This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/9w7Kj6Y4TzcjiLxoebGOBqeiv6o.roa File: 9w7Kj6Y4TzcjiLxoebGOBqeiv6o.roa (raw, json) Hash identifier: IRSlm8/yXdP2HnAVhTA3Uj2LoLNAvzsH2nS04J10/ys= Subject key identifier: F7:0E:CA:8F:A6:38:4F:37:23:88:BC:68:79:B1:8E:06:A7:A2:BF:AA Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454 Certificate serial: 019B797F383817D6ED11BAA6EE6D94677DEE Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/9w7Kj6Y4TzcjiLxoebGOBqeiv6o.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212772 IP address blocks: 45.156.136.0/22 maxlen: 24 46.243.228.0/22 maxlen: 24 92.255.56.0/24 maxlen: 24 92.255.68.0/22 maxlen: 24 92.255.84.0/24 maxlen: 24 94.140.14.0/23 maxlen: 24 185.113.28.0/22 maxlen: 24 217.72.12.0/22 maxlen: 24 2a10:50c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:38:38:17:d6:ed:11:ba:a6:ee:6d:94:67:7d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454 Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f70eca8fa6384f372388bc6879b18e06a7a2bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:c4:7f:16:ee:02:26:96:5c:76:95:fd:b3: 2c:64:79:5f:d1:a1:7c:25:8c:b0:92:95:5a:c6:b5: 4a:b3:47:8d:b3:42:1b:c7:8a:96:78:02:7f:d7:44: 7c:ad:fc:c9:b3:27:f5:de:90:25:53:32:80:f6:97: 5d:16:5f:18:a0:a6:fd:2a:ae:a7:2e:1d:39:81:08: f2:f2:fd:4d:52:ba:0a:ab:92:49:df:12:84:a5:1d: de:84:b6:e7:3b:e9:bd:6f:b2:68:97:08:a4:f3:7c: 92:08:61:b4:13:97:c2:49:16:35:1a:fc:3d:22:aa: 9c:bc:0a:e7:23:76:47:64:e5:89:b3:b9:0b:b7:8b: a0:33:fe:fb:a4:ec:1a:52:f7:38:c7:1c:db:c2:dd: 9d:2c:27:b5:f8:b8:45:ef:13:30:d4:9e:eb:cb:53: ba:16:0f:6d:e0:7b:7f:41:87:a1:db:27:f7:00:4d: f9:52:b1:46:fa:ed:5a:ed:45:12:9e:db:56:16:19: 2b:8f:6b:49:10:f3:db:25:8b:fa:87:09:ca:32:8c: d3:4d:bb:7b:d0:22:58:a1:6c:e2:05:a0:38:9c:5a: e2:8a:e4:a0:eb:da:14:ee:ad:74:67:4d:fd:36:0a: 9e:a2:c1:fe:36:48:2d:ab:1f:fe:4b:06:bf:77:d6: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0E:CA:8F:A6:38:4F:37:23:88:BC:68:79:B1:8E:06:A7:A2:BF:AA X509v3 Authority Key Identifier: keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/9w7Kj6Y4TzcjiLxoebGOBqeiv6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.136.0/22 46.243.228.0/22 92.255.56.0/24 92.255.68.0/22 92.255.84.0/24 94.140.14.0/23 185.113.28.0/22 217.72.12.0/22 IPv6: 2a10:50c0::/32 Signature Algorithm: sha256WithRSAEncryption 