This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/kSI4irkD9U8KDXqCeEKiZkl6aR4.roa File: kSI4irkD9U8KDXqCeEKiZkl6aR4.roa (raw, json) Hash identifier: PoZR+wKPBBgyzuCqmdDQdwcuOsR3JlozNGdHHFlennk= Subject key identifier: 91:22:38:8A:B9:03:F5:4F:0A:0D:7A:82:78:42:A2:66:49:7A:69:1E Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5 Certificate serial: 019B79108541568B7B4C81550F895F81C809 Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/kSI4irkD9U8KDXqCeEKiZkl6aR4.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8387 IP address blocks: 46.17.224.0/21 maxlen: 24 92.61.208.0/20 maxlen: 24 185.49.176.0/22 maxlen: 24 193.162.45.0/24 maxlen: 24 212.31.64.0/19 maxlen: 24 212.166.96.0/19 maxlen: 24 212.166.108.0/24 maxlen: 24 212.166.115.0/24 maxlen: 24 212.166.122.0/23 maxlen: 23 2001:9d0::/32 maxlen: 48 2a10:f8c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:85:41:56:8b:7b:4c:81:55:0f:89:5f:81:c8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5 Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9122388ab903f54f0a0d7a827842a266497a691e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:70:42:bd:7e:8a:38:97:e4:ed:55:59:22: 4e:be:4c:dc:5c:e7:1f:ca:50:3e:89:c4:af:21:1d: a3:41:c0:bf:f4:80:ca:08:66:d3:bc:53:fc:af:e6: 66:a1:70:de:7f:68:81:ca:fb:c1:a9:77:58:a0:11: f9:3a:2d:a5:d7:0d:52:85:eb:b2:e6:d2:de:b2:22: 5f:96:3f:93:fe:9e:4c:b3:c3:57:26:02:ac:44:ea: b2:0c:1d:42:02:18:b6:15:10:08:20:51:28:54:28: 14:38:a5:11:46:e5:db:5e:a5:46:66:10:17:06:37: 63:34:96:b6:63:da:a8:d4:8e:07:35:01:c6:fb:0d: 7c:05:52:c8:13:b4:b2:e6:e6:a6:2a:ce:4c:54:97: a5:0e:fb:23:6a:5d:87:82:f8:8c:7d:19:1b:a4:a3: d1:54:a3:4c:01:cc:28:29:a5:da:db:54:05:ee:90: b5:b9:4c:e5:eb:f2:4d:bd:d4:da:6e:fb:d3:a9:8e: 1f:6d:99:84:77:a2:c6:c8:c4:9e:bc:66:94:94:2b: 47:ae:7e:42:fe:fb:c9:dc:30:9a:25:37:7b:11:74: 92:6c:b0:05:89:f7:9d:2c:c9:df:3d:a9:d3:f4:f4: 99:5a:a6:27:50:f1:c9:1e:8a:eb:c0:db:88:eb:99: 46:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:22:38:8A:B9:03:F5:4F:0A:0D:7A:82:78:42:A2:66:49:7A:69:1E X509v3 Authority Key Identifier: keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/kSI4irkD9U8KDXqCeEKiZkl6aR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.224.0/21 92.61.208.0/20 185.49.176.0/22 193.162.45.0/24 212.31.64.0/19 212.166.96.0/19 IPv6: 2001:9d0::/32 2a10:f8c0::/29 Signature Algorithm: sha256WithRSAEncryption 88:e1:62:42:d9:63:6a:ab:fc:b6:58:f2:10:34:83:54:95:13: a3:cd:5f:0d:05:4a:8d:03:e3:da:b3:80:07:c4:5c:a0:30:fb: 09:55:a2:b4:67:00:87:d4:a1:90:62:7e:ca:47:c3:cc:99:ee: 74:14:3f:13:37:a9:89:5d:9a:74:5e:a9:51:67:dd:45:b0:ed: 11:10:a9:f4:85:af:58:14:f0:6a:43:fc:a0:68:c3:1b:67:f5: 82:b1:8c:b7:5f:6a:c2:c1:9a:ff:d8:a8:1a:91:37:06:66:94: 23:9d:4f:99:6d:fe:38:1d:ca:8b:de:95:e1:08:4b:cf:76:3c: 23:3b:78:65:8c:74:78:00:7d:93:79:f8:e5:23:0a:e5:ae:ef: 71:84:78:1b:99:fa:df:16:32:f8:78:32:e3:5e:f6:84:7c:0b: 8c:63:f6:fc:9e:3b:82:65:49:a0:14:88:01:a4:30:83:d9:14: b1:39:fe:67:12:96:25:ca:9c:2c:67:9d:15:1f:5a:6e:0d:14: 20:05:81:25:9e:a9:c8:bc:d3:ee:f2:26:57:cc:79:d4:3b:ba: 95:11:37:ba:7f:17:c8:2b:7c:35:35:35:e7:07:77:13:3f:82: 67:8a:c5:36:1b:9c:94:c6:18:25:00:94:b0:73:c9:19:99:bc: d8:f6:5d:65 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt5EIVBVot7TIFVD4lfgcgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2JhZGM3ODUzYjA1MTAwYTZiMjI0ZGRjZWZjMThlMmU3 ZDNkZDUwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTIyMzg4YWI5MDNmNTRmMGEwZDdhODI3ODQyYTI2NjQ5N2E2OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVVwQr1+ijiX5O1VWSJOvkzcXOcf ylA+icSvIR2jQcC/9IDKCGbTvFP8r+ZmoXDef2iByvvBqXdYoBH5Oi2l1w1Sheuy 5tLesiJflj+T/p5Ms8NXJgKsROqyDB1CAhi2FRAIIFEoVCgUOKURRuXbXqVGZhAX BjdjNJa2Y9qo1I4HNQHG+w18BVLIE7Sy5uamKs5MVJelDvsjal2HgviMfRkbpKPR VKNMAcwoKaXa21QF7pC1uUzl6/JNvdTabvvTqY4fbZmEd6LGyMSevGaUlCtHrn5C /vvJ3DCaJTd7EXSSbLAFifedLMnfPanT9PSZWqYnUPHJHorrwNuI65lGSQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFJEiOIq5A/VPCg16gnhComZJemkeMB8GA1UdIwQY MBaAFAY7rceFOwUQCmsiTdzvwY4ufT3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYt YTIzNzQ0NGFmODI5LzEva1NJNGlya0Q5VThLRFhxQ2VFS2laa2w2YVI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYtYTIzNzQ0NGFmODI5 LzEvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQDLhHgAwQE XD3QAwQCuTGwAwQAwaItAwQF1B9AAwQF1KZgMBQEAgACMA4DBQAgAQnQAwUDKhD4 wDANBgkqhkiG9w0BAQsFAAOCAQEAiOFiQtljaqv8tljyEDSDVJUTo81fDQVKjQPj 2rOAB8RcoDD7CVWitGcAh9ShkGJ+ykfDzJnudBQ/EzepiV2adF6pUWfdRbDtERCp 9IWvWBTwakP8oGjDG2f1grGMt19qwsGa/9ioGpE3BmaUI51PmW3+OB3Ki96V4QhL z3Y8Izt4ZYx0eAB9k3n45SMK5a7vcYR4G5n63xYy+Hgy4172hHwLjGP2/J47gmVJ oBSIAaQwg9kUsTn+ZxKWJcqcLGedFR9abg0UIAWBJZ6pyLzT7vImV8x51Du6lRE3 un8XyCt8NTU15wd3Ez+CZ4rFNhuclMYYJQCUsHPJGZm82PZdZQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:42 2026 by rpki-client