This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/9jxtrBZ24BvCO0-SQXkZpY2MT1w.roa File: 9jxtrBZ24BvCO0-SQXkZpY2MT1w.roa (raw, json) Hash identifier: 8bOhPMZyTgwp0gGxHAalkWKOgr9J3SV40Pjr84Zh1aw= Subject key identifier: F6:3C:6D:AC:16:76:E0:1B:C2:3B:4F:92:41:79:19:A5:8D:8C:4F:5C Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Certificate serial: 019B7C80452CE9692F20E76581E741BC6454 Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/9jxtrBZ24BvCO0-SQXkZpY2MT1w.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60592 IP address blocks: 91.207.188.0/24 maxlen: 24 91.207.189.0/24 maxlen: 24 185.28.192.0/24 maxlen: 24 185.28.193.0/24 maxlen: 24 185.28.194.0/24 maxlen: 24 185.38.108.0/24 maxlen: 24 185.38.109.0/24 maxlen: 24 185.38.110.0/24 maxlen: 24 185.38.111.0/24 maxlen: 24 185.82.212.0/24 maxlen: 24 185.82.213.0/24 maxlen: 24 185.82.214.0/24 maxlen: 24 2a00:a160::/32 maxlen: 32 2a00:fea0::/32 maxlen: 32 2a03:6920::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:45:2c:e9:69:2f:20:e7:65:81:e7:41:bc:64:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38 Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f63c6dac1676e01bc23b4f92417919a58d8c4f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:d1:d7:e0:2a:a0:49:b6:4d:f8:91:87:ba: c7:5c:5d:4d:9f:cb:f3:a8:6e:0d:0f:39:34:dc:7c: c3:4a:fe:07:cb:da:44:d2:71:d8:89:14:af:e6:36: ab:de:fe:2a:bf:1c:27:75:7b:0f:85:a0:75:1a:4e: 67:1f:19:61:1a:71:ea:b2:a6:03:d2:62:d9:2d:2c: 3f:08:9f:ea:24:58:1a:85:a0:b8:e2:dc:24:09:59: c7:02:64:8e:7b:cd:fb:1a:8e:e4:1c:24:1d:92:7f: 28:20:4a:2f:a9:b5:6e:6d:4d:ef:dd:27:c9:35:b3: 4c:13:87:79:d3:5e:b1:90:89:f8:a5:14:e3:25:92: 86:34:0c:c5:b1:e1:ed:56:b4:72:fa:4f:12:48:31: eb:e2:8c:e6:dd:2b:d8:b1:c7:8a:a6:6d:e3:73:60: a7:26:5e:11:c5:c1:41:c2:a1:37:d3:26:20:36:92: d7:1a:be:f5:cb:75:f7:43:13:bc:81:86:2b:3e:9d: f3:3d:6e:3e:a8:26:b7:0c:f0:87:cb:12:b4:ce:c3: b8:ac:bb:a2:d0:fd:8f:21:6a:3e:38:18:5a:10:44: 13:71:a8:68:43:9b:06:69:3a:b6:40:92:f3:86:cc: 26:ed:3e:f9:12:d6:a9:2a:a2:c4:86:d4:ff:cb:5a: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:6D:AC:16:76:E0:1B:C2:3B:4F:92:41:79:19:A5:8D:8C:4F:5C X509v3 Authority Key Identifier: keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/9jxtrBZ24BvCO0-SQXkZpY2MT1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.188.0/23 185.28.192.0-185.28.194.255 185.38.108.0/22 185.82.212.0-185.82.214.255 IPv6: 2a00:a160::/32 2a00:fea0::/32 2a03:6920::/32 