This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/r9eaNKOzK8PPUei6RdKb9LkqhTI.roa File: r9eaNKOzK8PPUei6RdKb9LkqhTI.roa (raw, json) Hash identifier: +R7LC8z04wYSjkyWe1Pk5HhKfodwp2zyyiW39xvrzog= Subject key identifier: AF:D7:9A:34:A3:B3:2B:C3:CF:51:E8:BA:45:D2:9B:F4:B9:2A:85:32 Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41 Certificate serial: 019B7CEE102D287272564C7C713A8CFA19D8 Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/r9eaNKOzK8PPUei6RdKb9LkqhTI.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61189 IP address blocks: 85.194.200.0/22 maxlen: 22 85.194.200.0/23 maxlen: 23 85.194.201.0/24 maxlen: 24 85.194.202.0/23 maxlen: 23 185.7.252.0/22 maxlen: 22 185.7.252.0/23 maxlen: 23 185.7.254.0/23 maxlen: 23 2a03:29c0::/32 maxlen: 32 2a03:29c0:1000::/36 maxlen: 36 2a03:29c0:2000::/36 maxlen: 36 2a03:29c0:8000::/33 maxlen: 33 2a03:29c0:a000::/35 maxlen: 35 2a03:29c0:f1ff::/48 maxlen: 48 2a03:29c0:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:10:2d:28:72:72:56:4c:7c:71:3a:8c:fa:19:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afd79a34a3b32bc3cf51e8ba45d29bf4b92a8532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:d9:54:8e:cb:75:d5:ff:f2:8c:bc:82:21: 68:7e:95:0b:b7:ee:44:28:18:f8:39:30:e8:94:29: 5d:e6:12:f4:6e:be:88:27:48:91:50:e0:c9:a8:18: 0f:b4:10:d3:06:04:bb:71:c5:6f:df:36:9a:57:1d: 29:1f:63:79:34:41:cd:0b:c3:b9:8c:4a:40:98:10: 5d:f6:dc:1f:f0:e9:cb:38:74:3f:a1:49:f2:86:9d: 23:05:d1:37:25:b9:48:cd:97:cf:e7:1e:3c:42:79: 7b:9c:43:ba:e4:5a:11:fc:aa:78:ab:39:75:44:32: 53:94:41:e0:bc:77:2c:0c:80:e4:ba:12:a1:54:14: 2b:b1:96:10:f7:83:c8:65:b8:bd:f3:da:83:fb:f4: 04:3f:23:59:b7:43:1b:38:9a:39:ac:dc:54:ad:9c: 31:3a:d3:23:d0:ad:c1:81:3a:e0:d5:51:39:0e:68: 5f:ab:b4:68:40:72:86:b1:1e:66:9e:04:3c:91:e4: b3:a0:51:ba:10:81:c3:71:3a:21:94:af:57:43:a7: d6:2d:69:d9:eb:50:84:f3:bb:1e:d4:39:e0:f0:84: 76:31:39:3d:8c:67:28:6f:5d:c5:66:c7:ef:9e:87: da:5f:58:02:76:1c:95:7c:7c:9f:cd:45:d7:f9:95: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:9A:34:A3:B3:2B:C3:CF:51:E8:BA:45:D2:9B:F4:B9:2A:85:32 X509v3 Authority Key Identifier: keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/r9eaNKOzK8PPUei6RdKb9LkqhTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.200.0/22 185.7.252.0/22 IPv6: 2a03:29c0::/32 Signature Algorithm: sha256WithRSAEncryption 96:04:e5:27:3b:ab:53:ee:e2:12:78:a8:28:9c:b0:3f:29:75: 4b:ee:8d:f6:be:db:80:68:94:a7:64:f1:0b:b9:b6:d6:96:0c: ec:5c:8f:29:23:49:60:ff:31:ab:41:28:04:32:3a:f8:88:d1: 70:d8:ad:bb:92:af:8a:c1:ba:12:01:5b:de:5f:f7:39:18:18: d0:a9:6d:52:4b:b8:92:34:97:e7:12:55:09:55:2c:dc:71:e9: c8:c7:d1:8b:bf:fa:4d:38:a3:6a:39:b3:25:1a:56:25:98:eb: 93:47:c3:b8:17:fe:3e:54:80:96:ac:b6:28:64:67:9a:99:d0: da:86:a6:54:70:c1:21:b5:03:a3:8e:60:4c:00:5a:5d:91:af: ec:97:47:bb:67:ca:e1:93:37:56:40:f2:75:81:d8:1b:9d:ef: 3d:3b:ba:cc:2c:6a:ae:9f:3d:a3:a3:91:78:59:00:d0:8c:2b: d0:89:f1:eb:e8:d6:13:47:66:fa:13:d1:f6:d7:57:8b:28:cb: 90:f8:10:d7:ac:ae:1b:8f:58:f4:ed:a7:b2:95:67:0e:fe:ca: a0:b1:3a:55:89:3c:c3:99:4b:0a:a6:64:eb:16:59:28:d3:f6: f1:cc:ed:89:4a:00:18:06:49:4c:4f:7b:86:a4:69:8e:f7:10: a1:26:cd:ce -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87hAtKHJyVkx8cTqM+hnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGM4ZjMyN2E0NjE5NjRjMGE4N2E5Yzc4MDk0MDFjNTdj ODZkNDEwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmQ3OWEzNGEzYjMyYmMzY2Y1MWU4YmE0NWQyOWJmNGI5MmE4NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkvZVI7LddX/8oy8giFofpULt+5E KBj4OTDolCld5hL0br6IJ0iRUODJqBgPtBDTBgS7ccVv3zaaVx0pH2N5NEHNC8O5 jEpAmBBd9twf8OnLOHQ/oUnyhp0jBdE3JblIzZfP5x48Qnl7nEO65FoR/Kp4qzl1 RDJTlEHgvHcsDIDkuhKhVBQrsZYQ94PIZbi989qD+/QEPyNZt0MbOJo5rNxUrZwx OtMj0K3BgTrg1VE5Dmhfq7RoQHKGsR5mngQ8keSzoFG6EIHDcTohlK9XQ6fWLWnZ 61CE87se1Dng8IR2MTk9jGcob13FZsfvnofaX1gCdhyVfHyfzUXX+ZUxDQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFK/XmjSjsyvDz1HoukXSm/S5KoUyMB8GA1UdIwQY MBaAFK7cjzJ6RhlkwKh6nHgJQBxXyG1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMt ZmJjNWExZTM4MmM1LzEvcjllYU5LT3pLOFBQVWVpNlJkS2I5TGtxaFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMtZmJjNWExZTM4MmM1 LzEvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCVcLIAwQC uQf8MA0EAgACMAcDBQAqAynAMA0GCSqGSIb3DQEBCwUAA4IBAQCWBOUnO6tT7uIS eKgonLA/KXVL7o32vtuAaJSnZPELubbWlgzsXI8pI0lg/zGrQSgEMjr4iNFw2K27 kq+KwboSAVveX/c5GBjQqW1SS7iSNJfnElUJVSzccenIx9GLv/pNOKNqObMlGlYl mOuTR8O4F/4+VICWrLYoZGeamdDahqZUcMEhtQOjjmBMAFpdka/sl0e7Z8rhkzdW QPJ1gdgbne89O7rMLGqunz2jo5F4WQDQjCvQifHr6NYTR2b6E9H211eLKMuQ+BDX rK4bj1j07aeylWcO/sqgsTpViTzDmUsKpmTrFlko0/bxzO2JSgAYBklMT3uGpGmO 9xChJs3O -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:04 2026 by rpki-client