This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ht9SPDChfyHYyRTxTm8M0scJ5Dg.roa File: ht9SPDChfyHYyRTxTm8M0scJ5Dg.roa (raw, json) Hash identifier: 5FnV36kZJbKa90TRwvP1iDGID6TPTvmWqdmBRyMhc4A= Subject key identifier: 86:DF:52:3C:30:A1:7F:21:D8:C9:14:F1:4E:6F:0C:D2:C7:09:E4:38 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0291DC175A1BF8F1FA440229AC83E8A7 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ht9SPDChfyHYyRTxTm8M0scJ5Dg.roa Signing time: Tue 09 Dec 2025 10:04:31 +0000 ROA not before: Tue 09 Dec 2025 10:04:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215703 IP address blocks: 109.176.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:91:dc:17:5a:1b:f8:f1:fa:44:02:29:ac:83:e8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 9 10:04:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=86df523c30a17f21d8c914f14e6f0cd2c709e438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:9c:7a:60:d6:d6:ae:75:6a:23:5e:f2:c9: c2:8a:51:ae:63:84:9c:ba:77:b9:cc:bc:ba:77:19: fd:99:5e:af:37:7f:2f:86:59:64:fc:2d:b4:88:ef: c4:23:fa:40:05:b3:6f:64:84:37:c0:87:eb:bf:b3: bd:36:0f:7e:46:1f:ee:59:e3:82:da:e7:36:35:47: e8:ae:45:bb:fd:b3:2a:af:b0:94:d1:35:79:bb:3f: a8:e5:72:18:f1:8d:98:0f:71:73:6c:2b:7d:34:bf: e0:1c:6e:86:aa:a4:c1:1f:4d:ec:b7:b6:d1:6b:6a: 51:bc:cd:ae:ee:28:f2:4f:6a:5c:10:be:63:83:93: 39:c1:51:b0:c4:32:70:04:bc:b9:d3:23:0f:f7:ce: f3:f9:3c:c6:af:be:38:cf:27:a3:55:16:52:e9:dd: af:3d:ca:79:ea:00:9a:39:57:a0:17:1b:88:7f:4a: 98:7a:fb:0c:81:79:fa:01:27:ea:3e:ef:6b:f4:44: 89:a9:44:a2:af:7e:b8:73:29:4b:ad:7d:54:ce:92: b2:3d:33:2a:28:96:7d:51:81:fd:2a:c5:11:87:f4: 72:ca:0d:4b:a7:8d:0c:23:4c:ff:f1:20:7c:5e:81: bf:b1:2e:3b:34:42:b9:1a:ba:c1:9b:b5:21:c8:18: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DF:52:3C:30:A1:7F:21:D8:C9:14:F1:4E:6F:0C:D2:C7:09:E4:38 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ht9SPDChfyHYyRTxTm8M0scJ5Dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.229.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:54:12:2d:64:4b:f3:78:d1:65:9b:a2:f8:4e:53:4e:5b:99: 68:ea:56:3e:ad:bb:77:b3:e7:f4:fe:3b:e4:31:95:15:5e:a6: 86:b6:68:b0:9a:6c:a5:50:e3:d5:2e:18:78:f5:80:b1:5f:6c: 5f:33:f9:8f:be:29:ad:b4:27:87:4a:ea:8a:47:7b:34:d0:ee: da:f3:42:7e:ad:42:da:70:62:75:20:b4:dd:d5:88:ff:80:eb: 31:e7:0c:f1:29:03:b3:08:bc:34:d5:6f:ca:a2:2e:c1:00:55: 27:17:56:6f:3c:64:8d:0e:8d:74:fb:f7:16:fc:85:b1:33:9f: 07:6c:93:53:a9:de:84:22:17:67:1a:fa:03:83:55:6c:d4:b3: d3:61:7c:46:69:3f:91:91:ec:a6:49:32:98:44:fc:ec:f2:23: 27:b9:fb:12:6f:2c:49:83:46:07:1a:c2:c5:18:75:e5:60:4f: de:eb:2c:74:00:3b:50:6a:9a:69:60:88:96:2c:3b:b7:43:aa: 21:dc:0d:b8:6e:b1:39:d9:60:24:66:a9:af:f3:86:82:c1:ba: be:a8:22:41:08:53:a7:d2:d4:ae:f8:06:57:3f:7e:7d:6f:51: 3f:33:d9:b3:f4:3e:47:12:18:4c:cf:69:e7:7e:63:40:48:bb: 04:7c:02:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsCkdwXWhv48fpEAimsg+inMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjA5MTAwNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmRmNTIzYzMwYTE3ZjIxZDhjOTE0ZjE0ZTZmMGNkMmM3MDllNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi+cemDW1q51aiNe8snCilGuY4Sc une5zLy6dxn9mV6vN38vhllk/C20iO/EI/pABbNvZIQ3wIfrv7O9Ng9+Rh/uWeOC 2uc2NUforkW7/bMqr7CU0TV5uz+o5XIY8Y2YD3FzbCt9NL/gHG6GqqTBH03st7bR a2pRvM2u7ijyT2pcEL5jg5M5wVGwxDJwBLy50yMP987z+TzGr744zyejVRZS6d2v Pcp56gCaOVegFxuIf0qYevsMgXn6ASfqPu9r9ESJqUSir364cylLrX1UzpKyPTMq KJZ9UYH9KsURh/Ryyg1Lp40MI0z/8SB8XoG/sS47NEK5GrrBm7UhyBgYYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIbfUjwwoX8h2MkU8U5vDNLHCeQ4MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvaHQ5U1BEQ2hmeUhZeVJUeFRtOE0wc2NKNURnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDlMA0G CSqGSIb3DQEBCwUAA4IBAQAOVBItZEvzeNFlm6L4TlNOW5lo6lY+rbt3s+f0/jvk MZUVXqaGtmiwmmylUOPVLhh49YCxX2xfM/mPvimttCeHSuqKR3s00O7a80J+rULa cGJ1ILTd1Yj/gOsx5wzxKQOzCLw01W/Koi7BAFUnF1ZvPGSNDo10+/cW/IWxM58H bJNTqd6EIhdnGvoDg1Vs1LPTYXxGaT+RkeymSTKYRPzs8iMnufsSbyxJg0YHGsLF GHXlYE/e6yx0ADtQapppYIiWLDu3Q6oh3A24brE52WAkZqmv84aCwbq+qCJBCFOn 0tSu+AZXP359b1E/M9mz9D5HEhhMz2nnfmNASLsEfAJh -----END CERTIFICATE-----Generated at Fri Dec 19 11:30:52 2025 by rpki-client