This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/9ysfhP83Nmm5ft1dF01KIz9IUpQ.roa File: 9ysfhP83Nmm5ft1dF01KIz9IUpQ.roa (raw, json) Hash identifier: 18cwGXFTJaQbHW96LZdk67APWAeUaMFUp7iHSl3ZJFk= Subject key identifier: F7:2B:1F:84:FF:37:36:69:B9:7E:DD:5D:17:4D:4A:23:3F:48:52:94 Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1 Certificate serial: 019B76EB41AF31326013189859C70BFA6511 Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/9ysfhP83Nmm5ft1dF01KIz9IUpQ.roa Signing time: Thu 01 Jan 2026 00:18:07 +0000 ROA not before: Thu 01 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8518 IP address blocks: 91.102.96.0/21 maxlen: 21 91.102.96.0/24 maxlen: 24 91.102.97.0/24 maxlen: 24 91.102.98.0/24 maxlen: 24 91.102.99.0/24 maxlen: 24 91.102.100.0/24 maxlen: 24 91.102.101.0/24 maxlen: 24 91.102.102.0/24 maxlen: 24 91.102.103.0/24 maxlen: 24 94.198.112.0/21 maxlen: 21 94.198.112.0/24 maxlen: 24 94.198.113.0/24 maxlen: 24 94.198.114.0/24 maxlen: 24 94.198.115.0/24 maxlen: 24 94.198.116.0/24 maxlen: 24 94.198.117.0/24 maxlen: 24 94.198.118.0/24 maxlen: 24 94.198.119.0/24 maxlen: 24 185.45.56.0/22 maxlen: 22 185.45.56.0/24 maxlen: 24 185.45.57.0/24 maxlen: 24 185.45.58.0/24 maxlen: 24 185.45.59.0/24 maxlen: 24 193.111.128.0/21 maxlen: 21 193.111.128.0/24 maxlen: 24 193.111.129.0/24 maxlen: 24 193.111.130.0/24 maxlen: 24 193.111.131.0/24 maxlen: 24 193.111.132.0/24 maxlen: 24 193.111.133.0/24 maxlen: 24 193.111.134.0/24 maxlen: 24 193.111.135.0/24 maxlen: 24 2a01:538:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:41:af:31:32:60:13:18:98:59:c7:0b:fa:65:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f72b1f84ff373669b97edd5d174d4a233f485294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:da:0d:a8:c5:2b:75:20:e7:0f:3f:45:d0: d7:4e:02:b3:47:f0:63:8b:5a:49:68:d2:8f:27:bd: 41:e9:6e:d0:ac:18:33:bc:7a:d5:f1:21:d5:a5:5d: 60:6c:ea:55:a6:fc:ec:89:41:43:58:a8:c7:58:a5: 2f:3b:18:59:3e:d1:9a:93:75:6e:46:57:6e:61:a7: dd:b5:68:a2:cc:32:75:f9:05:a3:f9:86:a7:80:50: 9c:74:dc:69:7d:f1:0d:6f:b8:77:b4:d0:d6:1d:ec: 67:39:2e:46:a6:79:3b:88:85:92:47:62:b9:20:bb: 6d:d0:b9:81:cd:86:f0:5b:f1:ee:7b:61:51:ea:de: 20:52:4b:fd:c7:6b:83:22:87:84:e2:c3:3e:87:cd: 68:eb:82:59:b5:81:d8:db:75:d2:29:78:e2:42:42: 8d:27:e5:41:b1:ef:72:cb:ea:ba:94:49:0a:dc:30: 46:65:3c:ce:9e:e8:75:44:64:bd:4b:96:a3:2d:c9: 2d:17:96:fa:85:7a:ef:e9:f9:e9:ef:40:71:34:ec: f8:14:24:08:2c:e1:b3:cd:bd:c5:25:21:00:ed:68: 7f:95:7b:50:d8:55:61:ef:14:1c:0d:60:75:08:4b: 99:62:1e:6c:4b:08:89:51:15:a0:18:a8:e2:95:2c: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2B:1F:84:FF:37:36:69:B9:7E:DD:5D:17:4D:4A:23:3F:48:52:94 