This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/xET4g9Q22br6M_aAIvnYf8vNiW4.roa File: xET4g9Q22br6M_aAIvnYf8vNiW4.roa (raw, json) Hash identifier: Co0dW764z3RfUQJ68TAOxwF+Vuab9DVTLXdcNmyxXW8= Subject key identifier: C4:44:F8:83:D4:36:D9:BA:FA:33:F6:80:22:F9:D8:7F:CB:CD:89:6E Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02 Certificate serial: 019B797E4CC5D7A02F2CAC965CF4CA7A7229 Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/xET4g9Q22br6M_aAIvnYf8vNiW4.roa Signing time: Thu 01 Jan 2026 12:17:58 +0000 ROA not before: Thu 01 Jan 2026 12:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43456 IP address blocks: 185.93.172.0/24 maxlen: 24 185.164.48.0/24 maxlen: 24 185.164.49.0/24 maxlen: 24 185.164.50.0/24 maxlen: 24 185.164.51.0/24 maxlen: 24 185.171.16.0/24 maxlen: 24 185.171.17.0/24 maxlen: 24 185.171.18.0/24 maxlen: 24 185.171.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4c:c5:d7:a0:2f:2c:ac:96:5c:f4:ca:7a:72:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02 Validity Not Before: Jan 1 12:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c444f883d436d9bafa33f68022f9d87fcbcd896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:62:ba:fd:5f:cb:41:eb:b2:5a:20:fd:54: ac:fd:c5:25:3d:15:a6:68:b1:b8:5b:a8:33:44:34: 2e:64:a3:6a:1b:01:58:5a:03:64:d1:d6:e1:3a:46: 6b:99:09:b6:39:d5:3f:df:09:c8:5f:f6:c2:d7:cd: 95:ef:de:79:aa:18:01:9c:a4:92:2f:c3:79:b3:59: c9:a9:0e:10:b4:17:d3:41:f7:14:ca:29:04:ec:5f: 73:c2:29:d9:d5:ff:9c:d5:1c:41:65:97:48:19:be: cd:89:7b:43:2c:b6:26:f3:26:34:54:6b:e5:bd:a3: 1c:7f:0f:e3:8e:0b:95:e3:93:13:7d:c6:3b:ef:3e: 71:f2:39:76:d7:2f:30:f7:46:5e:8d:f7:85:73:6f: 4e:56:ad:06:c2:dd:ce:4f:97:8b:ea:ca:28:29:e8: 26:76:76:f4:fe:29:e9:3b:c3:7f:c6:b5:e3:2f:bd: 98:89:ba:ef:63:4c:bc:69:5e:d6:d9:a4:32:d1:82: c9:03:d8:c7:65:82:54:a6:ef:86:21:8f:1f:18:f9: b7:17:88:fa:6c:24:0e:3f:97:7a:ac:00:3b:a0:13: 5a:f3:4a:e4:17:58:2c:bf:0b:ef:ad:48:7c:3e:fa: 15:20:24:cf:fc:66:6c:1e:53:e4:1e:ca:80:cf:f6: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:44:F8:83:D4:36:D9:BA:FA:33:F6:80:22:F9:D8:7F:CB:CD:89:6E X509v3 Authority Key Identifier: keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/xET4g9Q22br6M_aAIvnYf8vNiW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.172.0/24 185.164.48.0/22 185.171.16.0/22 Signature Algorithm: sha256WithRSAEncryption a5:2d:7c:2d:7f:7b:9f:4d:cd:8c:08:08:7e:ed:75:de:6b:1e: 49:1c:a5:3e:84:4f:db:e7:b3:7f:cc:48:f5:c0:d8:ee:93:66: 3d:08:ed:51:a7:b1:ec:30:e8:b8:de:b2:54:1e:62:d3:42:2e: 15:ab:5b:e8:a8:88:c3:4e:a3:7c:ae:a6:63:93:88:f7:ac:27: e1:56:fc:23:f9:b9:65:06:09:df:fb:4a:a9:af:d8:7a:98:f0: a7:d6:50:bd:75:e7:55:97:7a:4b:80:fe:e9:2b:42:0d:57:89: 95:ec:11:bb:51:75:37:86:45:81:6a:51:53:64:a7:61:22:ec: 44:db:a6:19:56:77:58:ef:2f:94:2d:3b:be:37:35:41:4e:ed: 9c:5f:b8:c3:88:ee:d6:1f:51:41:1e:55:ca:96:82:a2:06:22: 5a:d3:97:c2:99:39:43:4c:8e:57:8b:5f:15:d5:39:84:86:96: 35:21:59:c1:8f:52:f1:6f:58:3f:18:d2:6e:44:41:86:ee:e5: 25:fb:a7:7e:a7:51:86:c7:b9:79:04:97:29:4d:e5:18:ae:be: 83:5e:4c:81:c1:e8:3e:9b:13:cb:04:a4:77:7a:2a:da:5e:a8: 81:40:86:d8:90:44:5d:bd:2c:d5:c8:87:cd:a4:e8:71:a1:5f: ca:24:b6:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fkzF16AvLKyWXPTKenIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NzczZDczM2QxODQ1YzQxZDNmOWEzNjJiNTViNzRlNjg2 ZjljMDIwHhcNMjYwMTAxMTIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDQ0Zjg4M2Q0MzZkOWJhZmEzM2Y2ODAyMmY5ZDg3ZmNiY2Q4OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28Ziuv1fy0Hrslog/VSs/cUlPRWm aLG4W6gzRDQuZKNqGwFYWgNk0dbhOkZrmQm2OdU/3wnIX/bC182V7955qhgBnKSS L8N5s1nJqQ4QtBfTQfcUyikE7F9zwinZ1f+c1RxBZZdIGb7NiXtDLLYm8yY0VGvl vaMcfw/jjguV45MTfcY77z5x8jl21y8w90ZejfeFc29OVq0Gwt3OT5eL6sooKegm dnb0/inpO8N/xrXjL72YibrvY0y8aV7W2aQy0YLJA9jHZYJUpu+GIY8fGPm3F4j6 bCQOP5d6rAA7oBNa80rkF1gsvwvvrUh8PvoVICTP/GZsHlPkHsqAz/bIgQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMRE+IPUNtm6+jP2gCL52H/LzYluMB8GA1UdIwQY MBaAFNl3PXM9GEXEHT+aNitVt05ob5wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMt MDFhMjlmNWY2ZGRlLzEveEVUNGc5UTIyYnI2TV9hQUl2bllmOHZOaVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMtMDFhMjlmNWY2ZGRl LzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuV2sAwQC uaQwAwQCuasQMA0GCSqGSIb3DQEBCwUAA4IBAQClLXwtf3ufTc2MCAh+7XXeax5J HKU+hE/b57N/zEj1wNjuk2Y9CO1Rp7HsMOi43rJUHmLTQi4Vq1voqIjDTqN8rqZj k4j3rCfhVvwj+bllBgnf+0qpr9h6mPCn1lC9dedVl3pLgP7pK0INV4mV7BG7UXU3 hkWBalFTZKdhIuxE26YZVndY7y+ULTu+NzVBTu2cX7jDiO7WH1FBHlXKloKiBiJa 05fCmTlDTI5Xi18V1TmEhpY1IVnBj1Lxb1g/GNJuREGG7uUl+6d+p1GGx7l5BJcp TeUYrr6DXkyBweg+mxPLBKR3eiraXqiBQIbYkERdvSzVyIfNpOhxoV/KJLZW -----END CERTIFICATE-----Generated at Tue Feb 10 06:28:39 2026 by rpki-client