This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa File: 9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa (raw, json) Hash identifier: y0d6gj7QyX83YX1GU3wakz/LTeS7oSLMM+wcVlzLLQc= Subject key identifier: F5:58:05:8F:55:39:03:26:0A:1E:A9:E6:DC:02:B4:89:9F:04:C9:96 Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118 Certificate serial: 019B7DCA499AE7623668A8945476C63D8C7C Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa Signing time: Fri 02 Jan 2026 08:19:27 +0000 ROA not before: Fri 02 Jan 2026 08:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197058 IP address blocks: 194.28.144.0/22 maxlen: 22 194.28.144.0/24 maxlen: 24 194.28.145.0/24 maxlen: 24 194.28.146.0/24 maxlen: 24 194.28.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:49:9a:e7:62:36:68:a8:94:54:76:c6:3d:8c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f3f3114caa8e926281725f727d608d93395118 Validity Not Before: Jan 2 08:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f558058f553903260a1ea9e6dc02b4899f04c996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:2a:ac:da:e1:c8:d4:b8:01:41:77:66:4b: f6:e3:1c:eb:84:fd:75:a8:b0:60:a9:b7:aa:5b:73: ae:9f:23:3a:3b:43:14:7f:17:c6:68:f1:ad:aa:86: 93:c6:1e:0f:0b:5e:46:bd:6c:55:05:bf:2d:ba:98: 9c:3d:86:06:2e:29:8a:25:c3:0e:f4:56:1e:59:5c: 74:9d:b1:7c:7d:08:90:55:aa:14:0e:47:f9:0d:86: 24:a5:46:ff:fb:d1:91:8b:6c:7d:c6:5b:2b:bb:19: 15:0a:08:42:cc:bd:ff:dc:8b:20:4b:b7:d7:82:de: 39:22:bf:a8:ca:5f:5d:20:ae:65:85:82:41:32:73: 9b:3c:d5:0e:6b:8d:9b:ca:3c:6f:60:96:10:9b:f0: 7f:a4:47:09:93:c9:dd:78:bb:c1:c5:42:3a:99:a1: 35:7c:18:45:5e:eb:22:bb:b1:26:34:68:2a:03:e7: 61:0d:3b:3a:23:4f:23:39:66:86:a3:54:d2:14:73: d9:60:84:53:c5:2c:3c:55:1b:d1:b9:c8:77:f0:81: e6:5f:2d:45:a8:6e:b7:05:60:23:37:88:a9:0e:71: 2a:6d:03:77:f4:67:ce:d7:3f:e6:8a:ad:82:bb:9f: 94:5e:ec:27:ed:fd:c4:2c:02:20:6f:dc:a7:66:8a: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:58:05:8F:55:39:03:26:0A:1E:A9:E6:DC:02:B4:89:9F:04:C9:96 X509v3 Authority Key Identifier: keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.144.0/22 Signature Algorithm: sha256WithRSAEncryption 33:92:88:69:be:08:fc:5f:61:c8:60:98:44:44:5a:57:f0:97: 7c:0e:17:b6:0b:fb:a3:7a:6c:d0:bb:2a:9a:39:5a:f4:b8:74: 74:66:05:a0:e5:22:36:6a:e1:66:fc:ab:c3:de:45:02:1a:09: d5:e1:9c:a4:ea:e7:6c:4f:0a:b1:72:89:9b:ab:86:07:7f:30: 42:47:63:c3:cc:8a:77:f4:3c:bd:89:28:74:00:a9:67:bd:f5: 37:d9:32:44:77:05:73:b4:e7:05:2c:26:85:24:0e:41:16:f1: c5:a5:02:d1:c7:ce:07:c0:78:9d:98:e9:13:e4:51:ef:cd:f7: a2:12:bf:b1:65:66:b6:d3:5f:2d:e0:f5:33:87:72:d8:eb:5b: bf:c8:f2:fd:9e:47:d0:79:91:cd:90:3b:df:88:56:6a:fb:fd: 0e:f6:3a:79:e0:8c:ff:96:85:49:17:e6:1b:3f:57:ec:a7:aa: d5:af:f1:79:68:fe:7f:df:39:e3:6d:be:6c:7f:c3:a3:4d:a0: 70:03:38:24:ff:3e:d5:69:a4:73:5f:0d:69:9c:f9:bc:c2:e0: 08:fc:fb:54:b3:1f:c7:ac:88:94:de:7a:36:36:71:63:25:34: 16:ed:9d:75:a9:a7:5f:fb:62:b6:48:80:91:3a:9b:4b:3a:08: 92:e9:64:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykma52I2aKiUVHbGPYx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjNmMzExNGNhYThlOTI2MjgxNzI1ZjcyN2Q2MDhkOTMz OTUxMTgwHhcNMjYwMTAyMDgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTU4MDU4ZjU1MzkwMzI2MGExZWE5ZTZkYzAyYjQ4OTlmMDRjOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsogqrNrhyNS4AUF3Zkv24xzrhP11 qLBgqbeqW3OunyM6O0MUfxfGaPGtqoaTxh4PC15GvWxVBb8tupicPYYGLimKJcMO 9FYeWVx0nbF8fQiQVaoUDkf5DYYkpUb/+9GRi2x9xlsruxkVCghCzL3/3IsgS7fX gt45Ir+oyl9dIK5lhYJBMnObPNUOa42byjxvYJYQm/B/pEcJk8ndeLvBxUI6maE1 fBhFXusiu7EmNGgqA+dhDTs6I08jOWaGo1TSFHPZYIRTxSw8VRvRuch38IHmXy1F qG63BWAjN4ipDnEqbQN39GfO1z/miq2Cu5+UXuwn7f3ELAIgb9ynZoqFPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVYBY9VOQMmCh6p5twCtImfBMmWMB8GA1UdIwQY MBaAFIDz8xFMqo6SYoFyX3J9YI2TOVEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZTdiNzktMTU2OC00ZWI2LWJjMGYt NTQ4OWUyMmNhYjgxLzEvOVZnRmoxVTVBeVlLSHFubTNBSzBpWjhFeVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mZTdiNzktMTU2OC00ZWI2LWJjMGYtNTQ4OWUyMmNhYjgx LzEvZ1BQekVVeXFqcEppZ1hKZmNuMWdqWk01VVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwhyQMA0G CSqGSIb3DQEBCwUAA4IBAQAzkohpvgj8X2HIYJhERFpX8Jd8Dhe2C/ujemzQuyqa OVr0uHR0ZgWg5SI2auFm/KvD3kUCGgnV4Zyk6udsTwqxcombq4YHfzBCR2PDzIp3 9Dy9iSh0AKlnvfU32TJEdwVztOcFLCaFJA5BFvHFpQLRx84HwHidmOkT5FHvzfei Er+xZWa2018t4PUzh3LY61u/yPL9nkfQeZHNkDvfiFZq+/0O9jp54Iz/loVJF+Yb P1fsp6rVr/F5aP5/3znjbb5sf8OjTaBwAzgk/z7VaaRzXw1pnPm8wuAI/PtUsx/H rIiU3no2NnFjJTQW7Z11qadf+2K2SICROptLOgiS6WQZ -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:54 2026 by rpki-client