This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/1-9nncl2Rz3YTcRI0RsbvVm3atY8.roa File: 1-9nncl2Rz3YTcRI0RsbvVm3atY8.roa (raw, json) Hash identifier: fiUr+kWvE5jBfhGIbu/5gFTDAF5L/xbwDDasP7mBO+8= Subject key identifier: FB:D9:E7:72:5D:91:CF:76:13:71:12:34:46:C6:EF:56:6D:DA:B5:8F Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f Certificate serial: 019B9C07DB5D4D4C2505AA127DBCA447DE6B Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/1-9nncl2Rz3YTcRI0RsbvVm3atY8.roa Signing time: Thu 08 Jan 2026 05:15:19 +0000 ROA not before: Thu 08 Jan 2026 05:15:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213269 IP address blocks: 86.111.212.0/24 maxlen: 24 109.204.128.0/21 maxlen: 21 109.204.132.0/22 maxlen: 22 109.204.136.0/21 maxlen: 21 109.204.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:07:db:5d:4d:4c:25:05:aa:12:7d:bc:a4:47:de:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f Validity Not Before: Jan 8 05:15:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd9e7725d91cf761371123446c6ef566ddab58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:3f:46:64:a7:31:79:f1:50:1c:1a:31:c1: f5:59:06:92:fc:a8:b5:13:e8:32:3b:0c:c9:e2:cb: 02:54:4b:1e:04:e4:3d:e5:91:f6:5f:38:79:67:54: 15:34:f6:d8:02:b7:4e:f7:58:d0:77:7a:51:28:b0: 58:b0:e5:64:3e:01:3b:c0:6a:da:7f:1e:bb:af:1b: 92:65:1a:76:b7:98:9e:c1:39:15:d7:5f:ac:40:d7: 98:2b:6f:9c:0c:49:72:2b:de:93:b0:88:be:c2:bd: 88:86:e1:b5:cf:e2:44:d4:4a:8b:d9:b2:66:57:19: ee:9b:87:6b:a4:fc:52:2c:8c:52:b6:51:31:01:f3: 99:b0:49:a2:45:7a:39:1d:ca:30:5d:10:6f:a8:a4: 4f:e2:0b:2c:a1:3f:ae:d2:5a:37:c7:60:e7:3e:4f: af:2d:27:27:2a:9b:d4:1e:97:7f:b2:ff:c7:d7:80: a1:57:4a:22:0b:27:69:73:e3:ad:48:4a:d6:d0:43: bb:1f:42:96:0e:96:32:11:0a:71:91:40:a1:58:9c: 8c:ba:46:a3:d3:07:6d:7b:7c:62:07:60:28:83:87: d8:a9:86:90:a4:c4:ea:94:48:ab:e2:a5:0e:e2:13: 95:87:5e:e7:88:9f:da:75:af:6b:82:1f:19:9c:28: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D9:E7:72:5D:91:CF:76:13:71:12:34:46:C6:EF:56:6D:DA:B5:8F X509v3 Authority Key Identifier: keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/1-9nncl2Rz3YTcRI0RsbvVm3atY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.212.0/24 109.204.128.0/19 Signature Algorithm: sha256WithRSAEncryption 18:86:ad:99:da:a9:21:29:d8:3e:a2:b1:ef:e8:38:b7:63:bb: 7a:1c:d5:e1:d2:55:bd:87:b8:e1:19:60:72:a2:2f:a4:2e:28: c1:ba:32:d9:cc:27:12:15:3f:85:ac:ad:a5:4f:15:49:cb:be: a9:32:e5:d9:5d:58:a2:44:30:be:f6:38:b4:bb:70:ff:b7:f7: 6a:e7:47:18:8c:81:15:41:1e:00:2f:93:44:81:6a:57:f4:79: 38:5d:b8:4c:9e:93:d7:03:4f:d5:62:fa:91:87:02:1d:24:45: 20:28:af:e3:32:20:aa:d3:ca:73:8b:79:31:68:10:32:aa:16: fd:1d:21:6b:0f:16:63:76:20:5d:88:1a:72:f0:0e:27:3a:77: 6e:fb:4f:4d:b1:20:a3:80:a2:39:87:1d:66:8d:fa:e8:a6:40: 1d:4a:27:3b:03:47:a9:1d:2c:a5:cd:87:62:04:22:30:4d:1d: ed:0c:cd:44:c3:43:77:3b:6d:2d:5a:90:9b:6b:69:5f:e0:c5: cd:8d:fa:9b:08:61:93:e2:07:86:0e:10:a7:a5:c2:4a:02:71: 36:5d:d8:69:65:1e:59:d8:15:ce:ea:f9:67:9d:0e:f8:e8:02: 89:4d:61:c4:f5:27:5f:16:e4:82:32:01:a3:e2:80:d7:0a:c6: 80:77:5f:d2 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZucB9tdTUwlBaoSfbykR95rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWEzM2U3ZTFjMjM5NGM2NjNiZTg1ZDczYjllZTM0Yjc2 OTQ5NWYwHhcNMjYwMTA4MDUxNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQ5ZTc3MjVkOTFjZjc2MTM3MTEyMzQ0NmM2ZWY1NjZkZGFiNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwU/RmSnMXnxUBwaMcH1WQaS/Ki1 E+gyOwzJ4ssCVEseBOQ95ZH2Xzh5Z1QVNPbYArdO91jQd3pRKLBYsOVkPgE7wGra fx67rxuSZRp2t5iewTkV11+sQNeYK2+cDElyK96TsIi+wr2IhuG1z+JE1EqL2bJm Vxnum4drpPxSLIxStlExAfOZsEmiRXo5HcowXRBvqKRP4gssoT+u0lo3x2DnPk+v LScnKpvUHpd/sv/H14ChV0oiCydpc+OtSErW0EO7H0KWDpYyEQpxkUChWJyMukaj 0wdte3xiB2Aog4fYqYaQpMTqlEir4qUO4hOVh17niJ/ada9rgh8ZnChDBwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPvZ53Jdkc92E3ESNEbG71Zt2rWPMB8GA1UdIwQY MBaAFHaqM+fhwjlMZjvoXXO57jS3aUlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTct NzRkNGMyYzViNjk0LzEvMS05bm5jbDJSejNZVGNSSTBSc2J2Vm0zYXRZOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2YvMGJjOWU2LTQxOTgtNDA2Ny05NTk3LTc0ZDRjMmM1YjY5 NC8xL2Rxb3o1LUhDT1V4bU8taGRjN251TkxkcFNWOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFZv1AME BW3MgDANBgkqhkiG9w0BAQsFAAOCAQEAGIatmdqpISnYPqKx7+g4t2O7ehzV4dJV vYe44RlgcqIvpC4owboy2cwnEhU/haytpU8VScu+qTLl2V1YokQwvvY4tLtw/7f3 audHGIyBFUEeAC+TRIFqV/R5OF24TJ6T1wNP1WL6kYcCHSRFICiv4zIgqtPKc4t5 MWgQMqoW/R0haw8WY3YgXYgacvAOJzp3bvtPTbEgo4CiOYcdZo366KZAHUonOwNH qR0spc2HYgQiME0d7QzNRMNDdzttLVqQm2tpX+DFzY36mwhhk+IHhg4Qp6XCSgJx Nl3YaWUeWdgVzur5Z50O+OgCiU1hxPUnXxbkgjIBo+KA1wrGgHdf0g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:55 2026 by rpki-client