This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/9bU8TMAlx1Mlu4OLuEXngFEMyBw.roa File: 9bU8TMAlx1Mlu4OLuEXngFEMyBw.roa (raw, json) Hash identifier: o5UBRSSOY31+5MpTnDt79gczgxz6Me/lMghe1kK7oQA= Subject key identifier: F5:B5:3C:4C:C0:25:C7:53:25:BB:83:8B:B8:45:E7:80:51:0C:C8:1C Certificate issuer: /CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500 Certificate serial: 019B7F15773592B8B51CC35EB1CF94FF56DE Authority key identifier: B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/9bU8TMAlx1Mlu4OLuEXngFEMyBw.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41729 IP address blocks: 45.158.92.0/22 maxlen: 22 88.151.160.0/21 maxlen: 21 89.248.0.0/20 maxlen: 20 91.184.128.0/19 maxlen: 19 195.177.96.0/24 maxlen: 24 195.177.97.0/24 maxlen: 24 195.177.99.0/24 maxlen: 24 2a00:1a78::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.mft rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:77:35:92:b8:b5:1c:c3:5e:b1:cf:94:ff:56:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a0bd42058a0390f463cfeb7b17e21de0b75500 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5b53c4cc025c75325bb838bb845e780510cc81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:eb:a5:85:cd:ea:9b:51:17:68:7f:99:73:6c: b7:e4:37:00:23:30:48:a3:30:cc:11:c9:57:9c:6c: 02:0e:ac:bf:81:d8:57:a7:62:5b:ad:06:d3:f5:a5: 9c:3b:36:0f:0d:94:d3:1e:2d:d8:3f:ea:03:13:43: 47:3f:67:82:bf:ef:2b:18:46:17:f8:13:14:63:ee: 57:47:fc:ad:2d:de:56:1c:a3:46:67:8d:2d:01:a7: 3d:25:17:6f:06:48:3f:e0:13:03:a8:70:59:2d:5d: 83:f0:27:4c:39:73:8b:54:62:5d:94:82:3e:f7:da: d5:29:1b:66:3c:dd:fe:e3:8e:66:f8:f2:c0:3e:61: 1b:0f:30:88:24:0f:79:d1:93:7d:d7:c1:57:24:fd: f1:1b:75:ee:59:7f:96:e5:9a:c6:17:cf:a2:f3:67: 6f:fe:d6:f6:bd:fd:08:8f:d7:df:84:d8:6d:31:06: ec:35:b6:80:dd:7f:5d:e2:f9:8b:e8:de:46:34:32: 62:70:3d:eb:53:d3:cb:ea:1d:7a:8f:eb:3a:68:4e: 37:43:e5:10:1d:e6:fc:de:2c:ff:68:48:01:f8:0d: 88:36:99:37:5f:b0:17:22:f1:b3:e4:61:d4:d5:d6: 95:f1:eb:a4:98:af:b7:2d:ba:2e:e4:36:d8:ee:9e: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B5:3C:4C:C0:25:C7:53:25:BB:83:8B:B8:45:E7:80:51:0C:C8:1C X509v3 Authority Key Identifier: keyid:B1:A0:BD:42:05:8A:03:90:F4:63:CF:EB:7B:17:E2:1D:E0:B7:55:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saC9QgWKA5D0Y8_rexfiHeC3VQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/9bU8TMAlx1Mlu4OLuEXngFEMyBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c6f76b-7887-412a-bab4-ec2819c0ac4d/1/saC9QgWKA5D0Y8_rexfiHeC3VQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.92.0/22 88.151.160.0/21 89.248.0.0/20 