This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/kJ6-t_FAgoe7HphTqXyXgseS7_A.roa File: kJ6-t_FAgoe7HphTqXyXgseS7_A.roa (raw, json) Hash identifier: nmaaXT8wxyUyQofH+9fMDVryZ1mgAUYzWspK2/2I9As= Subject key identifier: 90:9E:BE:B7:F1:40:82:87:BB:1E:98:53:A9:7C:97:82:C7:92:EF:F0 Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Certificate serial: 019B7F83DB0485EDBFD1507806E58E692A2C Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/kJ6-t_FAgoe7HphTqXyXgseS7_A.roa Signing time: Fri 02 Jan 2026 16:21:46 +0000 ROA not before: Fri 02 Jan 2026 16:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43940 IP address blocks: 62.4.32.0/19 maxlen: 24 109.72.96.0/20 maxlen: 21 185.64.0.0/22 maxlen: 24 185.179.92.0/22 maxlen: 22 185.215.88.0/22 maxlen: 22 213.133.0.0/19 maxlen: 24 213.196.64.0/19 maxlen: 19 2a03:7a0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:db:04:85:ed:bf:d1:50:78:06:e5:8e:69:2a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=909ebeb7f1408287bb1e9853a97c9782c792eff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:be:b6:7a:ab:04:51:51:6a:88:95:43:6f: 80:48:05:b8:1f:38:46:bd:9a:c9:69:26:24:cf:d4: 73:bb:94:eb:e8:a1:a0:39:24:bc:be:71:d9:3d:a4: 51:fd:51:ee:bd:62:63:5c:b2:c4:4a:0c:9a:19:d9: 8c:07:b8:e1:9c:d1:a6:37:f8:e0:13:59:cf:f3:24: 05:84:b2:27:d9:86:0e:2d:9c:2a:0a:00:e3:e9:a6: 0a:09:5e:3e:59:a5:8b:7a:f7:81:40:a4:da:e0:da: a7:bf:e5:3d:0c:6c:e8:fd:93:ff:7e:df:f7:f7:64: 8b:71:27:a3:d8:39:d1:45:84:30:84:66:8c:f9:0a: 21:df:9c:1b:a5:ba:28:f4:33:81:f1:5d:a3:6a:91: 05:fd:60:65:35:45:89:ff:07:c1:f5:64:b2:63:2b: b7:67:39:99:0f:b3:d8:b8:7a:ee:56:b6:a2:68:01: 12:20:a7:51:97:74:ae:8b:bd:82:43:21:e0:e5:3c: 16:2e:81:11:b5:36:cf:28:01:a3:fd:f1:bc:31:ea: 2d:42:24:4e:e8:72:17:35:7e:af:5b:b2:31:1a:75: 90:c4:e8:22:8f:b4:70:9d:83:a6:de:a0:4f:b7:81: a3:8e:45:b8:bd:da:2e:2e:d5:eb:b2:06:3f:dc:cd: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9E:BE:B7:F1:40:82:87:BB:1E:98:53:A9:7C:97:82:C7:92:EF:F0 X509v3 Authority Key Identifier: keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/kJ6-t_FAgoe7HphTqXyXgseS7_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.4.32.0/19 109.72.96.0/20 185.64.0.0/22 185.179.92.0/22 185.215.88.0/22 213.133.0.0/19 213.196.64.0/19 IPv6: 2a03:7a0::/29 Signature Algorithm: sha256WithRSAEncryption 71:b7:fb:ce:8b:7f:e0:90:16:e9:10:90:5e:32:18:06:ab:05: 7b:4e:58:c4:76:16:fe:81:23:9c:cc:f7:57:e8:f1:02:e4:87: 8b:36:3d:b5:52:5a:9a:a3:5e:3c:59:56:25:83:45:aa:4b:ab: 03:df:36:a6:08:cb:3a:52:c6:e6:c6:51:b4:cd:5c:e8:f4:97: 03:07:26:07:c3:3e:65:d4:c0:4a:1b:e2:3e:73:3d:81:25:8f: e4:8c:ae:13:da:66:a2:e6:f1:d6:f3:5c:6d:e3:84:51:70:2b: ef:4f:07:e8:ce:70:e7:09:24:3e:10:e5:1e:3a:d9:74:74:ba: e4:c0:4f:fb:ac:81:46:8d:9b:42:04:e4:ac:61:69:82:c1:8b: 5d:ba:0e:f5:37:37:8b:14:ad:c2:d8:1c:e1:69:84:62:3a:0e: ce:c5:25:db:39:a9:19:81:4a:f8:2b:4f:82:2d:1a:60:04:6e: ee:62:8c:22:fe:40:d4:85:45:c2:65:1a:e3:71:ec:7a:40:39: d1:f1:47:83:12:3e:0b:94:dd:0b:c6:59:b8:13:0b:67:3e:73: 97:93:cf:eb:ce:91:d7:7b:b8:83:d1:8e:9d:c3:ed:ae:75:9f: b3:07:e2:4a:08:51:ff:29:ec:34:0c:d8:9e:15:95:b5:bb:c8: 34:37:d1:ee -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt/g9sEhe2/0VB4BuWOaSosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm Y2JlODkwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDllYmViN2YxNDA4Mjg3YmIxZTk4NTNhOTdjOTc4MmM3OTJlZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfi+tnqrBFFRaoiVQ2+ASAW4HzhG vZrJaSYkz9Rzu5Tr6KGgOSS8vnHZPaRR/VHuvWJjXLLESgyaGdmMB7jhnNGmN/jg E1nP8yQFhLIn2YYOLZwqCgDj6aYKCV4+WaWLeveBQKTa4Nqnv+U9DGzo/ZP/ft/3 92SLcSej2DnRRYQwhGaM+Qoh35wbpboo9DOB8V2japEF/WBlNUWJ/wfB9WSyYyu3 ZzmZD7PYuHruVraiaAESIKdRl3Sui72CQyHg5TwWLoERtTbPKAGj/fG8MeotQiRO 6HIXNX6vW7IxGnWQxOgij7RwnYOm3qBPt4GjjkW4vdouLtXrsgY/3M1PUwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFJCevrfxQIKHux6YU6l8l4LHku/wMB8GA1UdIwQY MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt MDFhYTA1NmIxZjZmLzEva0o2LXRfRkFnb2U3SHBoVHFYeVhnc2VTN19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFPgQgAwQE bUhgAwQCuUAAAwQCubNcAwQCuddYAwQF1YUAAwQF1cRAMA0EAgACMAcDBQMqAweg MA0GCSqGSIb3DQEBCwUAA4IBAQBxt/vOi3/gkBbpEJBeMhgGqwV7TljEdhb+gSOc zPdX6PEC5IeLNj21Ulqao148WVYlg0WqS6sD3zamCMs6UsbmxlG0zVzo9JcDByYH wz5l1MBKG+I+cz2BJY/kjK4T2mai5vHW81xt44RRcCvvTwfoznDnCSQ+EOUeOtl0 dLrkwE/7rIFGjZtCBOSsYWmCwYtdug71NzeLFK3C2BzhaYRiOg7OxSXbOakZgUr4 K0+CLRpgBG7uYowi/kDUhUXCZRrjcex6QDnR8UeDEj4LlN0Lxlm4EwtnPnOXk8/r zpHXe7iD0Y6dw+2udZ+zB+JKCFH/Kew0DNieFZW1u8g0N9Hu -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:31 2026 by rpki-client