This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa File: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (raw, json) Hash identifier: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0= Subject key identifier: 4F:DA:88:97:54:BD:B5:0C:F8:B4:45:63:AD:22:80:58:56:CE:A9:C8 Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551 Certificate serial: 019B783474F8CC7EDEEEB08DD3D34CC408D3 Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56974 IP address blocks: 185.44.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:74:f8:cc:7e:de:ee:b0:8d:d3:d3:4c:c4:08:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620b0435463746f5f237d93687bec2eacf224551 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fda889754bdb50cf8b44563ad22805856cea9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:f0:f7:c4:34:84:45:cf:a7:42:a3:83:b1: 09:17:59:73:2e:b0:64:32:65:38:2c:7c:5b:9c:d6: 41:53:3d:e6:20:60:51:f4:3f:b1:d2:e6:01:e7:a0: 36:01:49:80:75:ab:3b:fa:b8:52:10:29:96:66:d2: 0f:7d:3e:ff:1c:46:57:5c:fe:cd:ab:7d:57:21:80: ad:ee:25:66:c8:d8:6c:a4:3d:be:b3:d4:6f:2f:8e: 1b:35:ae:18:8c:ef:0f:b0:44:90:14:d8:12:c3:20: 2b:04:75:9f:05:29:aa:d5:a6:65:b9:d3:07:27:71: f3:af:03:e5:04:f2:2e:a4:a9:8b:d3:2f:55:13:db: a3:ac:b6:5f:02:e6:13:21:ac:d6:f0:59:11:0b:3a: e9:8b:4a:b0:cf:9c:e8:93:8b:7c:93:4a:5c:94:85: 9f:40:e2:de:91:9d:9e:66:bd:86:7d:87:9a:44:49: 05:c7:06:52:ab:ef:b5:50:b6:05:43:14:2e:35:ec: aa:88:14:c8:25:b7:93:6e:c7:2e:6f:e4:d3:a1:6f: 1a:94:f0:eb:75:4b:4d:8e:61:94:48:25:56:2d:ca: 9e:83:17:33:dd:65:68:33:07:1d:57:e8:73:bc:7a: 1b:d3:81:56:28:72:61:21:6a:cb:1e:96:b4:ea:88: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:88:97:54:BD:B5:0C:F8:B4:45:63:AD:22:80:58:56:CE:A9:C8 X509v3 Authority Key Identifier: keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.228.0/24 Signature Algorithm: sha256WithRSAEncryption 27:85:75:01:a6:29:0e:3b:5e:ad:63:b2:68:50:25:30:ec:f1: 83:fa:be:b2:48:8f:ae:ba:f7:d5:fc:d1:16:ee:06:24:48:98: 50:b6:a5:f8:fe:96:5b:62:a9:bf:c8:57:b1:27:d0:d6:c4:dd: 06:7c:e9:38:4f:a9:22:d2:a1:aa:06:e5:1b:47:d3:53:70:e7: df:04:49:e2:58:87:02:59:81:3b:88:ed:49:4d:69:07:9d:5d: 44:c0:ca:ff:4d:27:e3:8d:69:2a:b2:76:e1:2b:23:fe:da:db: b3:21:91:d5:e9:15:46:27:26:81:42:f8:f1:c1:3f:c5:63:57: de:0a:87:35:65:1a:ec:dc:d9:9b:d0:cf:46:08:e0:db:52:17: 22:82:2e:eb:c1:d3:bd:00:8b:cc:37:e7:d0:a9:21:66:d5:0a: f2:42:66:44:52:ca:15:1e:bc:cb:22:83:84:0b:47:6e:c6:a5: 30:24:6d:9d:8c:f4:3e:e2:59:6b:82:66:cf:14:f1:98:a4:90: c2:23:34:98:ad:71:ff:11:b1:57:95:85:fd:a4:ed:90:c4:d9: 76:4e:86:f0:23:75:cd:48:25:33:4c:57:0d:c9:d4:27:dd:f0: 2a:c5:9d:a7:45:18:a2:95:61:ba:c1:9c:1c:21:a7:5d:dd:af: 45:02:73:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHT4zH7e7rCN09NMxAjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMGIwNDM1NDYzNzQ2ZjVmMjM3ZDkzNjg3YmVjMmVhY2Yy MjQ1NTEwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmRhODg5NzU0YmRiNTBjZjhiNDQ1NjNhZDIyODA1ODU2Y2VhOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtPw98Q0hEXPp0Kjg7EJF1lzLrBk MmU4LHxbnNZBUz3mIGBR9D+x0uYB56A2AUmAdas7+rhSECmWZtIPfT7/HEZXXP7N q31XIYCt7iVmyNhspD2+s9RvL44bNa4YjO8PsESQFNgSwyArBHWfBSmq1aZludMH J3HzrwPlBPIupKmL0y9VE9ujrLZfAuYTIazW8FkRCzrpi0qwz5zok4t8k0pclIWf QOLekZ2eZr2GfYeaREkFxwZSq++1ULYFQxQuNeyqiBTIJbeTbscub+TToW8alPDr dUtNjmGUSCVWLcqegxcz3WVoMwcdV+hzvHob04FWKHJhIWrLHpa06oj2EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/aiJdUvbUM+LRFY60igFhWzqnIMB8GA1UdIwQY MBaAFGILBDVGN0b18jfZNoe+wurPIkVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYt NjhjNTljMTliOTM1LzEvVDlxSWwxUzl0UXo0dEVWanJTS0FXRmJPcWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYtNjhjNTljMTliOTM1 LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSzkMA0G CSqGSIb3DQEBCwUAA4IBAQAnhXUBpikOO16tY7JoUCUw7PGD+r6ySI+uuvfV/NEW 7gYkSJhQtqX4/pZbYqm/yFexJ9DWxN0GfOk4T6ki0qGqBuUbR9NTcOffBEniWIcC WYE7iO1JTWkHnV1EwMr/TSfjjWkqsnbhKyP+2tuzIZHV6RVGJyaBQvjxwT/FY1fe Coc1ZRrs3Nmb0M9GCODbUhcigi7rwdO9AIvMN+fQqSFm1QryQmZEUsoVHrzLIoOE C0duxqUwJG2djPQ+4llrgmbPFPGYpJDCIzSYrXH/EbFXlYX9pO2QxNl2TobwI3XN SCUzTFcNydQn3fAqxZ2nRRiilWG6wZwcIadd3a9FAnOn -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:44 2026 by rpki-client