This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa File: 9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa (raw, json) Hash identifier: Kv7/JJMZellKaJMYAA/q400p0MFHvGxPXd6PvxQ7/kk= Subject key identifier: F4:63:24:77:2A:F8:0D:B5:B4:AC:3F:46:35:77:39:1D:84:7D:3D:E0 Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Certificate serial: 019B78A33F56D6756225DEECA297B0F30726 Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201012 IP address blocks: 176.114.120.0/21 maxlen: 21 176.114.120.0/22 maxlen: 22 176.114.120.0/23 maxlen: 23 176.114.120.0/24 maxlen: 24 176.114.121.0/24 maxlen: 24 176.114.122.0/23 maxlen: 23 176.114.122.0/24 maxlen: 24 176.114.123.0/24 maxlen: 24 176.114.124.0/22 maxlen: 22 176.114.124.0/23 maxlen: 23 176.114.124.0/24 maxlen: 24 176.114.125.0/24 maxlen: 24 185.89.12.0/24 maxlen: 24 185.89.14.0/23 maxlen: 23 185.89.14.0/24 maxlen: 24 185.89.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3f:56:d6:75:62:25:de:ec:a2:97:b0:f3:07:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f46324772af80db5b4ac3f463577391d847d3de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:92:20:d7:7b:4b:cd:cc:c2:c7:f2:bb:f0: c4:a1:31:d1:e2:9f:69:b9:0d:3d:6d:89:a2:08:d2: ab:1c:da:54:c4:61:0a:78:fa:65:5f:3a:ac:7b:7c: 73:cd:94:6c:9e:02:89:03:bd:04:b5:d3:ae:56:20: f1:88:09:fc:fa:be:02:d5:83:ac:8f:59:33:37:29: b0:80:ab:d2:5c:8c:54:88:ce:95:37:e0:f2:84:52: 03:28:1b:9a:6a:4f:d6:8f:26:70:8a:ce:27:66:86: 04:99:42:50:44:82:79:b0:40:cd:b1:96:43:f7:9e: 36:1b:84:26:b7:5d:19:a4:ca:c5:5c:d4:a0:3b:cd: 21:01:0b:c4:2a:92:b9:a1:81:06:26:40:34:a1:54: 0d:5e:64:5a:c2:e5:60:11:ca:c4:0e:0b:12:0e:f9: c0:99:88:bf:da:c6:3f:e2:3b:b9:ed:71:d0:5f:f4: 26:cc:c2:bb:48:0a:30:43:82:a7:a9:1e:28:49:71: e2:00:8e:45:e9:d2:a9:bb:65:3b:75:02:a5:70:2e: a7:7d:fd:54:f5:70:46:bd:04:25:2e:84:f7:05:e6: 78:dc:d9:3c:1b:01:ed:ea:03:28:3f:26:e4:f5:70: 3a:97:26:55:bc:a5:f0:d6:5a:a6:0b:46:f3:a6:bc: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:63:24:77:2A:F8:0D:B5:B4:AC:3F:46:35:77:39:1D:84:7D:3D:E0 X509v3 Authority Key Identifier: keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.114.120.0/21 185.89.12.0/24 185.89.14.0/23 Signature Algorithm: sha256WithRSAEncryption c5:56:bb:27:e9:c3:70:4d:53:52:e3:9b:d4:db:4b:5e:86:70: f7:4a:58:de:57:bb:0f:d7:f6:e5:c7:a7:ba:63:6a:04:0e:6e: 8d:d6:eb:f4:d1:74:9c:a1:51:c8:de:8c:05:6d:95:43:45:9f: c5:07:24:19:24:87:69:b9:2f:7b:1e:c8:99:b1:2d:dc:06:00: 48:cd:7d:48:80:b1:25:39:0d:d7:f5:6b:86:42:2f:2d:b3:98: 17:87:e4:fe:81:75:6f:95:59:87:ae:25:f3:7b:e9:d2:e8:ac: 9a:68:1f:93:bd:c0:bd:3e:0e:82:72:23:16:8d:e7:f4:8a:a0: 82:b6:bb:58:ba:ea:c4:cd:0c:42:ac:b5:cc:0f:4a:a9:0b:32: 9d:df:9d:5c:d0:24:6c:8f:de:5c:5f:b6:7a:d6:20:39:5d:b5: 8f:84:f7:cd:e4:fa:bd:12:c8:b0:fa:15:7a:86:eb:a7:94:ac: 52:b0:7d:39:12:36:25:34:0b:1a:b7:53:2c:bb:3e:10:e1:94: c9:89:c6:5a:c1:fb:ac:bd:bf:3b:11:a9:5f:3e:a9:48:4b:73: 99:5e:99:6d:f4:b6:22:16:57:d3:32:fb:f2:42:e5:c9:5a:0a: 6f:d3:f9:07:f2:f8:d2:1e:a1:5a:4d:75:52:b7:ba:97:dd:a8: 94:e3:7f:e2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oz9W1nViJd7sopew8wcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy ZjMyMWIwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDYzMjQ3NzJhZjgwZGI1YjRhYzNmNDYzNTc3MzkxZDg0N2QzZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq6SINd7S83Mwsfyu/DEoTHR4p9p uQ09bYmiCNKrHNpUxGEKePplXzqse3xzzZRsngKJA70EtdOuViDxiAn8+r4C1YOs j1kzNymwgKvSXIxUiM6VN+DyhFIDKBuaak/WjyZwis4nZoYEmUJQRIJ5sEDNsZZD 9542G4Qmt10ZpMrFXNSgO80hAQvEKpK5oYEGJkA0oVQNXmRawuVgEcrEDgsSDvnA mYi/2sY/4ju57XHQX/QmzMK7SAowQ4KnqR4oSXHiAI5F6dKpu2U7dQKlcC6nff1U 9XBGvQQlLoT3BeZ43Nk8GwHt6gMoPybk9XA6lyZVvKXw1lqmC0bzprzxFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPRjJHcq+A21tKw/RjV3OR2EfT3gMB8GA1UdIwQY MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt ZWZkMjg5MmI2ZWJmLzEvOUdNa2R5cjREYlcwckQ5R05YYzVIWVI5UGVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDsHJ4AwQA uVkMAwQBuVkOMA0GCSqGSIb3DQEBCwUAA4IBAQDFVrsn6cNwTVNS45vU20tehnD3 SljeV7sP1/blx6e6Y2oEDm6N1uv00XScoVHI3owFbZVDRZ/FByQZJIdpuS97HsiZ sS3cBgBIzX1IgLElOQ3X9WuGQi8ts5gXh+T+gXVvlVmHriXze+nS6KyaaB+TvcC9 Pg6CciMWjef0iqCCtrtYuurEzQxCrLXMD0qpCzKd351c0CRsj95cX7Z61iA5XbWP hPfN5Pq9Esiw+hV6huunlKxSsH05EjYlNAsat1Msuz4Q4ZTJicZawfusvb87Ealf PqlIS3OZXplt9LYiFlfTMvvyQuXJWgpv0/kH8vjSHqFaTXVSt7qX3aiU43/i -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:29 2026 by rpki-client