This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/9ilhUlA3lpCZftvx0TWx7mVsejY.roa File: 9ilhUlA3lpCZftvx0TWx7mVsejY.roa (raw, json) Hash identifier: ZjkBQlt6KK1K36nUME0UUKqDE1w2NjmsYwlRnN8dL3Q= Subject key identifier: F6:29:61:52:50:37:96:90:99:7E:DB:F1:D1:35:B1:EE:65:6C:7A:36 Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7 Certificate serial: 019B76EB61D7B9CD70CA0FB1AB6608B26BEA Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/9ilhUlA3lpCZftvx0TWx7mVsejY.roa Signing time: Thu 01 Jan 2026 00:18:16 +0000 ROA not before: Thu 01 Jan 2026 00:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49435 IP address blocks: 31.47.224.0/21 maxlen: 24 151.237.248.0/21 maxlen: 24 185.108.184.0/22 maxlen: 24 188.94.112.0/21 maxlen: 24 2a02:2260::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.mft rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:61:d7:b9:cd:70:ca:0f:b1:ab:66:08:b2:6b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f629615250379690997edbf1d135b1ee656c7a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:55:46:fe:d1:b1:fd:79:5f:da:ba:da:50: 67:e0:1e:c1:6b:a8:94:64:71:f4:36:3f:1f:5d:bc: ea:31:d0:ad:c4:08:14:72:9f:3a:f3:4e:b5:ef:a2: c3:43:3c:c8:9c:e3:a5:ee:e9:ec:70:49:c4:14:7a: f3:b9:f5:d9:d2:67:94:71:21:ce:64:5b:43:ff:df: 27:cc:88:86:90:39:f9:76:34:d0:fc:a3:b4:43:b4: 2a:4b:0f:49:dd:fd:d1:8d:b2:35:98:7f:1d:73:21: e1:95:7a:5c:12:6e:bb:4f:f8:54:f2:c4:02:c9:49: c1:c1:a8:68:95:1e:db:9a:e5:84:69:ef:a5:1f:28: 7a:ec:f4:e0:16:59:3b:18:f7:d9:6e:11:3b:f9:7f: 9b:28:af:36:34:eb:88:c4:1b:fe:5c:97:65:55:45: e9:b7:1e:17:a2:aa:99:dd:4d:98:06:bd:b6:06:ff: 55:81:dd:f7:9a:1f:a9:df:75:4d:24:5f:fb:9e:36: cb:13:7f:3a:1a:3c:4b:bd:4d:66:0b:42:99:52:31: f0:87:74:70:e1:c5:21:53:e1:80:2f:cf:7b:ac:cf: ae:a3:1d:f1:14:2f:a4:be:51:82:27:7c:6a:cf:d8: 7f:0c:af:ce:4b:cf:e0:37:61:83:bb:ac:86:a6:4c: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:29:61:52:50:37:96:90:99:7E:DB:F1:D1:35:B1:EE:65:6C:7A:36 X509v3 Authority Key Identifier: keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/9ilhUlA3lpCZftvx0TWx7mVsejY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.224.0/21 151.237.248.0/21 185.108.184.0/22 188.94.112.0/21 IPv6: 2a02:2260::/32 Signature Algorithm: sha256WithRSAEncryption 8a:3e:45:ab:1e:0b:fd:4c:fd:c8:3b:df:25:c0:00:9e:df:e1: d4:b9:b7:49:24:ee:6d:7c:a9:e5:c7:e8:4c:6b:7f:d7:bb:5c: 6f:4f:5e:34:c2:02:56:fd:1e:83:d1:1d:ce:63:25:de:e9:ec: 62:20:a6:63:55:c2:1b:46:55:ee:0a:85:71:03:11:73:a5:64: 60:1e:c4:02:12:ef:ae:d4:ce:c7:e8:81:7c:48:24:07:a7:b9: d0:92:05:74:aa:22:a9:71:03:48:39:69:6f:53:0b:3a:d1:50: e1:5f:1b:86:91:da:d9:8d:38:2a:e2:d2:48:f7:8b:d1:bf:34: c5:59:09:49:e0:42:f1:b3:6d:b5:5a:54:a5:c6:15:a4:3f:0d: 31:64:44:1f:11:5d:86:90:25:c6:1e:04:43:fd:da:8c:5f:b5: a2:2d:71:64:e8:a1:f5:17:d3:bf:d8:6d:32:31:fd:4d:95:5f: 09:da:df:83:04:15:6f:fe:e1:e5:39:90:8f:d8:71:a1:f6:65: 11:bf:17:35:19:51:27:1a:14:23:7b:58:00:56:b8:6e:a1:46: 2d:59:8f:d3:a0:1e:c7:b7:52:61:02:7f:c8:9c:e6:04:65:57: 2d:b1:46:5b:6e:05:52:eb:ee:ba:e5:db:5f:d1:97:b3:a6:36: 0c:f4:9e:fa -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt262HXuc1wyg+xq2YIsmvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjAzZjYwYzJjNDg3YjU2YjNlZWYzZDNlZDY3OTEwMWU0 ODdkYjcwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjI5NjE1MjUwMzc5NjkwOTk3ZWRiZjFkMTM1YjFlZTY1NmM3YTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstxVRv7Rsf15X9q62lBn4B7Ba6iU ZHH0Nj8fXbzqMdCtxAgUcp86806176LDQzzInOOl7unscEnEFHrzufXZ0meUcSHO ZFtD/98nzIiGkDn5djTQ/KO0Q7QqSw9J3f3RjbI1mH8dcyHhlXpcEm67T/hU8sQC yUnBwaholR7bmuWEae+lHyh67PTgFlk7GPfZbhE7+X+bKK82NOuIxBv+XJdlVUXp tx4XoqqZ3U2YBr22Bv9Vgd33mh+p33VNJF/7njbLE386GjxLvU1mC0KZUjHwh3Rw 4cUhU+GAL897rM+uox3xFC+kvlGCJ3xqz9h/DK/OS8/gN2GDu6yGpkyAewIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPYpYVJQN5aQmX7b8dE1se5lbHo2MB8GA1UdIwQY MBaAFA6wP2DCxIe1az7vPT7WeRAeSH23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjBiOTctNDMwNy00ZWNmLWE5ODct MzY4NzEyNzc2ZjRjLzEvOWlsaFVsQTNscENaZnR2eDBUV3g3bVZzZWpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hYjBiOTctNDMwNy00ZWNmLWE5ODctMzY4NzEyNzc2ZjRj LzEvRHJBX1lNTEVoN1ZyUHU4OVB0WjVFQjVJZmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDHy/gAwQD l+34AwQCuWy4AwQDvF5wMA0EAgACMAcDBQAqAiJgMA0GCSqGSIb3DQEBCwUAA4IB AQCKPkWrHgv9TP3IO98lwACe3+HUubdJJO5tfKnlx+hMa3/Xu1xvT140wgJW/R6D 0R3OYyXe6exiIKZjVcIbRlXuCoVxAxFzpWRgHsQCEu+u1M7H6IF8SCQHp7nQkgV0 qiKpcQNIOWlvUws60VDhXxuGkdrZjTgq4tJI94vRvzTFWQlJ4ELxs221WlSlxhWk Pw0xZEQfEV2GkCXGHgRD/dqMX7WiLXFk6KH1F9O/2G0yMf1NlV8J2t+DBBVv/uHl OZCP2HGh9mURvxc1GVEnGhQje1gAVrhuoUYtWY/ToB7Ht1JhAn/InOYEZVctsUZb bgVS6+665dtf0ZezpjYM9J76 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:57 2026 by rpki-client