This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa File: sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa (raw, json) Hash identifier: svJIfKZ/TOmm8xXRzXlM/7QXfhtfTNna41fpYKpF970= Subject key identifier: B0:1F:6B:81:E7:C7:6B:7B:12:B7:A6:58:9D:6D:41:C0:23:A0:99:A5 Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180 Certificate serial: 019B7DC8712782A1F61117D56A338DBF986E Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa Signing time: Fri 02 Jan 2026 08:17:26 +0000 ROA not before: Fri 02 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12593 IP address blocks: 94.125.120.0/21 maxlen: 21 94.176.196.0/22 maxlen: 22 185.151.104.0/22 maxlen: 22 212.90.160.0/19 maxlen: 19 2a04:42c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:71:27:82:a1:f6:11:17:d5:6a:33:8d:bf:98:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180 Validity Not Before: Jan 2 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b01f6b81e7c76b7b12b7a6589d6d41c023a099a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:b7:34:d2:b7:f1:37:34:db:50:1c:7a:c0: fd:d0:22:1f:82:d9:10:22:5e:e1:d6:42:8c:48:00: d4:31:bb:19:ee:1b:03:c5:f5:8e:ea:34:2c:37:b4: a0:51:a5:d8:fa:04:9e:2c:be:0f:06:09:77:ba:7a: 41:8f:03:76:d7:95:53:db:73:cd:35:b3:92:73:5c: f2:c6:39:90:14:be:38:0d:26:39:57:8a:30:13:6e: ed:5e:9c:ae:e2:37:df:73:71:e9:dc:31:d9:2b:c1: a2:02:64:1e:7e:6d:2b:50:a7:89:52:d4:5b:0d:d2: c8:b7:16:38:0a:05:38:9f:1c:b3:b2:32:43:bb:cd: ac:97:5d:09:d8:29:29:e4:a7:b0:f8:4a:94:c5:81: 28:a6:c7:70:c6:dd:c0:1f:0c:b0:f6:68:a6:ef:1c: 0a:ed:37:ff:50:9e:0b:18:39:a8:e5:ea:b0:24:cd: af:9d:fd:0e:de:e3:82:0c:b7:82:e2:7f:00:81:31: 84:9a:5f:73:17:fc:06:4d:97:e0:9e:c8:da:0a:c4: b7:f2:21:37:59:08:aa:9c:ac:7a:99:72:c6:31:34: 6d:85:73:68:7f:c0:60:26:73:c4:a7:7d:aa:48:f0: 1c:23:7d:14:09:8d:cd:6b:17:09:b0:09:fa:27:0e: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1F:6B:81:E7:C7:6B:7B:12:B7:A6:58:9D:6D:41:C0:23:A0:99:A5 X509v3 Authority Key Identifier: keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/sB9rgefHa3sSt6ZYnW1BwCOgmaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.120.0/21 94.176.196.0/22 185.151.104.0/22 212.90.160.0/19 IPv6: 2a04:42c0::/29 Signature Algorithm: sha256WithRSAEncryption 23:e8:fb:68:9d:28:1e:f7:64:e5:5a:59:e9:a9:16:af:61:9e: d0:cd:24:be:31:12:8b:4f:d5:3f:7a:4c:ca:0e:79:03:61:cd: 01:72:1b:d0:92:81:8a:6d:b4:60:7f:60:45:f3:be:4e:5f:69: 5f:e9:c1:59:e3:8f:31:6f:9c:e0:e3:d4:2b:d6:cb:67:7e:4d: 9f:da:92:e9:69:73:da:01:7d:82:72:d1:26:bf:d8:26:ef:e6: 4d:15:d7:54:e7:ef:5d:02:f0:d4:31:5a:5a:d4:f4:00:6b:8a: 7d:03:33:c9:0e:09:8b:47:51:c7:9a:09:70:f6:1e:cb:44:ce: dd:16:1f:07:b4:72:df:94:f4:84:8d:11:cc:f6:16:8d:ac:7e: 26:a4:22:c1:eb:94:d0:83:51:28:30:ea:5f:a9:3a:16:a7:37: 97:fe:db:5e:dd:c5:df:90:9e:e4:f7:b9:54:87:29:a2:ac:3c: 85:07:11:ae:bb:b6:b6:7f:27:e5:80:e3:c5:c0:1d:0d:6b:5e: 41:0d:ca:39:39:d6:90:31:e3:87:b5:2f:72:6e:11:c5:dc:07: e2:b1:2b:bf:40:28:88:9c:19:55:5b:bb:04:99:24:17:ba:75: 5d:49:09:ce:91:d5:6a:f8:80:e2:58:11:69:3a:a9:96:22:5b: 2f:c8:aa:57 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9yHEngqH2ERfVajONv5huMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4 MzgxODAwHhcNMjYwMTAyMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDFmNmI4MWU3Yzc2YjdiMTJiN2E2NTg5ZDZkNDFjMDIzYTA5OWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8m3NNK38Tc021AcesD90CIfgtkQ Il7h1kKMSADUMbsZ7hsDxfWO6jQsN7SgUaXY+gSeLL4PBgl3unpBjwN215VT23PN NbOSc1zyxjmQFL44DSY5V4owE27tXpyu4jffc3Hp3DHZK8GiAmQefm0rUKeJUtRb DdLItxY4CgU4nxyzsjJDu82sl10J2Ckp5Kew+EqUxYEopsdwxt3AHwyw9mim7xwK 7Tf/UJ4LGDmo5eqwJM2vnf0O3uOCDLeC4n8AgTGEml9zF/wGTZfgnsjaCsS38iE3 WQiqnKx6mXLGMTRthXNof8BgJnPEp32qSPAcI30UCY3NaxcJsAn6Jw7cawIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFLAfa4Hnx2t7EremWJ1tQcAjoJmlMB8GA1UdIwQY MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut ZjViOTdjMGYwZjI0LzEvc0I5cmdlZkhhM3NTdDZaWW5XMUJ3Q09nbWFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0 LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDXn14AwQC XrDEAwQCuZdoAwQF1FqgMA0EAgACMAcDBQMqBELAMA0GCSqGSIb3DQEBCwUAA4IB AQAj6PtonSge92TlWlnpqRavYZ7QzSS+MRKLT9U/ekzKDnkDYc0BchvQkoGKbbRg f2BF875OX2lf6cFZ448xb5zg49Qr1stnfk2f2pLpaXPaAX2CctEmv9gm7+ZNFddU 5+9dAvDUMVpa1PQAa4p9AzPJDgmLR1HHmglw9h7LRM7dFh8HtHLflPSEjRHM9haN rH4mpCLB65TQg1EoMOpfqToWpzeX/tte3cXfkJ7k97lUhymirDyFBxGuu7a2fyfl gOPFwB0Na15BDco5OdaQMeOHtS9ybhHF3AfisSu/QCiInBlVW7sEmSQXunVdSQnO kdVq+IDiWBFpOqmWIlsvyKpX -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:09 2026 by rpki-client