This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/uIV80scH6u5gHYdNO6XCbXg6J0o.roa File: uIV80scH6u5gHYdNO6XCbXg6J0o.roa (raw, json) Hash identifier: SeBYh3gOgab2j7dPxQk9qB9Evvzqzf/WoiGkwr4d8Bs= Subject key identifier: B8:85:7C:D2:C7:07:EA:EE:60:1D:87:4D:3B:A5:C2:6D:78:3A:27:4A Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019C41FAFA2E7CA5484AAEF439249E13050C Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/uIV80scH6u5gHYdNO6XCbXg6J0o.roa Signing time: Mon 09 Feb 2026 10:38:12 +0000 ROA not before: Mon 09 Feb 2026 10:38:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 89.249.192.0/21 maxlen: 24 89.249.203.0/24 maxlen: 24 89.249.205.0/24 maxlen: 24 89.249.206.0/23 maxlen: 24 89.249.206.0/24 maxlen: 24 212.42.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:fa:fa:2e:7c:a5:48:4a:ae:f4:39:24:9e:13:05:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Feb 9 10:38:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8857cd2c707eaee601d874d3ba5c26d783a274a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:b5:f5:6e:e3:fe:c9:7c:f0:ee:c0:0c:5d: 5b:04:a5:79:2d:73:19:90:0e:d1:c7:15:90:87:ec: d0:27:84:52:73:f1:93:e5:1e:fc:6f:9d:5a:8c:3b: 74:83:19:82:07:af:61:d9:65:ce:e1:76:d8:49:0d: 4f:9e:1a:1b:4a:b8:56:31:12:3c:cf:fc:9d:12:b2: 0e:08:f8:da:34:7c:d6:27:76:b0:6e:1b:2f:44:60: 76:e8:03:28:bb:ac:00:40:87:fa:f5:7d:a2:42:08: bc:36:39:e5:80:6d:72:04:82:85:05:12:31:4a:8b: ca:25:fb:ae:46:b8:6e:b7:a6:19:49:0a:64:90:5d: 42:e6:03:b0:ae:88:9b:f9:f1:a2:e4:3e:1f:32:fb: 64:0d:ac:1f:56:47:e6:48:39:2e:01:75:e3:a6:d6: 3e:91:37:b7:25:a7:5a:5d:ae:77:51:cd:c6:69:b9: d4:81:7d:a9:df:64:0b:20:47:5e:c4:f7:7b:08:bf: 03:e0:6c:a7:42:7c:25:b1:b3:40:38:24:e8:41:00: 9a:05:36:4f:db:59:60:8a:25:f8:f4:89:ca:ba:c4: f0:ce:1d:94:7e:bb:9c:c8:a3:b3:38:b7:8c:d2:00: 81:04:64:c9:9f:a2:93:4c:81:7f:93:d8:b5:e6:92: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:7C:D2:C7:07:EA:EE:60:1D:87:4D:3B:A5:C2:6D:78:3A:27:4A X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/uIV80scH6u5gHYdNO6XCbXg6J0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.192.0/21 89.249.203.0/24 89.249.205.0-89.249.207.255 212.42.192.0/20 Signature Algorithm: sha256WithRSAEncryption 82:17:71:be:4b:82:8e:5a:5e:5f:87:66:68:32:83:e9:5d:58: f1:f5:f5:3a:d2:bf:ad:c5:ea:ef:98:42:cb:70:c7:b0:34:f0: a3:55:6b:2d:b4:8d:6a:04:0a:68:96:6b:96:47:2a:69:3b:e9: d8:1e:78:38:a4:21:10:3e:d4:ef:83:dd:8e:36:62:11:21:77: 3f:73:a1:4e:30:2d:15:1b:ed:47:a4:90:15:d8:ca:ea:fd:1a: 2b:9f:ed:a6:0c:73:0f:0d:75:b0:b4:9e:32:ec:19:fc:b7:99: 26:c8:5d:8b:f0:92:20:69:ab:71:cb:6c:30:62:c1:ab:0f:7e: 18:6f:ca:0d:05:e9:78:3f:12:d2:ae:cd:36:cf:0c:93:e7:a9: e4:e3:22:18:0e:c1:a5:a9:f7:f6:a8:48:c3:7a:34:b9:3d:4f: 9a:2b:0d:a5:e6:25:b7:6e:d8:26:32:33:62:6a:1b:81:c2:6d: 5b:ab:7a:af:78:62:78:2d:ba:86:bf:94:ad:0a:0d:95:ed:2e: 8f:51:11:41:7a:fa:57:49:c1:c2:65:48:69:59:a5:2e:9d:da: f0:a3:0d:ee:91:5f:0d:69:09:15:50:ee:5f:87:d8:88:00:4c: 1a:7b:76:2c:81:a8:33:87:05:84:3c:29:fe:88:15:5e:2c:95: 59:1a:a4:ff -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZxB+voufKVISq70OSSeEwUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMjA5MTAzODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODg1N2NkMmM3MDdlYWVlNjAxZDg3NGQzYmE1YzI2ZDc4M2EyNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ky19W7j/sl88O7ADF1bBKV5LXMZ kA7RxxWQh+zQJ4RSc/GT5R78b51ajDt0gxmCB69h2WXO4XbYSQ1PnhobSrhWMRI8 z/ydErIOCPjaNHzWJ3awbhsvRGB26AMou6wAQIf69X2iQgi8NjnlgG1yBIKFBRIx SovKJfuuRrhut6YZSQpkkF1C5gOwroib+fGi5D4fMvtkDawfVkfmSDkuAXXjptY+ kTe3JadaXa53Uc3GabnUgX2p32QLIEdexPd7CL8D4GynQnwlsbNAOCToQQCaBTZP 21lgiiX49InKusTwzh2UfrucyKOzOLeM0gCBBGTJn6KTTIF/k9i15pKS5QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLiFfNLHB+ruYB2HTTulwm14OidKMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvdUlWODBzY0g2dTVnSFlkTk82WENiWGc2SjBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDWfnAAwQA WfnLMAwDBABZ+c0DBARZ+cADBATUKsAwDQYJKoZIhvcNAQELBQADggEBAIIXcb5L go5aXl+HZmgyg+ldWPH19TrSv63F6u+YQstwx7A08KNVay20jWoECmiWa5ZHKmk7 6dgeeDikIRA+1O+D3Y42YhEhdz9zoU4wLRUb7UekkBXYyur9Giuf7aYMcw8NdbC0 njLsGfy3mSbIXYvwkiBpq3HLbDBiwasPfhhvyg0F6Xg/EtKuzTbPDJPnqeTjIhgO waWp9/aoSMN6NLk9T5orDaXmJbdu2CYyM2JqG4HCbVureq94Yngtuoa/lK0KDZXt Lo9REUF6+ldJwcJlSGlZpS6d2vCjDe6RXw1pCRVQ7l+H2IgATBp7diyBqDOHBYQ8 Kf6IFV4slVkapP8= -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:46 2026 by rpki-client