This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa File: Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa (raw, json) Hash identifier: tU7O1VjjD0lcgYnwOxVPASyTAKDrVm8qOBVH6F4eICY= Subject key identifier: 22:EF:4F:9C:75:4C:D0:B4:B0:50:52:03:F2:F2:CD:08:D2:B3:0F:E5 Certificate issuer: /CN=8300996c08890bd5e1e6dd0528217d28f9d09355 Certificate serial: 019B7AC8C524165FE34EA5AE5CD655400486 Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa Signing time: Thu 01 Jan 2026 18:18:56 +0000 ROA not before: Thu 01 Jan 2026 18:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197422 IP address blocks: 91.224.148.0/23 maxlen: 24 185.119.168.0/22 maxlen: 24 2a03:7220::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c5:24:16:5f:e3:4e:a5:ae:5c:d6:55:40:04:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355 Validity Not Before: Jan 1 18:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22ef4f9c754cd0b4b0505203f2f2cd08d2b30fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:1e:93:90:55:ef:21:7e:28:9f:20:a1:85: 1d:6e:9a:ef:58:25:a1:3c:5a:1b:ec:38:7c:49:2a: 49:ee:01:e7:33:74:71:78:6b:bb:fb:54:9e:0a:61: 4f:bb:67:12:87:22:bf:7e:2a:d9:4d:99:8d:90:ec: 27:ef:89:18:fe:6d:9e:f7:6a:eb:2f:7e:cd:d5:eb: 8e:4b:53:28:c4:f7:b4:78:fd:33:60:36:57:ee:d6: 4a:fd:a1:c7:a5:86:e9:ec:06:1a:59:be:4d:e3:3f: 8a:fc:d2:48:dc:3e:4d:bc:1e:dd:76:82:fd:e6:60: 0c:84:9c:3e:bc:0e:c9:39:45:a8:50:ce:72:30:1a: ed:76:63:8d:61:36:69:84:e6:c3:62:0e:31:16:67: 03:d7:20:17:75:00:3a:65:d7:d6:f1:e7:38:ee:4b: 0e:58:28:00:3d:c7:c9:ba:15:40:11:b9:63:26:2d: 6b:59:a9:27:d4:35:36:66:6f:f6:03:4f:8f:ca:fe: 9f:6b:14:a8:6f:67:ef:aa:ee:c5:ed:08:a4:db:0c: f6:37:03:83:bc:ec:95:04:c2:2e:1b:d7:f1:35:0f: cd:24:d8:34:97:f6:76:56:66:41:39:7a:0c:aa:47: ae:8b:74:52:dd:2c:a3:cc:63:25:c2:32:b9:1b:e4: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:4F:9C:75:4C:D0:B4:B0:50:52:03:F2:F2:CD:08:D2:B3:0F:E5 X509v3 Authority Key Identifier: keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/Iu9PnHVM0LSwUFID8vLNCNKzD-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.148.0/23 185.119.168.0/22 IPv6: 2a03:7220::/29 Signature Algorithm: sha256WithRSAEncryption a7:17:92:7a:c0:e6:01:07:2f:e3:c8:38:ef:6c:b6:6c:6b:68: 8c:18:53:4b:f1:d1:9e:bf:99:4f:bd:32:f3:63:e6:b7:bf:48: bb:74:ca:dd:36:a3:5a:a0:fa:5d:8c:11:61:74:11:b4:ab:cd: 2f:5c:55:10:dc:4f:94:bd:b4:cb:d2:09:fc:5b:d3:5f:f7:77: 7d:42:74:ee:fa:50:74:df:1a:2b:a5:55:72:fa:56:41:bb:d8: bd:6b:d3:90:5e:4a:41:8a:ff:37:6f:67:db:b4:4e:b8:30:20: 15:d2:54:73:1c:6e:a0:b7:fd:6f:e7:49:56:c4:ed:f0:00:f6: 70:eb:5a:6c:8f:31:e4:fe:bc:17:3d:33:76:aa:b6:8d:dd:73: 2d:e0:45:f5:21:dd:95:0b:56:42:0b:49:48:78:7c:cb:69:69: 83:ea:03:08:c8:70:85:67:7d:37:fb:0a:0c:e7:5e:ee:28:fd: 23:61:35:0b:d1:64:d5:59:65:a9:58:8b:b9:e0:ec:56:33:d5: d6:3d:25:43:93:31:cb:cb:90:fa:65:4c:ae:0f:bb:48:c0:7d: fa:ae:1d:1e:1f:f6:ee:25:9e:55:30:ae:3a:6c:33:af:3d:db: 39:b5:6d:b1:8e:4c:4e:f4:cb:d5:89:a0:24:c7:95:c1:83:6d: 07:39:13:a8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yMUkFl/jTqWuXNZVQASGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDA5OTZjMDg4OTBiZDVlMWU2ZGQwNTI4MjE3ZDI4Zjlk MDkzNTUwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmVmNGY5Yzc1NGNkMGI0YjA1MDUyMDNmMmYyY2QwOGQyYjMwZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9gek5BV7yF+KJ8goYUdbprvWCWh PFob7Dh8SSpJ7gHnM3RxeGu7+1SeCmFPu2cShyK/firZTZmNkOwn74kY/m2e92rr L37N1euOS1MoxPe0eP0zYDZX7tZK/aHHpYbp7AYaWb5N4z+K/NJI3D5NvB7ddoL9 5mAMhJw+vA7JOUWoUM5yMBrtdmONYTZphObDYg4xFmcD1yAXdQA6ZdfW8ec47ksO WCgAPcfJuhVAEbljJi1rWakn1DU2Zm/2A0+Pyv6faxSob2fvqu7F7Qik2wz2NwOD vOyVBMIuG9fxNQ/NJNg0l/Z2VmZBOXoMqkeui3RS3SyjzGMlwjK5G+SE9wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCLvT5x1TNC0sFBSA/LyzQjSsw/lMB8GA1UdIwQY MBaAFIMAmWwIiQvV4ebdBSghfSj50JNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgt MmRiNjkxYjFkNGFiLzEvSXU5UG5IVk0wTFN3VUZJRDh2TE5DTkt6RC1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgtMmRiNjkxYjFkNGFi LzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+CUAwQC uXeoMA0EAgACMAcDBQMqA3IgMA0GCSqGSIb3DQEBCwUAA4IBAQCnF5J6wOYBBy/j yDjvbLZsa2iMGFNL8dGev5lPvTLzY+a3v0i7dMrdNqNaoPpdjBFhdBG0q80vXFUQ 3E+UvbTL0gn8W9Nf93d9QnTu+lB03xorpVVy+lZBu9i9a9OQXkpBiv83b2fbtE64 MCAV0lRzHG6gt/1v50lWxO3wAPZw61psjzHk/rwXPTN2qraN3XMt4EX1Id2VC1ZC C0lIeHzLaWmD6gMIyHCFZ303+woM517uKP0jYTUL0WTVWWWpWIu54OxWM9XWPSVD kzHLy5D6ZUyuD7tIwH36rh0eH/buJZ5VMK46bDOvPds5tW2xjkxO9MvViaAkx5XB g20HOROo -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:56 2026 by rpki-client