This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/9KLlFthapgZ5ZFUX7xf1OgtLzP0.roa File: 9KLlFthapgZ5ZFUX7xf1OgtLzP0.roa (raw, json) Hash identifier: bPc9RL/nxXwNkSQiJ77/8DCqtYNfD11tx39BrcPmbM4= Subject key identifier: F4:A2:E5:16:D8:5A:A6:06:79:64:55:17:EF:17:F5:3A:0B:4B:CC:FD Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Certificate serial: 019B7C129165E0E807D567BBD2E556E90C8C Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/9KLlFthapgZ5ZFUX7xf1OgtLzP0.roa Signing time: Fri 02 Jan 2026 00:19:10 +0000 ROA not before: Fri 02 Jan 2026 00:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203924 IP address blocks: 85.117.252.0/22 maxlen: 22 85.117.252.0/23 maxlen: 23 85.117.254.0/23 maxlen: 23 185.113.144.0/22 maxlen: 22 185.113.144.0/24 maxlen: 24 185.113.145.0/24 maxlen: 24 185.113.146.0/24 maxlen: 24 185.113.147.0/24 maxlen: 24 185.146.36.0/22 maxlen: 22 185.146.36.0/24 maxlen: 24 185.146.37.0/24 maxlen: 24 185.146.38.0/23 maxlen: 23 185.216.120.0/22 maxlen: 22 185.216.120.0/24 maxlen: 24 185.216.121.0/24 maxlen: 24 185.216.122.0/23 maxlen: 23 193.105.0.0/24 maxlen: 24 2a06:6a40::/29 maxlen: 29 2a07:4d00::/29 maxlen: 29 2a07:4d00::/30 maxlen: 30 2a07:4d04::/30 maxlen: 30 2a0b:b640::/29 maxlen: 29 2a0b:b640::/30 maxlen: 30 2a0b:b644::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:91:65:e0:e8:07:d5:67:bb:d2:e5:56:e9:0c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4a2e516d85aa60679645517ef17f53a0b4bccfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:c0:ca:52:40:87:81:35:e7:db:28:7f:38: 04:23:2b:fd:54:88:ee:5c:3e:e4:0d:77:7b:e8:fd: 1b:2c:12:62:97:33:47:38:99:f7:56:ae:ba:64:10: 75:e8:79:8f:69:55:43:09:24:f2:bc:d2:7b:5e:e3: 9b:6e:f9:e6:48:ec:71:bb:ea:e1:e5:9f:eb:6a:c7: 02:88:a0:23:21:ff:d8:bf:19:0d:1a:92:47:a0:a9: fe:de:ab:f5:da:c8:0f:2e:28:b4:a8:cc:d3:a4:1a: 9e:18:4b:ac:a6:a8:38:3f:a7:88:30:f6:1f:ab:4e: f2:40:36:58:53:c0:7b:ab:6e:8a:0b:5d:a1:9b:0d: 0a:48:e4:41:0d:e0:bd:33:0a:3f:03:c6:af:2e:6b: ce:fa:3b:36:9f:a6:c8:b6:48:33:3a:d7:6b:44:d1: b2:88:5b:8e:fc:d8:95:39:d0:e8:50:aa:1b:aa:95: 0d:b6:c1:e6:e7:9e:88:23:f2:07:79:97:88:eb:10: 88:64:a2:d7:69:dc:71:a7:40:09:00:a0:95:34:a7: c3:f4:53:e4:7b:1a:29:25:7f:47:c4:82:4e:1c:91: 96:9e:74:08:da:2b:75:26:70:5a:42:6d:c9:04:52: 12:2f:09:86:ab:7c:45:10:94:b6:80:88:5f:35:17: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:E5:16:D8:5A:A6:06:79:64:55:17:EF:17:F5:3A:0B:4B:CC:FD X509v3 Authority Key Identifier: keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/9KLlFthapgZ5ZFUX7xf1OgtLzP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.252.0/22 