This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/9-lOR-hr6xX4Iqb6TkWpzgWJVtM.roa File: 9-lOR-hr6xX4Iqb6TkWpzgWJVtM.roa (raw, json) Hash identifier: QFUCnItf2DXd0w61i2uA3KR8HGTe8KP/hpaTD9qLq9I= Subject key identifier: F7:E9:4E:47:E8:6B:EB:15:F8:22:A6:FA:4E:45:A9:CE:05:89:56:D3 Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Certificate serial: 019B7EA4779FA00293E4B61D4F1C2DB20230 Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/9-lOR-hr6xX4Iqb6TkWpzgWJVtM.roa Signing time: Fri 02 Jan 2026 12:17:46 +0000 ROA not before: Fri 02 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39608 IP address blocks: 86.111.64.0/19 maxlen: 19 86.111.88.0/21 maxlen: 22 91.194.81.0/24 maxlen: 24 91.216.165.0/24 maxlen: 24 176.36.0.0/14 maxlen: 14 176.36.0.0/16 maxlen: 17 176.36.160.0/24 maxlen: 24 176.37.0.0/16 maxlen: 17 176.38.0.0/16 maxlen: 17 176.39.0.0/16 maxlen: 16 176.39.34.0/23 maxlen: 24 176.39.36.0/23 maxlen: 24 185.53.76.0/23 maxlen: 24 185.53.76.0/24 maxlen: 24 185.53.78.0/24 maxlen: 24 193.93.160.0/22 maxlen: 22 193.107.224.0/22 maxlen: 22 194.33.189.0/24 maxlen: 24 194.50.85.0/24 maxlen: 24 194.60.69.0/24 maxlen: 24 2a01:5800::/32 maxlen: 32 2a01:bf20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:77:9f:a0:02:93:e4:b6:1d:4f:1c:2d:b2:02:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714 Validity Not Before: Jan 2 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7e94e47e86beb15f822a6fa4e45a9ce058956d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:17:29:35:ac:2a:f6:35:dc:18:94:82:69: ae:f3:f6:91:d6:eb:c1:ac:26:43:9b:3b:bd:8a:8a: 4d:c7:7e:88:5d:a6:88:a1:e9:08:73:ea:34:08:88: 6a:14:3f:61:77:54:0b:f4:be:62:71:3b:7a:f3:2e: ef:02:c8:f8:59:86:c1:65:8a:5d:6d:11:6a:7f:9e: 35:9e:0e:75:49:69:04:70:c0:a3:65:c2:87:db:ad: aa:01:f5:b2:30:f6:fd:03:7f:7a:31:cd:2e:39:82: 60:3e:f0:b0:a3:66:b7:e2:4d:9b:ca:d3:ea:c3:34: 49:ef:b6:e7:5e:d4:55:49:c2:12:ce:95:ed:ee:ad: 4a:f4:28:7a:25:62:06:5b:f4:26:c9:9e:02:0c:a8: d1:d9:cb:14:33:f0:22:80:3f:b6:d8:23:ed:00:3c: cf:90:7b:fc:d7:63:fe:45:a1:1f:78:b3:78:ae:6c: 0a:aa:b0:13:57:d5:87:74:f8:8e:7a:7c:30:2b:d5: be:00:ef:4a:f2:1e:4d:5b:8e:c1:39:39:ca:5c:c0: ab:30:37:71:e0:6d:e8:f9:b0:cc:08:c7:f3:44:c6: 09:82:31:20:08:d5:a5:e9:eb:04:e5:93:87:49:8d: d5:12:e6:42:3c:56:5a:70:aa:d2:aa:f4:fd:fb:4c: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E9:4E:47:E8:6B:EB:15:F8:22:A6:FA:4E:45:A9:CE:05:89:56:D3 X509v3 Authority Key Identifier: keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/9-lOR-hr6xX4Iqb6TkWpzgWJVtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.64.0/19 