This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/9OabRGovuPKnBAyyV12cPmTGhCI.roa File: 9OabRGovuPKnBAyyV12cPmTGhCI.roa (raw, json) Hash identifier: YY/kJilFw0lpUtUApbWgvnCOomNh/RuL4QXS8C9yS7M= Subject key identifier: F4:E6:9B:44:6A:2F:B8:F2:A7:04:0C:B2:57:5D:9C:3E:64:C6:84:22 Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da Certificate serial: 019B77C6C11135AD713DE799DDF0C2460948 Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/9OabRGovuPKnBAyyV12cPmTGhCI.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42032 IP address blocks: 45.14.60.0/22 maxlen: 22 185.119.105.0/24 maxlen: 24 2a06:8a02::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 07:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c1:11:35:ad:71:3d:e7:99:dd:f0:c2:46:09:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e69b446a2fb8f2a7040cb2575d9c3e64c68422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:be:7a:88:47:ba:ad:6b:c3:06:61:ba:98:c2: f6:e1:c4:24:44:ca:c5:44:9d:03:d1:97:c4:2b:e2: 8f:d4:10:3a:9d:5a:c9:f5:19:22:57:a6:cf:01:d2: 5e:78:4d:8e:0a:d0:66:ff:9c:4a:d1:b2:3b:e5:e3: f7:ec:2b:62:6c:3f:70:23:ee:11:08:cd:24:eb:3b: f2:b8:ad:ee:97:d3:ea:a0:2e:12:13:cf:4a:e6:71: 90:3e:56:47:4b:53:d8:fc:d7:fb:82:86:e2:bb:08: 8a:09:ad:ab:90:22:23:3c:4f:c1:e2:80:24:13:3f: 0c:73:a6:fd:70:1f:19:bc:ef:04:a1:29:9a:b1:96: 7a:93:84:55:84:b1:9f:e7:f1:1f:04:16:1c:a4:f2: 86:3f:ac:d8:ed:55:67:66:a7:da:38:de:45:b5:6a: 1c:4e:b7:7f:ee:05:7d:38:28:ae:cc:5a:08:a9:15: fe:7e:8b:5d:9e:17:6c:25:7a:27:e6:d9:23:6e:d7: 7b:40:1f:a0:2f:bb:fa:b8:34:70:73:96:be:24:7a: 70:f2:63:19:d2:02:6b:b7:5c:91:7e:f7:0c:ab:eb: b5:5d:bb:9a:0f:4c:e8:da:b5:12:ad:48:a7:49:7b: 7f:d9:2b:96:e9:36:8d:f6:4b:ef:1f:1a:a0:0a:7a: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E6:9B:44:6A:2F:B8:F2:A7:04:0C:B2:57:5D:9C:3E:64:C6:84:22 X509v3 Authority Key Identifier: keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/9OabRGovuPKnBAyyV12cPmTGhCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.60.0/22 185.119.105.0/24 IPv6: 2a06:8a02::/32 Signature Algorithm: sha256WithRSAEncryption 1a:bf:ab:bc:62:6c:25:8d:0a:0e:9d:b3:1f:91:ac:71:8b:52: b5:81:b1:64:43:ab:c8:ab:5d:ea:d2:53:72:23:a1:29:d3:4b: 90:52:ff:d8:f6:4e:e7:c2:bb:03:b4:b5:66:3d:1d:8f:ab:15: 42:da:98:31:df:e2:8d:b0:11:bf:be:c4:10:6c:43:59:17:4e: c8:eb:0a:1f:d6:74:57:92:4a:74:29:2c:5c:d7:be:3f:c1:fa: 15:da:cb:5e:45:0e:8a:f0:c1:a0:c4:2a:cd:ba:18:57:e4:14: df:88:d6:c6:57:c0:9d:b9:7a:c8:41:cd:72:6a:3f:5c:0a:0a: a3:ed:8d:eb:2d:9d:95:f1:f9:5a:82:bb:c0:ba:46:ad:f1:01: 6d:00:46:8b:01:d1:3a:23:c4:6e:ce:a9:fd:20:73:15:4d:32: cb:a4:cc:f9:51:c4:6f:fd:70:6c:18:03:ba:41:1d:fa:62:14: bf:bf:6e:bc:6e:9b:f0:68:1a:b4:17:14:ac:4a:41:b3:85:f5: 73:bf:c0:d9:75:a4:03:5f:2e:d0:83:2f:87:7a:36:e3:d9:f0: de:34:e5:77:12:a3:68:92:b5:c4:88:0d:1f:7c:dd:61:14:4c: 09:3b:9a:b1:4b:5f:69:f7:e7:a2:5a:e3:dd:27:f1:2e:a0:de: 99:81:70:ed -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xsERNa1xPeeZ3fDCRglIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGU1OWEyMjNmNGJjYjgyMzQ5MmZiMTA5NmMzYTgyMzEw YzAzZGEwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGU2OWI0NDZhMmZiOGYyYTcwNDBjYjI1NzVkOWMzZTY0YzY4NDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4756iEe6rWvDBmG6mML24cQkRMrF RJ0D0ZfEK+KP1BA6nVrJ9RkiV6bPAdJeeE2OCtBm/5xK0bI75eP37CtibD9wI+4R CM0k6zvyuK3ul9PqoC4SE89K5nGQPlZHS1PY/Nf7gobiuwiKCa2rkCIjPE/B4oAk Ez8Mc6b9cB8ZvO8EoSmasZZ6k4RVhLGf5/EfBBYcpPKGP6zY7VVnZqfaON5FtWoc Trd/7gV9OCiuzFoIqRX+fotdnhdsJXon5tkjbtd7QB+gL7v6uDRwc5a+JHpw8mMZ 0gJrt1yRfvcMq+u1XbuaD0zo2rUSrUinSXt/2SuW6TaN9kvvHxqgCnrF0QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPTmm0RqL7jypwQMslddnD5kxoQiMB8GA1UdIwQY MBaAFDBOWaIj9Ly4I0kvsQlsOoIxDAPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTct MzQ0Y2M1MDJmMWJkLzEvOU9hYlJHb3Z1UEtuQkF5eVYxMmNQbVRHaENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mNTM2Y2QtOTQzZi00NTU0LTlmMTctMzQ0Y2M1MDJmMWJk LzEvTUU1Wm9pUDB2TGdqU1MteENXdzZnakVNQTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQ48AwQA uXdpMA0EAgACMAcDBQAqBooCMA0GCSqGSIb3DQEBCwUAA4IBAQAav6u8YmwljQoO nbMfkaxxi1K1gbFkQ6vIq13q0lNyI6Ep00uQUv/Y9k7nwrsDtLVmPR2PqxVC2pgx 3+KNsBG/vsQQbENZF07I6wof1nRXkkp0KSxc174/wfoV2steRQ6K8MGgxCrNuhhX 5BTfiNbGV8CduXrIQc1yaj9cCgqj7Y3rLZ2V8flagrvAukat8QFtAEaLAdE6I8Ru zqn9IHMVTTLLpMz5UcRv/XBsGAO6QR36YhS/v268bpvwaBq0FxSsSkGzhfVzv8DZ daQDXy7Qgy+Hejbj2fDeNOV3EqNokrXEiA0ffN1hFEwJO5qxS19p9+eiWuPdJ/Eu oN6ZgXDt -----END CERTIFICATE-----Generated at Tue Feb 10 11:33:23 2026 by rpki-client