This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/e00t2uQN2x6AALR6Zv-pMtX9Uso.roa File: e00t2uQN2x6AALR6Zv-pMtX9Uso.roa (raw, json) Hash identifier: 2VUUHmJNv7sW4c7eLdBTCaF2NFHtBH7birXANxXDVxI= Subject key identifier: 7B:4D:2D:DA:E4:0D:DB:1E:80:00:B4:7A:66:FF:A9:32:D5:FD:52:CA Certificate issuer: /CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec Certificate serial: 019B77C6644A3EE584E73E1614FA928E1619 Authority key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/e00t2uQN2x6AALR6Zv-pMtX9Uso.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205718 IP address blocks: 185.231.116.0/22 maxlen: 22 2a09:c740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:64:4a:3e:e5:84:e7:3e:16:14:fa:92:8e:16:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b4d2ddae40ddb1e8000b47a66ffa932d5fd52ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:ed:5b:d1:ff:14:23:09:1e:96:f1:97:b1: 09:d6:21:09:7f:df:9c:a7:26:55:dd:b6:6a:dd:21: 3e:d4:99:d8:ba:02:12:11:92:95:81:c6:2c:c8:e9: e2:5b:a8:02:47:fb:04:19:9d:f9:4e:62:be:b5:51: d8:26:3e:e8:22:45:8a:b3:52:39:93:8b:d0:25:46: 9a:80:c7:e0:0a:39:a8:fd:2b:f4:e3:b1:64:5e:fe: d6:74:98:7d:7e:8f:af:9d:96:5d:5d:6c:e1:51:fd: c3:9e:d6:18:15:47:6c:3f:d5:ae:14:83:01:46:a3: 26:ed:d7:5f:33:de:76:83:e4:e7:f0:ae:fd:b9:ca: b8:9c:32:d7:e9:eb:75:2b:81:46:6d:da:34:6b:63: 3c:53:49:dd:c4:cc:eb:53:30:d5:3d:1f:3f:fe:72: c4:6a:e6:3e:89:cc:7f:27:6e:a5:40:3a:b8:af:10: ac:45:ad:a5:f0:c0:ee:16:8c:8c:bf:40:62:94:c7: c0:be:89:c7:c2:4e:08:9c:5a:45:bd:d6:29:75:c4: a9:3f:6e:5f:ce:fb:f5:d3:bf:e3:e4:6b:2f:d9:c2: c2:80:8f:68:ea:f3:d3:93:53:ba:25:06:99:6f:ae: 1a:51:ab:9d:5b:16:21:5f:57:f4:fb:1b:8c:f3:22: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4D:2D:DA:E4:0D:DB:1E:80:00:B4:7A:66:FF:A9:32:D5:FD:52:CA X509v3 Authority Key Identifier: keyid:4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/e00t2uQN2x6AALR6Zv-pMtX9Uso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.116.0/22 IPv6: 2a09:c740::/32 Signature Algorithm: sha256WithRSAEncryption 6e:24:f9:26:17:0c:4d:51:64:76:2f:c1:75:b9:27:da:3e:cc: f1:e1:b4:b4:75:5f:1c:55:a8:6c:6c:de:ee:5a:7c:c0:8c:05: e8:95:ea:a4:28:32:99:fc:1a:13:c6:bf:16:23:da:6d:8f:60: f5:c9:54:98:b4:10:62:a1:f7:c1:a0:9e:90:b5:8a:7f:b4:0d: ef:f0:cd:f1:f8:3a:33:a0:8b:0f:0d:74:ad:31:b3:85:e1:4a: 4b:b1:0d:e8:ed:a4:ae:b9:b3:55:09:28:85:dd:35:d7:94:4a: 4e:ff:40:c8:66:d8:b9:9e:40:b8:d9:d6:4a:7d:35:a6:5f:79: 89:16:90:bf:3b:01:9d:7a:08:d4:46:1e:3a:91:59:c0:89:fa: 9c:f6:d4:f6:41:39:82:8a:5b:70:5b:cc:0e:32:db:82:e6:c2: 66:30:7f:ce:85:13:c5:b0:e6:f7:58:a4:44:c9:c0:6f:7b:82: b6:6f:e8:37:46:32:34:b2:b5:34:f3:41:69:bc:b6:ad:d7:db: ac:31:36:1f:0e:f1:f1:af:d5:4a:78:e1:60:ac:a9:be:cc:e5: 59:a0:88:13:30:b9:ca:97:79:0e:39:28:7b:8b:86:30:2b:01: 6f:b4:18:f4:7f:d6:b5:c3:3f:09:2a:a3:1b:90:a9:4c:db:73: b4:bd:8a:66 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xmRKPuWE5z4WFPqSjhYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYTNmY2RkODdmNDU2NDMwY2NjYjJkODYzOGU2MTQ4Y2Qz YTEyZWMwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjRkMmRkYWU0MGRkYjFlODAwMGI0N2E2NmZmYTkzMmQ1ZmQ1MmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxDtW9H/FCMJHpbxl7EJ1iEJf9+c pyZV3bZq3SE+1JnYugISEZKVgcYsyOniW6gCR/sEGZ35TmK+tVHYJj7oIkWKs1I5 k4vQJUaagMfgCjmo/Sv047FkXv7WdJh9fo+vnZZdXWzhUf3DntYYFUdsP9WuFIMB RqMm7ddfM952g+Tn8K79ucq4nDLX6et1K4FGbdo0a2M8U0ndxMzrUzDVPR8//nLE auY+icx/J26lQDq4rxCsRa2l8MDuFoyMv0BilMfAvonHwk4InFpFvdYpdcSpP25f zvv107/j5Gsv2cLCgI9o6vPTk1O6JQaZb64aUaudWxYhX1f0+xuM8yIV9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHtNLdrkDdsegAC0emb/qTLV/VLKMB8GA1UdIwQY MBaAFEuj/N2H9FZDDMyy2GOOYUjNOhLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZQODNZZjBWa01NekxMWVk0NWhTTTA2RXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mOWNlOWItOTA1OS00OWM1LWEzNmQt YTczMWVhNTFiMjBkLzEvZTAwdDJ1UU4yeDZBQUxSNlp2LXBNdFg5VXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mOWNlOWItOTA1OS00OWM1LWEzNmQtYTczMWVhNTFiMjBk LzEvUzZQODNZZjBWa01NekxMWVk0NWhTTTA2RXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCued0MA0E AgACMAcDBQAqCcdAMA0GCSqGSIb3DQEBCwUAA4IBAQBuJPkmFwxNUWR2L8F1uSfa Pszx4bS0dV8cVahsbN7uWnzAjAXoleqkKDKZ/BoTxr8WI9ptj2D1yVSYtBBioffB oJ6QtYp/tA3v8M3x+DozoIsPDXStMbOF4UpLsQ3o7aSuubNVCSiF3TXXlEpO/0DI Zti5nkC42dZKfTWmX3mJFpC/OwGdegjURh46kVnAifqc9tT2QTmCiltwW8wOMtuC 5sJmMH/OhRPFsOb3WKREycBve4K2b+g3RjI0srU080FpvLat19usMTYfDvHxr9VK eOFgrKm+zOVZoIgTMLnKl3kOOSh7i4YwKwFvtBj0f9a1wz8JKqMbkKlM23O0vYpm -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:15 2026 by rpki-client