This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9I6L8TRP3qtz3CYYh3ww5T352z8.roa File: 9I6L8TRP3qtz3CYYh3ww5T352z8.roa (raw, json) Hash identifier: 1gf4QeHFa9dKbCRpBcjsV/snv/t5NnmR9Bj8FONPgak= Subject key identifier: F4:8E:8B:F1:34:4F:DE:AB:73:DC:26:18:87:7C:30:E5:3D:F9:DB:3F Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED3ADC7D40ECEFFE1309420F0AB107 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9I6L8TRP3qtz3CYYh3ww5T352z8.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205964 IP address blocks: 89.42.8.0/24 maxlen: 24 89.43.32.0/24 maxlen: 24 93.118.38.0/24 maxlen: 24 94.176.106.0/24 maxlen: 24 193.36.76.0/24 maxlen: 24 209.35.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3a:dc:7d:40:ec:ef:fe:13:09:42:0f:0a:b1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f48e8bf1344fdeab73dc2618877c30e53df9db3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:8c:d1:6e:cc:19:d0:b4:4d:75:e8:8e:92: 45:f4:50:66:ff:e7:96:72:da:cd:2d:3b:46:c3:28: 93:65:ea:1d:99:57:72:02:9a:44:cc:8f:67:e8:8f: a1:69:82:fc:23:1f:e3:f0:f8:96:e7:96:05:87:93: 14:6b:dd:af:73:e2:aa:33:f6:5b:fc:51:57:6a:17: c3:1b:7b:27:7e:f8:e0:7f:bc:45:0e:5e:aa:48:bc: d1:65:71:d5:cd:62:89:3c:9b:44:ca:35:61:bf:a6: bd:ee:5f:96:6b:9f:97:1b:47:b7:dd:45:50:67:c2: 57:0a:bc:1f:7a:00:2e:df:46:a0:03:37:c5:08:06: 4f:ad:07:a0:16:de:62:c3:8e:b1:40:a7:df:21:58: cc:55:c2:96:7e:4b:14:ef:5a:0e:43:2f:19:16:2e: 3d:a4:a2:93:18:22:d7:a2:0a:21:cb:81:a9:ca:df: 71:55:93:66:4e:e4:63:fb:80:66:e0:73:99:d4:c9: 5b:19:3f:d3:13:a2:30:7b:d5:70:ef:44:ed:cb:16: e9:e5:e8:3d:94:46:cd:63:03:51:70:87:38:fd:2b: bc:11:27:2e:4a:9c:ea:18:df:36:be:6a:46:4f:be: d5:85:7a:7d:eb:20:0c:a9:d6:4b:99:0e:b6:4f:10: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8E:8B:F1:34:4F:DE:AB:73:DC:26:18:87:7C:30:E5:3D:F9:DB:3F X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9I6L8TRP3qtz3CYYh3ww5T352z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.8.0/24 89.43.32.0/24 93.118.38.0/24 94.176.106.0/24 193.36.76.0/24 209.35.99.0/24 Signature Algorithm: sha256WithRSAEncryption 60:85:cf:15:a5:8c:fd:95:f3:f5:72:9e:7d:53:70:a7:5d:f7: 23:b8:b8:cf:11:cc:51:3c:70:21:2f:cf:c2:f4:f2:c1:bd:0c: 62:c2:c5:2c:ab:5c:23:53:c9:91:36:9a:06:8f:56:54:a1:70: 49:56:a6:5d:97:f3:71:61:40:08:61:da:f1:5a:2b:2a:a8:2e: f6:ec:23:1b:01:2e:f7:32:3b:77:9f:0d:35:3d:45:14:b8:70: 76:7a:f3:bb:00:3f:1d:80:63:d4:09:6a:d2:91:3c:7c:d0:53: 4a:a6:2e:cf:28:ac:79:c2:42:4f:50:7e:f0:e4:68:b6:bd:d9: 29:e9:b9:b7:bc:bf:c7:d8:36:0f:03:1d:27:33:9c:5f:82:20: 1b:f8:2b:1e:9b:89:f8:b5:68:f8:21:67:b8:b6:cf:ab:01:e4: f8:17:87:35:f9:7e:b0:d6:17:3c:e1:80:fc:b0:e0:84:c8:27: 88:b6:9a:a7:25:fd:71:bb:27:ea:42:f4:1b:87:6b:3e:28:e4: af:2b:f3:60:05:65:55:ae:ef:13:80:b2:6f:30:3b:2e:35:b5: 0f:72:d3:a8:94:c8:94:d2:b2:f4:d1:fc:0b:db:12:d1:0a:9a: 84:f4:f9:17:71:e7:cc:93:46:f5:54:05:bd:9c:62:0a:93:4f: 22:50:0f:9b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt57TrcfUDs7/4TCUIPCrEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDhlOGJmMTM0NGZkZWFiNzNkYzI2MTg4NzdjMzBlNTNkZjlkYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+KM0W7MGdC0TXXojpJF9FBm/+eW ctrNLTtGwyiTZeodmVdyAppEzI9n6I+haYL8Ix/j8PiW55YFh5MUa92vc+KqM/Zb /FFXahfDG3snfvjgf7xFDl6qSLzRZXHVzWKJPJtEyjVhv6a97l+Wa5+XG0e33UVQ Z8JXCrwfegAu30agAzfFCAZPrQegFt5iw46xQKffIVjMVcKWfksU71oOQy8ZFi49 pKKTGCLXogohy4Gpyt9xVZNmTuRj+4Bm4HOZ1MlbGT/TE6Iwe9Vw70Ttyxbp5eg9 lEbNYwNRcIc4/Su8EScuSpzqGN82vmpGT77VhXp96yAMqdZLmQ62TxC+XwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPSOi/E0T96rc9wmGId8MOU9+ds/MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOUk2TDhUUlAzcXR6M0NZWWgzd3c1VDM1Mno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWSoIAwQA WSsgAwQAXXYmAwQAXrBqAwQAwSRMAwQA0SNjMA0GCSqGSIb3DQEBCwUAA4IBAQBg hc8VpYz9lfP1cp59U3CnXfcjuLjPEcxRPHAhL8/C9PLBvQxiwsUsq1wjU8mRNpoG j1ZUoXBJVqZdl/NxYUAIYdrxWisqqC727CMbAS73Mjt3nw01PUUUuHB2evO7AD8d gGPUCWrSkTx80FNKpi7PKKx5wkJPUH7w5Gi2vdkp6bm3vL/H2DYPAx0nM5xfgiAb +Csem4n4tWj4IWe4ts+rAeT4F4c1+X6w1hc84YD8sOCEyCeItpqnJf1xuyfqQvQb h2s+KOSvK/NgBWVVru8TgLJvMDsuNbUPctOolMiU0rL00fwL2xLRCpqE9PkXcefM k0b1VAW9nGIKk08iUA+b -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:33 2026 by rpki-client