This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa File: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (raw, json) Hash identifier: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc= Subject key identifier: 98:34:CE:1C:AC:7D:A4:53:DB:E8:43:8F:F5:4C:50:C6:6F:82:94:AC Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa Certificate serial: 019B7834B412184BF95A31C773F20954FFBB Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210021 IP address blocks: 185.75.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b4:12:18:4b:f9:5a:31:c7:73:f2:09:54:ff:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9834ce1cac7da453dbe8438ff54c50c66f8294ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:c2:65:11:6f:82:97:d6:9b:c5:40:1d:49: 6c:86:a4:3b:b0:53:93:54:e8:8b:73:fe:57:ee:e3: 50:0e:66:99:d4:f5:41:9f:3b:bb:12:ba:01:cb:6f: bd:40:aa:ad:6e:6c:e9:d0:62:60:48:94:f4:80:17: 4c:2d:be:c7:ed:99:6f:b0:2f:a7:d9:4a:d5:b6:bb: 4b:46:8a:3b:d5:54:52:c6:12:73:97:06:d5:de:c3: 9f:b3:1d:19:67:53:00:2d:10:5b:b0:50:26:ef:46: 2c:6a:b8:66:98:48:78:69:70:f4:b2:d1:a8:84:08: 98:53:76:76:3c:5b:36:64:9c:00:77:d8:36:58:57: bc:9a:13:b1:04:f5:e0:fb:98:fd:6f:47:c6:0c:5c: a3:2d:4a:60:99:d5:ef:db:29:47:9b:7f:e6:a3:cb: bb:b2:3c:5d:f6:9c:51:34:fc:8d:09:c8:ef:12:9d: 58:39:db:95:07:b6:5f:f0:69:c9:f0:a9:c4:18:fb: 4e:8a:07:b9:42:9d:4f:d7:55:8a:0a:0f:fe:50:8c: df:37:65:9f:fd:0b:9d:de:f2:94:bc:16:0c:08:c8: 70:c6:aa:f0:22:4d:49:a5:7b:5c:d9:76:b7:89:67: 6b:7e:47:e6:d6:60:96:fa:50:7d:e0:af:4b:54:c5: a7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:34:CE:1C:AC:7D:A4:53:DB:E8:43:8F:F5:4C:50:C6:6F:82:94:AC X509v3 Authority Key Identifier: keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.99.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:df:d4:a5:64:64:25:72:55:22:42:a5:cb:cc:e9:fe:8d:18: 27:25:ff:59:73:5b:5a:6e:97:da:a3:ae:73:cc:9f:03:72:ac: 0b:03:85:99:cb:fe:7e:7b:4b:88:30:d2:2f:c4:5c:74:5a:52: e4:5d:57:aa:01:a0:17:ad:da:72:a1:fb:d8:9f:75:6a:07:82: 11:62:d6:18:b3:b3:48:0d:53:b7:1d:95:59:48:b7:db:8f:4c: 07:11:5e:ac:cc:cd:89:6a:1b:bc:f4:68:7f:09:f7:16:5d:a4: be:03:75:20:ba:56:60:38:10:e4:5f:55:d6:83:d9:6c:f2:4d: 81:30:6f:66:e3:68:50:31:f5:a7:fa:fb:07:77:5a:46:28:64: a7:b1:d9:c7:29:20:5d:ea:06:6f:1e:3f:c0:04:f6:68:39:b2: 35:a5:8f:64:f9:02:fd:e9:f8:b5:c6:ad:a0:a8:ce:7b:45:78: 29:44:3a:6b:84:02:a4:36:04:5d:5d:28:15:e2:7c:01:b5:3e: 7e:1a:d1:d3:e3:b0:53:72:f4:8e:85:40:9b:9e:c3:7d:47:61: 7d:e3:0a:a9:69:ef:2d:7b:ca:8c:84:33:70:51:b6:48:91:4e: a0:6c:11:93:a2:d6:85:90:cf:07:36:a8:eb:a9:f5:3e:0d:08: 1f:3c:ed:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLQSGEv5WjHHc/IJVP+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjA1MWU4ZTY4MTQ5YjY2MDQ0ZTdkZTRhZTU5ZDczNmU1 MzdhYWEwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODM0Y2UxY2FjN2RhNDUzZGJlODQzOGZmNTRjNTBjNjZmODI5NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJPCZRFvgpfWm8VAHUlshqQ7sFOT VOiLc/5X7uNQDmaZ1PVBnzu7EroBy2+9QKqtbmzp0GJgSJT0gBdMLb7H7ZlvsC+n 2UrVtrtLRoo71VRSxhJzlwbV3sOfsx0ZZ1MALRBbsFAm70YsarhmmEh4aXD0stGo hAiYU3Z2PFs2ZJwAd9g2WFe8mhOxBPXg+5j9b0fGDFyjLUpgmdXv2ylHm3/mo8u7 sjxd9pxRNPyNCcjvEp1YOduVB7Zf8GnJ8KnEGPtOige5Qp1P11WKCg/+UIzfN2Wf /Qud3vKUvBYMCMhwxqrwIk1JpXtc2Xa3iWdrfkfm1mCW+lB94K9LVMWnowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJg0zhysfaRT2+hDj/VMUMZvgpSsMB8GA1UdIwQY MBaAFMmwUejmgUm2YETn3krlnXNuU3qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDkt YmI0ZDI0MmVkMmNkLzEvbURUT0hLeDlwRlBiNkVPUDlVeFF4bS1DbEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iNzU2YjQtY2U0MS00MWI1LWExZDktYmI0ZDI0MmVkMmNk LzEveWJCUjZPYUJTYlpnUk9mZVN1V2RjMjVUZXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUtjMA0G CSqGSIb3DQEBCwUAA4IBAQCd39SlZGQlclUiQqXLzOn+jRgnJf9Zc1tabpfao65z zJ8DcqwLA4WZy/5+e0uIMNIvxFx0WlLkXVeqAaAXrdpyofvYn3VqB4IRYtYYs7NI DVO3HZVZSLfbj0wHEV6szM2Jahu89Gh/CfcWXaS+A3UgulZgOBDkX1XWg9ls8k2B MG9m42hQMfWn+vsHd1pGKGSnsdnHKSBd6gZvHj/ABPZoObI1pY9k+QL96fi1xq2g qM57RXgpRDprhAKkNgRdXSgV4nwBtT5+GtHT47BTcvSOhUCbnsN9R2F94wqpae8t e8qMhDNwUbZIkU6gbBGTotaFkM8HNqjrqfU+DQgfPO2s -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:17 2026 by rpki-client