91.184.128.0/19 195.177.96.0/23 195.177.99.0/24 IPv6: 2a00:1a78::/32 Signature Algorithm: sha256WithRSAEncryption 0f:b1:0c:31:ea:93:9c:b7:7e:5f:51:f9:63:19:2d:0c:ae:db: 11:f8:2d:80:a9:bd:75:48:73:72:92:6c:a4:60:73:1a:46:db: 58:c8:6c:00:bb:da:a9:ca:f2:e8:ce:32:f1:6e:77:48:e4:4a: 2b:11:a6:39:7e:08:80:64:35:b5:dc:45:95:40:56:8e:37:01: 43:e6:cc:34:41:cf:06:dc:29:ce:bb:e1:37:42:a0:c4:7c:40: 51:72:73:b1:d2:60:98:d6:bd:7e:22:9d:ce:9b:f1:14:43:1f: be:a5:d6:28:71:91:4e:d6:1b:4e:6a:af:8e:1f:19:7b:26:b9: fb:3c:f5:43:9f:af:20:90:25:df:ef:9c:96:1a:67:d6:54:70: 2b:fa:7d:4f:02:24:14:b7:22:9d:09:c2:3a:07:34:40:09:f4: e1:2d:f3:6f:e8:4f:08:3d:54:6e:7b:7f:bd:68:71:86:c3:8c: de:ea:bd:4f:00:2c:4a:cc:43:71:82:34:34:77:66:8f:6e:3d: 16:dd:38:3d:53:4e:52:ff:89:de:6a:f4:58:31:c6:69:13:75: e8:c0:76:28:8b:a2:8e:1c:84:bf:13:b0:ce:31:3d:6c:ad:be: 7a:e8:05:a6:93:1a:b5:30:04:52:13:3c:81:97:2e:fc:81:98: ad:f6:61:7e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt/FXc1kri1HMNesc+U/1beMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTBiZDQyMDU4YTAzOTBmNDYzY2ZlYjdiMTdlMjFkZTBi NzU1MDAwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWI1M2M0Y2MwMjVjNzUzMjViYjgzOGJiODQ1ZTc4MDUxMGNjODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+ulhc3qm1EXaH+Zc2y35DcAIzBI ozDMEclXnGwCDqy/gdhXp2JbrQbT9aWcOzYPDZTTHi3YP+oDE0NHP2eCv+8rGEYX +BMUY+5XR/ytLd5WHKNGZ40tAac9JRdvBkg/4BMDqHBZLV2D8CdMOXOLVGJdlII+ 99rVKRtmPN3+445m+PLAPmEbDzCIJA950ZN918FXJP3xG3XuWX+W5ZrGF8+i82dv /tb2vf0Ij9ffhNhtMQbsNbaA3X9d4vmL6N5GNDJicD3rU9PL6h16j+s6aE43Q+UQ Heb83iz/aEgB+A2INpk3X7AXIvGz5GHU1daV8eukmK+3Lbou5DbY7p4zUwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFPW1PEzAJcdTJbuDi7hF54BRDMgcMB8GA1UdIwQY MBaAFLGgvUIFigOQ9GPP63sX4h3gt1UAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jNmY3NmItNzg4Ny00MTJhLWJhYjQt ZWMyODE5YzBhYzRkLzEvOWJVOFRNQWx4MU1sdTRPTHVFWG5nRkVNeUJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9jNmY3NmItNzg4Ny00MTJhLWJhYjQtZWMyODE5YzBhYzRk LzEvc2FDOVFnV0tBNUQwWThfcmV4ZmlIZUMzVlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLZ5cAwQD WJegAwQEWfgAAwQFW7iAAwQBw7FgAwQAw7FjMA0EAgACMAcDBQAqABp4MA0GCSqG SIb3DQEBCwUAA4IBAQAPsQwx6pOct35fUfljGS0MrtsR+C2Aqb11SHNykmykYHMa RttYyGwAu9qpyvLozjLxbndI5EorEaY5fgiAZDW13EWVQFaONwFD5sw0Qc8G3CnO u+E3QqDEfEBRcnOx0mCY1r1+Ip3Om/EUQx++pdYocZFO1htOaq+OHxl7Jrn7PPVD n68gkCXf75yWGmfWVHAr+n1PAiQUtyKdCcI6BzRACfThLfNv6E8IPVRue3+9aHGG w4ze6r1PACxKzENxgjQ0d2aPbj0W3Tg9U05S/4neavRYMcZpE3XowHYoi6KOHIS/ E7DOMT1srb566AWmkxq1MARSEzyBly78gZit9mF+ -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:36 2026 by rpki-client