X509v3 Authority Key Identifier: keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/9ysfhP83Nmm5ft1dF01KIz9IUpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.96.0/21 94.198.112.0/21 185.45.56.0/22 193.111.128.0/21 IPv6: 2a01:538:2::/48 Signature Algorithm: sha256WithRSAEncryption 7b:0f:cd:19:dc:77:31:58:4c:ee:e0:8c:db:62:da:58:d4:c0: 56:4a:f0:55:82:06:56:6a:eb:43:71:d9:fa:da:fd:37:48:ee: 49:a6:09:bf:16:d4:ad:e7:42:66:ac:a9:fd:4a:fc:80:9a:01: 62:43:c2:fe:c9:9d:e3:41:af:e5:f3:3d:97:6b:85:ba:49:ce: 5f:ac:48:24:aa:41:19:9a:04:39:6f:ca:dd:e7:10:83:4b:1d: f5:1a:5e:65:0c:9e:ac:30:cc:85:66:95:76:de:9e:89:ec:5a: 32:69:48:32:f5:e2:81:78:19:13:1f:65:77:8b:de:f2:59:5b: cf:f8:6f:0b:28:ea:50:06:b1:ec:d1:c7:14:6b:14:72:81:11: a1:55:9f:34:fb:61:a9:44:07:c5:80:d0:78:31:e6:5f:20:28: 55:95:6e:1a:30:d5:97:9c:60:e8:16:28:8c:70:70:b0:0f:f1: cb:24:b5:79:2c:d3:56:25:76:aa:b5:e5:d8:4f:53:8c:02:aa: 68:b2:03:df:6c:34:df:04:de:54:5e:a1:bd:53:52:a0:c2:31: b2:03:eb:32:33:81:37:85:ea:f8:eb:1d:14:8e:0f:7a:09:40: 9a:b2:40:c9:93:ef:df:69:c7:80:a1:13:1f:e5:f5:b2:c5:3d: 45:88:18:45 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt260GvMTJgExiYWccL+mURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTdjYmYxN2QwYmEwYTI2YWIwMWE2NDA2MDE0MTExNGNl MmI5ZDEwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzJiMWY4NGZmMzczNjY5Yjk3ZWRkNWQxNzRkNGEyMzNmNDg1Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PPaDajFK3Ug5w8/RdDXTgKzR/Bj i1pJaNKPJ71B6W7QrBgzvHrV8SHVpV1gbOpVpvzsiUFDWKjHWKUvOxhZPtGak3Vu RlduYafdtWiizDJ1+QWj+YangFCcdNxpffENb7h3tNDWHexnOS5Gpnk7iIWSR2K5 ILtt0LmBzYbwW/Hue2FR6t4gUkv9x2uDIoeE4sM+h81o64JZtYHY23XSKXjiQkKN J+VBse9yy+q6lEkK3DBGZTzOnuh1RGS9S5ajLcktF5b6hXrv6fnp70BxNOz4FCQI LOGzzb3FJSEA7Wh/lXtQ2FVh7xQcDWB1CEuZYh5sSwiJURWgGKjilSzzlwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPcrH4T/NzZpuX7dXRdNSiM/SFKUMB8GA1UdIwQY MBaAFJCny/F9C6CiarAaZAYBQRFM4rnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYt ZWRmYmZlZTcwYWY1LzEvOXlzZmhQODNObW01ZnQxZEYwMUtJejlJVXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYtZWRmYmZlZTcwYWY1 LzEva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQDW2ZgAwQD XsZwAwQCuS04AwQDwW+AMA8EAgACMAkDBwAqAQU4AAIwDQYJKoZIhvcNAQELBQAD ggEBAHsPzRncdzFYTO7gjNti2ljUwFZK8FWCBlZq60Nx2fra/TdI7kmmCb8W1K3n Qmasqf1K/ICaAWJDwv7JneNBr+XzPZdrhbpJzl+sSCSqQRmaBDlvyt3nEINLHfUa XmUMnqwwzIVmlXbenonsWjJpSDL14oF4GRMfZXeL3vJZW8/4bwso6lAGsezRxxRr FHKBEaFVnzT7YalEB8WA0Hgx5l8gKFWVbhow1ZecYOgWKIxwcLAP8csktXks01Yl dqq15dhPU4wCqmiyA99sNN8E3lReob1TUqDCMbID6zIzgTeF6vjrHRSOD3oJQJqy QMmT799px4ChEx/l9bLFPUWIGEU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:09 2026 by rpki-client