This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/xHdQm9eajl_-s6UmnTM6iscJFVc.roa File: xHdQm9eajl_-s6UmnTM6iscJFVc.roa (raw, json) Hash identifier: kI5yXHQqZsO9mW/MmVAsJAYZ2S2lqy/VUF6lDZvuKJc= Subject key identifier: C4:77:50:9B:D7:9A:8E:5F:FE:B3:A5:26:9D:33:3A:8A:C7:09:15:57 Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Certificate serial: 019B7DCA06C9D9E4FCF597F21F5372D17AF3 Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/xHdQm9eajl_-s6UmnTM6iscJFVc.roa Signing time: Fri 02 Jan 2026 08:19:10 +0000 ROA not before: Fri 02 Jan 2026 08:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8856 IP address blocks: 195.214.192.0/23 maxlen: 23 195.214.192.0/24 maxlen: 24 195.214.193.0/24 maxlen: 24 195.214.194.0/23 maxlen: 23 195.214.194.0/24 maxlen: 24 195.214.195.0/24 maxlen: 24 212.42.64.0/22 maxlen: 22 212.42.64.0/23 maxlen: 23 212.42.64.0/24 maxlen: 24 212.42.65.0/24 maxlen: 24 212.42.66.0/23 maxlen: 23 212.42.72.0/24 maxlen: 24 212.42.73.0/24 maxlen: 24 212.42.74.0/23 maxlen: 23 212.42.76.0/23 maxlen: 23 212.42.76.0/24 maxlen: 24 212.42.77.0/24 maxlen: 24 212.42.78.0/23 maxlen: 23 212.42.78.0/24 maxlen: 24 212.42.79.0/24 maxlen: 24 212.42.80.0/22 maxlen: 22 212.42.80.0/24 maxlen: 24 212.42.81.0/24 maxlen: 24 212.42.82.0/23 maxlen: 23 212.42.84.0/24 maxlen: 24 212.42.85.0/24 maxlen: 24 212.42.89.0/24 maxlen: 24 212.42.92.0/24 maxlen: 24 212.42.93.0/24 maxlen: 24 212.42.94.0/23 maxlen: 23 212.42.94.0/24 maxlen: 24 212.42.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:06:c9:d9:e4:fc:f5:97:f2:1f:53:72:d1:7a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c477509bd79a8e5ffeb3a5269d333a8ac7091557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:1e:7f:9d:a2:0c:87:0f:19:2e:4f:bf:b2: 8d:92:9a:64:a1:7b:65:81:fc:d2:ad:76:32:2d:e9: d0:64:5f:c5:f1:a4:a1:33:08:1f:78:20:2c:db:0a: 49:3f:c4:a3:ce:d1:2f:57:ae:75:3f:80:05:4c:2b: ee:b2:12:9f:22:6b:54:ca:af:99:03:d4:91:38:8b: fa:bd:ce:cc:43:cf:af:7f:65:51:97:2f:cb:4f:d6: 0e:27:87:a2:1c:c5:a4:31:cd:92:38:22:d7:b5:93: a9:d0:03:38:6a:d6:ce:99:bd:28:03:68:06:46:5e: 9b:84:f8:38:06:e2:25:4f:14:cd:4b:e4:bd:58:d5: b3:03:c4:2b:31:4f:dd:53:a3:df:6e:b5:5d:a1:7d: a1:ad:9b:78:04:40:20:b4:fd:08:9c:2f:a1:a6:98: b8:1f:29:4e:3b:e8:4d:55:aa:1e:1e:74:fa:8a:5a: 3f:83:85:89:69:69:35:b6:14:22:bc:6b:d2:2c:f4: d4:12:15:bc:1a:83:da:14:c8:8b:94:36:2f:69:b4: 51:21:3b:35:55:d8:5e:24:93:af:af:ca:6c:70:83: a3:ce:d2:eb:9d:94:53:31:ce:07:a3:69:6d:85:ed: 81:24:91:73:ca:c1:71:82:30:f8:2c:51:36:0a:ca: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:77:50:9B:D7:9A:8E:5F:FE:B3:A5:26:9D:33:3A:8A:C7:09:15:57 X509v3 Authority