This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa File: 9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa (raw, json) Hash identifier: TsqPmXPc++P1ZVfmdVvWfaVrdA8JpN8bufMU/WGAR+M= Subject key identifier: F6:BA:C3:83:2E:89:AB:D6:73:44:37:52:44:05:03:CA:86:2B:D2:0C Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019B76EAC06F71C6523DDFC4282A6AB29A6D Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216279 IP address blocks: 185.114.156.0/22 maxlen: 22 185.229.32.0/22 maxlen: 22 2a03:3a60::/32 maxlen: 32 2a03:3a60:a22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c0:6f:71:c6:52:3d:df:c4:28:2a:6a:b2:9a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6bac3832e89abd673443752440503ca862bd20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:e5:2a:0f:ff:01:bf:05:78:70:ac:d9:c7: 96:05:98:47:8e:60:91:07:24:be:8d:fd:4f:cc:4c: a7:01:c1:e9:f1:01:75:64:79:45:43:84:b6:ad:66: f9:de:3d:72:c6:cd:85:30:f9:a1:88:44:df:e2:5f: d2:eb:9b:0c:c1:d2:b5:91:52:7d:9f:6f:27:44:29: ea:3c:9b:e6:ae:a3:db:38:ce:44:d8:d6:0f:c3:0f: 54:63:88:7b:87:7d:14:0d:ef:41:b2:e4:cc:fa:e8: dd:91:31:57:41:d7:f9:8e:cf:63:fe:1c:bb:5b:ef: e9:32:6d:78:d7:02:1e:b9:cc:59:9e:bb:0e:8b:8a: df:3b:9a:92:cf:54:bb:22:13:09:c6:48:09:13:62: 13:9b:7d:0c:c6:ea:83:33:70:e0:a9:e0:75:f2:08: 3c:a4:48:51:7a:2c:d9:6d:c2:ff:0b:d1:17:46:83: 91:34:ac:37:d8:2a:36:0e:70:31:a8:d5:fa:e5:ce: b4:93:da:86:83:e6:4f:c5:a1:f0:6d:67:5b:ab:ba: 9e:0b:e2:32:96:7a:14:ce:43:62:13:61:19:5e:8f: b4:c2:51:ea:23:25:65:da:8c:9e:97:b0:d1:39:fe: 0e:d7:9f:30:66:02:bd:2e:67:a4:71:f5:14:b6:1b: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BA:C3:83:2E:89:AB:D6:73:44:37:52:44:05:03:CA:86:2B:D2:0C X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/9rrDgy6Jq9ZzRDdSRAUDyoYr0gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.156.0/22 185.229.32.0/22 IPv6: 2a03:3a60::/32 Signature Algorithm: sha256WithRSAEncryption 77:7f:21:5f:4f:b6:f1:cf:5e:7c:aa:df:46:37:78:de:51:7c: b3:a9:91:8d:53:e8:af:32:85:92:78:f9:38:ad:e0:70:8b:6c: ff:b0:46:b6:08:35:60:3e:63:90:56:10:c9:04:bf:10:e1:ff: 55:2b:a2:8f:e4:21:8d:7f:9f:47:a0:d9:da:9b:5d:db:1c:1c: 1f:e7:f5:72:c0:b7:6e:32:9b:4d:d2:3f:9b:c1:d8:29:28:ad: 0a:88:a2:1f:b6:3e:38:b2:f7:50:26:6a:35:f9:90:61:ae:1f: eb:a2:30:69:1f:46:98:8c:c3:92:18:c8:11:25:c4:f2:0a:f2: 58:3d:47:ab:47:bc:d4:18:2b:93:21:cb:93:b6:6e:bf:90:ef: 1b:10:23:cb:48:dc:19:c2:0e:79:90:89:a0:51:63:4d:b4:07: 04:2c:d3:70:8e:47:cc:65:4c:a6:cd:67:31:ca:45:65:6d:47: 5a:63:3f:95:d5:e9:e9:ee:3f:ee:aa:55:a6:b2:11:81:9b:44: 4d:85:fd:11:ae:5d:b0:26:ce:82:20:94:93:30:05:b8:78:89: 25:a1:3a:5e:f3:e4:19:0e:fd:0b:c3:29:94:43:87:a4:88:25: c6:fa:c0:ba:5b:8d:44:3f:ba:0b:26:66:e9:83:e3:1f:8b:68: af:7d:51:65 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26sBvccZSPd/EKCpqspptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmJhYzM4MzJlODlhYmQ2NzM0NDM3NTI0NDA1MDNjYTg2MmJkMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlblKg//Ab8FeHCs2ceWBZhHjmCR ByS+jf1PzEynAcHp8QF1ZHlFQ4S2rWb53j1yxs2FMPmhiETf4l/S65sMwdK1kVJ9 n28nRCnqPJvmrqPbOM5E2NYPww9UY4h7h30UDe9BsuTM+ujdkTFXQdf5js9j/hy7 W+/pMm141wIeucxZnrsOi4rfO5qSz1S7IhMJxkgJE2ITm30MxuqDM3DgqeB18gg8 pEhReizZbcL/C9EXRoORNKw32Co2DnAxqNX65c60k9qGg+ZPxaHwbWdbq7qeC+Iy lnoUzkNiE2EZXo+0wlHqIyVl2oyel7DROf4O158wZgK9LmekcfUUthuBJwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPa6w4MuiavWc0Q3UkQFA8qGK9IMMB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvOXJyRGd5NkpxOVp6UkRkU1JBVUR5b1lyMGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXKcAwQC ueUgMA0EAgACMAcDBQAqAzpgMA0GCSqGSIb3DQEBCwUAA4IBAQB3fyFfT7bxz158 qt9GN3jeUXyzqZGNU+ivMoWSePk4reBwi2z/sEa2CDVgPmOQVhDJBL8Q4f9VK6KP 5CGNf59HoNnam13bHBwf5/VywLduMptN0j+bwdgpKK0KiKIftj44svdQJmo1+ZBh rh/rojBpH0aYjMOSGMgRJcTyCvJYPUerR7zUGCuTIcuTtm6/kO8bECPLSNwZwg55 kImgUWNNtAcELNNwjkfMZUymzWcxykVlbUdaYz+V1enp7j/uqlWmshGBm0RNhf0R rl2wJs6CIJSTMAW4eIkloTpe8+QZDv0LwymUQ4ekiCXG+sC6W41EP7oLJmbpg+Mf i2ivfVFl -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:53 2026 by rpki-client