This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/9UL_7FkS2vsJIq4mulwmPO12qgU.roa File: 9UL_7FkS2vsJIq4mulwmPO12qgU.roa (raw, json) Hash identifier: PMgAFWeEqNxOYIt76P9bkFAoNa2Je/9TmNXR3UwPjvg= Subject key identifier: F5:42:FF:EC:59:12:DA:FB:09:22:AE:26:BA:5C:26:3C:ED:76:AA:05 Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86 Certificate serial: 019B7DC99B9D105374491BC2DE229015B8B5 Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/9UL_7FkS2vsJIq4mulwmPO12qgU.roa Signing time: Fri 02 Jan 2026 08:18:43 +0000 ROA not before: Fri 02 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205348 IP address blocks: 185.220.124.0/24 maxlen: 24 185.220.125.0/24 maxlen: 24 185.220.126.0/24 maxlen: 24 185.220.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:9b:9d:10:53:74:49:1b:c2:de:22:90:15:b8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86 Validity Not Before: Jan 2 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f542ffec5912dafb0922ae26ba5c263ced76aa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:5e:ca:cb:6b:12:9d:b6:48:51:9b:11:4f: 17:11:25:44:89:45:db:91:98:15:01:0e:12:8f:c4: 7e:80:f0:ad:b2:fa:ba:6e:92:4b:9c:5e:78:31:b9: 89:05:87:3b:f9:29:c6:77:fc:f3:6f:76:17:c7:29: d5:9b:2b:4c:8b:ad:6d:eb:0a:d8:79:a7:71:a4:d1: 00:8e:dc:b8:65:3c:ed:18:6b:9f:32:da:fd:7b:0d: 7a:69:33:51:17:00:a7:61:bb:53:18:cb:80:06:2c: 54:2d:fd:bb:2a:1c:04:cf:5d:f4:6a:9d:76:eb:e7: 54:83:51:32:33:e4:5e:e7:bd:3d:1b:a5:27:5e:53: 54:70:11:da:47:06:05:86:b8:0e:72:ea:73:96:97: 42:30:a4:5b:ba:f4:80:38:27:02:df:fc:b7:67:55: cf:43:cf:ad:7b:ba:90:b0:43:21:e5:cf:c1:43:52: 9c:e2:d1:6d:98:0a:76:37:a8:a6:3f:9e:34:b0:7b: 29:f5:2c:c2:40:4e:f4:5a:b4:f2:bc:66:f1:25:34: 93:ac:7e:f4:a9:0b:a8:ed:d5:ba:d1:b1:88:e9:40: b5:15:aa:c8:8a:6e:a4:43:58:70:8c:28:e6:35:33: 3e:d4:af:01:db:ca:c9:15:62:a5:92:27:a8:ef:c1: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:42:FF:EC:59:12:DA:FB:09:22:AE:26:BA:5C:26:3C:ED:76:AA:05 X509v3 Authority Key Identifier: keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/9UL_7FkS2vsJIq4mulwmPO12qgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.124.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:2c:44:14:af:86:ee:1e:6f:64:6a:23:37:1c:bb:15:ed:38: 01:37:31:2a:50:82:4f:9b:30:5b:f3:b7:35:3f:52:68:9a:92: 0a:da:2c:06:14:1f:aa:05:c4:64:a6:de:05:88:77:ac:7d:63: ad:3f:50:f9:e7:a1:2b:f3:79:fe:99:bd:c0:d9:ad:34:54:39: 4a:18:1f:11:54:23:57:6d:46:79:48:44:45:96:b5:20:5e:dc: bc:4e:a8:3b:d5:35:88:61:f8:c1:a1:49:f7:c8:d4:e0:99:7a: f9:6c:92:0c:79:77:d9:15:4f:fc:9b:71:1e:40:2d:67:73:7d: d7:94:9f:99:4a:09:3c:3c:7c:46:81:ad:1f:d8:a0:9d:c2:1a: 8c:b4:af:75:3d:47:0d:42:d2:b1:4d:75:24:75:c9:71:f4:08: 94:5e:94:8a:c4:45:34:ff:75:f8:88:68:46:52:a6:18:dc:3d: ad:d9:3a:0a:39:6b:43:6b:62:d8:b1:54:55:98:17:c6:06:f5: a0:cf:b8:f7:54:69:5b:16:94:e9:0d:a3:1b:8e:67:3b:28:32: 38:80:40:5e:04:e2:9c:9e:55:e3:fe:41:ba:fd:3f:23:2c:c9: 63:6a:59:14:06:20:06:1d:8e:0e:22:70:6d:58:a1:67:7e:07: 9b:6a:fa:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yZudEFN0SRvC3iKQFbi1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2UwMGM2ZDJiMmY5OGQ1MTQ4MmU5NDNiOTc5M2Q0M2Jm M2JjODYwHhcNMjYwMTAyMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTQyZmZlYzU5MTJkYWZiMDkyMmFlMjZiYTVjMjYzY2VkNzZhYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGheystrEp22SFGbEU8XESVEiUXb kZgVAQ4Sj8R+gPCtsvq6bpJLnF54MbmJBYc7+SnGd/zzb3YXxynVmytMi61t6wrY eadxpNEAjty4ZTztGGufMtr9ew16aTNRFwCnYbtTGMuABixULf27KhwEz130ap12 6+dUg1EyM+Re5709G6UnXlNUcBHaRwYFhrgOcupzlpdCMKRbuvSAOCcC3/y3Z1XP Q8+te7qQsEMh5c/BQ1Kc4tFtmAp2N6imP540sHsp9SzCQE70WrTyvGbxJTSTrH70 qQuo7dW60bGI6UC1FarIim6kQ1hwjCjmNTM+1K8B28rJFWKlkieo78EZFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVC/+xZEtr7CSKuJrpcJjztdqoFMB8GA1UdIwQY MBaAFJ4+AMbSsvmNUUgulDuXk9Q787yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZmRiNjktNjgwYS00NjVjLWE0ODkt NjZjMTQ0MjQ4MGRlLzEvOVVMXzdGa1MydnNKSXE0bXVsd21QTzEycWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9mZmRiNjktNjgwYS00NjVjLWE0ODktNjZjMTQ0MjQ4MGRl LzEvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudx8MA0G CSqGSIb3DQEBCwUAA4IBAQANLEQUr4buHm9kaiM3HLsV7TgBNzEqUIJPmzBb87c1 P1JompIK2iwGFB+qBcRkpt4FiHesfWOtP1D556Er83n+mb3A2a00VDlKGB8RVCNX bUZ5SERFlrUgXty8Tqg71TWIYfjBoUn3yNTgmXr5bJIMeXfZFU/8m3EeQC1nc33X lJ+ZSgk8PHxGga0f2KCdwhqMtK91PUcNQtKxTXUkdclx9AiUXpSKxEU0/3X4iGhG UqYY3D2t2ToKOWtDa2LYsVRVmBfGBvWgz7j3VGlbFpTpDaMbjmc7KDI4gEBeBOKc nlXj/kG6/T8jLMljalkUBiAGHY4OInBtWKFnfgebavo3 -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:38 2026 by rpki-client