52:5a:87:0a:d5:54:c8:9b:eb:4d:79:2f:88:fd:68:e6:a0:6f: fd:5c:0c:b1:7f:c2:e5:3c:9e:14:49:e7:87:fa:e7:99:87:db: 2d:94:3a:40:38:2e:44:24:9f:e2:c3:41:b3:e8:63:21:87:24: 71:eb:ff:f5:8f:82:8d:22:c7:ba:c2:0a:64:65:ad:c7:70:13: 31:d1:d0:57:8a:22:fe:7c:ed:ac:fc:4e:0c:51:33:f2:ad:7f: 82:9c:13:e8:37:16:59:93:94:6f:b2:63:d7:a6:2e:cf:8a:4c: 37:15:b7:75:0b:84:e5:c6:76:8c:1f:09:f8:34:70:a0:01:ea: 9b:fc:88:79:b8:72:a6:98:b8:d0:c5:22:df:de:62:d6:75:2f: 95:c2:c9:83:94:41:d6:c3:b2:cc:13:49:27:c2:e2:a6:1a:7f: 54:5d:89:7b:b1:b1:dc:4c:f2:17:43:73:85:bb:b7:1f:74:67: c5:8e:31:1e:78:3d:14:49:af:a4:6c:ad:ae:25:d7:04:fd:74: d8:af:ba:d8:26:0b:0a:6e:f5:fc:ac:0e:f4:ff:02:36:f0:b8: ef:36:34:d4:b2:12:2d:b3:bb:e2:64:e0:5f:bc:1d:f2:e0:d6: b3:b1:c1:db:a8:9b:2b:a9:a0:13:83:a9:36:f3:a4:b3:fb:25: a3:9b:1c:9d -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt5fzg4F9btEbqm7m2UZ33uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzkxZGRlMmM5YmRlYTM2NmNlN2VjNmM1YTgwMGM1ZGE2 MzM0NTQwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzBlY2E4ZmE2Mzg0ZjM3MjM4OGJjNjg3OWIxOGUwNmE3YTJiZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsXEfxbuAiaWXHaV/bMsZHlf0aF8 JYywkpVaxrVKs0eNs0Ibx4qWeAJ/10R8rfzJsyf13pAlUzKA9pddFl8YoKb9Kq6n Lh05gQjy8v1NUroKq5JJ3xKEpR3ehLbnO+m9b7Jolwik83ySCGG0E5fCSRY1Gvw9 IqqcvArnI3ZHZOWJs7kLt4ugM/77pOwaUvc4xxzbwt2dLCe1+LhF7xMw1J7ry1O6 Fg9t4Ht/QYeh2yf3AE35UrFG+u1a7UUSnttWFhkrj2tJEPPbJYv6hwnKMozTTbt7 0CJYoWziBaA4nFriiuSg69oU7q10Z039NgqeosH+Nkgtqx/+Swa/d9aXTQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFPcOyo+mOE83I4i8aHmxjganor+qMB8GA1UdIwQY MBaAFFR5Hd4sm96jZs5+xsWoAMXaYzRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQt MThiMzRiZWE5YjA2LzEvOXc3S2o2WTRUemNqaUx4b2ViR09CcWVpdjZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQtMThiMzRiZWE5YjA2 LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCLZyIAwQC LvPkAwQAXP84AwQCXP9EAwQAXP9UAwQBXowOAwQCuXEcAwQC2UgMMA0EAgACMAcD BQAqEFDAMA0GCSqGSIb3DQEBCwUAA4IBAQBSWocK1VTIm+tNeS+I/WjmoG/9XAyx f8LlPJ4USeeH+ueZh9stlDpAOC5EJJ/iw0Gz6GMhhyRx6//1j4KNIse6wgpkZa3H cBMx0dBXiiL+fO2s/E4MUTPyrX+CnBPoNxZZk5RvsmPXpi7Pikw3Fbd1C4TlxnaM Hwn4NHCgAeqb/Ih5uHKmmLjQxSLf3mLWdS+VwsmDlEHWw7LME0knwuKmGn9UXYl7 sbHcTPIXQ3OFu7cfdGfFjjEeeD0USa+kbK2uJdcE/XTYr7rYJgsKbvX8rA70/wI2 8LjvNjTUshIts7viZOBfvB3y4NazscHbqJsrqaATg6k286Sz+yWjmxyd -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:13 2026 by rpki-client