This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/9tGzK-FCrgGlyf8btSGObHH6Jkw.roa File: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (raw, json) Hash identifier: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k= Subject key identifier: F6:D1:B3:2B:E1:42:AE:01:A5:C9:FF:1B:B5:21:8E:6C:71:FA:26:4C Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Certificate serial: 019B78A25EBA9709522D827084BCE99BED53 Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/9tGzK-FCrgGlyf8btSGObHH6Jkw.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.142.144.0/24 maxlen: 24 185.142.145.0/24 maxlen: 24 185.142.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5e:ba:97:09:52:2d:82:70:84:bc:e9:9b:ed:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d1b32be142ae01a5c9ff1bb5218e6c71fa264c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:d1:1b:2f:91:df:bf:a0:40:df:b3:7c:06: 83:0b:55:6d:5e:fa:13:37:09:fa:fc:4f:6d:9b:22: 16:59:88:4d:f5:62:a0:2d:16:1e:42:92:6e:d7:8d: e1:bf:d7:32:8f:b7:5c:c6:97:b6:de:75:14:2f:63: 2a:e7:b5:31:f8:a9:7c:83:9b:62:81:28:31:cb:9a: 52:64:7d:29:04:64:0c:3e:8d:81:0f:c2:d9:1d:ea: 04:5b:57:9e:7c:b0:08:f7:88:aa:94:3f:9f:00:79: 0d:36:83:4a:11:bf:71:9d:0e:e8:c7:3f:3e:d1:c3: 79:bf:35:d0:0d:70:dd:50:3c:00:d2:a3:b4:df:fc: f6:a8:34:d3:12:35:35:0e:bc:ae:70:e6:18:42:bd: 00:c4:8d:49:dc:03:16:4b:64:31:d2:fb:5c:a2:20: b5:f1:fb:d7:88:d2:6e:04:60:9d:77:d3:5d:9b:82: a1:61:1e:aa:ae:cc:64:88:e6:1e:7c:73:14:f7:6a: 9e:55:b2:86:ef:0b:1d:35:1e:e7:11:76:2c:82:47: 0f:14:b4:11:32:12:e2:8e:57:50:50:cf:33:d8:b2: 8f:c7:6d:16:80:10:c9:b4:44:6a:96:4e:1b:de:e9: d7:c2:97:7f:0f:40:21:9b:7b:e1:77:cf:47:f1:1c: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D1:B3:2B:E1:42:AE:01:A5:C9:FF:1B:B5:21:8E:6C:71:FA:26:4C X509v3 Authority Key Identifier: keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/9tGzK-FCrgGlyf8btSGObHH6Jkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.144.0-185.142.146.255 Signature Algorithm: sha256WithRSAEncryption 9b:83:54:b5:ef:dc:0a:ee:af:1f:d8:b7:6c:0c:09:bc:1d:f2: 68:f6:91:b4:24:6e:e6:0c:98:23:28:10:a1:ca:06:e5:94:cc: 5d:97:e5:97:21:c4:53:7a:08:07:35:4c:69:72:38:89:e2:bb: 06:b6:45:53:76:99:26:ba:b8:d3:20:9b:c5:45:51:b8:74:d0: 3c:3e:c2:ec:29:4e:c0:5e:11:1f:80:8d:14:83:f9:ed:70:41: 6c:47:73:e8:30:13:18:32:c7:cb:aa:ac:16:6b:06:17:51:04: bf:63:3a:66:95:0f:dd:a2:bf:c8:e0:05:62:20:2e:a5:f2:b4: fc:02:d0:7c:c3:04:20:cf:c6:9a:52:9d:ec:b1:98:5a:7d:e4: 9a:77:97:2b:3d:f6:91:c5:33:a1:2b:60:e8:4d:b7:f6:d6:2b: 70:8b:7a:11:a9:fa:03:80:1b:6f:cf:f1:67:10:1d:72:97:87: 87:41:db:1b:f6:ac:13:9f:50:fe:d8:d2:96:1b:63:2d:36:ea: ac:2c:9d:95:7e:5f:3d:a1:a1:87:c0:73:a8:03:5c:23:fb:2f: a1:8e:e6:3f:4a:0a:ff:81:5d:08:b8:37:b6:df:3f:22:44:2f: b0:48:3e:58:58:4a:11:6d:03:2c:4c:43:e5:21:e5:06:04:39: 9e:2f:e7:92 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4ol66lwlSLYJwhLzpm+1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmQzOGUyMGYyNGQwZTMwYjg2Y2NkODI2MWFjMDAxN2Yx N2E1YTQwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQxYjMyYmUxNDJhZTAxYTVjOWZmMWJiNTIxOGU2YzcxZmEyNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLbRGy+R37+gQN+zfAaDC1VtXvoT Nwn6/E9tmyIWWYhN9WKgLRYeQpJu143hv9cyj7dcxpe23nUUL2Mq57Ux+Kl8g5ti gSgxy5pSZH0pBGQMPo2BD8LZHeoEW1eefLAI94iqlD+fAHkNNoNKEb9xnQ7oxz8+ 0cN5vzXQDXDdUDwA0qO03/z2qDTTEjU1DryucOYYQr0AxI1J3AMWS2Qx0vtcoiC1 8fvXiNJuBGCdd9Ndm4KhYR6qrsxkiOYefHMU92qeVbKG7wsdNR7nEXYsgkcPFLQR MhLijldQUM8z2LKPx20WgBDJtERqlk4b3unXwpd/D0Ahm3vhd89H8RwnZQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPbRsyvhQq4Bpcn/G7Uhjmxx+iZMMB8GA1UdIwQY MBaAFK0tOOIPJNDjC4bM2CYawAF/F6WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEt NDI5OTUzMjNjMDNkLzEvOXRHekstRkNyZ0dseWY4YnRTR09iSEg2Smt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEtNDI5OTUzMjNjMDNk LzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAS5jpAD BAC5jpIwDQYJKoZIhvcNAQELBQADggEBAJuDVLXv3Arurx/Yt2wMCbwd8mj2kbQk buYMmCMoEKHKBuWUzF2X5ZchxFN6CAc1TGlyOIniuwa2RVN2mSa6uNMgm8VFUbh0 0Dw+wuwpTsBeER+AjRSD+e1wQWxHc+gwExgyx8uqrBZrBhdRBL9jOmaVD92iv8jg BWIgLqXytPwC0HzDBCDPxppSneyxmFp95Jp3lys99pHFM6ErYOhNt/bWK3CLehGp +gOAG2/P8WcQHXKXh4dB2xv2rBOfUP7Y0pYbYy026qwsnZV+Xz2hoYfAc6gDXCP7 L6GO5j9KCv+BXQi4N7bfPyJEL7BIPlhYShFtAyxMQ+Uh5QYEOZ4v55I= -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:07 2026 by rpki-client