This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/ih0pzXO8mqkzc3x2UoefcFyc-tM.roa File: ih0pzXO8mqkzc3x2UoefcFyc-tM.roa (raw, json) Hash identifier: Uy5EOXK7Ia8DPFixLWpbgwz0Q6FOdgA2l57Zdh/p9Kk= Subject key identifier: 8A:1D:29:CD:73:BC:9A:A9:33:73:7C:76:52:87:9F:70:5C:9C:FA:D3 Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b Certificate serial: 019B7BA32CC88DB3CF585000DA220F2F5C73 Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/ih0pzXO8mqkzc3x2UoefcFyc-tM.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198541 IP address blocks: 81.162.0.0/20 maxlen: 24 81.162.16.0/21 maxlen: 24 91.219.72.0/22 maxlen: 24 91.233.28.0/22 maxlen: 24 91.236.60.0/22 maxlen: 24 176.110.160.0/19 maxlen: 24 176.110.160.0/20 maxlen: 24 176.110.176.0/21 maxlen: 24 176.110.192.0/20 maxlen: 24 188.0.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2c:c8:8d:b3:cf:58:50:00:da:22:0f:2f:5c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a1d29cd73bc9aa933737c7652879f705c9cfad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:73:c5:73:fc:f5:39:a9:f1:95:8a:fe:10: 29:d3:93:0d:67:d9:ca:27:79:2c:ff:ce:fd:8d:f9: 5c:2e:63:ef:d2:5a:36:58:03:e5:6f:d3:c9:ff:03: 20:c1:37:7b:b2:33:2d:37:76:73:ef:16:d3:e1:7b: e5:ff:cd:ed:f0:13:95:5f:7c:a7:c1:93:f8:7f:6f: d1:bf:92:78:24:04:59:82:06:1d:51:4b:95:8c:69: 67:18:7a:65:f3:17:04:30:33:41:ce:ee:0b:2c:77: e2:a1:e0:43:4d:e6:1e:73:35:78:e0:2a:72:84:da: 59:ff:4b:1b:c4:95:c8:c3:15:d1:7c:eb:c3:9a:82: 20:4b:96:d6:77:0d:50:b0:05:17:fd:40:b9:b2:1d: ed:72:44:66:af:b3:8a:33:69:70:b5:24:a1:00:9f: 59:f1:54:0a:4e:e0:68:6f:32:3b:7d:e0:4d:57:7d: 30:e7:b7:9a:6e:9b:f9:0d:cc:4e:f7:f5:b8:5d:0d: 57:03:78:d7:3c:a5:0d:e9:52:88:d2:e5:a0:f0:1e: 2c:c6:d2:d6:be:1f:d1:b4:2c:db:12:06:8f:56:74: 1b:51:54:f5:cf:68:8b:99:ae:05:83:dc:38:3e:d7: 7e:39:ad:b7:db:30:e8:2e:1d:40:1a:9b:0b:2e:63: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1D:29:CD:73:BC:9A:A9:33:73:7C:76:52:87:9F:70:5C:9C:FA:D3 X509v3 Authority Key Identifier: keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/ih0pzXO8mqkzc3x2UoefcFyc-tM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.162.0.0-81.162.23.255 91.219.72.0/22 91.233.28.0/22 91.236.60.0/22 176.110.160.0-176.110.207.255 188.0.208.0/20 Signature Algorithm: sha256WithRSAEncryption 72:39:2b:3e:61:b1:1e:88:f5:12:7f:7d:d0:7c:5b:04:e7:b2: 7c:19:9e:de:56:7f:d4:5b:f3:7b:e9:e7:85:f2:70:a9:bb:95: 1a:7f:4d:ae:a8:5d:61:76:4c:68:de:74:37:b8:74:15:fb:99: ab:c3:dd:89:e9:d5:12:b6:27:a2:96:01:26:75:4c:d9:e8:b7: 54:1f:46:70:d5:96:e5:01:26:3a:32:bb:ef:2b:97:9e:3e:e3: ce:0a:c0:0e:e8:b4:33:2c:d0:2e:80:d7:69:71:d7:2b:0e:d8: 55:e3:a3:df:7d:35:6c:f2:1d:ee:0a:c2:3f:3b:67:d0:63:ab: cb:82:16:bf:ad:b1:71:bd:29:76:59:26:b4:5b:11:37:92:07: ca:06:74:c6:84:0f:a2:5f:64:3e:b7:1c:88:e9:68:18:75:88: 42:b1:e2:49:8f:c1:67:82:49:8d:cc:ea:12:2a:a4:09:86:06: d4:66:74:a9:2a:3b:b2:48:a7:8f:a9:86:a6:97:56:74:69:8f: ff:b2:16:28:33:ff:6d:ab:86:b8:7a:d0:e7:1c:b8:3a:0d:9a: d0:c0:7a:5c:62:b2:c4:b4:fb:df:ba:6f:5b:2a:79:5d:f3:e3: 0e:2e:af:63:54:b8:b2:b9:09:79:b2:eb:50:36:2c:e6:9c:bd: bf:c9:92:1b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt7oyzIjbPPWFAA2iIPL1xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNWM1NzEyZmJiY2Q4MzI0MTlkNGM1ODg0YWUzYmMzYzRh MTZlN2IwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTFkMjljZDczYmM5YWE5MzM3MzdjNzY1Mjg3OWY3MDVjOWNmYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBZzxXP89Tmp8ZWK/hAp05MNZ9nK J3ks/879jflcLmPv0lo2WAPlb9PJ/wMgwTd7sjMtN3Zz7xbT4Xvl/83t8BOVX3yn wZP4f2/Rv5J4JARZggYdUUuVjGlnGHpl8xcEMDNBzu4LLHfioeBDTeYeczV44Cpy hNpZ/0sbxJXIwxXRfOvDmoIgS5bWdw1QsAUX/UC5sh3tckRmr7OKM2lwtSShAJ9Z 8VQKTuBobzI7feBNV30w57eabpv5DcxO9/W4XQ1XA3jXPKUN6VKI0uWg8B4sxtLW vh/RtCzbEgaPVnQbUVT1z2iLma4Fg9w4Ptd+Oa232zDoLh1AGpsLLmO9UwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFIodKc1zvJqpM3N8dlKHn3BcnPrTMB8GA1UdIwQY MBaAFG9cVxL7vNgyQZ1MWISuO8PEoW57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEt NzU1MDUyOWQ4NDdhLzEvaWgwcHpYTzhtcWt6YzN4MlVvZWZjRnljLXRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEtNzU1MDUyOWQ4NDdh LzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzMAsDAwFRogME A1GiEAMEAlvbSAMEAlvpHAMEAlvsPDAMAwQFsG6gAwQEsG7AAwQEvADQMA0GCSqG SIb3DQEBCwUAA4IBAQByOSs+YbEeiPUSf33QfFsE57J8GZ7eVn/UW/N76eeF8nCp u5Uaf02uqF1hdkxo3nQ3uHQV+5mrw92J6dUStieilgEmdUzZ6LdUH0Zw1ZblASY6 MrvvK5eePuPOCsAO6LQzLNAugNdpcdcrDthV46PffTVs8h3uCsI/O2fQY6vLgha/ rbFxvSl2WSa0WxE3kgfKBnTGhA+iX2Q+txyI6WgYdYhCseJJj8FngkmNzOoSKqQJ hgbUZnSpKjuySKePqYaml1Z0aY//shYoM/9tq4a4etDnHLg6DZrQwHpcYrLEtPvf um9bKnld8+MOLq9jVLiyuQl5sutQNizmnL2/yZIb -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:19 2026 by rpki-client