This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/9I37uSLgJ82CVvmcGNoEOygvMrc.roa File: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (raw, json) Hash identifier: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk= Subject key identifier: F4:8D:FB:B9:22:E0:27:CD:82:56:F9:9C:18:DA:04:3B:28:2F:32:B7 Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Certificate serial: 019B7910B872FFE26C09C4FED654C8D109BE Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/9I37uSLgJ82CVvmcGNoEOygvMrc.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211957 IP address blocks: 185.235.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b8:72:ff:e2:6c:09:c4:fe:d6:54:c8:d1:09:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f48dfbb922e027cd8256f99c18da043b282f32b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:47:ef:6f:e7:60:3e:cc:5a:da:58:ac:85: ee:34:81:90:fc:58:40:d1:50:25:44:01:9e:49:d8: 3e:63:49:91:90:1b:fc:2b:07:10:28:10:bd:b0:ad: 31:8e:7d:75:83:6d:45:15:71:ed:c2:4c:e5:32:14: 42:b4:74:30:58:a8:b7:50:65:f2:b4:a1:c5:d0:d6: 00:0b:42:aa:02:96:48:b7:00:bd:61:f4:b2:2f:31: d4:27:bd:93:b2:6c:a8:75:04:19:b0:5d:a1:dd:e6: 27:3d:40:d5:52:8b:56:91:96:7f:13:44:66:66:e0: ec:3b:ea:d6:56:67:b9:aa:85:b4:94:d5:21:27:74: 72:c3:2e:78:72:0f:18:95:ca:f2:e5:cd:ed:5d:26: 77:3b:37:6e:b9:61:d4:04:39:55:4c:4d:b3:ff:8c: e8:b5:72:26:22:7f:42:76:12:ce:b9:cc:a3:df:8b: f2:74:ef:b3:72:2b:40:ff:e1:bd:e0:74:86:14:59: 26:0a:6d:81:95:94:24:19:cf:fb:31:16:5d:91:7d: e4:6b:ef:a2:6b:16:08:f5:3d:df:c3:d4:4a:e1:fe: 3c:99:ce:0f:82:8c:1d:60:d6:31:f7:e3:db:0b:f4: 88:c8:3e:82:10:fe:d2:86:1b:3c:7c:9c:68:a7:ba: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8D:FB:B9:22:E0:27:CD:82:56:F9:9C:18:DA:04:3B:28:2F:32:B7 X509v3 Authority Key Identifier: keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/9I37uSLgJ82CVvmcGNoEOygvMrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.8.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:bf:6c:dd:c0:9b:2a:ef:af:9e:0f:3b:ed:4f:95:62:88:88: b2:cb:8a:62:3b:e2:f4:f8:c7:21:25:99:c7:44:bd:ab:fb:0d: 80:e5:7a:62:7c:7b:af:4f:6e:4e:9b:d9:6d:27:10:90:9b:bd: f7:ec:b3:f1:e6:23:6a:f0:02:9b:c1:19:08:ae:35:8f:e3:30: ba:8a:79:cf:ec:7f:d8:8b:76:cd:13:43:ca:aa:b8:95:4b:86: cf:63:d2:94:5e:a5:2c:76:36:e8:5d:68:13:c6:a7:7e:24:24: ea:62:ec:aa:b8:cd:22:9b:48:d0:3a:8f:11:d8:20:de:23:5a: 76:9e:1c:36:b5:d0:8c:24:9a:c6:24:1b:a9:22:d8:93:ea:6b: e0:97:55:bf:02:75:ca:6a:8a:bc:7d:30:42:6e:36:55:8e:2b: 7c:0c:ba:93:67:9c:e2:d3:56:de:84:7d:4a:82:a3:8b:6f:bd: b6:1b:bf:b8:4f:28:e8:e1:26:aa:99:b8:a5:d1:09:f6:e3:98: 31:07:9f:7c:68:06:7b:ed:8e:c4:dd:56:d6:ae:d6:6f:4e:e3: 9b:cc:aa:5f:de:e2:e6:83:c4:cf:3d:5c:19:bb:f0:68:05:ae: 63:25:85:a0:ec:ca:11:28:b7:c5:96:8b:66:9e:f3:50:07:98: 74:59:af:2c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5ELhy/+JsCcT+1lTI0Qm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4 ODQyM2YwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDhkZmJiOTIyZTAyN2NkODI1NmY5OWMxOGRhMDQzYjI4MmYzMmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YtH72/nYD7MWtpYrIXuNIGQ/FhA 0VAlRAGeSdg+Y0mRkBv8KwcQKBC9sK0xjn11g21FFXHtwkzlMhRCtHQwWKi3UGXy tKHF0NYAC0KqApZItwC9YfSyLzHUJ72TsmyodQQZsF2h3eYnPUDVUotWkZZ/E0Rm ZuDsO+rWVme5qoW0lNUhJ3Rywy54cg8Ylcry5c3tXSZ3OzduuWHUBDlVTE2z/4zo tXImIn9CdhLOucyj34vydO+zcitA/+G94HSGFFkmCm2BlZQkGc/7MRZdkX3ka++i axYI9T3fw9RK4f48mc4PgowdYNYx9+PbC/SIyD6CEP7Shhs8fJxop7reGwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPSN+7ki4CfNglb5nBjaBDsoLzK3MB8GA1UdIwQY MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2 LTZhN2MzYmEzMTQxMC8xLzlJMzd1U0xnSjgyQ1Z2bWNHTm9FT3lndk1yYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2LTZhN2MzYmEzMTQx MC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC56wgw DQYJKoZIhvcNAQELBQADggEBACq/bN3Amyrvr54PO+1PlWKIiLLLimI74vT4xyEl mcdEvav7DYDlemJ8e69Pbk6b2W0nEJCbvffss/HmI2rwApvBGQiuNY/jMLqKec/s f9iLds0TQ8qquJVLhs9j0pRepSx2NuhdaBPGp34kJOpi7Kq4zSKbSNA6jxHYIN4j WnaeHDa10IwkmsYkG6ki2JPqa+CXVb8Cdcpqirx9MEJuNlWOK3wMupNnnOLTVt6E fUqCo4tvvbYbv7hPKOjhJqqZuKXRCfbjmDEHn3xoBnvtjsTdVtau1m9O45vMql/e 4uaDxM89XBm78GgFrmMlhaDsyhEot8WWi2ae81AHmHRZryw= -----END CERTIFICATE-----Generated at Tue Jan 13 16:24:42 2026 by rpki-client