This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa File: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (raw, json) Hash identifier: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ= Subject key identifier: 2B:FD:2C:F4:75:E2:C1:1A:5B:DD:F6:5F:50:7A:95:7D:1D:9C:16:70 Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14 Certificate serial: 019B76EB7B43DF3797403272AFD36EEEED51 Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15491 IP address blocks: 92.241.64.0/19 maxlen: 24 109.238.224.0/20 maxlen: 24 185.51.16.0/22 maxlen: 24 213.131.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7b:43:df:37:97:40:32:72:af:d3:6e:ee:ed:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bfd2cf475e2c11a5bddf65f507a957d1d9c1670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:ae:e9:c3:65:ac:08:29:19:06:d3:ad:6d: ae:4f:ac:d0:0e:99:e6:ce:74:17:e8:41:70:b6:c5: 51:a9:f5:3b:b2:c3:27:59:43:45:68:a6:f5:d7:cd: ee:c5:2e:d7:ea:76:18:ba:51:d9:83:91:83:1f:24: bc:f9:5f:46:a2:be:f8:f3:da:22:64:73:23:df:7e: fb:b0:46:e5:36:fc:f6:6a:bb:6f:af:dc:64:90:e0: 7b:06:92:90:3e:dd:0c:e6:94:53:fb:f0:cd:5f:be: c5:83:84:04:4b:32:b7:0e:bd:2f:f2:15:ad:df:9d: 8b:ee:0e:85:87:a8:c3:32:fd:7e:b2:52:7b:33:19: bc:a6:28:75:0c:03:fd:ba:9f:4b:d2:14:0b:33:36: ab:c1:ea:8c:8b:82:b6:14:8b:48:2d:6d:12:46:2a: 79:4c:6e:63:67:8e:4f:3a:11:2b:ab:52:f6:69:3e: 65:c4:76:d4:68:31:33:85:c9:64:a8:58:7c:67:44: 9f:fe:a2:65:77:51:0b:94:f7:7c:81:c0:55:c8:62: ca:32:04:4e:b3:80:dc:d7:c7:9c:6d:d5:e4:b6:b1: fb:56:a4:42:aa:72:0d:5a:3f:7a:46:73:ec:67:44: bc:fd:26:82:82:3d:12:ef:5d:e4:db:31:78:9a:3e: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FD:2C:F4:75:E2:C1:1A:5B:DD:F6:5F:50:7A:95:7D:1D:9C:16:70 X509v3 Authority Key Identifier: keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.241.64.0/19 109.238.224.0/20 185.51.16.0/22 213.131.32.0/19 Signature Algorithm: sha256WithRSAEncryption 60:7f:0b:ac:88:04:a1:73:c7:f7:5a:c5:1c:f1:fe:80:ea:88: a5:e5:f7:da:cf:48:63:b0:61:33:78:cc:dd:4a:9e:04:ab:29: 41:83:01:f6:93:ae:72:35:27:09:46:45:f7:c5:6a:92:cd:c9: 76:60:d9:45:8b:e2:a3:08:65:6a:99:11:85:fa:57:16:1f:58: c7:08:61:90:3b:18:9f:be:0c:08:11:c5:94:55:90:88:3d:5d: 7e:0d:3a:55:d3:63:a6:a0:4f:85:37:a6:f1:d0:9a:83:0f:0f: ad:b6:32:20:ed:99:2a:29:30:4a:ac:c6:3c:37:0b:f4:a6:d5: dc:34:88:50:22:6c:9a:e7:b8:a4:30:0a:ab:45:e3:f3:cb:49: 5d:c7:89:2a:9b:4c:ad:87:ed:32:a4:cf:e6:d3:00:1a:a4:f9: 1b:88:c8:f1:bd:4f:4b:1e:7b:11:0e:4d:fe:1b:99:f5:5a:91: ef:44:21:f7:98:82:ba:91:2a:42:81:22:f0:d3:b3:c8:66:b6: 9e:ae:5b:b9:83:76:ae:6f:25:90:26:b2:4f:46:00:de:9d:03: 5e:8c:a0:3f:3b:81:19:76:cc:6b:de:7a:0a:0c:1f:02:52:0b: 6b:d0:5d:7b:7b:8c:77:33:47:eb:cc:ce:fd:05:30:6c:41:13: 3f:2b:ce:9d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt263tD3zeXQDJyr9Nu7u1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh ZDhmMTQwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmZkMmNmNDc1ZTJjMTFhNWJkZGY2NWY1MDdhOTU3ZDFkOWMxNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPKu6cNlrAgpGQbTrW2uT6zQDpnm znQX6EFwtsVRqfU7ssMnWUNFaKb1183uxS7X6nYYulHZg5GDHyS8+V9Gor7489oi ZHMj3377sEblNvz2artvr9xkkOB7BpKQPt0M5pRT+/DNX77Fg4QESzK3Dr0v8hWt 352L7g6Fh6jDMv1+slJ7Mxm8pih1DAP9up9L0hQLMzarweqMi4K2FItILW0SRip5 TG5jZ45POhErq1L2aT5lxHbUaDEzhclkqFh8Z0Sf/qJld1ELlPd8gcBVyGLKMgRO s4Dc18ecbdXktrH7VqRCqnINWj96RnPsZ0S8/SaCgj0S713k2zF4mj5t3wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCv9LPR14sEaW932X1B6lX0dnBZwMB8GA1UdIwQY MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt Mzc0MGIwOTQxZGI4LzEvS18wczlIWGl3UnBiM2ZaZlVIcVZmUjJjRm5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4 LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFXPFAAwQE be7gAwQCuTMQAwQF1YMgMA0GCSqGSIb3DQEBCwUAA4IBAQBgfwusiAShc8f3WsUc 8f6A6oil5ffaz0hjsGEzeMzdSp4EqylBgwH2k65yNScJRkX3xWqSzcl2YNlFi+Kj CGVqmRGF+lcWH1jHCGGQOxifvgwIEcWUVZCIPV1+DTpV02OmoE+FN6bx0JqDDw+t tjIg7ZkqKTBKrMY8Nwv0ptXcNIhQImya57ikMAqrRePzy0ldx4kqm0yth+0ypM/m 0wAapPkbiMjxvU9LHnsRDk3+G5n1WpHvRCH3mIK6kSpCgSLw07PIZraerlu5g3au byWQJrJPRgDenQNejKA/O4EZdsxr3noKDB8CUgtr0F17e4x3M0frzM79BTBsQRM/ K86d -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:10 2026 by rpki-client