This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/A9rhd59_7voAjZbMragLA3ftrbw.roa File: A9rhd59_7voAjZbMragLA3ftrbw.roa (raw, json) Hash identifier: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk= Subject key identifier: 03:DA:E1:77:9F:7F:EE:FA:00:8D:96:CC:AD:A8:0B:03:77:ED:AD:BC Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Certificate serial: 019B7D5B886BC67007D7671504BD156650BE Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/A9rhd59_7voAjZbMragLA3ftrbw.roa Signing time: Fri 02 Jan 2026 06:18:29 +0000 ROA not before: Fri 02 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210601 IP address blocks: 185.137.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:88:6b:c6:70:07:d7:67:15:04:bd:15:66:50:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Validity Not Before: Jan 2 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03dae1779f7feefa008d96ccada80b0377edadbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:d1:00:87:3f:72:18:f2:a2:de:b5:0f:ea: f8:7a:9b:9c:ac:d4:24:9c:ad:f1:c8:b9:bd:aa:66: 23:be:9f:e0:82:9a:39:b8:e9:cf:f3:95:64:cb:1c: d4:95:97:10:fd:09:2b:f1:85:24:00:93:f1:44:f8: 71:8e:84:eb:f2:73:c4:95:a8:f3:5a:ed:c8:be:97: 2b:e1:bb:af:ab:90:31:ae:ec:93:78:dd:83:fc:34: 3d:66:3c:7d:9f:eb:51:77:77:bb:77:2c:df:5d:b3: 62:34:85:24:ce:56:c8:3f:1c:c9:38:12:da:e5:7f: 42:64:e2:86:3a:c0:08:d5:ca:b0:fa:26:e3:12:e8: 38:41:70:d3:14:c2:25:04:f0:a3:65:aa:ef:fc:b2: 32:40:30:35:1d:35:aa:6e:9a:eb:97:cb:74:17:b0: 62:9c:e8:48:a4:5b:48:f6:75:7e:50:53:da:88:d3: 1a:0b:f3:b5:87:ac:ba:c1:f7:68:7d:f7:4b:c5:72: 5f:d1:c2:23:ed:58:ce:35:d2:fa:04:24:85:0f:8b: 0c:9a:5e:21:80:93:b7:ae:4b:39:87:28:19:f8:7b: 98:f7:45:d6:6b:d4:40:bc:d4:43:ea:ae:d8:56:d3: 24:57:c4:51:d9:a6:e0:0e:da:f1:3a:43:d9:c3:79: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DA:E1:77:9F:7F:EE:FA:00:8D:96:CC:AD:A8:0B:03:77:ED:AD:BC X509v3 Authority Key Identifier: keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/A9rhd59_7voAjZbMragLA3ftrbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.167.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:75:9b:9f:f0:8b:96:d9:9b:0d:4d:11:da:e7:52:5a:05:b6: fd:a2:ba:ad:14:32:d2:43:1e:55:1e:c3:ba:a1:52:e3:a0:19: 0a:8b:75:44:24:ca:e2:9f:1d:8e:5f:f6:ce:94:02:f8:cc:e9: e7:06:d9:53:c3:b4:9d:71:de:80:52:d3:60:50:f0:a0:00:86: 0d:fa:d1:99:75:d0:a5:65:13:a7:05:28:91:6c:a2:ac:22:65: eb:91:00:24:e5:5c:24:a1:85:ce:cc:dc:9f:37:c0:30:ba:9b: ad:cc:17:11:e8:15:c1:a6:81:05:b9:58:ae:a0:94:1a:28:fc: 74:4e:f8:3e:c9:b6:b0:ab:a0:ae:1f:a4:54:41:96:40:fc:d4: 17:4a:f4:44:81:05:98:81:cc:5e:e3:47:1b:c0:e3:81:5e:d9: 83:ea:da:28:79:82:2a:b5:0e:bb:89:37:35:e5:1d:c6:e1:ea: 29:61:2f:79:7f:04:01:11:85:fa:46:17:1a:4e:45:95:1f:62: 4a:64:3a:45:48:90:ee:5a:52:3c:06:77:1d:dd:5c:7f:20:67: 76:0a:9e:cc:dc:d8:1a:be:c2:76:60:be:cd:be:37:b0:c1:5e: dc:48:94:5a:b2:40:64:78:c3:40:f9:1b:6a:b1:17:19:69:05: b3:68:b0:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W4hrxnAH12cVBL0VZlC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj ZWYzMWYwHhcNMjYwMTAyMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2RhZTE3NzlmN2ZlZWZhMDA4ZDk2Y2NhZGE4MGIwMzc3ZWRhZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDLRAIc/chjyot61D+r4epucrNQk nK3xyLm9qmYjvp/ggpo5uOnP85VkyxzUlZcQ/Qkr8YUkAJPxRPhxjoTr8nPElajz Wu3Ivpcr4buvq5AxruyTeN2D/DQ9Zjx9n+tRd3e7dyzfXbNiNIUkzlbIPxzJOBLa 5X9CZOKGOsAI1cqw+ibjEug4QXDTFMIlBPCjZarv/LIyQDA1HTWqbprrl8t0F7Bi nOhIpFtI9nV+UFPaiNMaC/O1h6y6wfdoffdLxXJf0cIj7VjONdL6BCSFD4sMml4h gJO3rks5hygZ+HuY90XWa9RAvNRD6q7YVtMkV8RR2abgDtrxOkPZw3mNswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPa4Xeff+76AI2WzK2oCwN37a28MB8GA1UdIwQY MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt ODY3N2IzZGQ4NzA3LzEvQTlyaGQ1OV83dm9BalpiTXJhZ0xBM2Z0cmJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3 LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYmnMA0G CSqGSIb3DQEBCwUAA4IBAQCcdZuf8IuW2ZsNTRHa51JaBbb9orqtFDLSQx5VHsO6 oVLjoBkKi3VEJMrinx2OX/bOlAL4zOnnBtlTw7Sdcd6AUtNgUPCgAIYN+tGZddCl ZROnBSiRbKKsImXrkQAk5VwkoYXOzNyfN8AwuputzBcR6BXBpoEFuViuoJQaKPx0 Tvg+ybawq6CuH6RUQZZA/NQXSvREgQWYgcxe40cbwOOBXtmD6tooeYIqtQ67iTc1 5R3G4eopYS95fwQBEYX6RhcaTkWVH2JKZDpFSJDuWlI8Bncd3Vx/IGd2Cp7M3Nga vsJ2YL7NvjewwV7cSJRaskBkeMNA+RtqsRcZaQWzaLD9 -----END CERTIFICATE-----Generated at Fri Jan 2 18:34:08 2026 by rpki-client