C2:BD:FC:0A:3C:D5:CA:8F:CF:2C X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/9561YDYiFuwA3cK9_Ao81cqPzyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.231.178.0-212.231.183.255 212.231.208.0/20 212.231.232.0/21 Signature Algorithm: sha256WithRSAEncryption 17:cd:6b:84:14:23:bb:2b:30:c7:12:88:52:32:b9:eb:03:4e: 83:4a:e1:dc:fa:cf:8e:f1:48:2a:5b:ff:f7:b2:76:b3:eb:e9: b2:03:c9:b8:3a:d6:a8:c0:96:64:1d:bd:51:76:1a:ec:40:71: b9:3a:f3:93:8c:29:75:fa:1b:a6:b2:70:d3:68:94:94:b9:40: 35:68:17:1b:53:65:80:fe:a8:14:56:f9:a2:ab:c0:cd:5e:6b: a5:d4:63:a7:c2:9a:4d:9a:e2:1f:2a:3c:07:a6:e6:bb:1e:b9: 84:bf:22:8a:55:ef:af:22:90:99:38:b9:6e:29:dd:30:4c:0e: 8c:16:6f:8a:44:73:66:3a:e8:19:b0:10:a1:76:c9:ff:55:4e: 4c:fd:8b:0d:d1:60:49:3e:93:50:12:e6:b3:db:6e:2a:3a:10: 16:8e:fa:02:8a:20:81:24:e4:eb:44:94:ff:aa:b5:0b:4f:fe: e7:d2:ae:ba:f6:9e:58:35:6e:18:b7:55:d3:c1:9d:de:78:7a: 92:7d:10:c7:c2:3e:94:e4:f2:18:7c:0b:2e:b5:d6:65:9b:87: 95:e8:f4:c6:80:81:89:0e:69:f5:d0:7e:57:3a:5e:6f:a6:27: 97:68:e8:06:51:66:fd:34:77:91:c5:c6:2e:be:56:30:b7:e9: 81:62:3a:5f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NFsLJORPFxt5mAIPbD1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzllYjU2MDM2MjIxNmVjMDBkZGMyYmRmYzBhM2NkNWNhOGZjZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiqEtj/MiR+Gz2HUzVMZZ9w/gfX6 B09hthVC/9ciiQFzgzaPJ/qhuEGeDB04TmJd2BcuZI6vNg2NHe6hWbRwIipOLu2J gm0eBRGCIJ3vJH8/9IczMyjPXMIUoVgklUatIHtve2E3/zgLbCGOuT7fLRbTG+nN JQHi5w2vEwMjmd55UVq8M2fKB0E8hX4WD/fnCYY1GIvnfjw80yKsCJJjFIwFkTRm E1TEqrPzw+mPTgll0ypFiIF+G6RKFHwWHFkUxXKLupuvQwFobDF7m9Sj3uOmQtY7 HiieMlU+6gvg+fvOUnVIiw5UfFQA0Rm20O0qE42CxY5gfdRUKKSa0WcmywIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFPeetWA2IhbsAN3CvfwKPNXKj88sMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvOTU2MVlEWWlGdXdBM2NLOV9BbzgxY3FQenl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAHU57ID BAPU57ADBATU59ADBAPU5+gwDQYJKoZIhvcNAQELBQADggEBABfNa4QUI7srMMcS iFIyuesDToNK4dz6z47xSCpb//eydrPr6bIDybg61qjAlmQdvVF2GuxAcbk685OM KXX6G6aycNNolJS5QDVoFxtTZYD+qBRW+aKrwM1ea6XUY6fCmk2a4h8qPAem5rse uYS/IopV768ikJk4uW4p3TBMDowWb4pEc2Y66BmwEKF2yf9VTkz9iw3RYEk+k1AS 5rPbbio6EBaO+gKKIIEk5OtElP+qtQtP/ufSrrr2nlg1bhi3VdPBnd54epJ9EMfC PpTk8hh8Cy611mWbh5Xo9MaAgYkOafXQflc6Xm+mJ5do6AZRZv00d5HFxi6+VjC3 6YFiOl8= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:14 2026 by rpki-client