Key Identifier: keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/xHdQm9eajl_-s6UmnTM6iscJFVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.214.192.0/22 212.42.64.0/22 212.42.72.0-212.42.85.255 212.42.89.0/24 212.42.92.0/22 Signature Algorithm: sha256WithRSAEncryption 17:7e:ad:b3:ef:88:bb:4a:d8:f3:24:b3:34:70:25:85:bf:04: f6:0d:33:05:0a:c0:3d:45:85:81:6f:06:9d:8f:d9:77:9d:07: 49:28:12:43:02:91:31:b7:e1:d9:85:07:34:f1:29:2f:6f:ce: 3b:22:f9:60:39:d2:5a:7a:d9:a2:96:5c:18:3d:fb:ac:8b:97: 72:bb:40:eb:d5:a1:d6:96:c5:73:5f:b3:34:85:48:c1:d5:c0: ec:96:5e:ca:c8:9e:35:41:30:97:78:6d:88:e3:ee:a0:31:cd: 8d:e8:4f:0f:49:a2:3a:77:dc:53:7a:cf:16:fb:9b:7e:b7:28: 4d:e8:51:5f:20:b2:aa:17:ba:34:36:d0:00:08:8a:66:61:bc: c8:8b:50:e4:67:a8:fe:72:17:36:83:84:fe:ea:9e:92:28:bf: 81:6a:ff:13:4b:90:b5:94:9a:85:b5:95:50:47:29:26:85:7a: a6:fa:a9:1b:27:cc:70:21:fc:2d:a1:e2:53:4e:36:90:f0:b8: 2a:1a:8d:89:6a:0f:78:2d:bf:00:72:39:46:f1:b7:94:d6:2d: d3:2b:bd:50:01:d3:5a:cd:07:21:02:d8:55:d8:87:1d:ee:11: f6:1c:00:23:ce:41:83:a7:11:36:0c:7d:d9:18:d3:4f:38:11: 63:03:a5:3e -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9ygbJ2eT89ZfyH1Ny0XrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDA4ZGY4YmM3YTM4M2U5NzZkYmIwM2QyYTBlYjlmZTBk Nzg2ZTcwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDc3NTA5YmQ3OWE4ZTVmZmViM2E1MjY5ZDMzM2E4YWM3MDkxNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRgef52iDIcPGS5Pv7KNkppkoXtl gfzSrXYyLenQZF/F8aShMwgfeCAs2wpJP8SjztEvV651P4AFTCvushKfImtUyq+Z A9SROIv6vc7MQ8+vf2VRly/LT9YOJ4eiHMWkMc2SOCLXtZOp0AM4atbOmb0oA2gG Rl6bhPg4BuIlTxTNS+S9WNWzA8QrMU/dU6PfbrVdoX2hrZt4BEAgtP0InC+hppi4 HylOO+hNVaoeHnT6ilo/g4WJaWk1thQivGvSLPTUEhW8GoPaFMiLlDYvabRRITs1 VdheJJOvr8pscIOjztLrnZRTMc4Ho2lthe2BJJFzysFxgjD4LFE2CsrZGwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFMR3UJvXmo5f/rOlJp0zOorHCRVXMB8GA1UdIwQY MBaAFAfQjfi8ejg+l227A9Kg65/g14bnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYt NTE0ODVmZTIyMmRiLzEveEhkUW05ZWFqbF8tczZVbW5UTTZpc2NKRlZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYtNTE0ODVmZTIyMmRi LzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCw9bAAwQC 1CpAMAwDBAPUKkgDBAHUKlQDBADUKlkDBALUKlwwDQYJKoZIhvcNAQELBQADggEB ABd+rbPviLtK2PMkszRwJYW/BPYNMwUKwD1FhYFvBp2P2XedB0koEkMCkTG34dmF BzTxKS9vzjsi+WA50lp62aKWXBg9+6yLl3K7QOvVodaWxXNfszSFSMHVwOyWXsrI njVBMJd4bYjj7qAxzY3oTw9Jojp33FN6zxb7m363KE3oUV8gsqoXujQ20AAIimZh vMiLUORnqP5yFzaDhP7qnpIov4Fq/xNLkLWUmoW1lVBHKSaFeqb6qRsnzHAh/C2h 4lNONpDwuCoajYlqD3gtvwByOUbxt5TWLdMrvVAB01rNByEC2FXYhx3uEfYcACPO QYOnETYMfdkY0084EWMDpT4= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:43 2026 by rpki-client