This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa File: a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa (raw, json) Hash identifier: b6V6y+CXqrM02r7OcRC1ExEpm/JNxjRqEeNbqYxgF44= Subject key identifier: 6B:87:79:65:F2:BF:10:13:AF:F3:D8:73:7C:FA:A9:60:EC:78:4A:60 Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb Certificate serial: 019B7AC81C68E54C3567C6C1DCD08B65C0F4 Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa Signing time: Thu 01 Jan 2026 18:18:13 +0000 ROA not before: Thu 01 Jan 2026 18:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199320 IP address blocks: 93.180.136.0/23 maxlen: 23 93.180.136.0/24 maxlen: 24 93.180.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1c:68:e5:4c:35:67:c6:c1:dc:d0:8b:65:c0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb Validity Not Before: Jan 1 18:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b877965f2bf1013aff3d8737cfaa960ec784a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:17:4d:13:7f:61:82:f9:8c:97:f1:5e:ad: 8c:a2:8f:01:d4:d5:35:71:78:93:89:32:b4:1c:18: 54:ed:b9:d9:2d:19:e0:49:eb:65:e2:2f:d1:81:26: 87:a2:fd:5e:4a:25:08:9c:75:69:f5:8b:ff:2d:a2: 08:ed:eb:87:d4:48:20:22:3c:07:6d:65:00:2e:36: fe:c6:47:d4:59:d9:d4:6e:b7:b3:e9:15:0e:59:70: fd:98:1f:5b:8f:93:11:b8:41:b0:20:c7:2e:0b:3e: 45:b8:17:93:5c:56:94:e6:f3:8e:1f:af:7c:a2:09: 04:8c:ab:56:3f:66:c6:bf:68:cf:92:a6:70:1d:67: a5:c3:2d:67:4c:95:23:6e:3e:15:3c:f2:7d:33:93: 99:07:d7:50:c4:00:0c:e2:d1:e8:84:ae:fe:72:29: af:05:4e:10:f9:ff:2e:d9:0f:0f:a2:d3:0f:a7:95: 2e:e5:5a:91:31:45:7c:63:42:bd:60:99:b5:52:ee: 3b:0c:37:61:7b:b8:0b:ed:87:21:60:bc:1e:bd:7a: 41:c2:cf:fc:4c:dc:09:81:b1:94:66:2a:66:28:19: 9a:ff:7e:e0:a7:f4:7e:a5:e7:57:c8:44:2f:4a:fd: 26:de:1a:a3:e8:15:65:cc:79:a3:f2:f7:51:a3:c2: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:87:79:65:F2:BF:10:13:AF:F3:D8:73:7C:FA:A9:60:EC:78:4A:60 X509v3 Authority Key Identifier: keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.180.136.0/23 Signature Algorithm: sha256WithRSAEncryption 28:59:3f:76:aa:de:c4:b2:03:3c:ff:d6:80:4a:87:69:7a:a7: 77:9f:ff:2f:7f:98:4c:81:0c:db:aa:0b:a8:d0:29:23:ba:a8: b5:ad:0c:68:24:52:8f:4c:48:cb:fc:82:62:de:9f:ad:f0:26: 22:72:fd:56:15:2d:0b:ba:3d:56:27:3a:aa:ad:18:d7:a7:dc: 29:25:8c:e3:62:73:39:61:b9:d8:0d:76:39:ab:2b:36:66:6d: a5:ec:50:63:76:be:a7:f4:3b:24:b1:1b:be:a0:70:6d:14:1a: 8a:81:12:b2:c9:42:48:55:c4:e3:5e:ba:61:dc:97:37:75:bf: ca:60:5f:bf:f8:c1:54:ec:ee:ef:0f:53:8f:34:b9:9a:22:27: 7a:2a:31:1b:cf:2d:20:7e:fe:79:6c:54:0c:0e:74:00:22:78: b7:94:3e:f8:a5:c2:c4:fb:6a:61:17:b5:aa:a7:dc:9e:4f:e4: fb:b5:bc:88:e7:6c:56:d6:a0:79:39:72:02:b0:89:49:0c:01: eb:e5:e3:48:0c:b1:9f:50:d5:99:5f:44:e5:4f:ea:b6:1c:e1: 36:3b:25:fa:19:fc:c3:a9:7f:59:ce:16:c2:71:57:fa:4c:d4: bb:82:47:eb:c9:65:1a:cc:da:35:68:47:dd:60:11:09:c1:9f: 6e:58:b9:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yBxo5Uw1Z8bB3NCLZcD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDA4OWViNzAxZjY5ZmRjN2I1YTA5OWYxZGY5MGU2MTQ4 YzZiY2IwHhcNMjYwMTAxMTgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yjg3Nzk2NWYyYmYxMDEzYWZmM2Q4NzM3Y2ZhYTk2MGVjNzg0YTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse0XTRN/YYL5jJfxXq2Moo8B1NU1 cXiTiTK0HBhU7bnZLRngSetl4i/RgSaHov1eSiUInHVp9Yv/LaII7euH1EggIjwH bWUALjb+xkfUWdnUbrez6RUOWXD9mB9bj5MRuEGwIMcuCz5FuBeTXFaU5vOOH698 ogkEjKtWP2bGv2jPkqZwHWelwy1nTJUjbj4VPPJ9M5OZB9dQxAAM4tHohK7+cimv BU4Q+f8u2Q8PotMPp5Uu5VqRMUV8Y0K9YJm1Uu47DDdhe7gL7YchYLwevXpBws/8 TNwJgbGUZipmKBma/37gp/R+pedXyEQvSv0m3hqj6BVlzHmj8vdRo8KemQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGuHeWXyvxATr/PYc3z6qWDseEpgMB8GA1UdIwQY MBaAFNjQietwH2n9x7WgmfHfkOYUjGvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5DSjYzQWZhZjNIdGFDWjhkLVE1aFNNYThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNmY1MWYtZTNjYy00MGFlLWJlZjAt YTY5NTFhM2FkZTQwLzEvYTRkNVpmS19FQk92ODloemZQcXBZT3g0U21BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNmY1MWYtZTNjYy00MGFlLWJlZjAtYTY5NTFhM2FkZTQw LzEvMk5DSjYzQWZhZjNIdGFDWjhkLVE1aFNNYThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXbSIMA0G CSqGSIb3DQEBCwUAA4IBAQAoWT92qt7EsgM8/9aASodpeqd3n/8vf5hMgQzbqguo 0Ckjuqi1rQxoJFKPTEjL/IJi3p+t8CYicv1WFS0Luj1WJzqqrRjXp9wpJYzjYnM5 YbnYDXY5qys2Zm2l7FBjdr6n9DsksRu+oHBtFBqKgRKyyUJIVcTjXrph3Jc3db/K YF+/+MFU7O7vD1OPNLmaIid6KjEbzy0gfv55bFQMDnQAIni3lD74pcLE+2phF7Wq p9yeT+T7tbyI52xW1qB5OXICsIlJDAHr5eNIDLGfUNWZX0TlT+q2HOE2OyX6GfzD qX9ZzhbCcVf6TNS7gkfryWUazNo1aEfdYBEJwZ9uWLmD -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:38 2026 by rpki-client