This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/9mN_oHf4GD05-BUH6BsB01tvt3Y.roa File: 9mN_oHf4GD05-BUH6BsB01tvt3Y.roa (raw, json) Hash identifier: ZuxdvlwmVs1w0KroWX43G/v/gBodCt7QRPbyICFM9A0= Subject key identifier: F6:63:7F:A0:77:F8:18:3D:39:F8:15:07:E8:1B:01:D3:5B:6F:B7:76 Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Certificate serial: 019B7C12E8ACD14F70FDA76EBA0CE9F3A242 Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/9mN_oHf4GD05-BUH6BsB01tvt3Y.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204386 IP address blocks: 185.250.156.0/22 maxlen: 22 185.250.156.0/24 maxlen: 24 185.250.157.0/24 maxlen: 24 185.250.158.0/24 maxlen: 24 185.250.159.0/24 maxlen: 24 185.251.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e8:ac:d1:4f:70:fd:a7:6e:ba:0c:e9:f3:a2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6637fa077f8183d39f81507e81b01d35b6fb776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:c4:06:53:06:f1:d5:2f:af:ee:b6:b7:e4: 61:27:38:dd:a6:68:10:e4:02:5b:f2:78:f7:07:97: 64:01:cd:d3:4f:88:27:d9:39:6b:c1:f5:d6:29:9d: 91:40:51:20:c2:fd:cb:cf:e6:54:d3:26:6c:62:fc: 77:6d:ad:d2:b6:cf:76:e1:55:f7:ff:eb:de:28:48: fc:d3:28:bd:b1:65:ad:90:55:54:c1:80:61:95:05: d6:2a:97:02:e5:13:32:3f:65:25:be:9a:28:d3:37: 7c:d9:0d:c2:23:42:63:86:88:a4:e6:61:53:16:5a: c0:36:d9:8b:48:46:60:9a:1b:9d:b0:e2:e8:a4:23: 7d:7b:87:bb:4e:e5:ea:09:73:70:bb:34:06:d1:8e: b5:44:9f:cf:f8:9b:3c:2d:a6:6c:2b:f2:76:0a:d5: a1:80:f4:9d:d1:40:be:87:75:20:bd:d1:25:71:2d: 59:43:61:37:b1:21:ae:26:48:8c:73:53:16:28:12: c0:45:04:21:b4:4e:bb:93:c3:42:4b:ed:b1:9f:ef: 2b:67:e2:07:15:2d:e7:5f:f7:c4:a5:bd:5e:14:45: c7:87:d3:5b:d1:73:18:8c:be:4e:a8:8f:91:77:b1: 37:d3:fe:a3:79:a3:20:48:a7:cd:41:6c:db:ab:f8: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:63:7F:A0:77:F8:18:3D:39:F8:15:07:E8:1B:01:D3:5B:6F:B7:76 X509v3 Authority Key Identifier: keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/9mN_oHf4GD05-BUH6BsB01tvt3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.156.0/22 185.251.26.0/24 Signature Algorithm: sha256WithRSAEncryption 65:89:d0:c1:64:c6:4a:0b:a7:7d:93:ab:a4:1c:35:41:31:51: 85:4d:e4:3d:6b:3b:e5:94:2f:bc:d9:31:5b:a5:05:44:ef:55: d9:6d:0d:80:78:9d:78:e2:8c:89:67:43:2a:45:d1:cb:83:a8: 38:6b:a5:73:97:65:01:37:d9:ba:28:84:7b:6c:b9:19:5e:55: 09:39:4c:81:e9:ae:42:40:9d:ea:a8:4d:a2:c8:1a:2a:01:39: bd:35:23:7e:de:99:69:3b:da:0f:ff:79:03:53:1b:e3:d0:42: c6:1d:06:7a:c6:e4:d9:64:5a:ee:91:3d:9f:b6:d3:89:48:2d: a8:76:3b:db:5f:57:30:22:e7:8d:3d:36:e4:fa:86:ea:89:3a: 12:67:6d:d1:b9:3d:42:30:7b:66:43:f4:52:e9:4a:a2:b9:3f: b3:a9:7f:0d:f3:e9:61:66:38:24:9e:2d:d8:37:53:51:7e:2c: dc:28:5b:cd:b0:51:c9:ba:65:8d:8a:53:24:ba:15:9e:9a:ef: 2a:98:f4:08:20:ce:29:52:0c:03:c4:30:97:df:1b:f3:89:8e: b0:7b:a2:70:e9:62:e6:ff:6b:a8:5c:f3:38:e5:31:c1:47:0b: 32:ce:a6:50:42:fc:63:87:ba:f4:34:0b:69:a6:4b:a8:7d:b5: 4c:a4:83:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Euis0U9w/aduugzp86JCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1 ZWNmMWEwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjYzN2ZhMDc3ZjgxODNkMzlmODE1MDdlODFiMDFkMzViNmZiNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+HEBlMG8dUvr+62t+RhJzjdpmgQ 5AJb8nj3B5dkAc3TT4gn2TlrwfXWKZ2RQFEgwv3Lz+ZU0yZsYvx3ba3Sts924VX3 /+veKEj80yi9sWWtkFVUwYBhlQXWKpcC5RMyP2Ulvpoo0zd82Q3CI0Jjhoik5mFT FlrANtmLSEZgmhudsOLopCN9e4e7TuXqCXNwuzQG0Y61RJ/P+Js8LaZsK/J2CtWh gPSd0UC+h3UgvdElcS1ZQ2E3sSGuJkiMc1MWKBLARQQhtE67k8NCS+2xn+8rZ+IH FS3nX/fEpb1eFEXHh9Nb0XMYjL5OqI+Rd7E30/6jeaMgSKfNQWzbq/ihNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPZjf6B3+Bg9OfgVB+gbAdNbb7d2MB8GA1UdIwQY MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt MjgyOWFhM2RmMjU4LzEvOW1OX29IZjRHRDA1LUJVSDZCc0IwMXR2dDNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4 LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCufqcAwQA ufsaMA0GCSqGSIb3DQEBCwUAA4IBAQBlidDBZMZKC6d9k6ukHDVBMVGFTeQ9azvl lC+82TFbpQVE71XZbQ2AeJ144oyJZ0MqRdHLg6g4a6Vzl2UBN9m6KIR7bLkZXlUJ OUyB6a5CQJ3qqE2iyBoqATm9NSN+3plpO9oP/3kDUxvj0ELGHQZ6xuTZZFrukT2f ttOJSC2odjvbX1cwIueNPTbk+obqiToSZ23RuT1CMHtmQ/RS6UqiuT+zqX8N8+lh Zjgkni3YN1NRfizcKFvNsFHJumWNilMkuhWemu8qmPQIIM4pUgwDxDCX3xvziY6w e6Jw6WLm/2uoXPM45THBRwsyzqZQQvxjh7r0NAtppkuofbVMpIO4 -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:00 2026 by rpki-client