This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/Q9r_G5mN-fpHCEEziTRaRU3KmFI.roa File: Q9r_G5mN-fpHCEEziTRaRU3KmFI.roa (raw, json) Hash identifier: hXNMo0ooe3x7ylZ3iHUiRzE6Xm2lDI4+UmM5cDjZux0= Subject key identifier: 43:DA:FF:1B:99:8D:F9:FA:47:08:41:33:89:34:5A:45:4D:CA:98:52 Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6 Certificate serial: 019B791096B8FD8CC79C1C25112D6965A8F4 Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/Q9r_G5mN-fpHCEEziTRaRU3KmFI.roa Signing time: Thu 01 Jan 2026 10:18:08 +0000 ROA not before: Thu 01 Jan 2026 10:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43924 IP address blocks: 185.182.144.0/23 maxlen: 24 185.182.146.0/24 maxlen: 24 2a0a:ef80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:96:b8:fd:8c:c7:9c:1c:25:11:2d:69:65:a8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6 Validity Not Before: Jan 1 10:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43daff1b998df9fa4708413389345a454dca9852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:d6:a5:16:1f:0c:78:3f:05:d1:96:7f:bd: 85:74:1f:1a:04:8d:b9:c2:d0:c3:d2:17:45:67:4f: 37:32:fc:55:3b:1b:9d:5e:ac:17:8d:88:7a:5a:01: 3d:00:6a:d7:0e:84:38:1f:be:e8:56:5f:2f:6b:c1: 13:d4:2c:23:39:9f:7d:d7:ef:dc:61:83:c0:ed:d1: 35:c1:93:e2:06:56:f3:f1:c1:20:f9:9b:d9:18:48: 00:0d:23:8e:69:7e:6a:6b:72:81:5f:6c:e7:f8:a2: ed:d4:00:04:fa:74:6c:d7:4a:b8:55:aa:46:d3:23: b8:a1:d8:80:86:9e:79:70:35:b9:b6:53:b8:86:bc: 00:17:98:77:f6:f0:4b:1a:81:d3:7c:b6:a0:2f:18: 34:7b:2b:85:26:a0:4d:55:17:a3:73:0d:4b:7b:fb: 1d:85:19:89:bc:81:91:d0:6e:6e:fc:eb:a0:80:65: 2a:35:a8:c0:34:b8:4e:a1:0e:a4:a4:83:08:3b:70: 1f:dd:11:aa:65:a2:28:a7:e5:c2:c3:a2:e8:bd:76: 39:86:e6:3e:3e:7f:22:7e:da:a0:e7:25:d8:49:f0: f4:a0:bd:0f:65:70:bd:2e:9d:28:fa:65:a0:5b:64: 6c:bd:02:82:64:1a:2f:85:1b:17:a8:eb:29:ce:72: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DA:FF:1B:99:8D:F9:FA:47:08:41:33:89:34:5A:45:4D:CA:98:52 X509v3 Authority Key Identifier: keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/Q9r_G5mN-fpHCEEziTRaRU3KmFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.144.0-185.182.146.255 IPv6: 2a0a:ef80::/29 Signature Algorithm: sha256WithRSAEncryption a3:2b:65:ed:0f:c1:93:3d:58:2f:71:78:35:9d:a6:84:5f:85: ff:1e:fc:da:83:52:df:da:52:83:fd:f0:31:67:c6:8b:39:6d: 5a:de:d1:53:d7:df:9a:e2:62:f5:ef:e6:c8:64:d2:a8:8f:6f: 2d:c4:36:23:cd:58:41:50:77:fc:57:c6:7a:f1:16:15:a4:f7: d3:f0:c1:4d:a6:5a:92:bd:cb:7e:b3:54:ed:c3:03:e1:bd:bb: 7f:20:be:6e:ce:8a:33:54:5e:59:66:e6:ab:81:aa:74:63:2b: 63:f3:c1:da:ca:44:7d:d0:97:70:80:37:c1:e1:61:63:5f:99: f3:79:68:b6:e4:ba:80:94:a3:b3:45:c5:c6:7f:fd:a3:5a:01: 4e:ba:64:1d:ba:5f:da:5e:79:64:be:6e:e1:61:58:ab:fd:7a: 18:ad:82:e6:de:f1:36:af:78:e4:dd:4c:9c:1e:76:2f:68:bf: bc:32:58:93:2a:ee:5c:04:ee:82:04:97:6a:4d:de:8b:f2:0e: 35:ea:75:05:06:43:c7:fb:30:78:3f:da:64:9d:51:a3:0a:35: eb:b2:52:cc:15:c4:29:7c:fe:dd:7d:c8:10:7f:f2:20:1f:16: 2d:40:9d:aa:d6:a2:79:5b:d3:27:d5:de:06:76:c7:05:7e:a6: 20:79:5f:a5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5EJa4/YzHnBwlES1pZaj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGY5MzViY2QwNDg2MjVlNzAxNTVjZjJjYzI4MjllMmMy MDcyYTYwHhcNMjYwMTAxMTAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2RhZmYxYjk5OGRmOWZhNDcwODQxMzM4OTM0NWE0NTRkY2E5ODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDXWpRYfDHg/BdGWf72FdB8aBI25 wtDD0hdFZ083MvxVOxudXqwXjYh6WgE9AGrXDoQ4H77oVl8va8ET1CwjOZ991+/c YYPA7dE1wZPiBlbz8cEg+ZvZGEgADSOOaX5qa3KBX2zn+KLt1AAE+nRs10q4VapG 0yO4odiAhp55cDW5tlO4hrwAF5h39vBLGoHTfLagLxg0eyuFJqBNVRejcw1Le/sd hRmJvIGR0G5u/OuggGUqNajANLhOoQ6kpIMIO3Af3RGqZaIop+XCw6LovXY5huY+ Pn8iftqg5yXYSfD0oL0PZXC9Lp0o+mWgW2RsvQKCZBovhRsXqOspznJ0+QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEPa/xuZjfn6RwhBM4k0WkVNyphSMB8GA1UdIwQY MBaAFDgPk1vNBIYl5wFVzyzCgp4sIHKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2Mt NmMwNzcxZjI1Mzk2LzEvUTlyX0c1bU4tZnBIQ0VFemlUUmFSVTNLbUZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2MtNmMwNzcxZjI1Mzk2 LzEvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAS5tpAD BAC5tpIwDQQCAAIwBwMFAyoK74AwDQYJKoZIhvcNAQELBQADggEBAKMrZe0PwZM9 WC9xeDWdpoRfhf8e/NqDUt/aUoP98DFnxos5bVre0VPX35riYvXv5shk0qiPby3E NiPNWEFQd/xXxnrxFhWk99PwwU2mWpK9y36zVO3DA+G9u38gvm7OijNUXllm5quB qnRjK2PzwdrKRH3Ql3CAN8HhYWNfmfN5aLbkuoCUo7NFxcZ//aNaAU66ZB26X9pe eWS+buFhWKv9ehitgube8TaveOTdTJwedi9ov7wyWJMq7lwE7oIEl2pN3ovyDjXq dQUGQ8f7MHg/2mSdUaMKNeuyUswVxCl8/t19yBB/8iAfFi1AnarWonlb0yfV3gZ2 xwV+piB5X6U= -----END CERTIFICATE-----Generated at Mon Jan 12 01:13:19 2026 by rpki-client