This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/9pyiaYE1JqW-YtrxPqWbwpGrPRI.roa File: 9pyiaYE1JqW-YtrxPqWbwpGrPRI.roa (raw, json) Hash identifier: rfLpfnptUkpz6ETvC4UpqrSnV2DqZLhxaXYjNEmrUcI= Subject key identifier: F6:9C:A2:69:81:35:26:A5:BE:62:DA:F1:3E:A5:9B:C2:91:AB:3D:12 Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019AFE8CC4C3D0F18FC187996E7FA419792B Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/9pyiaYE1JqW-YtrxPqWbwpGrPRI.roa Signing time: Mon 08 Dec 2025 15:20:29 +0000 ROA not before: Mon 08 Dec 2025 15:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 185.56.47.0/24 maxlen: 24 185.87.57.0/24 maxlen: 24 185.87.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:8c:c4:c3:d0:f1:8f:c1:87:99:6e:7f:a4:19:79:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Dec 8 15:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f69ca269813526a5be62daf13ea59bc291ab3d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:99:63:00:49:53:4f:b1:a4:5b:28:c8:66: 20:ff:e9:c7:10:0e:06:cf:a5:d3:0b:72:79:e2:8e: 7c:f1:31:45:35:20:d7:91:f3:4b:e1:0e:7c:06:b1: b2:f3:ae:13:b4:19:74:f3:56:ff:f5:46:a8:e5:25: 12:19:2c:0b:67:64:f6:25:b3:96:48:90:cb:15:48: 56:98:59:25:ef:0e:3e:50:6b:31:b3:4e:90:17:c5: 80:0e:f5:e4:55:6a:01:1f:71:3f:fe:de:a1:be:0e: 4f:cc:83:67:8f:c6:e2:bf:ed:db:c5:9c:81:43:3e: b8:d8:4a:b7:45:db:6c:ae:85:47:72:f2:fd:18:c7: 60:aa:92:81:1a:48:f9:c5:42:c8:05:01:9a:cc:63: 42:a6:ba:a8:aa:e6:43:8a:68:b5:de:f3:c9:de:d7: db:b4:6e:9b:07:22:9b:f5:98:a9:7b:91:fd:e6:d9: ee:e8:f7:94:71:04:1b:ef:26:d8:01:74:a5:34:c3: 6a:4b:93:7b:cc:95:16:55:9b:11:bd:ff:e8:d2:73: 0a:7f:ef:59:54:2a:85:e6:a9:57:51:26:b4:2d:2b: c5:1c:22:36:0d:39:f7:f3:71:2c:e0:a0:d3:65:38: ae:02:b9:6a:e6:81:c0:88:6b:8f:4c:d7:84:c1:88: 98:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9C:A2:69:81:35:26:A5:BE:62:DA:F1:3E:A5:9B:C2:91:AB:3D:12 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/9pyiaYE1JqW-YtrxPqWbwpGrPRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.47.0/24 185.87.57.0-185.87.58.255 Signature Algorithm: sha256WithRSAEncryption 64:20:dc:43:fa:51:ff:05:d8:c4:fd:ea:e7:c4:2b:c6:e0:b9: e9:51:d8:40:93:5a:36:81:57:23:70:8f:b0:0c:06:81:65:3b: f9:14:78:17:93:9d:3d:37:7f:bd:70:15:cf:86:9e:9b:75:a0: 51:c6:c9:a2:8d:ab:26:0c:ca:c7:cf:e7:ae:86:bc:e6:aa:68: 58:3e:d7:20:8c:48:a1:4c:45:d5:42:ca:0e:41:3b:83:0a:9f: 00:41:cc:d0:eb:40:a0:1b:de:77:1c:2e:9f:72:f6:3b:bb:45: c8:b1:02:b4:35:cf:71:cc:e0:87:42:2c:a4:a0:b9:f3:42:36: 20:c2:60:8c:f9:54:c3:66:de:1f:1c:ce:e9:9f:fe:dd:d4:30: 07:6f:a1:b9:dd:1a:58:26:8e:83:f9:90:3d:87:39:df:6d:df: 4b:2d:d5:ac:ff:5c:aa:12:5a:1b:87:1b:87:40:dd:89:ed:77: a5:f3:37:6c:41:2a:39:61:8d:f9:9a:26:f9:63:55:49:ce:13: 4e:ed:54:2d:04:92:ed:5c:79:85:bf:f3:a0:80:48:2a:cc:90: 65:28:c7:dd:3f:21:a2:cc:d3:3b:4a:9d:66:fa:50:94:39:17: 18:ed:85:33:a6:6a:78:73:ab:d1:0e:c2:8f:bf:c3:76:06:1c: cb:6c:1b:13 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZr+jMTD0PGPwYeZbn+kGXkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjUxMjA4MTUyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjljYTI2OTgxMzUyNmE1YmU2MmRhZjEzZWE1OWJjMjkxYWIzZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7SZYwBJU0+xpFsoyGYg/+nHEA4G z6XTC3J54o588TFFNSDXkfNL4Q58BrGy864TtBl081b/9Uao5SUSGSwLZ2T2JbOW SJDLFUhWmFkl7w4+UGsxs06QF8WADvXkVWoBH3E//t6hvg5PzINnj8biv+3bxZyB Qz642Eq3RdtsroVHcvL9GMdgqpKBGkj5xULIBQGazGNCprqoquZDimi13vPJ3tfb tG6bByKb9Zipe5H95tnu6PeUcQQb7ybYAXSlNMNqS5N7zJUWVZsRvf/o0nMKf+9Z VCqF5qlXUSa0LSvFHCI2DTn383Es4KDTZTiuArlq5oHAiGuPTNeEwYiYcwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPacommBNSalvmLa8T6lm8KRqz0SMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvOXB5aWFZRTFKcVctWXRyeFBxV2J3cEdyUFJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuTgvMAwD BAC5VzkDBAC5VzowDQYJKoZIhvcNAQELBQADggEBAGQg3EP6Uf8F2MT96ufEK8bg uelR2ECTWjaBVyNwj7AMBoFlO/kUeBeTnT03f71wFc+Gnpt1oFHGyaKNqyYMysfP 566GvOaqaFg+1yCMSKFMRdVCyg5BO4MKnwBBzNDrQKAb3nccLp9y9ju7RcixArQ1 z3HM4IdCLKSgufNCNiDCYIz5VMNm3h8czumf/t3UMAdvobndGlgmjoP5kD2HOd9t 30st1az/XKoSWhuHG4dA3Yntd6XzN2xBKjlhjfmaJvljVUnOE07tVC0Eku1ceYW/ 86CASCrMkGUox90/IaLM0ztKnWb6UJQ5FxjthTOmanhzq9EOwo+/w3YGHMtsGxM= -----END CERTIFICATE-----Generated at Fri Dec 19 09:56:33 2025 by rpki-client