Signature Algorithm: sha256WithRSAEncryption 35:c0:d8:0e:62:10:f7:e8:8b:48:91:81:29:a1:25:56:b6:13: 1d:b6:40:d5:29:9d:b2:f6:86:24:af:e7:c3:79:d3:26:4f:81: 11:3f:12:f9:b0:34:74:1e:21:c1:e8:8b:11:7c:7f:d0:5d:4b: 2d:b7:80:29:07:30:a0:a9:8e:b9:61:32:d4:41:d6:f7:26:2d: 27:ca:45:52:2d:aa:2e:61:ca:df:6d:30:da:50:82:6c:49:85: d2:f3:59:84:83:a0:23:8c:21:aa:c9:ba:d0:d7:de:86:45:ae: 8d:a5:67:d2:fd:13:0a:cf:36:3d:a0:02:a7:b6:1a:3c:2b:c2: 30:52:f8:0b:7a:3b:e7:cc:8f:30:38:d6:2d:5b:d6:c4:bf:c3: 89:39:c7:2f:5e:96:d3:36:0f:df:00:d0:d3:f7:25:7d:b5:68: 5a:24:36:c3:f9:07:7a:48:17:a5:a2:02:be:15:43:89:da:bc: c7:2d:4a:5c:f9:87:ca:bc:2f:94:4b:22:bc:9e:20:17:7d:f2: 91:0a:af:e3:1e:21:69:fb:13:cb:b1:98:05:eb:a3:63:3c:5e: 96:9f:60:ad:19:62:92:da:58:64:15:e7:fc:30:86:9c:37:d0: 3c:8e:cc:35:36:fc:a3:a5:12:7f:56:aa:b2:8f:d8:da:6c:ac: 36:75:7d:32 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt8gEUs6WkvIOdlgedBvGRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OTg4OWQ5ZGU0ZjA3MDE0YmViMmMwYTMxMmNkNzM2NTJh M2ZjMzgwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjNjNmRhYzE2NzZlMDFiYzIzYjRmOTI0MTc5MTlhNThkOGM0ZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc3R1+AqoEm2TfiRh7rHXF1Nn8vz qG4NDzk03HzDSv4Hy9pE0nHYiRSv5jar3v4qvxwndXsPhaB1Gk5nHxlhGnHqsqYD 0mLZLSw/CJ/qJFgahaC44twkCVnHAmSOe837Go7kHCQdkn8oIEovqbVubU3v3SfJ NbNME4d5016xkIn4pRTjJZKGNAzFseHtVrRy+k8SSDHr4ozm3SvYsceKpm3jc2Cn Jl4RxcFBwqE30yYgNpLXGr71y3X3QxO8gYYrPp3zPW4+qCa3DPCHyxK0zsO4rLui 0P2PIWo+OBhaEEQTcahoQ5sGaTq2QJLzhswm7T75EtapKqLEhtT/y1ppBwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPY8bawWduAbwjtPkkF5GaWNjE9cMB8GA1UdIwQY MBaAFAeYidneTwcBS+ssCjEs1zZSo/w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEt ZmQ4ZDI1YTI2M2QyLzEvOWp4dHJCWjI0QnZDTzAtU1FYa1pwWTJNVDF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEtZmQ4ZDI1YTI2M2Qy LzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAuBAIAATAoAwQBW8+8MAwD BAa5HMADBAC5HMIDBAK5JmwwDAMEArlS1AMEALlS1jAbBAIAAjAVAwUAKgChYAMF ACoA/qADBQAqA2kgMA0GCSqGSIb3DQEBCwUAA4IBAQA1wNgOYhD36ItIkYEpoSVW thMdtkDVKZ2y9oYkr+fDedMmT4ERPxL5sDR0HiHB6IsRfH/QXUstt4ApBzCgqY65 YTLUQdb3Ji0nykVSLaouYcrfbTDaUIJsSYXS81mEg6AjjCGqybrQ196GRa6NpWfS /RMKzzY9oAKntho8K8IwUvgLejvnzI8wONYtW9bEv8OJOccvXpbTNg/fANDT9yV9 tWhaJDbD+Qd6SBelogK+FUOJ2rzHLUpc+YfKvC+USyK8niAXffKRCq/jHiFp+xPL sZgF66NjPF6Wn2CtGWKS2lhkFef8MIacN9A8jsw1NvyjpRJ/Vqqyj9jabKw2dX0y -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:22 2026 by rpki-client