This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/a9Rpht6AbCSSrUCu5Qo0lLFufA4.roa File: a9Rpht6AbCSSrUCu5Qo0lLFufA4.roa (raw, json) Hash identifier: YbTv2Sx0z5Y5mlyL06fWpp8efAU8mcnO8mEi3/k+h7g= Subject key identifier: 6B:D4:69:86:DE:80:6C:24:92:AD:40:AE:E5:0A:34:94:B1:6E:7C:0E Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E2FBD86228A7EA06DC4BAFE6A327 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/a9Rpht6AbCSSrUCu5Qo0lLFufA4.roa Signing time: Fri 02 Jan 2026 14:19:28 +0000 ROA not before: Fri 02 Jan 2026 14:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8331 IP address blocks: 80.90.240.0/20 maxlen: 20 80.90.240.0/24 maxlen: 24 80.90.249.0/24 maxlen: 24 80.90.250.0/24 maxlen: 24 80.90.252.0/24 maxlen: 24 80.90.254.0/24 maxlen: 24 86.62.64.0/18 maxlen: 18 86.62.64.0/24 maxlen: 24 86.62.105.0/24 maxlen: 24 195.54.192.0/19 maxlen: 19 195.54.195.0/24 maxlen: 24 195.54.196.0/24 maxlen: 24 195.54.198.0/24 maxlen: 24 195.54.202.0/23 maxlen: 23 195.54.202.0/24 maxlen: 24 195.54.203.0/24 maxlen: 24 195.54.213.0/24 maxlen: 24 195.54.214.0/24 maxlen: 24 195.91.128.0/17 maxlen: 17 2a00:14d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e2:fb:d8:62:28:a7:ea:06:dc:4b:af:e6:a3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bd46986de806c2492ad40aee50a3494b16e7c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:9c:61:05:7e:56:a7:23:49:9f:58:49:97: 08:c8:04:55:e4:9d:ba:42:07:c3:9b:09:ea:a1:76: 92:41:31:45:2f:f5:b1:f3:51:b9:29:96:86:35:71: af:9d:e5:a6:6a:89:e7:60:e3:a4:75:19:c3:ec:58: bf:94:14:a0:40:d4:bb:e7:cb:68:05:03:2d:cb:74: a1:52:9b:39:c6:25:58:14:b9:6c:4c:4b:f5:57:1b: 03:78:35:7d:cb:21:ad:fc:c7:73:b2:36:a8:19:d8: e1:b8:79:a8:a6:2f:8b:c3:6a:fd:0c:93:53:3c:b4: a9:bf:da:06:5d:99:7d:3e:b0:20:f3:0b:c3:58:27: 76:93:9b:df:6d:41:04:61:1e:a6:8c:c2:d3:e0:6c: 5d:71:12:1e:5e:97:fd:ff:ec:3b:6c:1c:87:ba:ea: 97:a9:7b:f9:23:56:ab:71:8f:f2:0f:2c:22:86:f1: 40:f2:9f:bf:32:c2:34:51:54:3b:2f:9c:53:c3:c1: ae:06:65:4b:a0:1a:bc:7b:9d:59:87:a6:cd:2b:eb: 04:f9:23:18:0f:cc:f3:d6:17:4f:b4:54:57:da:70: fc:b2:ee:de:2d:0b:0f:e6:5b:f3:8c:cd:ee:1a:37: c8:4e:c8:03:e1:9a:eb:00:47:89:4b:b4:a4:c4:05: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:69:86:DE:80:6C:24:92:AD:40:AE:E5:0A:34:94:B1:6E:7C:0E