This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/9gyIdfYx-vxaH69AuzYIu8sS7ec.roa File: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (raw, json) Hash identifier: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4= Subject key identifier: F6:0C:88:75:F6:31:FA:FC:5A:1F:AF:40:BB:36:08:BB:CB:12:ED:E7 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C371C8928D910574F5058ED4786CC Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/9gyIdfYx-vxaH69AuzYIu8sS7ec.roa Signing time: Fri 02 Jan 2026 06:19:13 +0000 ROA not before: Fri 02 Jan 2026 06:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209066 IP address blocks: 185.60.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:37:1c:89:28:d9:10:57:4f:50:58:ed:47:86:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f60c8875f631fafc5a1faf40bb3608bbcb12ede7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:01:50:0a:12:35:b7:05:ca:74:e0:3b:8f: 41:c0:4c:eb:81:ce:ef:55:b2:22:03:aa:a7:8c:71: d8:4a:93:a0:12:63:23:0f:2d:c7:b7:b1:81:2e:c9: ac:25:29:1d:e7:8b:55:0c:c5:98:05:f6:4e:85:f0: 7f:e8:e4:16:2b:a8:2e:94:1a:28:b1:2c:8d:47:03: 57:e8:2f:5a:a0:e7:3d:31:97:30:8f:56:5d:b1:97: 5d:ab:bc:0f:5a:83:3e:7d:6a:26:1f:53:f5:4c:7c: e8:9d:cf:18:f9:5c:94:b9:25:fe:d3:a6:38:fb:b0: d4:9d:a5:d6:01:d9:99:62:cf:2e:d5:84:96:5e:a2: fd:a9:9d:f5:5f:de:0c:d4:9d:09:4c:f9:3a:d3:bd: de:d4:13:ed:3b:46:86:3c:4a:24:40:52:3d:5d:df: 81:d1:ba:44:92:84:18:1f:35:5f:84:4b:83:b7:d5: 68:4a:40:e8:6d:6c:98:83:3a:4e:6e:35:40:a1:48: 51:e7:22:f7:cb:7e:e8:b9:a1:67:51:0e:d5:3b:4f: 27:b2:a0:b3:6b:43:9a:ac:29:f0:dd:5b:48:a2:1a: 0c:dc:c2:f4:82:0f:55:a1:39:02:d1:25:b7:13:d2: 94:85:27:f6:c0:5e:cb:9a:3d:89:ff:04:49:98:c1: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0C:88:75:F6:31:FA:FC:5A:1F:AF:40:BB:36:08:BB:CB:12:ED:E7 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/9gyIdfYx-vxaH69AuzYIu8sS7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.228.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:32:19:03:75:4b:5e:88:90:e3:36:0e:a1:96:2c:07:aa:76: 53:71:fe:04:75:5c:21:14:92:5f:7d:6d:42:1d:6b:be:ae:49: b5:b1:d8:53:7e:d8:d0:e5:69:9d:30:3f:df:c6:e5:e1:2f:cb: 7b:84:49:26:61:9c:d7:1f:45:b8:b5:91:d1:f5:d6:38:6f:5d: 69:00:f4:68:f7:97:a4:10:5e:69:f0:b1:71:25:ab:1e:6a:fc: 02:b6:02:6b:b1:ae:af:b0:b0:eb:25:bb:a6:2b:62:14:5c:49: 8d:4c:70:33:3b:02:f9:6b:e1:ab:de:a5:b5:88:9e:15:2b:4d: 48:29:cb:ac:ed:c9:32:0d:73:97:1f:5f:5e:1a:40:d2:fe:78: d8:f1:06:da:9d:91:6a:1a:9a:f5:5f:35:37:36:52:53:bc:b9: 0c:6a:2f:0e:df:ad:97:be:a6:a2:04:1d:bf:f2:14:90:7e:bd: af:44:a3:f4:e6:5c:bb:0f:a5:1c:98:a0:84:d3:54:8e:b2:af: 52:4a:70:5b:d2:42:68:96:34:50:7c:14:d8:0d:52:3b:0a:91: 10:0d:7e:80:6c:0e:a6:9a:d9:88:5e:42:7c:28:0e:62:6b:44: b8:2e:70:ab:96:c9:ae:64:08:ff:6f:e1:05:ad:da:26:6a:f4: 4d:34:96:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XDcciSjZEFdPUFjtR4bMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjBjODg3NWY2MzFmYWZjNWExZmFmNDBiYjM2MDhiYmNiMTJlZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb4BUAoSNbcFynTgO49BwEzrgc7v VbIiA6qnjHHYSpOgEmMjDy3Ht7GBLsmsJSkd54tVDMWYBfZOhfB/6OQWK6gulBoo sSyNRwNX6C9aoOc9MZcwj1ZdsZddq7wPWoM+fWomH1P1THzonc8Y+VyUuSX+06Y4 +7DUnaXWAdmZYs8u1YSWXqL9qZ31X94M1J0JTPk6073e1BPtO0aGPEokQFI9Xd+B 0bpEkoQYHzVfhEuDt9VoSkDobWyYgzpObjVAoUhR5yL3y37ouaFnUQ7VO08nsqCz a0OarCnw3VtIohoM3ML0gg9VoTkC0SW3E9KUhSf2wF7Lmj2J/wRJmMGzLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYMiHX2Mfr8Wh+vQLs2CLvLEu3nMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvOWd5SWRmWXgtdnhhSDY5QXV6WUl1OHNTN2VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTzkMA0G CSqGSIb3DQEBCwUAA4IBAQAuMhkDdUteiJDjNg6hliwHqnZTcf4EdVwhFJJffW1C HWu+rkm1sdhTftjQ5WmdMD/fxuXhL8t7hEkmYZzXH0W4tZHR9dY4b11pAPRo95ek EF5p8LFxJaseavwCtgJrsa6vsLDrJbumK2IUXEmNTHAzOwL5a+Gr3qW1iJ4VK01I Kcus7ckyDXOXH19eGkDS/njY8QbanZFqGpr1XzU3NlJTvLkMai8O362XvqaiBB2/ 8hSQfr2vRKP05ly7D6UcmKCE01SOsq9SSnBb0kJoljRQfBTYDVI7CpEQDX6AbA6m mtmIXkJ8KA5ia0S4LnCrlsmuZAj/b+EFrdomavRNNJbF -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:46 2026 by rpki-client