This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa File: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (raw, json) Hash identifier: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E= Subject key identifier: C3:D0:EB:AA:3C:B9:A6:FF:B1:82:C5:A6:D0:78:FD:25:7D:47:63:11 Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25 Certificate serial: 019B7A5AC95900135328ED476D244E4542C7 Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206389 IP address blocks: 185.173.216.0/22 maxlen: 22 185.173.216.0/24 maxlen: 24 185.173.217.0/24 maxlen: 24 185.173.218.0/24 maxlen: 24 185.173.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c9:59:00:13:53:28:ed:47:6d:24:4e:45:42:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3d0ebaa3cb9a6ffb182c5a6d078fd257d476311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8e:4a:e1:6e:f7:5d:97:dc:5a:4d:6a:aa:f4: 9b:eb:63:59:99:68:23:8a:c7:ec:c5:7e:e2:f2:1e: b7:7c:00:e2:95:fa:9d:4e:03:1b:9e:a2:08:81:6f: 0a:44:03:e3:63:e5:eb:0b:a0:b0:c4:2c:2a:48:a6: 34:06:a8:2c:7b:64:47:c9:51:83:fe:83:be:f0:c8: 6b:02:b3:91:cd:7e:c9:58:8c:73:74:60:39:ba:86: d6:32:76:7b:b9:17:d1:b5:67:ee:2c:d1:22:24:6d: 81:01:9b:02:44:68:16:ee:79:d5:c4:29:82:7f:da: f2:e6:54:63:b8:86:36:df:b8:63:bd:7b:09:27:59: ab:8d:db:28:49:d3:2e:dc:fa:7c:f2:e9:a0:ee:07: 46:c0:73:e2:ac:7e:36:2e:45:20:6c:89:e5:9c:bd: 29:b5:c5:09:47:b4:c3:88:64:53:b3:6c:98:c4:88: ba:c2:9d:a1:d8:91:59:99:ed:13:ae:90:6f:7d:aa: d6:f7:29:c9:17:f7:4d:56:f1:29:6e:73:d5:2e:b8: 5f:87:4c:ae:0b:bc:8f:b9:92:52:fd:62:a4:a5:a4: 74:11:a7:ec:92:82:3d:3f:47:f7:7a:51:2e:57:b2: 0e:99:d4:91:77:b1:56:2d:6c:3c:25:40:8f:0c:58: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:EB:AA:3C:B9:A6:FF:B1:82:C5:A6:D0:78:FD:25:7D:47:63:11 X509v3 Authority Key Identifier: keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.216.0/22 Signature Algorithm: sha256WithRSAEncryption c9:e1:0e:0f:ac:c6:5e:ee:21:5a:17:63:26:f9:3a:b5:a2:96: ee:b5:d3:fd:57:17:24:47:72:a8:90:44:58:dd:f3:d0:0b:e8: fd:ad:dc:ef:2f:80:ef:7d:d1:74:93:2a:52:0d:40:a9:a7:d8: b6:f8:0c:31:81:4c:01:f3:b8:b2:40:29:31:a3:7b:07:3e:93: d8:00:b9:9a:93:a0:9c:12:ff:3e:b5:e8:6b:fe:9b:02:f4:65: 72:fb:6c:ae:08:81:79:46:67:39:02:25:23:6f:21:ce:23:eb: 37:a0:1f:83:9b:b7:2c:70:c1:6b:a9:61:4b:0f:3d:75:1d:f6: 02:10:11:fb:79:e6:40:48:0e:ae:4e:f9:8b:22:c5:a6:3d:06: 0c:5b:24:35:08:26:de:94:80:1b:16:bc:af:25:87:e6:38:0f: 24:06:7e:08:e6:5e:49:c1:95:fa:9c:b3:28:e0:bb:d1:c0:34: 12:1b:4d:21:8a:b3:d3:e3:d2:f0:72:0e:ca:74:3f:c0:3e:87: 91:96:0b:ff:6b:5d:d0:1b:d9:75:1c:03:78:f0:db:01:40:d5: 50:40:c7:16:f7:3f:94:f4:d3:4f:1f:f3:46:f4:25:f7:73:03: ca:cc:cf:65:55:9c:3b:25:d9:bb:0e:cb:71:01:0c:fd:03:17: cd:00:7f:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WslZABNTKO1HbSRORULHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4 ZDZmMjUwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2QwZWJhYTNjYjlhNmZmYjE4MmM1YTZkMDc4ZmQyNTdkNDc2MzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA645K4W73XZfcWk1qqvSb62NZmWgj isfsxX7i8h63fADilfqdTgMbnqIIgW8KRAPjY+XrC6CwxCwqSKY0Bqgse2RHyVGD /oO+8MhrArORzX7JWIxzdGA5uobWMnZ7uRfRtWfuLNEiJG2BAZsCRGgW7nnVxCmC f9ry5lRjuIY237hjvXsJJ1mrjdsoSdMu3Pp88umg7gdGwHPirH42LkUgbInlnL0p tcUJR7TDiGRTs2yYxIi6wp2h2JFZme0TrpBvfarW9ynJF/dNVvEpbnPVLrhfh0yu C7yPuZJS/WKkpaR0EafskoI9P0f3elEuV7IOmdSRd7FWLWw8JUCPDFjVSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPQ66o8uab/sYLFptB4/SV9R2MRMB8GA1UdIwQY MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt Y2E2YTFjYzgxYTIyLzEvdzlEcnFqeTVwdi14Z3NXbTBIajlKWDFIWXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua3YMA0G CSqGSIb3DQEBCwUAA4IBAQDJ4Q4PrMZe7iFaF2Mm+Tq1opbutdP9VxckR3KokERY 3fPQC+j9rdzvL4DvfdF0kypSDUCpp9i2+AwxgUwB87iyQCkxo3sHPpPYALmak6Cc Ev8+tehr/psC9GVy+2yuCIF5Rmc5AiUjbyHOI+s3oB+Dm7cscMFrqWFLDz11HfYC EBH7eeZASA6uTvmLIsWmPQYMWyQ1CCbelIAbFryvJYfmOA8kBn4I5l5JwZX6nLMo 4LvRwDQSG00hirPT49Lwcg7KdD/APoeRlgv/a13QG9l1HAN48NsBQNVQQMcW9z+U 9NNPH/NG9CX3cwPKzM9lVZw7Jdm7DstxAQz9AxfNAH/a -----END CERTIFICATE-----Generated at Fri Jan 2 01:50:59 2026 by rpki-client