This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/i9m60f0agbDQcuxvOKyFPSYJ9E0.roa File: i9m60f0agbDQcuxvOKyFPSYJ9E0.roa (raw, json) Hash identifier: PhdEiYDxfPiNuWDQSpU1KHaY+OIi/NCnZKWJxc7Quv0= Subject key identifier: 8B:D9:BA:D1:FD:1A:81:B0:D0:72:EC:6F:38:AC:85:3D:26:09:F4:4D Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C848850C91F23C942A6AD1841BEE Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/i9m60f0agbDQcuxvOKyFPSYJ9E0.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 89.185.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c8:48:85:0c:91:f2:3c:94:2a:6a:d1:84:1b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd9bad1fd1a81b0d072ec6f38ac853d2609f44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:8c:c3:74:71:09:c1:de:46:b2:7e:5f:23: 70:67:b2:70:15:e8:51:80:a8:40:e6:2d:07:da:bf: c1:48:30:54:1e:3b:7a:bd:6b:99:be:6b:9d:fe:1a: 7d:ff:4e:ab:84:94:0f:7d:46:dc:3f:83:0b:e1:d6: 02:eb:79:5e:a8:d3:05:89:87:d1:41:59:3a:1b:1f: 0d:c6:06:ae:e6:d2:69:5a:f5:f2:94:15:ee:38:f6: 2f:6a:20:8b:a8:c2:b2:16:fb:32:1c:21:ae:78:17: 31:6c:8f:c8:59:1e:5a:46:3a:28:99:9d:38:b8:47: ae:43:4c:88:41:be:07:d1:64:1f:43:ff:13:6d:45: 63:47:55:c8:79:5b:d9:cb:eb:97:ab:6d:bf:48:e3: 19:3a:54:ea:33:12:43:9f:11:a1:33:2b:29:8e:ab: c7:d4:fd:db:7e:b3:bf:e3:10:73:6d:e7:62:af:eb: 31:58:42:4b:66:07:fa:ef:46:3d:da:77:04:fe:d5: 37:e7:1b:68:8d:b8:94:68:20:ed:25:09:c4:ed:b2: d9:2c:bc:1a:de:f8:bb:5e:40:fd:08:04:5e:11:08: ae:1a:f4:d5:85:f2:43:a4:a0:3a:dd:47:a5:ef:a9: ba:e2:04:33:02:ce:f6:70:2f:d0:60:7d:9d:20:a1: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D9:BA:D1:FD:1A:81:B0:D0:72:EC:6F:38:AC:85:3D:26:09:F4:4D X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/i9m60f0agbDQcuxvOKyFPSYJ9E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.3.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:06:12:4a:32:d5:26:9f:32:d2:d6:c8:b8:78:52:45:e5:70: eb:74:a1:ea:2f:15:1f:56:c0:cf:75:77:10:c0:0e:22:98:55: 8d:b9:16:b2:e9:b7:09:35:5a:90:70:62:8f:c8:f4:df:90:b7: 26:da:4c:e1:0e:04:3c:dc:ca:50:63:a8:25:2c:34:87:23:03: 45:b8:e2:dd:a9:c2:f9:d1:1a:20:68:4e:ba:9a:ac:2f:98:19: 87:e3:71:8c:41:af:17:ca:c1:f6:af:4c:7f:3f:4b:cc:46:30: 2e:60:6e:9b:1e:09:3e:b9:4e:28:ab:39:aa:09:20:b3:b4:b2: 83:4f:09:dd:09:57:35:9a:62:3a:4b:be:d0:79:e0:52:70:28: 16:7d:4b:5b:89:6d:10:e0:d0:0e:5a:5a:93:d7:74:83:49:fc: 3a:c5:a8:37:c3:9a:54:7a:d6:6c:55:27:3f:07:01:4b:0a:08: c0:c1:b1:ff:bd:11:53:7e:0a:02:db:89:7d:bf:15:99:00:08: cb:e7:4e:a3:f9:4c:e3:8a:d1:0f:dc:4c:37:95:8a:1a:f8:a2: da:dd:2c:df:67:38:2c:1a:bb:f5:38:2a:b9:7f:4a:a6:28:24: 4b:9e:d3:c5:4c:e6:29:2e:d8:84:ea:37:60:ed:88:e5:a3:c7: 80:f8:36:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oshIhQyR8jyUKmrRhBvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQ5YmFkMWZkMWE4MWIwZDA3MmVjNmYzOGFjODUzZDI2MDlmNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMWMw3RxCcHeRrJ+XyNwZ7JwFehR gKhA5i0H2r/BSDBUHjt6vWuZvmud/hp9/06rhJQPfUbcP4ML4dYC63leqNMFiYfR QVk6Gx8Nxgau5tJpWvXylBXuOPYvaiCLqMKyFvsyHCGueBcxbI/IWR5aRjoomZ04 uEeuQ0yIQb4H0WQfQ/8TbUVjR1XIeVvZy+uXq22/SOMZOlTqMxJDnxGhMyspjqvH 1P3bfrO/4xBzbedir+sxWEJLZgf670Y92ncE/tU35xtojbiUaCDtJQnE7bLZLLwa 3vi7XkD9CAReEQiuGvTVhfJDpKA63Uel76m64gQzAs72cC/QYH2dIKEvWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvZutH9GoGw0HLsbzishT0mCfRNMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvaTltNjBmMGFnYkRRY3V4dk9LeUZQU1lKOUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkDMA0G CSqGSIb3DQEBCwUAA4IBAQAaBhJKMtUmnzLS1si4eFJF5XDrdKHqLxUfVsDPdXcQ wA4imFWNuRay6bcJNVqQcGKPyPTfkLcm2kzhDgQ83MpQY6glLDSHIwNFuOLdqcL5 0RogaE66mqwvmBmH43GMQa8XysH2r0x/P0vMRjAuYG6bHgk+uU4oqzmqCSCztLKD TwndCVc1mmI6S77QeeBScCgWfUtbiW0Q4NAOWlqT13SDSfw6xag3w5pUetZsVSc/ BwFLCgjAwbH/vRFTfgoC24l9vxWZAAjL506j+UzjitEP3Ew3lYoa+KLa3SzfZzgs Grv1OCq5f0qmKCRLntPFTOYpLtiE6jdg7Yjlo8eA+DYU -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:19 2026 by rpki-client