This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/9unExc-u2klcvykG9A7nqtJ0jEo.roa File: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (raw, json) Hash identifier: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU= Subject key identifier: F6:E9:C4:C5:CF:AE:DA:49:5C:BF:29:06:F4:0E:E7:AA:D2:74:8C:4A Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Certificate serial: 019B78A3758D65F2591FEF4C5B6F260731BC Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/9unExc-u2klcvykG9A7nqtJ0jEo.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62035 IP address blocks: 185.193.244.0/22 maxlen: 24 2a0a:3cc0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:75:8d:65:f2:59:1f:ef:4c:5b:6f:26:07:31:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6e9c4c5cfaeda495cbf2906f40ee7aad2748c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:9e:3b:3e:0b:a1:e2:35:90:5d:8b:95:bb: 76:87:72:52:62:3d:f1:a3:26:2d:51:81:88:77:24: e3:dc:6d:18:b1:46:40:97:e3:71:75:de:e6:e4:9e: d4:24:d2:a0:28:55:ee:5b:6c:65:92:95:94:be:23: 49:bb:69:50:3a:f5:62:e5:bd:e6:ce:f9:0a:23:6f: 94:a4:d9:c8:12:ff:c3:7d:5c:53:b2:6c:38:b4:71: ce:b0:bb:7c:7b:29:3f:5b:59:1b:3e:1a:94:5f:5d: c2:76:25:62:ba:f1:42:53:eb:12:21:6b:19:ab:86: fb:97:d4:e7:a3:4e:13:7c:4b:f5:d7:e3:5b:4e:9d: 89:47:6d:62:dc:d5:70:72:af:ea:ab:d4:8b:19:4f: e3:21:45:4d:b0:bd:cb:fb:2c:6a:d8:9e:4b:89:16: 18:ec:2c:6f:4c:3d:25:99:fe:dd:b2:15:ef:f5:9d: 4b:ec:aa:c1:24:57:60:2f:da:73:83:60:b1:7f:c4: 8d:41:15:3f:be:a5:75:34:b4:48:5d:e1:d9:44:cd: d5:f8:60:97:24:22:c9:20:d3:e7:25:3f:83:fa:a7: 4a:fd:6d:22:ca:83:88:3a:60:ca:96:25:81:40:19: f1:d5:db:83:57:44:d8:e1:3b:3e:d5:d3:36:91:24: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E9:C4:C5:CF:AE:DA:49:5C:BF:29:06:F4:0E:E7:AA:D2:74:8C:4A X509v3 Authority Key Identifier: keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/9unExc-u2klcvykG9A7nqtJ0jEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.244.0/22 IPv6: 2a0a:3cc0::/29 Signature Algorithm: sha256WithRSAEncryption b6:4d:b8:11:b3:51:95:2f:a4:cf:ca:58:4e:7b:55:f4:0d:68: 38:3b:21:7e:3d:cf:ec:73:cf:3a:b6:4c:27:46:bf:41:43:41: d4:f3:ff:95:48:37:5e:ae:bc:cf:9c:df:0d:93:3a:63:37:80: e7:e7:37:e1:ad:40:9d:a1:73:18:36:3e:8e:24:61:49:73:63: 3b:fa:2d:84:c9:84:81:b6:8d:12:d4:d9:b0:84:b1:83:0c:4d: 91:d6:6e:bd:6a:1f:9e:51:96:69:9a:e7:af:5c:a6:53:cf:9b: a1:f8:c9:6c:ec:cb:44:e6:eb:81:75:49:29:fa:f3:df:ac:f7: 1f:c9:68:f2:3c:fb:69:f9:ad:7f:67:13:83:9d:86:a7:46:04: 90:64:8a:fa:8f:76:c0:64:cb:20:b2:0a:c4:84:c5:98:45:89: 7d:db:1a:71:28:c9:a2:15:2b:6d:43:3b:c2:99:c2:64:fa:ee: 39:9c:91:d4:dc:e6:d3:33:54:04:24:f1:49:59:47:90:e9:55: 7a:df:90:fd:53:2d:1e:c5:02:3a:dc:83:07:6b:a0:b0:99:17: 5f:61:d2:1e:fb:fc:aa:be:22:21:b9:32:4b:9f:d6:7a:6c:95: 77:f9:c1:5d:7d:a1:58:07:56:bb:7c:2e:bc:7f:8a:06:2d:89: f5:6d:9a:80 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o3WNZfJZH+9MW28mBzG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5 OTEzOTUwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmU5YzRjNWNmYWVkYTQ5NWNiZjI5MDZmNDBlZTdhYWQyNzQ4YzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq+eOz4LoeI1kF2Llbt2h3JSYj3x oyYtUYGIdyTj3G0YsUZAl+Nxdd7m5J7UJNKgKFXuW2xlkpWUviNJu2lQOvVi5b3m zvkKI2+UpNnIEv/DfVxTsmw4tHHOsLt8eyk/W1kbPhqUX13CdiViuvFCU+sSIWsZ q4b7l9Tno04TfEv11+NbTp2JR21i3NVwcq/qq9SLGU/jIUVNsL3L+yxq2J5LiRYY 7CxvTD0lmf7dshXv9Z1L7KrBJFdgL9pzg2Cxf8SNQRU/vqV1NLRIXeHZRM3V+GCX JCLJINPnJT+D+qdK/W0iyoOIOmDKliWBQBnx1duDV0TY4Ts+1dM2kSQ4nQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPbpxMXPrtpJXL8pBvQO56rSdIxKMB8GA1UdIwQY MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt NjdjMWE2M2M1MTUwLzEvOXVuRXhjLXUya2xjdnlrRzlBN25xdEowakVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucH0MA0E AgACMAcDBQMqCjzAMA0GCSqGSIb3DQEBCwUAA4IBAQC2TbgRs1GVL6TPylhOe1X0 DWg4OyF+Pc/sc886tkwnRr9BQ0HU8/+VSDderrzPnN8NkzpjN4Dn5zfhrUCdoXMY Nj6OJGFJc2M7+i2EyYSBto0S1NmwhLGDDE2R1m69ah+eUZZpmuevXKZTz5uh+Mls 7MtE5uuBdUkp+vPfrPcfyWjyPPtp+a1/ZxODnYanRgSQZIr6j3bAZMsgsgrEhMWY RYl92xpxKMmiFSttQzvCmcJk+u45nJHU3ObTM1QEJPFJWUeQ6VV635D9Uy0exQI6 3IMHa6CwmRdfYdIe+/yqviIhuTJLn9Z6bJV3+cFdfaFYB1a7fC68f4oGLYn1bZqA -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:28 2026 by rpki-client