This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/1-etkEpJT5huTCkvp4nk0dydE9KA.roa File: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (raw, json) Hash identifier: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo= Subject key identifier: F9:EB:64:12:92:53:E6:1B:93:0A:4B:E9:E2:79:34:77:27:44:F4:A0 Certificate issuer: /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Certificate serial: 019B7F1592B78D696CDD890262C418223FE1 Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/1-etkEpJT5huTCkvp4nk0dydE9KA.roa Signing time: Fri 02 Jan 2026 14:21:18 +0000 ROA not before: Fri 02 Jan 2026 14:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29686 IP address blocks: 82.96.64.0/18 maxlen: 18 82.96.96.0/24 maxlen: 24 85.190.0.0/18 maxlen: 18 85.190.0.0/19 maxlen: 19 185.191.224.0/22 maxlen: 24 2001:1bc0::/29 maxlen: 32 2001:1bc7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:92:b7:8d:69:6c:dd:89:02:62:c4:18:22:3f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6 Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9eb64129253e61b930a4be9e27934772744f4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:5c:2a:5c:2b:ff:ea:90:8c:c4:55:03:71: 64:68:43:e1:c3:71:d1:3f:26:90:21:1e:93:75:ee: 62:dc:18:03:ff:68:bc:71:25:2a:0c:cb:46:b6:cc: 57:ee:a4:61:80:a7:5a:bf:17:f3:a7:68:ba:e6:9e: a4:27:ca:62:71:36:46:71:d3:89:d6:41:e6:52:ad: 06:5e:ee:ff:36:62:7f:4a:53:40:93:c5:42:9e:0c: e6:9d:16:29:17:f2:bf:ec:8b:26:72:ad:15:91:b3: ac:22:4c:d3:a7:e4:c4:80:35:ce:5b:1b:9d:df:ca: b4:61:20:07:cf:d3:0a:10:dd:b8:b3:e1:01:33:5f: eb:e7:db:f7:4b:8a:4e:62:73:64:18:fe:89:72:1b: 8f:c4:8a:e0:7d:0c:74:b0:08:b6:54:44:0c:34:a6: 91:54:9d:89:2f:87:1c:06:e3:a0:e5:9e:a2:9e:a3: 9f:32:c7:b6:45:ad:a2:3b:0b:f0:f9:64:2c:37:c0: 6e:06:0a:eb:3b:d3:06:8c:e6:b3:c4:d9:a4:aa:51: 5a:c6:5e:24:35:5e:a3:c7:21:48:54:d8:0d:23:f2: 81:b6:b4:79:a6:05:d8:b1:a8:1a:47:cc:37:09:11: 32:90:5f:63:c2:19:02:46:1b:da:67:2d:e0:43:33: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EB:64:12:92:53:E6:1B:93:0A:4B:E9:E2:79:34:77:27:44:F4:A0 X509v3 Authority Key Identifier: keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/1-etkEpJT5huTCkvp4nk0dydE9KA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.96.64.0/18 85.190.0.0/18 185.191.224.0/22 IPv6: 2001:1bc0::/29 Signature Algorithm: sha256WithRSAEncryption 9a:8a:08:f7:7a:e4:7d:a9:c6:7d:e7:95:dc:1a:6c:7e:25:00: 4e:e1:c4:4b:47:7c:5d:e2:eb:f3:be:9b:65:6f:87:1c:af:1e: 20:ca:69:4d:8f:cb:3e:cb:e6:93:c9:e9:85:14:83:a8:db:55: 0e:37:be:e6:9c:30:53:c1:dc:f0:bc:78:5d:d3:35:d1:86:fc: 7c:83:33:51:ef:ea:06:60:07:6a:9d:30:03:84:3e:25:59:a4: e1:1d:bf:ba:6d:b8:a9:dc:9d:0e:d1:ff:95:a1:7c:c5:d3:43: 97:7e:b9:85:5e:bd:e5:3f:2f:9f:b7:94:c3:17:f3:7b:c4:68: f8:22:5b:fe:28:d0:9d:2c:7f:3a:22:c9:0c:63:ed:0d:f0:79: cf:93:80:e0:62:b4:34:fb:e2:b8:2c:3c:9a:88:06:93:0c:5f: f0:c7:84:b3:13:7b:15:a1:26:4c:20:74:56:a6:6a:ab:ae:5b: 29:25:29:54:22:76:b5:70:37:33:21:81:3e:06:98:46:64:3d: 22:51:cf:bd:ec:19:13:83:e8:a0:87:77:58:a2:f7:b4:66:40: 96:ed:2c:4a:43:ae:cf:9d:8c:11:49:72:df:d2:8a:d2:9d:d3: 17:59:87:66:e2:18:6a:55:82:1d:3b:50:46:1a:9a:4b:eb:20: cd:df:11:64 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/FZK3jWls3YkCYsQYIj/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YjljZWIxMGMyYzhjMDBkMTYwOTk2MDNjYzExYmVkMDA1 NDdiZTYwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWViNjQxMjkyNTNlNjFiOTMwYTRiZTllMjc5MzQ3NzI3NDRmNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucNcKlwr/+qQjMRVA3FkaEPhw3HR PyaQIR6Tde5i3BgD/2i8cSUqDMtGtsxX7qRhgKdavxfzp2i65p6kJ8picTZGcdOJ 1kHmUq0GXu7/NmJ/SlNAk8VCngzmnRYpF/K/7Ismcq0VkbOsIkzTp+TEgDXOWxud 38q0YSAHz9MKEN24s+EBM1/r59v3S4pOYnNkGP6JchuPxIrgfQx0sAi2VEQMNKaR VJ2JL4ccBuOg5Z6inqOfMse2Ra2iOwvw+WQsN8BuBgrrO9MGjOazxNmkqlFaxl4k NV6jxyFIVNgNI/KBtrR5pgXYsagaR8w3CREykF9jwhkCRhvaZy3gQzPN/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPnrZBKSU+YbkwpL6eJ5NHcnRPSgMB8GA1UdIwQY MBaAFCa5zrEMLIwA0WCZYDzBG+0AVHvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnJuT3NRd3NqQURSWUpsZ1BNRWI3UUJVZS1ZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iYzk4Y2ItOTcxZC00YjA0LWI4MWUt YjYxMDU2ODQ2NmIzLzEvMS1ldGtFcEpUNWh1VENrdnA0bmswZHlkRTlLQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWQvYmM5OGNiLTk3MWQtNGIwNC1iODFlLWI2MTA1Njg0NjZi My8xL0pybk9zUXdzakFEUllKbGdQTUViN1FCVWUtWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBlJgQAME BlW+AAMEArm/4DANBAIAAjAHAwUDIAEbwDANBgkqhkiG9w0BAQsFAAOCAQEAmooI 93rkfanGfeeV3BpsfiUATuHES0d8XeLr876bZW+HHK8eIMppTY/LPsvmk8nphRSD qNtVDje+5pwwU8Hc8Lx4XdM10Yb8fIMzUe/qBmAHap0wA4Q+JVmk4R2/um24qdyd DtH/laF8xdNDl365hV695T8vn7eUwxfze8Ro+CJb/ijQnSx/OiLJDGPtDfB5z5OA 4GK0NPviuCw8mogGkwxf8MeEsxN7FaEmTCB0VqZqq65bKSUpVCJ2tXA3MyGBPgaY RmQ9IlHPvewZE4PooId3WKL3tGZAlu0sSkOuz52MEUly39KK0p3TF1mHZuIYalWC HTtQRhqaS+sgzd8RZA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:53 2026 by rpki-client