This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/iU6hqxAQY7_aR8pSYH7dfZ4of_w.roa File: iU6hqxAQY7_aR8pSYH7dfZ4of_w.roa (raw, json) Hash identifier: /BCTySyoy/2YrKj9N1WqdMwnqTnHMCBKNLE8+BsWToo= Subject key identifier: 89:4E:A1:AB:10:10:63:BF:DA:47:CA:52:60:7E:DD:7D:9E:28:7F:FC Certificate issuer: /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Certificate serial: 019B79ED4678AAA7434958C3779A186F571A Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/iU6hqxAQY7_aR8pSYH7dfZ4of_w.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43323 IP address blocks: 95.87.96.0/21 maxlen: 21 95.87.96.0/24 maxlen: 24 95.87.97.0/24 maxlen: 24 95.87.98.0/24 maxlen: 24 95.87.99.0/24 maxlen: 24 95.87.100.0/24 maxlen: 24 95.87.101.0/24 maxlen: 24 95.87.102.0/24 maxlen: 24 95.87.103.0/24 maxlen: 24 193.53.164.0/22 maxlen: 22 193.53.164.0/24 maxlen: 24 193.53.165.0/24 maxlen: 24 193.53.166.0/24 maxlen: 24 193.53.167.0/24 maxlen: 24 194.107.16.0/24 maxlen: 24 2a03:4d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:46:78:aa:a7:43:49:58:c3:77:9a:18:6f:57:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=894ea1ab101063bfda47ca52607edd7d9e287ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:cb:ff:5c:b5:d4:57:82:44:65:53:57:a0: 51:15:71:52:f1:52:3e:dc:81:3f:f8:f4:85:1b:26: 7c:93:40:67:71:62:71:20:18:ab:db:35:57:f6:54: 1f:67:2b:d6:f3:75:04:d2:c3:49:69:f2:dc:5d:77: 90:a7:c5:e6:87:d1:56:d5:f3:5b:f1:d4:2c:23:58: b8:d9:89:68:0b:e5:f9:7d:06:81:9f:25:7f:f7:b5: d2:00:3a:52:04:12:16:f4:dc:a4:a5:7d:4b:49:ad: 2c:ab:d2:e5:08:d5:4c:97:d3:2b:a0:70:b8:e0:fe: 18:3e:5c:8c:ae:bd:6f:b8:76:53:7a:cf:d6:ff:33: 49:b2:31:0f:d4:dc:90:bc:75:a5:67:ce:3e:71:b4: aa:38:c3:dc:c0:fc:6e:a1:92:2a:54:a5:8b:e0:87: 55:47:39:dc:27:a1:c0:8a:7b:30:e6:96:60:27:bd: eb:bf:9c:07:3f:dd:b2:14:13:ef:13:90:9f:da:c5: f7:32:5d:cd:15:c9:c3:a3:85:99:98:d4:58:62:56: b0:2f:9e:90:7e:c7:2e:f5:ff:4d:b5:91:fd:86:f2: 22:93:8b:c8:bb:89:2f:1a:5a:00:fe:d3:8b:53:2f: eb:0d:82:fe:74:20:49:aa:ca:c4:e1:d7:02:35:44: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:A1:AB:10:10:63:BF:DA:47:CA:52:60:7E:DD:7D:9E:28:7F:FC X509v3 Authority Key Identifier: keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/iU6hqxAQY7_aR8pSYH7dfZ4of_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.87.96.0/21 193.53.164.0/22 194.107.16.0/24 IPv6: 2a03:4d80::/32 Signature Algorithm: sha256WithRSAEncryption 1f:75:20:75:65:00:df:27:31:6c:2c:18:5c:5f:30:ad:75:08: cb:75:97:4a:3b:89:06:1c:7b:b4:40:53:82:49:53:19:f4:4c: 6c:15:cf:2f:6f:92:69:34:3c:7d:e4:42:e2:e0:bc:1e:bf:20: 5b:1e:2b:1b:d8:16:aa:66:36:e3:a7:3c:5b:fb:32:3c:84:29: 9d:04:47:b4:7d:ea:d6:f0:9d:2c:fa:36:36:72:57:ef:50:78: c7:b8:1c:6c:1a:84:34:60:3e:fe:41:e8:88:f9:92:26:3d:51: 82:1d:37:c0:77:60:4c:a9:48:93:0d:92:37:5e:4a:52:00:19: 5a:42:7f:33:a9:1a:2e:11:26:8a:f0:cf:df:9c:fa:59:11:b8: e3:42:8f:7c:3c:76:1c:19:4b:22:aa:03:0f:ad:17:4c:d5:84: 6e:4c:46:54:7c:61:0e:85:21:d9:28:fb:1f:38:ee:65:d0:f3: b2:09:fc:61:0f:43:18:2d:6e:0a:54:0b:3b:94:b3:5f:b5:af: 23:18:b4:be:de:d8:2d:43:56:ae:80:f0:66:88:ed:4c:ef:cd: 75:10:11:9c:82:9c:57:9b:da:c9:a6:52:e5:50:49:20:33:22: 51:b6:22:6d:e2:a1:e9:7c:6f:8b:d9:9d:dc:1e:57:e7:55:9f: 31:5c:72:fe -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57UZ4qqdDSVjDd5oYb1caMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx OGViM2YwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTRlYTFhYjEwMTA2M2JmZGE0N2NhNTI2MDdlZGQ3ZDllMjg3ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMnL/1y11FeCRGVTV6BRFXFS8VI+ 3IE/+PSFGyZ8k0BncWJxIBir2zVX9lQfZyvW83UE0sNJafLcXXeQp8Xmh9FW1fNb 8dQsI1i42YloC+X5fQaBnyV/97XSADpSBBIW9NykpX1LSa0sq9LlCNVMl9MroHC4 4P4YPlyMrr1vuHZTes/W/zNJsjEP1NyQvHWlZ84+cbSqOMPcwPxuoZIqVKWL4IdV RzncJ6HAinsw5pZgJ73rv5wHP92yFBPvE5Cf2sX3Ml3NFcnDo4WZmNRYYlawL56Q fscu9f9NtZH9hvIik4vIu4kvGloA/tOLUy/rDYL+dCBJqsrE4dcCNUQMhQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIlOoasQEGO/2kfKUmB+3X2eKH/8MB8GA1UdIwQY MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt NTRiNDFlNGZjNjNiLzEvaVU2aHF4QVFZN19hUjhwU1lIN2RmWjRvZl93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDX1dgAwQC wTWkAwQAwmsQMA0EAgACMAcDBQAqA02AMA0GCSqGSIb3DQEBCwUAA4IBAQAfdSB1 ZQDfJzFsLBhcXzCtdQjLdZdKO4kGHHu0QFOCSVMZ9ExsFc8vb5JpNDx95ELi4Lwe vyBbHisb2BaqZjbjpzxb+zI8hCmdBEe0ferW8J0s+jY2clfvUHjHuBxsGoQ0YD7+ QeiI+ZImPVGCHTfAd2BMqUiTDZI3XkpSABlaQn8zqRouESaK8M/fnPpZEbjjQo98 PHYcGUsiqgMPrRdM1YRuTEZUfGEOhSHZKPsfOO5l0POyCfxhD0MYLW4KVAs7lLNf ta8jGLS+3tgtQ1augPBmiO1M7811EBGcgpxXm9rJplLlUEkgMyJRtiJt4qHpfG+L 2Z3cHlfnVZ8xXHL+ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:55 2026 by rpki-client