This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/IBlLkWqkaAhFp5QCimnfnCtLSuw.roa File: IBlLkWqkaAhFp5QCimnfnCtLSuw.roa (raw, json) Hash identifier: Qqv9tu5JI0ukk1Ce5QgBQxyaYDJ3PAWYDYEJ40iffTc= Subject key identifier: 20:19:4B:91:6A:A4:68:08:45:A7:94:02:8A:69:DF:9C:2B:4B:4A:EC Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad Certificate serial: 019B7F8160F02D3E21C1761A8B40283831A8 Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/IBlLkWqkaAhFp5QCimnfnCtLSuw.roa Signing time: Fri 02 Jan 2026 16:19:03 +0000 ROA not before: Fri 02 Jan 2026 16:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49924 IP address blocks: 91.109.192.0/21 maxlen: 21 109.73.176.0/20 maxlen: 20 176.101.171.0/24 maxlen: 24 185.123.232.0/22 maxlen: 22 2a06:be40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:60:f0:2d:3e:21:c1:76:1a:8b:40:28:38:31:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad Validity Not Before: Jan 2 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20194b916aa4680845a794028a69df9c2b4b4aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:37:ac:ef:f3:48:de:7e:0f:e7:bd:a6:b7:6e: 22:44:85:93:01:5f:14:5b:0e:9e:22:79:0f:fb:a9: 4c:81:28:24:55:34:41:e2:a3:69:a7:a6:ca:e9:c7: cc:c8:76:01:0b:93:2f:91:7e:01:71:94:3a:eb:da: b6:12:2f:96:79:69:bf:3c:ac:6b:7f:13:29:15:59: 09:17:d0:a9:90:84:fb:a7:c3:d1:cf:b5:51:ec:fc: 6b:dd:4f:f1:31:10:58:44:59:96:53:ae:82:d3:b7: 3d:40:d4:36:a9:37:b7:27:23:5f:7f:44:ba:5b:75: 24:af:c8:5f:2f:3a:ad:95:04:2c:15:0a:7d:ec:b0: e9:56:6e:79:67:a8:f6:26:45:c3:ab:f0:e2:50:21: 9c:88:3b:48:87:d4:9b:7d:38:d7:c0:58:87:c0:73: d3:7a:4d:30:21:be:b3:56:e4:d4:20:68:e4:b2:b9: 0c:64:65:e5:d7:d2:7b:64:c7:24:10:e3:b3:00:89: 48:8e:c5:c2:5b:44:e5:d8:1f:84:7b:bb:c9:01:73: d5:c7:c7:a0:66:d7:85:db:4a:56:83:97:11:be:0a: d2:8a:02:c2:0a:18:40:75:54:66:d9:1e:7a:17:dc: c1:53:10:86:d4:76:8a:54:62:a5:8c:08:51:77:77: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:19:4B:91:6A:A4:68:08:45:A7:94:02:8A:69:DF:9C:2B:4B:4A:EC X509v3 Authority Key Identifier: keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/IBlLkWqkaAhFp5QCimnfnCtLSuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.192.0/21 109.73.176.0/20 176.101.171.0/24 185.123.232.0/22 IPv6: 2a06:be40::/29 Signature Algorithm: sha256WithRSAEncryption 1d:31:a5:69:d5:7d:0e:64:61:8e:f8:c2:ba:10:a5:bb:fa:92: f7:8f:16:ff:d7:ea:7b:9d:1b:20:02:b8:3f:d6:06:3c:32:63: 6a:76:5d:c7:ed:36:bf:f5:b8:87:57:56:24:a2:09:d7:2d:2d: 1f:4f:8e:08:57:d5:b7:7f:57:0d:e4:7c:1b:c7:70:8f:46:ac: 78:1f:91:fb:93:02:4c:74:56:3c:1d:58:4b:db:6c:7c:4f:dd: 9b:6d:3c:6a:a2:19:a6:17:4a:09:91:d7:40:77:09:3b:88:c4: 90:be:0f:f2:8a:93:e2:6d:10:46:39:f8:44:50:6c:ff:d2:7d: 58:e0:25:77:8b:4a:c1:41:54:ba:aa:c1:dc:1b:be:13:02:16: b1:eb:46:fb:61:89:5f:40:32:1c:e7:d0:91:ac:ef:7e:c1:ac: 04:3c:8d:f3:66:e6:b3:30:09:55:28:27:a3:05:6e:27:4c:0b: ae:e6:12:67:03:b9:6d:16:0d:29:b5:ed:80:67:9d:e4:d2:37: 80:9e:9e:94:3b:37:b1:64:ca:09:ec:f7:5f:29:fc:23:ea:4b: 75:63:a9:94:c7:aa:a5:af:47:62:fa:55:0c:0d:7b:08:19:08: 72:2f:63:58:f9:08:50:d4:57:08:b9:f6:f3:0b:92:a0:b7:1c: b7:e9:18:70 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/gWDwLT4hwXYai0AoODGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzJlODRjNTJlNWM0OTA5ZGJjNzAyYWExZDIxMmQ0Nzg4 NzVmYWQwHhcNMjYwMTAyMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDE5NGI5MTZhYTQ2ODA4NDVhNzk0MDI4YTY5ZGY5YzJiNGI0YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tes7/NI3n4P572mt24iRIWTAV8U Ww6eInkP+6lMgSgkVTRB4qNpp6bK6cfMyHYBC5MvkX4BcZQ669q2Ei+WeWm/PKxr fxMpFVkJF9CpkIT7p8PRz7VR7Pxr3U/xMRBYRFmWU66C07c9QNQ2qTe3JyNff0S6 W3Ukr8hfLzqtlQQsFQp97LDpVm55Z6j2JkXDq/DiUCGciDtIh9SbfTjXwFiHwHPT ek0wIb6zVuTUIGjksrkMZGXl19J7ZMckEOOzAIlIjsXCW0Tl2B+Ee7vJAXPVx8eg ZteF20pWg5cRvgrSigLCChhAdVRm2R56F9zBUxCG1HaKVGKljAhRd3dLJQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCAZS5FqpGgIRaeUAopp35wrS0rsMB8GA1UdIwQY MBaAFJxy6ExS5cSQnbxwKqHSEtR4h1+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kYWNjYzQtMzZjOC00ZDRjLThjNGUt NTc2MGI1ZDU0ZGY5LzEvSUJsTGtXcWthQWhGcDVRQ2ltbmZuQ3RMU3V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kYWNjYzQtMzZjOC00ZDRjLThjNGUtNTc2MGI1ZDU0ZGY5 LzEvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDW23AAwQE bUmwAwQAsGWrAwQCuXvoMA0EAgACMAcDBQMqBr5AMA0GCSqGSIb3DQEBCwUAA4IB AQAdMaVp1X0OZGGO+MK6EKW7+pL3jxb/1+p7nRsgArg/1gY8MmNqdl3H7Ta/9biH V1YkognXLS0fT44IV9W3f1cN5Hwbx3CPRqx4H5H7kwJMdFY8HVhL22x8T92bbTxq ohmmF0oJkddAdwk7iMSQvg/yipPibRBGOfhEUGz/0n1Y4CV3i0rBQVS6qsHcG74T Ahax60b7YYlfQDIc59CRrO9+wawEPI3zZuazMAlVKCejBW4nTAuu5hJnA7ltFg0p te2AZ53k0jeAnp6UOzexZMoJ7PdfKfwj6kt1Y6mUx6qlr0di+lUMDXsIGQhyL2NY +QhQ1FcIufbzC5Kgtxy36Rhw -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:08 2026 by rpki-client