This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pk9FFOl_qAUZ9zxbI3Kcs25ZpmI.roa File: pk9FFOl_qAUZ9zxbI3Kcs25ZpmI.roa (raw, json) Hash identifier: Z3kx1yV5MKYr0JK4jY5jME1pI0DFJzQzE1s4IkUGC5s= Subject key identifier: A6:4F:45:14:E9:7F:A8:05:19:F7:3C:5B:23:72:9C:B3:6E:59:A6:62 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7977BF9A69E9B16E2808BE9537594 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pk9FFOl_qAUZ9zxbI3Kcs25ZpmI.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 2.56.243.0/24 maxlen: 24 88.218.250.0/24 maxlen: 24 193.28.183.0/24 maxlen: 24 194.147.88.0/24 maxlen: 24 194.156.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:97:7b:f9:a6:9e:9b:16:e2:80:8b:e9:53:75:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a64f4514e97fa80519f73c5b23729cb36e59a662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:51:c0:b4:a6:3d:6a:ac:44:b0:5d:43:f3: 4e:ea:8c:cf:a6:a8:f4:fa:fb:28:38:cc:8e:66:41: c9:5b:09:e8:be:34:3e:c3:21:2a:d9:d9:8b:c7:16: 7a:bc:da:b5:db:cd:ea:f3:a6:fa:69:fb:cf:5c:ad: 65:8f:5d:ef:65:8f:de:92:d4:e7:00:ce:c2:ab:03: 39:7e:c8:81:15:d4:a3:2a:5c:8a:11:6a:e3:0f:9d: df:6e:6e:d2:f0:92:88:c2:e9:f5:97:6a:28:37:21: b8:e8:c6:9e:54:ba:7b:0d:64:e6:ef:3b:b7:fd:22: 06:a7:46:5a:fa:44:77:9d:ba:35:b5:99:80:78:de: 34:1b:c9:43:e1:fd:40:6d:43:43:ec:70:ff:f7:db: 4d:d6:0a:6a:fb:3d:3e:43:36:d5:10:52:e1:65:43: 65:72:bb:d4:94:8c:f9:d7:77:6f:31:59:1d:7e:b6: f4:61:30:6d:c7:bd:fc:3f:86:90:35:72:18:2f:f8: 2a:0d:0c:b0:aa:d5:36:7f:9b:14:a6:ce:c4:94:88: b1:ed:5b:88:c0:2f:b1:2f:b8:55:cc:fc:ea:bb:a9: 34:54:c2:33:1f:cb:40:be:82:bf:90:48:c4:86:83: c9:1d:ad:3d:9b:a7:55:3a:d2:7a:5b:13:6c:9b:b6: 74:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4F:45:14:E9:7F:A8:05:19:F7:3C:5B:23:72:9C:B3:6E:59:A6:62 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/pk9FFOl_qAUZ9zxbI3Kcs25ZpmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.243.0/24 88.218.250.0/24 193.28.183.0/24 194.147.88.0/24 194.156.94.0/24 Signature Algorithm: sha256WithRSAEncryption 70:75:38:58:ec:60:cf:c5:8b:75:9a:e7:35:a1:2a:f1:29:08: a9:79:46:af:6e:f6:df:f8:f1:45:00:fc:98:43:f6:0c:eb:b3: 7c:3c:80:de:7b:c4:9d:e8:bb:60:f9:7d:ac:52:18:c7:5b:55: 93:e2:5d:6d:77:06:5f:71:bd:8e:5b:7d:f2:1e:4d:8a:d2:c5: 5d:f0:01:a9:ff:33:73:2c:19:e1:29:eb:3f:14:29:f2:fb:5e: 0b:a5:ed:b6:ef:02:ff:59:d4:3f:79:65:76:2d:42:27:c0:9d: 7c:eb:9f:7d:d8:6d:46:34:f9:b8:25:9a:ac:8e:4e:6b:3d:76: 39:94:c1:ec:cd:66:89:b4:3c:f3:c6:2c:84:39:f6:5c:eb:db: 6b:30:55:e8:10:1d:43:35:78:3f:6e:7b:83:4a:79:ed:23:68: 52:1a:35:5a:ca:53:79:fd:b5:cd:f2:a2:6e:a4:c3:aa:70:95: 1e:1d:18:ab:c0:1a:03:74:e4:e1:74:b2:e3:af:74:bb:aa:ed: 6c:b5:95:fd:04:e8:c8:57:01:4b:d3:0c:cc:9a:2a:5e:46:7e: d8:c9:09:cf:26:4f:54:13:01:04:31:b3:cd:b0:cf:cd:9e:84: b5:44:ba:e8:10:5d:64:bc:ad:d5:9c:cb:bb:b0:be:1b:a1:6a: 91:6e:e1:f1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6x5d7+aaemxbigIvpU3WUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjRmNDUxNGU5N2ZhODA1MTlmNzNjNWIyMzcyOWNiMzZlNTlhNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3lRwLSmPWqsRLBdQ/NO6ozPpqj0 +vsoOMyOZkHJWwnovjQ+wyEq2dmLxxZ6vNq1283q86b6afvPXK1lj13vZY/ektTn AM7CqwM5fsiBFdSjKlyKEWrjD53fbm7S8JKIwun1l2ooNyG46MaeVLp7DWTm7zu3 /SIGp0Za+kR3nbo1tZmAeN40G8lD4f1AbUND7HD/99tN1gpq+z0+QzbVEFLhZUNl crvUlIz513dvMVkdfrb0YTBtx738P4aQNXIYL/gqDQywqtU2f5sUps7ElIix7VuI wC+xL7hVzPzqu6k0VMIzH8tAvoK/kEjEhoPJHa09m6dVOtJ6WxNsm7Z0fwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKZPRRTpf6gFGfc8WyNynLNuWaZiMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvcGs5RkZPbF9xQVVaOXp4YkkzS2NzMjVacG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjjzAwQA WNr6AwQAwRy3AwQAwpNYAwQAwpxeMA0GCSqGSIb3DQEBCwUAA4IBAQBwdThY7GDP xYt1muc1oSrxKQipeUavbvbf+PFFAPyYQ/YM67N8PIDee8Sd6Ltg+X2sUhjHW1WT 4l1tdwZfcb2OW33yHk2K0sVd8AGp/zNzLBnhKes/FCny+14Lpe227wL/WdQ/eWV2 LUInwJ1865992G1GNPm4JZqsjk5rPXY5lMHszWaJtDzzxiyEOfZc69trMFXoEB1D NXg/bnuDSnntI2hSGjVaylN5/bXN8qJupMOqcJUeHRirwBoDdOThdLLjr3S7qu1s tZX9BOjIVwFL0wzMmipeRn7YyQnPJk9UEwEEMbPNsM/NnoS1RLroEF1kvK3VnMu7 sL4boWqRbuHx -----END CERTIFICATE-----Generated at Mon Jan 19 20:37:25 2026 by rpki-client