This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/_ERGoNtkfCnC57fEn319xuy5MH0.roa File: _ERGoNtkfCnC57fEn319xuy5MH0.roa (raw, json) Hash identifier: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM= Subject key identifier: FC:44:46:A0:DB:64:7C:29:C2:E7:B7:C4:9F:7D:7D:C6:EC:B9:30:7D Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26 Certificate serial: 019B7AC79535F9843D3A61ABE87275898944 Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/_ERGoNtkfCnC57fEn319xuy5MH0.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49242 IP address blocks: 80.68.224.0/21 maxlen: 21 80.68.232.0/21 maxlen: 21 89.35.144.0/22 maxlen: 22 93.158.232.0/22 maxlen: 22 185.21.148.0/22 maxlen: 22 188.121.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:95:35:f9:84:3d:3a:61:ab:e8:72:75:89:89:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26 Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc4446a0db647c29c2e7b7c49f7d7dc6ecb9307d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:33:57:78:0f:a9:2f:55:2a:97:78:0f:aa:fc: e4:61:0a:87:c4:66:4a:67:c2:a8:fe:c3:31:b4:de: c4:e0:e6:ae:f3:2b:3f:1a:ff:d8:35:67:5a:52:1f: 46:21:a9:74:65:1c:73:84:d5:05:6c:df:e3:0f:7e: 42:db:53:44:09:48:ba:d9:77:0f:34:1d:58:06:93: d3:0f:f8:d5:a4:b7:ba:7c:5e:37:d1:fc:b6:1d:19: 21:4c:b1:a8:82:c5:7d:0e:d3:38:b8:8c:1e:80:d4: 6d:e2:fd:79:63:71:2f:a3:cb:0d:d0:a1:bc:e0:dc: 63:b0:77:06:2b:b6:dd:c1:82:a4:0b:1c:c2:9b:77: c3:99:4e:58:f6:b3:bc:f6:43:23:26:ba:75:98:02: b6:da:cf:c1:1c:3c:20:73:fa:85:ac:64:6c:88:0b: 74:8c:50:2c:64:65:5a:f8:88:27:1f:9b:68:c0:9a: f8:9b:2d:e4:5a:11:d4:a1:0e:01:8e:49:4d:cf:a7: ef:a9:d5:ef:52:a0:4a:c9:19:29:c7:94:56:72:15: 6e:43:28:1c:03:2e:f3:32:d2:54:25:ae:c2:64:81: 78:4d:fd:94:8a:7b:49:21:db:e0:75:3e:d8:0b:32: cc:a3:87:ad:61:90:ed:b7:5a:cf:42:fb:68:19:dd: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:44:46:A0:DB:64:7C:29:C2:E7:B7:C4:9F:7D:7D:C6:EC:B9:30:7D X509v3 Authority Key Identifier: keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/_ERGoNtkfCnC57fEn319xuy5MH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.68.224.0/20 89.35.144.0/22 93.158.232.0/22 185.21.148.0/22 188.121.0.0/19 Signature Algorithm: sha256WithRSAEncryption 83:30:99:01:dd:b9:fb:f3:13:e9:9d:e4:57:ed:2c:83:b6:c1: 0f:7e:53:83:eb:af:a7:98:ef:96:d5:3b:a5:5d:9d:df:cf:c8: 01:66:9c:db:64:b7:ef:05:e9:c5:a3:da:1c:90:79:39:e7:4c: eb:66:5c:a4:a2:50:c3:f3:d4:3e:00:b1:0b:5c:c3:fe:bb:a6: 91:a6:62:0f:bf:21:20:03:fd:8f:62:46:ef:22:dd:74:fb:c4: 2f:c7:55:2b:af:5a:d6:e0:dd:80:bd:a9:17:c1:8d:c2:74:a9: 99:7c:55:3b:32:ca:60:eb:88:b5:35:d8:ed:bb:37:43:b0:1d: 4f:22:14:c3:da:5a:40:d4:00:ca:f3:b8:59:27:c4:c7:f4:84: 84:3c:a8:4c:9a:2b:91:cd:1a:27:9f:bd:fe:6d:94:4c:90:ec: ba:51:a1:fd:bc:5f:b0:ce:91:2e:cc:2f:d5:ad:fd:ff:36:a3: 99:03:d4:83:a6:1a:d5:69:e3:2a:5f:74:8b:40:8d:4e:07:0b: 81:62:6d:11:7c:b0:4a:62:c7:96:1b:58:f5:6f:be:5c:1e:ff: 67:23:9f:77:3e:7b:08:86:4d:b8:c0:73:49:6f:c8:9f:b4:c0: 17:d9:40:b6:eb:81:f7:8d:fa:ef:44:8b:8e:58:80:86:b4:c8: d5:02:61:49 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6x5U1+YQ9OmGr6HJ1iYlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwODU1ZGQ4OTcyNTZlODZkYTNjYmU2OTk0ZTk0Y2UyZTk2 OWFmMjYwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzQ0NDZhMGRiNjQ3YzI5YzJlN2I3YzQ5ZjdkN2RjNmVjYjkzMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DNXeA+pL1Uql3gPqvzkYQqHxGZK Z8Ko/sMxtN7E4Oau8ys/Gv/YNWdaUh9GIal0ZRxzhNUFbN/jD35C21NECUi62XcP NB1YBpPTD/jVpLe6fF430fy2HRkhTLGogsV9DtM4uIwegNRt4v15Y3Evo8sN0KG8 4NxjsHcGK7bdwYKkCxzCm3fDmU5Y9rO89kMjJrp1mAK22s/BHDwgc/qFrGRsiAt0 jFAsZGVa+IgnH5towJr4my3kWhHUoQ4BjklNz6fvqdXvUqBKyRkpx5RWchVuQygc Ay7zMtJUJa7CZIF4Tf2UintJIdvgdT7YCzLMo4etYZDtt1rPQvtoGd26cQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPxERqDbZHwpwue3xJ99fcbsuTB9MB8GA1UdIwQY MBaAFACFXdiXJW6G2jy+aZTpTOLpaa8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUt ODg2ZjY2YmI2ZWU4LzEvX0VSR29OdGtmQ25DNTdmRW4zMTl4dXk1TUgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85ZmMzOTUtOThiYy00YWVkLTkzOWUtODg2ZjY2YmI2ZWU4 LzEvQUlWZDJKY2xib2JhUEw1cGxPbE00dWxwcnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEUETgAwQC WSOQAwQCXZ7oAwQCuRWUAwQFvHkAMA0GCSqGSIb3DQEBCwUAA4IBAQCDMJkB3bn7 8xPpneRX7SyDtsEPflOD66+nmO+W1TulXZ3fz8gBZpzbZLfvBenFo9ockHk550zr ZlykolDD89Q+ALELXMP+u6aRpmIPvyEgA/2PYkbvIt10+8Qvx1Urr1rW4N2AvakX wY3CdKmZfFU7Mspg64i1NdjtuzdDsB1PIhTD2lpA1ADK87hZJ8TH9ISEPKhMmiuR zRonn73+bZRMkOy6UaH9vF+wzpEuzC/Vrf3/NqOZA9SDphrVaeMqX3SLQI1OBwuB Ym0RfLBKYseWG1j1b75cHv9nI593PnsIhk24wHNJb8iftMAX2UC264H3jfrvRIuO WICGtMjVAmFJ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:17 2026 by rpki-client