X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/a9Rpht6AbCSSrUCu5Qo0lLFufA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.240.0/20 86.62.64.0/18 195.54.192.0/19 195.91.128.0/17 IPv6: 2a00:14d0::/32 Signature Algorithm: sha256WithRSAEncryption 20:e6:14:c2:44:5a:2e:6a:02:d5:db:1f:5c:3f:1f:2c:db:f5: 85:02:16:6a:87:ba:24:cb:e7:f3:b1:7c:78:d8:cd:f1:c1:9c: 02:8a:8b:c7:39:f7:11:95:05:62:e6:ff:0a:52:9b:9f:c7:4f: f5:6e:42:73:5e:d1:e9:31:f9:4c:5a:49:0a:68:5a:fc:8d:e8: eb:1a:6f:55:5c:d1:24:04:66:dd:85:fa:73:dc:59:85:6e:1e: 93:02:f4:40:43:a5:56:3f:b2:9f:63:65:d0:ed:82:be:ed:c8: 59:32:be:7f:40:1c:ec:c3:05:07:78:84:cd:34:d5:bb:d2:fe: 96:db:52:f0:f8:d5:8b:ed:29:7b:fa:13:da:b5:5e:03:6f:03: 93:41:dd:67:2d:1e:3b:e9:4a:b3:4a:03:9a:4d:9a:e0:05:73: 01:2c:8a:5d:6e:58:7d:76:c3:0e:53:a7:1f:30:4a:08:64:fd: ed:7f:6c:b7:72:ce:35:b4:65:02:e0:dd:f6:3d:04:0f:28:cb: 77:7a:8d:f2:e7:78:99:f4:1e:8b:52:0e:5a:a1:89:ee:a8:8c: d8:17:4d:2c:a3:94:6e:47:82:b4:ce:fb:b6:29:05:10:3f:e9: e2:c0:88:cc:a5:52:29:ae:fa:3c:ab:23:4f:59:5b:10:92:17: 26:92:fe:72 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/E+L72GIop+oG3Euv5qMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmQ0Njk4NmRlODA2YzI0OTJhZDQwYWVlNTBhMzQ5NGIxNmU3YzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCqcYQV+VqcjSZ9YSZcIyARV5J26 QgfDmwnqoXaSQTFFL/Wx81G5KZaGNXGvneWmaonnYOOkdRnD7Fi/lBSgQNS758to BQMty3ShUps5xiVYFLlsTEv1VxsDeDV9yyGt/MdzsjaoGdjhuHmopi+Lw2r9DJNT PLSpv9oGXZl9PrAg8wvDWCd2k5vfbUEEYR6mjMLT4GxdcRIeXpf9/+w7bByHuuqX qXv5I1arcY/yDywihvFA8p+/MsI0UVQ7L5xTw8GuBmVLoBq8e51Zh6bNK+sE+SMY D8zz1hdPtFRX2nD8su7eLQsP5lvzjM3uGjfITsgD4ZrrAEeJS7SkxAUbNwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFGvUaYbegGwkkq1AruUKNJSxbnwOMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvYTlScGh0NkFiQ1NTclVDdTVRbzBsTEZ1ZkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUFrwAwQG Vj5AAwQFwzbAAwQHw1uAMA0EAgACMAcDBQAqABTQMA0GCSqGSIb3DQEBCwUAA4IB AQAg5hTCRFouagLV2x9cPx8s2/WFAhZqh7oky+fzsXx42M3xwZwCiovHOfcRlQVi 5v8KUpufx0/1bkJzXtHpMflMWkkKaFr8jejrGm9VXNEkBGbdhfpz3FmFbh6TAvRA Q6VWP7KfY2XQ7YK+7chZMr5/QBzswwUHeITNNNW70v6W21Lw+NWL7Sl7+hPatV4D bwOTQd1nLR476UqzSgOaTZrgBXMBLIpdblh9dsMOU6cfMEoIZP3tf2y3cs41tGUC 4N32PQQPKMt3eo3y53iZ9B6LUg5aoYnuqIzYF00so5RuR4K0zvu2KQUQP+niwIjM pVIprvo8qyNPWVsQkhcmkv5y -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:05 2026 by rpki-client