This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/i9hMEuJaBfT7lcapiz_ahkSHzcg.roa File: i9hMEuJaBfT7lcapiz_ahkSHzcg.roa (raw, json) Hash identifier: fw1KAABJZ7dzQA1QjS2gjeHAVGrrtjSeZ6MepK2bPQg= Subject key identifier: 8B:D8:4C:12:E2:5A:05:F4:FB:95:C6:A9:8B:3F:DA:86:44:87:CD:C8 Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355 Certificate serial: 019B7C126447C3AF52A953D9C31F65941196 Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/i9hMEuJaBfT7lcapiz_ahkSHzcg.roa Signing time: Fri 02 Jan 2026 00:18:58 +0000 ROA not before: Fri 02 Jan 2026 00:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59829 IP address blocks: 45.133.242.0/24 maxlen: 24 94.176.97.0/24 maxlen: 24 185.131.206.0/24 maxlen: 24 212.6.50.0/24 maxlen: 24 2a0c:2f40::/29 maxlen: 29 2a12:b340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:64:47:c3:af:52:a9:53:d9:c3:1f:65:94:11:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d921145820feceef3cf55270326c5e1243f24355 Validity Not Before: Jan 2 00:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd84c12e25a05f4fb95c6a98b3fda864487cdc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:be:b4:f1:79:aa:f1:a5:b5:80:3e:4f:0c: dc:5f:81:93:7b:0d:1a:f0:2a:be:2b:fa:8e:e6:43: 85:ca:d8:85:ee:1c:0d:d7:7b:72:8a:5a:fe:99:2c: 82:16:88:44:31:de:ae:c7:1d:dd:ea:68:2f:2f:23: fb:2a:96:85:00:5b:2f:e0:e6:df:a5:59:ba:4b:8e: 46:37:14:62:d3:59:a6:16:ed:b0:99:95:12:53:0e: c2:8d:a2:1b:ee:d8:c6:16:d3:14:5a:1b:3e:ec:4a: 69:db:b9:80:26:9f:e4:c3:8f:ea:72:36:f7:4e:8e: 03:cf:ec:69:55:73:38:07:de:8c:fb:ca:90:c0:c9: ed:83:40:fe:05:7d:3d:05:59:84:d1:ad:91:5d:82: b5:0c:b6:e6:04:58:41:02:93:92:1e:48:09:6d:7c: 19:56:2e:92:d1:b0:c9:40:81:81:a7:62:97:24:f5: 94:08:bc:59:ec:0b:cc:4e:a1:a8:b4:f5:74:07:bc: 38:82:60:aa:f4:05:e8:88:c9:f2:40:ed:80:04:c2: ee:c6:58:df:7f:46:56:08:c3:30:88:4b:8c:d2:c2: fe:45:8a:9e:86:9e:62:03:74:dd:6c:6e:5e:2a:db: 39:5b:1c:75:6e:04:da:97:74:65:7b:7c:80:46:55: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D8:4C:12:E2:5A:05:F4:FB:95:C6:A9:8B:3F:DA:86:44:87:CD:C8 X509v3 Authority Key Identifier: keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/i9hMEuJaBfT7lcapiz_ahkSHzcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.242.0/24 94.176.97.0/24 185.131.206.0/24 212.6.50.0/24 IPv6: 2a0c:2f40::/29 2a12:b340::/29 Signature Algorithm: sha256WithRSAEncryption 64:28:f2:63:dd:da:6f:e4:0a:84:9b:49:9f:85:f0:1f:c6:3e: 5a:fa:e4:44:fc:54:88:01:03:0b:d0:2c:e7:f9:39:9f:32:76: b4:ef:57:17:8c:7a:6a:c6:fd:b3:6c:a3:62:eb:dd:53:76:87: 61:c3:de:41:16:9a:57:c7:d5:af:28:4a:f1:96:2c:df:6e:96: bd:e2:30:e6:87:a3:52:34:df:86:ec:c1:fb:4a:f7:6b:b8:63: 7f:08:a0:85:16:ef:01:57:5c:b7:de:51:5e:16:a3:3c:6c:2b: 3f:ab:26:eb:a6:72:f5:8a:71:62:d2:cd:76:e3:b0:9d:dc:bf: a7:91:c3:ae:ab:58:4b:2d:62:96:7c:93:e2:8f:64:ea:c5:11: bf:9f:61:60:7b:14:d5:0f:1c:0b:37:70:af:90:40:56:90:48: a5:fb:11:8d:9b:ef:32:d2:0e:58:5a:c2:2d:58:3d:46:e7:02: 25:d0:ad:a0:6c:ad:59:06:9a:88:9f:1f:64:b9:6b:24:bd:62: a7:bd:82:f7:72:1e:1a:3c:ff:d0:71:69:a6:72:da:2b:0c:b3: 6f:23:76:4c:27:0e:13:bd:e3:e2:0d:d1:07:2c:ea:06:b2:a2: 5b:ea:63:4a:14:22:0e:73:18:4d:ae:36:91:a3:97:1a:ed:41: 54:f4:8e:c7 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt8EmRHw69SqVPZwx9llBGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm MjQzNTUwHhcNMjYwMTAyMDAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQ4NGMxMmUyNWEwNWY0ZmI5NWM2YTk4YjNmZGE4NjQ0ODdjZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNK+tPF5qvGltYA+TwzcX4GTew0a 8Cq+K/qO5kOFytiF7hwN13tyilr+mSyCFohEMd6uxx3d6mgvLyP7KpaFAFsv4Obf pVm6S45GNxRi01mmFu2wmZUSUw7CjaIb7tjGFtMUWhs+7Epp27mAJp/kw4/qcjb3 To4Dz+xpVXM4B96M+8qQwMntg0D+BX09BVmE0a2RXYK1DLbmBFhBApOSHkgJbXwZ Vi6S0bDJQIGBp2KXJPWUCLxZ7AvMTqGotPV0B7w4gmCq9AXoiMnyQO2ABMLuxljf f0ZWCMMwiEuM0sL+RYqehp5iA3TdbG5eKts5Wxx1bgTal3Rle3yARlUASwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFIvYTBLiWgX0+5XGqYs/2oZEh83IMB8GA1UdIwQY MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt ZDgxNTJiNTE1N2Q4LzEvaTloTUV1SmFCZlQ3bGNhcGl6X2Foa1NIemNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4 LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQALYXyAwQA XrBhAwQAuYPOAwQA1AYyMBQEAgACMA4DBQMqDC9AAwUDKhKzQDANBgkqhkiG9w0B AQsFAAOCAQEAZCjyY93ab+QKhJtJn4XwH8Y+WvrkRPxUiAEDC9As5/k5nzJ2tO9X F4x6asb9s2yjYuvdU3aHYcPeQRaaV8fVryhK8ZYs326WveIw5oejUjTfhuzB+0r3 a7hjfwighRbvAVdct95RXhajPGwrP6sm66Zy9YpxYtLNduOwndy/p5HDrqtYSy1i lnyT4o9k6sURv59hYHsU1Q8cCzdwr5BAVpBIpfsRjZvvMtIOWFrCLVg9RucCJdCt oGytWQaaiJ8fZLlrJL1ip72C93IeGjz/0HFppnLaKwyzbyN2TCcOE73j4g3RByzq BrKiW+pjShQiDnMYTa42kaOXGu1BVPSOxw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:52 2026 by rpki-client