This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/0vS9LuHI8LHmYBf-04B_4EqaTyM.roa File: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (raw, json) Hash identifier: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk= Subject key identifier: D2:F4:BD:2E:E1:C8:F0:B1:E6:60:17:FE:D3:80:7F:E0:4A:9A:4F:23 Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6 Certificate serial: 019B797EEE5BF4AE99CB3A58369CE84D1EDB Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/0vS9LuHI8LHmYBf-04B_4EqaTyM.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34233 IP address blocks: 83.137.192.0/22 maxlen: 22 83.137.196.0/24 maxlen: 24 2a00:a0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ee:5b:f4:ae:99:cb:3a:58:36:9c:e8:4d:1e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6 Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2f4bd2ee1c8f0b1e66017fed3807fe04a9a4f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2c:d2:55:6f:1d:83:80:d5:55:03:19:85:06: 25:28:d0:ca:34:a9:7e:d2:a3:55:3d:11:7e:47:72: 3a:6d:27:9d:9b:dc:6d:e2:59:37:ee:4b:32:e9:34: e4:6a:6f:dc:f5:99:18:a7:60:7b:1e:79:43:a4:59: 81:17:fc:2d:ed:8c:3c:ad:c1:9a:9c:2d:b5:74:07: 0e:ea:77:80:b4:92:0c:d4:a8:d6:81:02:44:41:e2: 18:91:32:20:06:73:db:8d:9d:9c:3b:7a:e7:86:a5: 5d:a1:77:48:b1:ae:38:b6:85:72:63:09:b3:5b:27: 73:52:a1:8c:56:25:63:44:8b:3c:ba:5c:ed:2b:b4: 58:55:cc:10:10:37:aa:de:17:5a:e6:c7:82:d9:cb: 86:53:40:17:81:25:f1:41:2c:be:6f:74:64:5f:19: 84:74:a7:57:da:29:8a:9e:b0:57:27:0a:b9:9e:ab: b0:4b:d0:15:b9:9f:ad:bc:4f:6d:b0:38:9d:b3:d6: fd:23:29:aa:81:cc:6b:7b:d2:80:19:64:eb:9b:a9: e9:62:a9:42:55:21:fb:fd:cb:62:7d:bb:65:dd:05: 39:4f:ba:59:d5:90:8b:59:29:dc:b1:c2:e0:79:ab: 60:97:1c:63:50:e9:fe:a8:13:8c:98:d6:f9:7d:9a: a8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F4:BD:2E:E1:C8:F0:B1:E6:60:17:FE:D3:80:7F:E0:4A:9A:4F:23 X509v3 Authority Key Identifier: keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/0vS9LuHI8LHmYBf-04B_4EqaTyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.192.0-83.137.196.255 IPv6: 2a00:a0c0::/32 Signature Algorithm: sha256WithRSAEncryption 78:48:85:99:aa:69:5a:8c:fb:d0:3e:9b:79:c4:b9:ce:79:2f: 84:eb:ea:35:94:53:8d:1c:19:79:6a:97:66:28:7b:1d:ae:bb: 9b:e5:66:3e:15:28:32:4e:7c:2b:3f:fb:b4:d4:f7:ae:27:5f: 22:58:b3:27:a6:d1:14:65:b6:36:f0:08:55:d2:1a:17:40:88: 0d:41:b0:bb:e8:3d:d8:94:fe:de:09:da:f2:bf:1d:1a:d5:fe: 70:bc:68:ca:fd:7e:97:e8:40:7a:d8:65:93:ca:c0:59:93:3f: d6:d6:fe:0e:74:0a:aa:d4:19:0f:fa:22:2e:67:d3:99:07:17: 91:41:11:e9:c7:c3:b6:a9:bb:51:6a:52:40:da:c6:70:2d:30: 9d:90:c3:9a:99:9c:a5:1e:0e:0f:fa:04:4a:d6:ef:1f:8c:88: fa:4d:0e:6e:5c:bd:0b:86:5f:6d:c3:9e:31:f4:0b:5b:a4:42: 45:85:a6:2a:26:d8:5a:89:e9:08:a0:7e:9a:83:c1:06:65:00: 56:81:2c:0a:55:12:fd:da:d5:4c:62:19:c2:77:d7:c7:30:3c: d5:31:5c:e8:34:f2:f5:24:bf:11:a7:2c:45:4d:8f:13:02:9b: 7e:fc:f0:3b:71:d3:aa:75:43:31:1f:2d:62:ef:5d:77:9b:e1: e5:3b:fc:55 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fu5b9K6ZyzpYNpzoTR7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmJjMTQ1YzViMjIzOTRkNmZlYWU5OTZiYzBiYjI1MjU0 ODAxYzYwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY0YmQyZWUxYzhmMGIxZTY2MDE3ZmVkMzgwN2ZlMDRhOWE0ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SzSVW8dg4DVVQMZhQYlKNDKNKl+ 0qNVPRF+R3I6bSedm9xt4lk37ksy6TTkam/c9ZkYp2B7HnlDpFmBF/wt7Yw8rcGa nC21dAcO6neAtJIM1KjWgQJEQeIYkTIgBnPbjZ2cO3rnhqVdoXdIsa44toVyYwmz WydzUqGMViVjRIs8ulztK7RYVcwQEDeq3hda5seC2cuGU0AXgSXxQSy+b3RkXxmE dKdX2imKnrBXJwq5nquwS9AVuZ+tvE9tsDids9b9Iymqgcxre9KAGWTrm6npYqlC VSH7/ctifbtl3QU5T7pZ1ZCLWSncscLgeatglxxjUOn+qBOMmNb5fZqoXQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNL0vS7hyPCx5mAX/tOAf+BKmk8jMB8GA1UdIwQY MBaAFIUrwUXFsiOU1v6umWvAuyUlSAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMt OGQwNzEwZjNkMjc2LzEvMHZTOUx1SEk4TEhtWUJmLTA0Ql80RXFhVHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMtOGQwNzEwZjNkMjc2 LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAZTicAD BABTicQwDQQCAAIwBwMFACoAoMAwDQYJKoZIhvcNAQELBQADggEBAHhIhZmqaVqM +9A+m3nEuc55L4Tr6jWUU40cGXlql2Yoex2uu5vlZj4VKDJOfCs/+7TU964nXyJY syem0RRltjbwCFXSGhdAiA1BsLvoPdiU/t4J2vK/HRrV/nC8aMr9fpfoQHrYZZPK wFmTP9bW/g50CqrUGQ/6Ii5n05kHF5FBEenHw7apu1FqUkDaxnAtMJ2Qw5qZnKUe Dg/6BErW7x+MiPpNDm5cvQuGX23DnjH0C1ukQkWFpiom2FqJ6QigfpqDwQZlAFaB LApVEv3a1UxiGcJ318cwPNUxXOg08vUkvxGnLEVNjxMCm3788Dtx06p1QzEfLWLv XXeb4eU7/FU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:14 2026 by rpki-client