This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/9EktXdyZJh18u-aW7yKS4HoPavo.roa File: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (raw, json) Hash identifier: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc= Subject key identifier: F4:49:2D:5D:DC:99:26:1D:7C:BB:E6:96:EF:22:92:E0:7A:0F:6A:FA Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1 Certificate serial: 019B7BA51896849FA66D5A626AC9A26B12C8 Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/9EktXdyZJh18u-aW7yKS4HoPavo.roa Signing time: Thu 01 Jan 2026 22:19:35 +0000 ROA not before: Thu 01 Jan 2026 22:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12941 IP address blocks: 185.101.132.0/22 maxlen: 24 185.101.184.0/22 maxlen: 22 213.135.0.0/19 maxlen: 19 2a02:430::/32 maxlen: 32 2a06:1e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:18:96:84:9f:a6:6d:5a:62:6a:c9:a2:6b:12:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1 Validity Not Before: Jan 1 22:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4492d5ddc99261d7cbbe696ef2292e07a0f6afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:ad:0b:b2:6e:c2:26:ea:ec:0d:f6:80:3e: d7:b8:6f:dd:95:e9:6f:07:9c:42:0b:1e:e9:aa:5e: 81:3d:8c:00:e3:05:26:16:34:99:d7:36:94:62:d9: 8e:68:ef:59:7a:cf:f5:e1:21:36:0e:68:5d:f3:58: 39:08:a1:93:f2:e1:58:7a:53:2c:e1:c9:4e:6a:d3: db:84:57:1c:91:d0:66:50:47:59:02:66:54:03:66: fb:b5:4b:1f:ab:9a:26:72:57:5f:93:5c:39:69:19: c0:8a:c4:f8:67:23:b9:66:39:49:93:bc:bf:27:20: 85:e7:63:1c:69:1f:3d:07:a2:53:1e:d1:32:55:dd: 25:92:01:d7:e3:e8:0d:52:d4:bf:5e:6e:35:dd:77: 85:74:76:94:9e:72:0b:dc:8c:31:85:45:17:1c:41: 65:c4:2c:b5:23:e0:5f:6d:0a:dc:97:7b:07:1b:5b: 2b:d6:c5:bf:8e:b9:9b:e7:c4:e8:8b:c5:e8:6a:3f: 30:ae:24:87:cd:40:b1:0e:dc:f6:f2:ca:3e:45:b0: ff:c2:a2:0f:8a:09:a5:6b:41:ae:f6:be:e3:8f:95: f1:94:ad:63:4b:a3:b5:30:7d:0a:7b:25:30:37:a5: a2:ca:51:f7:75:d2:38:a6:e1:61:61:ed:af:ea:d3: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:49:2D:5D:DC:99:26:1D:7C:BB:E6:96:EF:22:92:E0:7A:0F:6A:FA X509v3 Authority Key Identifier: keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/9EktXdyZJh18u-aW7yKS4HoPavo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.132.0/22 185.101.184.0/22 213.135.0.0/19 IPv6: 2a02:430::/32 2a06:1e40::/29 Signature Algorithm: sha256WithRSAEncryption 5a:6c:01:93:70:0a:a8:0a:32:b2:f9:45:08:a1:f9:7b:ad:f5: a9:ff:0e:12:8f:85:de:c5:37:da:7f:07:f2:28:18:dc:19:36: 21:eb:4a:c0:c4:03:3c:1b:d1:ab:8c:68:a3:fe:e8:d7:80:bc: 02:84:54:b7:c6:00:85:f0:07:d0:90:87:ee:f9:9c:08:ad:fc: 19:f5:ff:57:05:23:72:2c:10:07:81:2a:13:55:a4:c0:55:00: 53:d5:d7:da:57:19:2c:e9:1b:10:c9:41:d5:a6:86:76:97:a8: 57:d5:27:56:cf:62:80:73:e3:23:e1:94:b9:68:89:45:ce:12: ac:02:e6:6f:ef:25:b5:38:55:d6:32:18:f8:e4:39:e1:c5:a1: 87:ae:73:35:a1:32:72:d4:95:be:7d:14:8f:99:2c:85:15:75: e6:35:86:45:d9:2b:d6:38:ff:ae:c4:00:99:40:be:05:ce:e6: c6:d8:a5:61:54:aa:a3:29:31:76:7b:ab:6e:2c:63:49:d8:37: 30:e9:4e:66:00:72:fd:c1:70:f0:1b:54:5b:9b:51:c9:44:c3: f8:83:87:aa:64:08:75:38:b9:3b:62:44:3a:8b:42:cf:55:62: 11:90:56:ed:d3:dd:0b:aa:65:fd:eb:34:ef:bd:35:1b:64:7c: 77:9b:84:fa -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7pRiWhJ+mbVpiasmiaxLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl ZjM2ZDEwHhcNMjYwMTAxMjIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDQ5MmQ1ZGRjOTkyNjFkN2NiYmU2OTZlZjIyOTJlMDdhMGY2YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqqtC7Juwibq7A32gD7XuG/dlelv B5xCCx7pql6BPYwA4wUmFjSZ1zaUYtmOaO9Zes/14SE2Dmhd81g5CKGT8uFYelMs 4clOatPbhFcckdBmUEdZAmZUA2b7tUsfq5omcldfk1w5aRnAisT4ZyO5ZjlJk7y/ JyCF52McaR89B6JTHtEyVd0lkgHX4+gNUtS/Xm413XeFdHaUnnIL3IwxhUUXHEFl xCy1I+BfbQrcl3sHG1sr1sW/jrmb58Toi8Xoaj8wriSHzUCxDtz28so+RbD/wqIP igmla0Gu9r7jj5XxlK1jS6O1MH0KeyUwN6WiylH3ddI4puFhYe2v6tOf7QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPRJLV3cmSYdfLvmlu8ikuB6D2r6MB8GA1UdIwQY MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt YjJjMGRmYThhMGUxLzEvOUVrdFhkeVpKaDE4dS1hVzd5S1M0SG9QYXZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuWWEAwQC uWW4AwQF1YcAMBQEAgACMA4DBQAqAgQwAwUDKgYeQDANBgkqhkiG9w0BAQsFAAOC AQEAWmwBk3AKqAoysvlFCKH5e631qf8OEo+F3sU32n8H8igY3Bk2IetKwMQDPBvR q4xoo/7o14C8AoRUt8YAhfAH0JCH7vmcCK38GfX/VwUjciwQB4EqE1WkwFUAU9XX 2lcZLOkbEMlB1aaGdpeoV9UnVs9igHPjI+GUuWiJRc4SrALmb+8ltThV1jIY+OQ5 4cWhh65zNaEyctSVvn0Uj5kshRV15jWGRdkr1jj/rsQAmUC+Bc7mxtilYVSqoykx dnurbixjSdg3MOlOZgBy/cFw8BtUW5tRyUTD+IOHqmQIdTi5O2JEOotCz1ViEZBW 7dPdC6pl/es07701G2R8d5uE+g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:35 2026 by rpki-client