This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/k9UuQfoQ3x1App0ZI_fz4inm010.roa File: k9UuQfoQ3x1App0ZI_fz4inm010.roa (raw, json) Hash identifier: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI= Subject key identifier: 93:D5:2E:41:FA:10:DF:1D:40:A6:9D:19:23:F7:F3:E2:29:E6:D3:5D Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Certificate serial: 019B7EA6FDA8737B39EC6CC41EB67197702B Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/k9UuQfoQ3x1App0ZI_fz4inm010.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39787 IP address blocks: 5.44.64.0/21 maxlen: 21 195.5.112.0/23 maxlen: 23 2a00:e48:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:a8:73:7b:39:ec:6c:c4:1e:b6:71:97:70:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93d52e41fa10df1d40a69d1923f7f3e229e6d35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:4b:69:b7:bc:0f:e9:90:2a:ca:70:eb:84:4f: 6f:a2:00:f3:2b:29:fa:8a:fa:00:47:da:d8:2c:c4: de:06:c4:6f:57:29:6a:51:a8:6f:89:f6:08:68:4f: 58:0c:23:d1:0e:7f:b0:88:70:56:f9:48:30:85:62: 41:ed:cf:11:5e:79:5e:af:b6:9b:81:7f:ee:cb:e4: d9:b1:66:db:84:ae:cc:6a:77:f2:53:06:1a:d6:1a: 74:bb:df:ac:8f:7b:cc:00:31:e0:63:51:4f:e5:f1: 2f:16:b0:39:a6:ad:f7:79:87:40:14:67:92:af:4c: 10:e9:15:bc:7c:60:8d:11:03:15:69:cd:f5:08:43: a3:c7:6c:c9:0a:0c:ef:42:88:6f:94:71:2d:b3:d4: 35:f0:19:3c:01:b0:d6:7d:f2:26:39:3c:dc:c9:d7: 26:3d:6a:52:be:d0:1f:c6:0c:30:98:1e:a9:a1:6b: 23:03:b4:09:b1:48:42:1d:c6:2d:12:bc:9f:38:9a: a6:dd:5e:d6:8c:c9:fe:31:dc:85:c6:34:af:73:99: 82:8c:9a:f9:75:b7:ba:26:ce:44:ed:8e:b4:d8:a4: 28:17:d4:d1:5f:21:c9:3c:ee:13:0b:f5:b0:2a:1c: 5f:73:7b:f3:81:a3:9d:59:75:81:c5:77:a1:25:ad: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D5:2E:41:FA:10:DF:1D:40:A6:9D:19:23:F7:F3:E2:29:E6:D3:5D X509v3 Authority Key Identifier: keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/k9UuQfoQ3x1App0ZI_fz4inm010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.64.0/21 195.5.112.0/23 IPv6: 2a00:e48:8000::/33 Signature Algorithm: sha256WithRSAEncryption 5d:aa:23:67:c0:97:52:c0:46:ba:1c:94:69:03:5a:96:d7:06: d9:3c:30:f9:33:b9:d2:84:56:0a:02:51:7b:43:21:a4:7c:72: 93:02:2c:63:f5:60:b5:6c:b8:42:89:0d:cf:d8:bb:2e:10:29: 40:34:ab:7f:ad:fb:ef:d6:30:12:0e:d7:a2:5a:e1:b4:47:b5: 43:53:d2:13:7c:11:e3:00:72:d3:2f:19:ad:3c:75:91:58:29: 2e:8e:cb:0a:f8:6e:32:88:a6:63:20:bd:7f:57:0a:e8:3e:64: e6:30:c8:85:a7:98:26:58:3e:32:7c:41:3b:fd:5a:72:1f:0e: 7d:90:f6:49:a4:63:8f:25:5e:41:37:f3:a3:fd:0a:34:07:30: 9b:65:45:42:2e:3c:7b:80:2e:d7:3f:3a:66:d2:1b:6e:1b:49: 67:c6:84:11:49:78:2d:99:9e:4c:0f:0a:a7:8d:b1:47:5d:08: c4:99:36:50:c0:64:49:2e:94:88:2d:73:5f:2b:6c:a3:e2:14: 96:9d:fc:9a:81:b2:ae:9a:18:c1:3e:c1:09:a7:be:20:ca:41: 01:63:7c:f4:2a:07:c8:38:07:dc:3b:30:13:07:a4:b2:09:f4: 4e:2b:b4:3a:cc:49:be:6f:0d:fb:f0:b2:18:b4:d9:74:c4:db: 09:21:86:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+pv2oc3s57GzEHrZxl3ArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDI0YjljNjNkYjVjMWExY2Y0YzU1ODFkYmU1YjM4MWNi OTUwODcwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2Q1MmU0MWZhMTBkZjFkNDBhNjlkMTkyM2Y3ZjNlMjI5ZTZkMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/0tpt7wP6ZAqynDrhE9vogDzKyn6 ivoAR9rYLMTeBsRvVylqUahvifYIaE9YDCPRDn+wiHBW+UgwhWJB7c8RXnler7ab gX/uy+TZsWbbhK7ManfyUwYa1hp0u9+sj3vMADHgY1FP5fEvFrA5pq33eYdAFGeS r0wQ6RW8fGCNEQMVac31CEOjx2zJCgzvQohvlHEts9Q18Bk8AbDWffImOTzcydcm PWpSvtAfxgwwmB6poWsjA7QJsUhCHcYtEryfOJqm3V7WjMn+MdyFxjSvc5mCjJr5 dbe6Js5E7Y602KQoF9TRXyHJPO4TC/WwKhxfc3vzgaOdWXWBxXehJa3c/wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJPVLkH6EN8dQKadGSP38+Ip5tNdMB8GA1UdIwQY MBaAFNoCS5xj21waHPTFWB2+WzgcuVCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYt NzEyYjFhNzk2OGU2LzEvazlVdVFmb1EzeDFBcHAwWklfZno0aW5tMDEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYtNzEyYjFhNzk2OGU2 LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDBSxAAwQB wwVwMA4EAgACMAgDBgcqAA5IgDANBgkqhkiG9w0BAQsFAAOCAQEAXaojZ8CXUsBG uhyUaQNaltcG2Tww+TO50oRWCgJRe0MhpHxykwIsY/VgtWy4QokNz9i7LhApQDSr f63779YwEg7XolrhtEe1Q1PSE3wR4wBy0y8ZrTx1kVgpLo7LCvhuMoimYyC9f1cK 6D5k5jDIhaeYJlg+MnxBO/1ach8OfZD2SaRjjyVeQTfzo/0KNAcwm2VFQi48e4Au 1z86ZtIbbhtJZ8aEEUl4LZmeTA8Kp42xR10IxJk2UMBkSS6UiC1zXytso+IUlp38 moGyrpoYwT7BCae+IMpBAWN89CoHyDgH3DswEweksgn0Tiu0OsxJvm8N+/CyGLTZ dMTbCSGGkg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:27 2026 by rpki-client