This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/9Be-VYTf9vY1XNIWBiOtqmqgeYY.roa File: 9Be-VYTf9vY1XNIWBiOtqmqgeYY.roa (raw, json) Hash identifier: PdlEhWVQheJNombtOvhcIE0GMdWAnH/pzA/LzYobY6I= Subject key identifier: F4:17:BE:55:84:DF:F6:F6:35:5C:D2:16:06:23:AD:AA:6A:A0:79:86 Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984 Certificate serial: 019B797EF1CFA8E946AABF990D8EE85F01DA Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/9Be-VYTf9vY1XNIWBiOtqmqgeYY.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215783 IP address blocks: 185.141.152.0/22 maxlen: 22 185.141.155.0/24 maxlen: 24 2a07:2440::/29 maxlen: 29 2a07:2440::/34 maxlen: 34 2a07:2440:1000::/36 maxlen: 36 2a07:2446:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f1:cf:a8:e9:46:aa:bf:99:0d:8e:e8:5f:01:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f417be5584dff6f6355cd2160623adaa6aa07986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:19:9b:e3:8d:74:bf:79:cd:c4:d0:ce:12: e9:54:88:df:da:80:ba:3a:fb:a7:31:17:2f:5f:0d: 9d:54:44:c7:4a:91:fc:d6:cc:13:53:56:e3:85:2d: 99:6a:e3:a3:e5:d9:f1:14:42:26:62:f7:d1:8a:d6: 13:b4:3b:9b:1a:0c:1b:98:ac:67:2c:42:45:ac:df: fc:66:0e:81:c2:f9:4a:64:6d:6d:b8:4f:e0:ca:ba: 8e:02:fb:8b:22:b8:b6:24:60:5f:2d:3d:30:00:39: 76:ae:61:1f:7f:9c:ec:24:82:ae:29:95:5c:4b:9d: 17:2b:1f:fd:b4:15:be:3d:53:7f:3e:8a:1d:74:07: d6:fb:06:e4:fc:67:2f:1b:0a:9f:54:34:ce:23:5a: dc:ce:03:3b:d0:79:8d:d2:bc:f7:e7:18:39:6d:b0: c7:f7:a7:4d:3d:98:1a:24:2c:a9:4d:e3:da:99:27: b0:57:90:50:47:69:02:bf:dd:cb:c4:c8:da:ff:41: 38:2c:1a:7b:78:46:be:60:88:7d:6e:db:49:99:85: 81:1a:f1:20:f3:0c:08:41:fc:57:a0:6e:da:e4:95: 29:81:81:a3:72:99:38:38:eb:0f:28:e1:e5:40:bc: 0d:29:6f:39:e9:f8:dc:9b:1c:a8:b9:94:9f:89:a1: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:17:BE:55:84:DF:F6:F6:35:5C:D2:16:06:23:AD:AA:6A:A0:79:86 X509v3 Authority Key Identifier: keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/9Be-VYTf9vY1XNIWBiOtqmqgeYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.152.0/22 IPv6: 2a07:2440::/29 Signature Algorithm: sha256WithRSAEncryption 47:60:5b:43:73:08:5a:25:fe:d8:f5:1f:a2:6b:54:c2:86:be: 57:3c:44:94:5a:c5:96:ee:2f:70:44:e1:80:de:65:2b:80:8d: 05:de:8c:99:9d:01:18:59:82:69:81:f0:21:7e:1e:ca:4b:68: 1d:42:36:be:97:2a:1e:3c:4e:fd:74:ba:8d:cd:67:5a:fc:1d: 03:f7:17:03:e4:7d:ee:23:81:07:a7:68:01:ae:4c:61:57:9e: e9:d1:d4:60:84:4c:81:01:df:a2:a6:c6:2e:f8:8c:83:33:2b: 5b:00:d0:09:c5:ae:f8:a0:fa:7f:16:bf:b8:d0:7f:10:1f:14: 52:86:0d:41:9a:09:c5:c4:91:96:69:f1:0e:ed:d6:1f:97:ee: ac:43:0a:33:b5:ba:12:c9:d2:7e:ac:ad:6d:ed:28:08:d3:e8: e6:8b:8f:15:82:53:7e:8d:46:48:1c:8c:10:3b:7f:f8:d7:9d: df:64:0a:b5:47:27:6e:48:1f:27:88:58:32:a4:54:1f:9c:d2: ff:8e:94:ee:ea:3e:f6:17:34:94:db:4f:27:c7:2e:f1:af:17: b7:10:37:10:d6:81:d4:ce:a0:ac:d8:e8:3e:35:37:b0:59:10: 97:26:ab:a4:84:b9:02:6a:60:c6:4d:33:e2:2c:49:64:d9:e2: 14:14:57:29 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fvHPqOlGqr+ZDY7oXwHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOWFhYjEzNDI3YWQ4YzAwNzJhZTA4ZDliYjgwYWJjMTlk M2Y5ODQwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDE3YmU1NTg0ZGZmNmY2MzU1Y2QyMTYwNjIzYWRhYTZhYTA3OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjUZm+ONdL95zcTQzhLpVIjf2oC6 OvunMRcvXw2dVETHSpH81swTU1bjhS2ZauOj5dnxFEImYvfRitYTtDubGgwbmKxn LEJFrN/8Zg6BwvlKZG1tuE/gyrqOAvuLIri2JGBfLT0wADl2rmEff5zsJIKuKZVc S50XKx/9tBW+PVN/PooddAfW+wbk/GcvGwqfVDTOI1rczgM70HmN0rz35xg5bbDH 96dNPZgaJCypTePamSewV5BQR2kCv93LxMja/0E4LBp7eEa+YIh9bttJmYWBGvEg 8wwIQfxXoG7a5JUpgYGjcpk4OOsPKOHlQLwNKW856fjcmxyouZSfiaFGPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPQXvlWE3/b2NVzSFgYjrapqoHmGMB8GA1UdIwQY MBaAFKuaqxNCetjAByrgjZu4CrwZ0/mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYjk1ODItZDI3NS00OTdhLWI2MmIt MzkyNjAzMTljN2JkLzEvOUJlLVZZVGY5dlkxWE5JV0JpT3RxbXFnZVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lYjk1ODItZDI3NS00OTdhLWI2MmItMzkyNjAzMTljN2Jk LzEvcTVxckUwSjYyTUFIS3VDTm03Z0t2Qm5ULVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY2YMA0E AgACMAcDBQMqByRAMA0GCSqGSIb3DQEBCwUAA4IBAQBHYFtDcwhaJf7Y9R+ia1TC hr5XPESUWsWW7i9wROGA3mUrgI0F3oyZnQEYWYJpgfAhfh7KS2gdQja+lyoePE79 dLqNzWda/B0D9xcD5H3uI4EHp2gBrkxhV57p0dRghEyBAd+ipsYu+IyDMytbANAJ xa74oPp/Fr+40H8QHxRShg1BmgnFxJGWafEO7dYfl+6sQwoztboSydJ+rK1t7SgI 0+jmi48VglN+jUZIHIwQO3/4153fZAq1RyduSB8niFgypFQfnNL/jpTu6j72FzSU 208nxy7xrxe3EDcQ1oHUzqCs2Og+NTewWRCXJqukhLkCamDGTTPiLElk2eIUFFcp -----END CERTIFICATE-----Generated at Mon Jan 12 01:05:25 2026 by rpki-client