91.194.81.0/24 91.216.165.0/24 176.36.0.0/14 185.53.76.0-185.53.78.255 193.93.160.0/22 193.107.224.0/22 194.33.189.0/24 194.50.85.0/24 194.60.69.0/24 IPv6: 2a01:5800::/32 2a01:bf20::/32 Signature Algorithm: sha256WithRSAEncryption 10:ea:76:9a:9d:0b:eb:4c:e6:17:dc:c1:cd:ce:e0:6e:cd:26: f1:06:18:f2:bb:0a:c5:80:39:61:e7:80:3b:98:5e:1e:dd:b8: 0b:cc:49:9b:ea:4b:f6:49:24:c4:87:d6:8e:fd:c7:95:b6:a8: 88:a9:82:81:27:f1:c4:2a:d0:7d:ca:8c:5a:a3:7d:99:bf:90: 21:b8:5d:3c:7f:e7:95:de:9c:ad:7e:73:60:ee:8e:cf:9d:c4: 1e:0b:40:a7:f9:b3:0c:b2:2f:35:f2:e9:38:33:8c:25:62:fd: 68:da:27:72:d9:fb:9d:77:5e:a8:f4:7d:69:85:05:24:03:c9: e4:bc:5c:ef:68:86:96:ca:e8:22:59:07:96:fe:a5:0a:fe:cd: e2:f1:79:fb:c0:2e:79:d5:71:32:d7:d9:ab:08:49:c1:b0:49: ca:18:fe:da:16:55:5f:33:11:fb:b0:22:95:b5:89:f9:58:5e: b9:3d:54:85:3d:a3:9d:5c:6a:2b:d1:ba:48:33:99:cb:37:20: 84:73:11:0a:e8:e4:d0:2a:f1:ee:24:97:b9:e3:df:f4:f0:06: 9f:8d:6a:1f:f8:8a:c2:0f:48:15:a7:65:43:7e:89:4e:06:55: 84:de:cb:d6:e7:b7:ed:1b:58:4f:84:ad:4c:6f:75:db:c2:f2: f1:51:dc:06 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt+pHefoAKT5LYdTxwtsgIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm NWI3MTQwHhcNMjYwMTAyMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2U5NGU0N2U4NmJlYjE1ZjgyMmE2ZmE0ZTQ1YTljZTA1ODk1NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVsXKTWsKvY13BiUgmmu8/aR1uvB rCZDmzu9iopNx36IXaaIoekIc+o0CIhqFD9hd1QL9L5icTt68y7vAsj4WYbBZYpd bRFqf541ng51SWkEcMCjZcKH262qAfWyMPb9A396Mc0uOYJgPvCwo2a34k2bytPq wzRJ77bnXtRVScISzpXt7q1K9Ch6JWIGW/QmyZ4CDKjR2csUM/AigD+22CPtADzP kHv812P+RaEfeLN4rmwKqrATV9WHdPiOenwwK9W+AO9K8h5NW47BOTnKXMCrMDdx 4G3o+bDMCMfzRMYJgjEgCNWl6esE5ZOHSY3VEuZCPFZacKrSqvT9+0wQ1QIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFPfpTkfoa+sV+CKm+k5Fqc4FiVbTMB8GA1UdIwQY MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx LTEzODM5NjQwYTYwNC8xLzktbE9SLWhyNnhYNElxYjZUa1dwemdXSlZ0TS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwcgYIKwYBBQUHAQcBAf8EYzBhMEkEAgABMEMDBAVWb0AD BABbwlEDBABb2KUDAwKwJDAMAwQCuTVMAwQAuTVOAwQCwV2gAwQCwWvgAwQAwiG9 AwQAwjJVAwQAwjxFMBQEAgACMA4DBQAqAVgAAwUAKgG/IDANBgkqhkiG9w0BAQsF AAOCAQEAEOp2mp0L60zmF9zBzc7gbs0m8QYY8rsKxYA5YeeAO5heHt24C8xJm+pL 9kkkxIfWjv3HlbaoiKmCgSfxxCrQfcqMWqN9mb+QIbhdPH/nld6crX5zYO6Oz53E HgtAp/mzDLIvNfLpODOMJWL9aNonctn7nXdeqPR9aYUFJAPJ5Lxc72iGlsroIlkH lv6lCv7N4vF5+8AuedVxMtfZqwhJwbBJyhj+2hZVXzMR+7AilbWJ+VheuT1UhT2j nVxqK9G6SDOZyzcghHMRCujk0Crx7iSXuePf9PAGn41qH/iKwg9IFadlQ36JTgZV hN7L1ue37RtYT4StTG9128Ly8VHcBg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:02:53 2026 by rpki-client