This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q9hv9tjeq6E9ggdm2LoHLOTNIdo.roa File: Q9hv9tjeq6E9ggdm2LoHLOTNIdo.roa (raw, json) Hash identifier: Ktu0PTBWC6LJzAxyMoj8lcoJRKGaQ3k6zKqOeGjGZ0w= Subject key identifier: 43:D8:6F:F6:D8:DE:AB:A1:3D:82:07:66:D8:BA:07:2C:E4:CD:21:DA Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1380D79920D24DB25EB7DD5CE37D02 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q9hv9tjeq6E9ggdm2LoHLOTNIdo.roa Signing time: Fri 02 Jan 2026 00:20:11 +0000 ROA not before: Fri 02 Jan 2026 00:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199704 IP address blocks: 85.115.192.0/22 maxlen: 24 185.224.184.0/22 maxlen: 24 185.224.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:80:d7:99:20:d2:4d:b2:5e:b7:dd:5c:e3:7d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d86ff6d8deaba13d820766d8ba072ce4cd21da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1c:be:f8:d9:9e:01:fb:00:45:7d:af:1d:9b: 32:04:e4:24:c0:81:1a:ec:11:95:81:b6:55:a5:b2: 4e:fa:34:63:a5:33:b6:1d:55:ed:a5:71:ce:d4:1f: a5:4c:bc:9b:6c:17:e5:16:3f:3a:3b:0d:0b:d6:68: ab:28:15:e6:c6:5e:44:23:a9:99:89:ee:d5:2e:bf: 81:83:f0:6a:3a:32:b4:7b:55:32:a3:98:54:0f:f0: 6c:f4:29:7e:30:f9:e4:f0:c4:21:ce:50:9c:4b:44: 15:52:01:3f:46:69:fa:17:fb:ac:6c:91:d5:69:4a: 76:1e:bb:fe:a9:52:1a:bf:5c:bc:5d:50:61:ff:de: 32:15:53:68:4a:b7:c8:ea:52:e5:4d:74:00:f6:73: 4c:11:c9:07:50:a5:fd:98:50:a8:45:8a:6d:c1:7e: b6:11:37:7a:8a:52:85:fb:21:ea:63:2b:0d:02:65: b2:3e:41:8e:42:67:d5:87:c1:c4:ac:e6:be:7c:53: 08:34:53:fa:d2:ae:04:a4:10:c1:bc:22:30:60:30: 71:2f:76:64:c2:e1:08:4a:98:87:56:04:e6:2a:d5: de:e6:2f:c1:11:29:df:1c:0c:43:77:2d:26:05:f8: 1a:86:ec:76:ec:ba:85:9c:2b:fb:39:6b:28:b7:3f: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D8:6F:F6:D8:DE:AB:A1:3D:82:07:66:D8:BA:07:2C:E4:CD:21:DA X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Q9hv9tjeq6E9ggdm2LoHLOTNIdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.192.0/22 185.224.184.0/22 185.224.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:fb:3b:ba:fb:79:d9:83:dc:23:99:04:5c:1a:2c:05:cb:d3: b5:44:55:07:82:37:56:2f:2c:41:ec:63:9a:3d:fb:e2:9a:5c: b1:6a:9f:26:c4:06:35:37:f6:7a:83:b7:0b:08:11:60:09:72: de:e5:20:36:03:92:bd:df:24:80:1d:54:1e:de:91:58:5d:92: 6f:02:dc:ec:35:1a:39:d8:a1:09:f3:3d:a6:3a:aa:df:8c:f0: a0:14:fd:10:cd:df:b2:8b:c1:d7:8d:ba:cd:cf:09:1e:c8:c0: 69:20:e9:f7:ed:a8:c2:1d:d6:e2:b2:8b:2d:23:77:cd:ef:f8: 39:50:c5:e3:e2:f0:4e:b7:ae:9b:b8:21:6d:ab:9c:97:bf:ab: 45:62:0e:71:66:7b:75:18:91:d0:85:83:04:3c:25:56:a4:5d: cc:70:c5:d4:88:fe:8c:86:1e:f3:04:fe:68:a2:53:a6:d0:97: ad:9d:f9:a8:5c:d5:be:ae:fb:3f:d5:65:5c:a1:d1:96:08:af: cd:a4:ed:01:c7:31:d6:53:c8:d3:94:2e:c8:cc:7e:ae:88:84: ac:ed:39:d5:cf:c0:19:fd:25:2b:ed:56:02:17:bd:8c:24:03: 67:6f:63:4c:20:bb:ed:bc:06:e5:5d:a1:6a:6d:97:d0:5f:b2: 94:eb:b5:d3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E4DXmSDSTbJet91c430CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Q4NmZmNmQ4ZGVhYmExM2Q4MjA3NjZkOGJhMDcyY2U0Y2QyMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xy++NmeAfsARX2vHZsyBOQkwIEa 7BGVgbZVpbJO+jRjpTO2HVXtpXHO1B+lTLybbBflFj86Ow0L1mirKBXmxl5EI6mZ ie7VLr+Bg/BqOjK0e1Uyo5hUD/Bs9Cl+MPnk8MQhzlCcS0QVUgE/Rmn6F/usbJHV aUp2Hrv+qVIav1y8XVBh/94yFVNoSrfI6lLlTXQA9nNMEckHUKX9mFCoRYptwX62 ETd6ilKF+yHqYysNAmWyPkGOQmfVh8HErOa+fFMINFP60q4EpBDBvCIwYDBxL3Zk wuEISpiHVgTmKtXe5i/BESnfHAxDdy0mBfgahux27LqFnCv7OWsotz+aCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEPYb/bY3quhPYIHZti6ByzkzSHaMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvUTlodjl0amVxNkU5Z2dkbTJMb0hMT1ROSWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVXPAAwQC ueC4AwQCueDAMA0GCSqGSIb3DQEBCwUAA4IBAQBP+zu6+3nZg9wjmQRcGiwFy9O1 RFUHgjdWLyxB7GOaPfvimlyxap8mxAY1N/Z6g7cLCBFgCXLe5SA2A5K93ySAHVQe 3pFYXZJvAtzsNRo52KEJ8z2mOqrfjPCgFP0Qzd+yi8HXjbrNzwkeyMBpIOn37ajC HdbisostI3fN7/g5UMXj4vBOt66buCFtq5yXv6tFYg5xZnt1GJHQhYMEPCVWpF3M cMXUiP6Mhh7zBP5oolOm0JetnfmoXNW+rvs/1WVcodGWCK/NpO0BxzHWU8jTlC7I zH6uiISs7TnVz8AZ/SUr7VYCF72MJANnb2NMILvtvAblXaFqbZfQX7KU67XT -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:01 2026 by rpki-client