This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/sH-rx8tmxtUlkAPsANTQF0wHaOY.roa File: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (raw, json) Hash identifier: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4= Subject key identifier: B0:7F:AB:C7:CB:66:C6:D5:25:90:03:EC:00:D4:D0:17:4C:07:68:E6 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC78D08D0A7E55B368CBAC0C2B6E421 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/sH-rx8tmxtUlkAPsANTQF0wHaOY.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43005 IP address blocks: 85.9.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8d:08:d0:a7:e5:5b:36:8c:ba:c0:c2:b6:e4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b07fabc7cb66c6d5259003ec00d4d0174c0768e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:be:48:15:06:79:85:f9:7f:ea:4b:f8:b1: 4f:47:e2:dd:7c:7f:59:99:ca:fb:0b:42:ce:35:fa: be:54:ec:3e:94:2f:dc:56:37:15:8f:a7:d1:2b:b1: 74:02:f9:dd:a0:9e:bd:d1:cf:59:3b:f4:0f:ff:9a: 24:88:97:8d:f5:52:9a:4f:18:a2:bd:70:a2:c0:65: 72:3d:c2:3e:f7:67:1a:55:b4:1b:32:f0:2b:50:f7: 63:38:35:ba:c1:00:04:97:61:ee:a9:c2:49:cb:9b: 02:ae:4a:f8:30:06:f3:14:2b:2a:35:1d:d6:80:39: 5b:85:6f:95:1f:e8:56:c5:6f:3d:2d:24:64:88:31: e5:60:1a:67:78:a9:0f:60:89:2e:32:48:48:9d:ba: 93:92:f5:00:0b:d2:88:44:b8:5d:03:44:85:ec:f6: 75:3a:eb:45:b9:c0:68:74:29:98:5c:31:ee:fd:71: 04:92:7f:29:91:d4:eb:cd:ba:97:1b:92:6a:3a:bd: 11:62:82:9d:2b:4a:d1:f5:5d:7d:56:8b:04:42:7d: 6b:70:95:ea:55:61:00:f9:9a:5f:db:0d:94:5f:0b: 66:6f:cd:1a:63:46:87:c7:d2:11:27:7a:0d:74:52: a1:24:b7:e9:2f:ef:9a:f1:8a:1d:2f:7b:15:7a:b9: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7F:AB:C7:CB:66:C6:D5:25:90:03:EC:00:D4:D0:17:4C:07:68:E6 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/sH-rx8tmxtUlkAPsANTQF0wHaOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.9.82.0/24 Signature Algorithm: sha256WithRSAEncryption b3:80:c4:9b:c2:33:2a:35:06:2c:18:4c:3f:e3:ce:87:81:3c: 6a:c1:0d:74:4c:49:88:fd:53:f4:f0:26:a3:ba:52:ab:1c:c6: 83:98:9e:87:a0:8c:be:0d:01:a6:75:88:53:88:c7:ae:78:3f: b6:b3:16:8a:50:11:22:ee:01:6f:23:79:c4:6e:01:e6:b8:36: 6f:42:c5:19:2d:07:9d:cf:48:3b:1c:5d:27:77:91:09:52:5a: 37:7c:03:37:45:e3:73:36:45:dd:30:b5:43:b4:9a:cf:0a:3b: c0:1c:af:a5:8f:a0:03:9d:e7:9a:45:77:3c:9c:77:06:f9:16: 00:8d:85:07:7d:c4:0a:8f:91:35:da:5c:9e:04:63:cb:ec:38: 30:62:10:73:30:83:dc:7a:d9:79:80:a0:7a:f3:de:29:d8:e3: 4f:85:a5:d9:a2:cc:a1:25:84:c2:1d:e5:e3:10:ae:26:8b:38: 41:e6:1b:47:03:0a:73:08:a2:88:b9:28:7b:1c:ff:47:cb:88: 83:7d:2f:1b:56:76:c4:ef:9c:28:57:4a:90:63:59:6c:69:5e: 58:ed:64:2e:3a:6c:bc:e2:8b:a6:41:63:49:15:33:0f:c1:8d: eb:81:cc:20:3d:d8:e9:59:47:52:4d:24:a2:c1:45:d4:e2:89: dc:88:37:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x40I0KflWzaMusDCtuQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDdmYWJjN2NiNjZjNmQ1MjU5MDAzZWMwMGQ0ZDAxNzRjMDc2OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit2+SBUGeYX5f+pL+LFPR+LdfH9Z mcr7C0LONfq+VOw+lC/cVjcVj6fRK7F0AvndoJ690c9ZO/QP/5okiJeN9VKaTxii vXCiwGVyPcI+92caVbQbMvArUPdjODW6wQAEl2HuqcJJy5sCrkr4MAbzFCsqNR3W gDlbhW+VH+hWxW89LSRkiDHlYBpneKkPYIkuMkhInbqTkvUAC9KIRLhdA0SF7PZ1 OutFucBodCmYXDHu/XEEkn8pkdTrzbqXG5JqOr0RYoKdK0rR9V19VosEQn1rcJXq VWEA+Zpf2w2UXwtmb80aY0aHx9IRJ3oNdFKhJLfpL++a8YodL3sVerkBrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLB/q8fLZsbVJZAD7ADU0BdMB2jmMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvc0gtcng4dG14dFVsa0FQc0FOVFFGMHdIYU9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQlSMA0G CSqGSIb3DQEBCwUAA4IBAQCzgMSbwjMqNQYsGEw/486HgTxqwQ10TEmI/VP08Caj ulKrHMaDmJ6HoIy+DQGmdYhTiMeueD+2sxaKUBEi7gFvI3nEbgHmuDZvQsUZLQed z0g7HF0nd5EJUlo3fAM3ReNzNkXdMLVDtJrPCjvAHK+lj6ADneeaRXc8nHcG+RYA jYUHfcQKj5E12lyeBGPL7DgwYhBzMIPcetl5gKB6894p2ONPhaXZosyhJYTCHeXj EK4mizhB5htHAwpzCKKIuSh7HP9Hy4iDfS8bVnbE75woV0qQY1lsaV5Y7WQuOmy8 4oumQWNJFTMPwY3rgcwgPdjpWUdSTSSiwUXU4onciDek -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:58 2026 by rpki-client