185.113.144.0/22 185.146.36.0/22 185.216.120.0/22 193.105.0.0/24 IPv6: 2a06:6a40::/29 2a07:4d00::/29 2a0b:b640::/29 Signature Algorithm: sha256WithRSAEncryption 12:8d:9c:38:f6:1c:c1:36:1d:ee:21:a8:bc:d3:66:fc:7e:7f: cc:00:21:e5:dc:b6:10:4f:08:79:20:2d:bd:d7:55:9c:21:ca: 1a:57:d3:65:a6:23:93:b4:f0:cb:d4:4d:f9:1e:b4:98:6e:48: b6:94:9e:e1:73:67:50:30:6c:82:29:01:21:6e:1a:81:cf:44: 90:7b:78:d3:59:c4:eb:df:1f:c4:7a:35:30:40:10:fe:48:c9: 2a:9e:07:c0:4b:93:ab:8a:0d:f7:31:d5:1a:47:5f:e6:ad:cd: 57:5b:9b:56:cf:07:ca:0e:7b:81:dc:88:9e:02:4a:b7:ae:43: b1:18:c9:c1:58:5c:8e:9f:00:dc:1a:8c:53:3c:ec:3a:ef:92: 2b:07:5c:cd:88:f6:ce:fa:8a:3f:00:92:bc:32:ab:70:31:39: 27:13:8c:bb:58:18:66:bb:58:1a:63:2f:df:cf:6b:d4:54:09: a9:b6:66:bc:66:d7:b0:1a:7d:31:fe:bd:5c:fd:8c:5a:d6:bd: 0d:6d:f3:41:26:e5:57:33:dd:72:9a:4f:f6:57:f2:cb:0e:50: 64:60:48:1d:12:a5:5b:be:3c:0a:dc:dd:d6:e7:a6:10:d0:30: e7:22:26:2d:c9:e0:3e:a2:6f:5f:cd:21:fa:69:7f:ec:e0:0b: b6:31:82:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt8EpFl4OgH1We70uVW6QyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOTBmNmI3NWU5MTNmMjc4MmVkNTQ5ZWI3MjE3MmM1OWNj NDdhZjEwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGEyZTUxNmQ4NWFhNjA2Nzk2NDU1MTdlZjE3ZjUzYTBiNGJjY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu47AylJAh4E159sofzgEIyv9VIju XD7kDXd76P0bLBJilzNHOJn3Vq66ZBB16HmPaVVDCSTyvNJ7XuObbvnmSOxxu+rh 5Z/rascCiKAjIf/YvxkNGpJHoKn+3qv12sgPLii0qMzTpBqeGEuspqg4P6eIMPYf q07yQDZYU8B7q26KC12hmw0KSORBDeC9Mwo/A8avLmvO+js2n6bItkgzOtdrRNGy iFuO/NiVOdDoUKobqpUNtsHm556II/IHeZeI6xCIZKLXadxxp0AJAKCVNKfD9FPk exopJX9HxIJOHJGWnnQI2it1JnBaQm3JBFISLwmGq3xFEJS2gIhfNRczowIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFPSi5RbYWqYGeWRVF+8X9ToLS8z9MB8GA1UdIwQY MBaAFI+Q9rdekT8ngu1UnrchcsWcxHrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQt YzFkMGFjYjc4MTlhLzEvOUtMbEZ0aGFwZ1o1WkZVWDd4ZjFPZ3RMelAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zZDNjM2ItMWE5NS00YjUwLTg5NzQtYzFkMGFjYjc4MTlh LzEvajVEMnQxNlJQeWVDN1ZTZXR5Rnl4WnpFZXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQCVXX8AwQC uXGQAwQCuZIkAwQCudh4AwQAwWkAMBsEAgACMBUDBQMqBmpAAwUDKgdNAAMFAyoL tkAwDQYJKoZIhvcNAQELBQADggEBABKNnDj2HME2He4hqLzTZvx+f8wAIeXcthBP CHkgLb3XVZwhyhpX02WmI5O08MvUTfketJhuSLaUnuFzZ1AwbIIpASFuGoHPRJB7 eNNZxOvfH8R6NTBAEP5IySqeB8BLk6uKDfcx1RpHX+atzVdbm1bPB8oOe4HciJ4C SreuQ7EYycFYXI6fANwajFM87DrvkisHXM2I9s76ij8Akrwyq3AxOScTjLtYGGa7 WBpjL9/Pa9RUCam2Zrxm17AafTH+vVz9jFrWvQ1t80Em5Vcz3XKaT/ZX8ssOUGRg SB0SpVu+PArc3dbnphDQMOciJi3J4D6ib1/NIfppf+zgC7YxgnI= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:55 2026 by rpki-client