This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa File: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (raw, json) Hash identifier: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg= Subject key identifier: C4:9F:68:2E:18:B4:8D:9D:DB:C7:9A:C4:55:34:09:F8:36:EA:F0:87 Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Certificate serial: 019B7C7FBBA076A1D82F99332F4288418B15 Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa Signing time: Fri 02 Jan 2026 02:18:24 +0000 ROA not before: Fri 02 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202675 IP address blocks: 185.221.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bb:a0:76:a1:d8:2f:99:33:2f:42:88:41:8b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277 Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c49f682e18b48d9ddbc79ac4553409f836eaf087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:85:d0:8a:fd:86:d4:12:24:d7:60:2a:48: 7d:f6:5f:ec:50:8a:1e:7d:b9:b2:04:3f:4b:0d:bb: d7:e7:6a:35:fb:eb:35:b1:4f:d0:f6:78:82:fc:75: ba:5a:3d:ef:c4:ac:aa:e4:97:b3:53:d8:54:89:6b: 36:2a:71:e1:c3:dd:47:34:64:e0:06:50:31:2e:0c: 6e:61:f9:bc:19:fd:2d:68:e6:48:ab:de:29:6e:19: c9:45:19:1f:5c:63:99:d2:3d:50:ad:45:f4:8e:88: 61:9e:03:6b:05:6c:aa:9c:a5:e8:c5:25:9f:b2:c1: 19:89:14:1b:61:58:cc:78:0f:ea:62:ad:80:8f:2f: 80:0b:79:8c:e0:77:39:2f:b8:aa:07:9b:74:22:42: 07:71:a7:7d:8a:4b:23:b1:22:a8:c5:85:51:67:a9: 49:70:12:2e:73:b9:2c:f6:96:57:21:c9:96:b8:88: 0f:0f:24:8a:14:27:13:df:0e:cd:04:5e:9e:6f:18: 42:8d:5c:c5:78:23:fa:ee:4f:4e:31:fc:f5:f2:67: 7e:e1:98:69:da:84:fe:fe:59:f1:d2:ed:62:fe:54: 51:74:b9:26:a3:57:c2:21:64:a3:7b:ca:9f:07:51: 97:8e:4a:57:c6:0b:c7:99:1a:e7:b0:e4:73:44:7a: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9F:68:2E:18:B4:8D:9D:DB:C7:9A:C4:55:34:09:F8:36:EA:F0:87 X509v3 Authority Key Identifier: keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.172.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:75:19:49:b8:f5:e7:ac:40:8c:7a:e1:42:9c:83:55:b4:86: fc:35:6f:f3:5d:6c:47:70:75:96:59:8b:e6:9a:b2:a6:a3:43: 73:94:22:ad:6f:c0:fa:ed:7a:3e:ea:41:20:63:50:fc:a1:ab: 71:f7:18:ef:68:7f:9c:34:3a:c3:2f:7d:ca:d8:a0:b6:11:69: 61:8d:0a:cd:48:cd:69:6c:26:ae:c7:97:b7:76:01:05:9b:e0: f0:b3:7a:22:cf:10:48:cb:e3:0e:57:d1:c5:7e:91:1d:b8:49: 50:cd:40:d8:df:8f:7a:99:ef:49:6c:6c:2b:fc:37:11:37:ff: c5:35:61:94:c6:1c:c9:37:00:82:d6:12:20:4c:ae:28:05:70: f4:da:ac:28:59:be:f0:81:ee:e7:bf:e3:5a:80:1c:29:de:ec: 2f:5d:26:eb:4b:54:bb:7c:6b:00:3d:7f:ea:3c:ec:78:17:0b: ab:d0:03:11:0e:52:cd:6e:71:c1:36:9f:ce:1a:f1:8f:28:ab: 70:f9:4d:0e:35:55:99:0c:d6:b5:87:96:ba:73:a3:c6:2a:46: 56:ce:c1:d9:4e:b8:20:6b:01:9f:af:e3:7a:09:c5:af:e1:ab: 8e:4c:01:3a:11:ad:97:2c:73:ec:2a:5b:7b:83:e3:4c:36:bc: 6b:9e:7e:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7ugdqHYL5kzL0KIQYsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjg5NTM1ZTdlNGQyM2U2M2UxNzhlM2ZiNWJmMDU2ZmU4 YWUyNzcwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDlmNjgyZTE4YjQ4ZDlkZGJjNzlhYzQ1NTM0MDlmODM2ZWFmMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+uF0Ir9htQSJNdgKkh99l/sUIoe fbmyBD9LDbvX52o1++s1sU/Q9niC/HW6Wj3vxKyq5JezU9hUiWs2KnHhw91HNGTg BlAxLgxuYfm8Gf0taOZIq94pbhnJRRkfXGOZ0j1QrUX0johhngNrBWyqnKXoxSWf ssEZiRQbYVjMeA/qYq2Ajy+AC3mM4Hc5L7iqB5t0IkIHcad9iksjsSKoxYVRZ6lJ cBIuc7ks9pZXIcmWuIgPDySKFCcT3w7NBF6ebxhCjVzFeCP67k9OMfz18md+4Zhp 2oT+/lnx0u1i/lRRdLkmo1fCIWSje8qfB1GXjkpXxgvHmRrnsORzRHpIgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSfaC4YtI2d28eaxFU0Cfg26vCHMB8GA1UdIwQY MBaAFMgolTXn5NI+Y+F44/tb8Fb+iuJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQt NjZhNWVjYzg0NjE2LzEveEo5b0xoaTBqWjNieDVyRVZUUUotRGJxOEljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82ZGNlZGItY2EwYi00ODNhLWE2NjQtNjZhNWVjYzg0NjE2 LzEveUNpVk5lZmswajVqNFhqai0xdndWdjZLNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud2sMA0G CSqGSIb3DQEBCwUAA4IBAQAbdRlJuPXnrECMeuFCnINVtIb8NW/zXWxHcHWWWYvm mrKmo0NzlCKtb8D67Xo+6kEgY1D8oatx9xjvaH+cNDrDL33K2KC2EWlhjQrNSM1p bCaux5e3dgEFm+Dws3oizxBIy+MOV9HFfpEduElQzUDY3496me9JbGwr/DcRN//F NWGUxhzJNwCC1hIgTK4oBXD02qwoWb7wge7nv+NagBwp3uwvXSbrS1S7fGsAPX/q POx4Fwur0AMRDlLNbnHBNp/OGvGPKKtw+U0ONVWZDNa1h5a6c6PGKkZWzsHZTrgg awGfr+N6CcWv4auOTAE6Ea2XLHPsKlt7g+NMNrxrnn4G -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:55 2026 by rpki-client