This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/9rvSIJG4GAUEEFzw4LIIEomRjLs.roa File: 9rvSIJG4GAUEEFzw4LIIEomRjLs.roa (raw, json) Hash identifier: vIaPvb+ycmPmGlSHBmqVI505OuvAOEDswUw9t3/PGlc= Subject key identifier: F6:BB:D2:20:91:B8:18:05:04:10:5C:F0:E0:B2:08:12:89:91:8C:BB Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Certificate serial: 019B7D5B872BF132A2721235DE8C69B634A3 Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/9rvSIJG4GAUEEFzw4LIIEomRjLs.roa Signing time: Fri 02 Jan 2026 06:18:28 +0000 ROA not before: Fri 02 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42513 IP address blocks: 188.116.46.0/24 maxlen: 24 192.111.100.0/24 maxlen: 24 194.62.4.0/23 maxlen: 23 194.62.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:87:2b:f1:32:a2:72:12:35:de:8c:69:b6:34:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Validity Not Before: Jan 2 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6bbd22091b8180504105cf0e0b2081289918cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:64:4f:4f:cd:c1:11:6e:86:19:6c:76:a4: cc:9c:8c:b5:98:d9:a9:f5:9a:ef:9b:97:3d:e3:2c: e5:75:22:d6:f2:31:2e:ec:6c:78:25:33:38:55:fa: 65:b6:3b:e0:c6:58:89:2e:e0:3a:d1:bd:09:a9:51: a7:36:48:de:e3:5b:48:83:37:60:8b:07:b6:8e:2b: 34:4a:67:af:53:1e:49:cb:ad:ec:03:f7:bc:97:b8: c5:ba:31:cf:2e:84:c2:e3:59:d0:a6:74:69:76:32: e7:00:c6:45:35:81:d0:f6:e9:a8:21:b9:85:b4:4d: db:c0:e9:57:b3:4f:b8:2c:d4:05:24:06:94:fd:d0: 59:b6:17:c5:7e:fd:37:38:41:46:ca:c9:5b:63:55: b2:aa:af:8a:b5:ee:59:2d:02:51:18:1a:74:05:0c: 1d:de:21:b5:eb:36:a6:3e:7d:7b:bd:38:dc:4c:e4: ac:9e:c0:ab:33:91:ea:2d:53:f1:65:86:79:a9:87: d9:0d:40:0e:ee:a5:b5:e5:1f:a9:1d:b1:b3:66:ee: ea:c6:b8:b4:a0:95:c0:72:a4:51:05:9b:85:c1:19: fc:04:a2:cb:8c:8f:32:1e:1c:7e:74:89:c9:4a:6d: d9:72:62:ff:3a:ab:c0:83:99:49:ad:51:7b:40:11: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BB:D2:20:91:B8:18:05:04:10:5C:F0:E0:B2:08:12:89:91:8C:BB X509v3 Authority Key Identifier: keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/9rvSIJG4GAUEEFzw4LIIEomRjLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.116.46.0/24 192.111.100.0/24 194.62.4.0/23 194.62.8.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:c0:5a:8f:87:da:e5:c8:fb:5c:90:b2:af:14:0a:df:fc:76: 28:1a:49:c2:64:14:f7:f9:28:eb:32:4b:c8:62:f3:e9:c9:3c: 4b:0f:ff:02:c6:44:a2:bd:bb:82:5b:75:23:62:77:16:4d:26: d8:7d:9d:9a:f4:a7:b8:5d:09:9b:05:b3:4f:07:e4:40:0a:f3: fc:e4:78:10:77:57:aa:d1:2d:84:69:eb:af:ee:c7:f6:de:b1: 55:1d:a9:e5:a7:3e:ac:cf:03:1d:50:86:93:ce:66:cd:91:f8: 8d:1a:55:26:c1:50:31:d6:d2:6f:6c:ca:c3:d0:39:06:b8:ff: 48:66:0f:88:0a:9d:99:90:a3:43:73:b0:00:0d:c5:b6:07:a0: 50:cc:37:c4:25:0c:f1:e6:ea:c8:3c:c3:5a:26:ec:6e:a1:19: 19:00:a2:ef:7b:97:ac:bf:f5:f6:62:9e:08:ba:ac:fe:d9:34: f6:cb:df:5b:f0:eb:87:a0:45:c3:72:b9:2b:32:d5:81:65:ce: 30:40:88:ca:f1:f9:c0:5a:ab:8a:d0:25:76:e8:70:f8:12:f1: 6c:e7:b0:c2:50:79:a4:dc:87:db:84:bb:87:f2:b1:f1:74:6e: e9:5e:c9:e2:28:45:c3:0c:29:57:1f:25:50:7f:1c:d2:3f:10: 19:ec:b6:6f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9W4cr8TKichI13oxptjSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MWEwYmJmNTJkOGQyZDQ4NTk0MzQzYTU1NDA5ZmMxMGJi N2I3MWEwHhcNMjYwMTAyMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmJiZDIyMDkxYjgxODA1MDQxMDVjZjBlMGIyMDgxMjg5OTE4Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W5kT0/NwRFuhhlsdqTMnIy1mNmp 9Zrvm5c94yzldSLW8jEu7Gx4JTM4VfpltjvgxliJLuA60b0JqVGnNkje41tIgzdg iwe2jis0SmevUx5Jy63sA/e8l7jFujHPLoTC41nQpnRpdjLnAMZFNYHQ9umoIbmF tE3bwOlXs0+4LNQFJAaU/dBZthfFfv03OEFGyslbY1Wyqq+Kte5ZLQJRGBp0BQwd 3iG16zamPn17vTjcTOSsnsCrM5HqLVPxZYZ5qYfZDUAO7qW15R+pHbGzZu7qxri0 oJXAcqRRBZuFwRn8BKLLjI8yHhx+dInJSm3ZcmL/OqvAg5lJrVF7QBHdFQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPa70iCRuBgFBBBc8OCyCBKJkYy7MB8GA1UdIwQY MBaAFCgaC79S2NLUhZQ0OlVAn8ELt7caMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgt MWM5YzRhMWJiZDQzLzEvOXJ2U0lKRzRHQVVFRUZ6dzRMSUlFb21SakxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgtMWM5YzRhMWJiZDQz LzEvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAvHQuAwQA wG9kAwQBwj4EAwQBwj4IMA0GCSqGSIb3DQEBCwUAA4IBAQCbwFqPh9rlyPtckLKv FArf/HYoGknCZBT3+SjrMkvIYvPpyTxLD/8CxkSivbuCW3UjYncWTSbYfZ2a9Ke4 XQmbBbNPB+RACvP85HgQd1eq0S2Eaeuv7sf23rFVHanlpz6szwMdUIaTzmbNkfiN GlUmwVAx1tJvbMrD0DkGuP9IZg+ICp2ZkKNDc7AADcW2B6BQzDfEJQzx5urIPMNa JuxuoRkZAKLve5esv/X2Yp4Iuqz+2TT2y99b8OuHoEXDcrkrMtWBZc4wQIjK8fnA WquK0CV26HD4EvFs57DCUHmk3IfbhLuH8rHxdG7pXsniKEXDDClXHyVQfxzSPxAZ 7LZv -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:16 2026 by rpki-client