This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/96tI9F9CMFNRZ6DCnRVD97jz1K0.roa File: 96tI9F9CMFNRZ6DCnRVD97jz1K0.roa (raw, json) Hash identifier: Eq3ZNRGvPrY91tNLfyf2rbXZuZF3eXFbsefGVwqCF/E= Subject key identifier: F7:AB:48:F4:5F:42:30:53:51:67:A0:C2:9D:15:43:F7:B8:F3:D4:AD Certificate issuer: /CN=6055026307a36eec5e681c3948aef53a27f99736 Certificate serial: 019B7CEE0B1F7C2110F3B6BC954C517A206C Authority key identifier: 60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/96tI9F9CMFNRZ6DCnRVD97jz1K0.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198277 IP address blocks: 109.197.184.0/21 maxlen: 21 109.197.185.0/24 maxlen: 24 109.197.186.0/24 maxlen: 24 109.197.187.0/24 maxlen: 24 109.197.188.0/22 maxlen: 22 185.218.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.mft rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0b:1f:7c:21:10:f3:b6:bc:95:4c:51:7a:20:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6055026307a36eec5e681c3948aef53a27f99736 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7ab48f45f4230535167a0c29d1543f7b8f3d4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:93:af:16:d0:61:18:19:77:28:25:56:17: 8f:2c:a5:ac:f6:7b:e4:a0:e5:ec:be:8d:e6:7c:ad: 3d:41:a5:d4:02:14:ad:6c:ca:9c:70:ed:c8:87:5e: c0:36:90:05:61:a6:ee:be:3f:73:8d:8a:bb:86:10: 0f:19:a3:8c:04:f6:fa:7c:1a:41:59:2f:49:f8:ac: 46:f3:7c:40:28:82:62:a6:7c:e9:40:3d:aa:68:b4: a4:3c:f7:f7:ba:53:c9:82:47:aa:41:f8:56:38:02: 06:04:a0:2a:20:f9:70:73:8a:7b:76:f2:cc:74:32: 60:8a:79:ea:fa:40:7a:f8:07:0e:51:7c:50:7c:33: 7e:7f:a7:99:91:b6:f0:11:64:36:aa:1c:4a:59:9b: 1e:e1:d8:26:99:d2:9b:10:8f:48:ce:99:15:40:14: 8a:b5:80:f4:8b:a9:d9:ff:07:3f:b7:2e:ce:c8:85: 32:61:16:a8:1f:b3:7f:fb:4d:b9:ae:e0:89:09:68: 9f:d6:64:59:fa:a5:0c:14:8d:50:d6:3b:c6:d5:d9: 9f:7b:08:07:4f:47:36:86:34:7a:05:ca:94:9a:d3: a0:5e:9f:30:0b:bb:5e:e1:b6:2f:93:a6:a8:b0:d6: 80:2f:35:ba:a9:84:bf:9e:2f:a3:99:fa:7f:eb:3b: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AB:48:F4:5F:42:30:53:51:67:A0:C2:9D:15:43:F7:B8:F3:D4:AD X509v3 Authority Key Identifier: keyid:60:55:02:63:07:A3:6E:EC:5E:68:1C:39:48:AE:F5:3A:27:F9:97:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUCYwejbuxeaBw5SK71Oif5lzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/96tI9F9CMFNRZ6DCnRVD97jz1K0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9aa858-e1be-40e9-bd9a-0ee63357d847/1/YFUCYwejbuxeaBw5SK71Oif5lzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.184.0/21 185.218.106.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:fc:de:eb:b9:95:0c:5b:34:14:7d:be:68:81:a9:6e:85:d8: d7:b5:eb:81:b7:fb:cf:8b:b6:2a:63:87:88:87:43:13:30:f8: a0:12:5d:2d:4c:b4:dd:f8:7f:e9:ad:2e:f1:84:06:72:38:fd: b3:15:38:ad:a9:7e:92:37:08:27:4a:6f:2f:46:28:56:70:af: 5e:60:c2:4c:91:d9:30:be:e0:3c:31:b5:78:7a:ac:74:c0:63: a7:0b:73:f3:f7:35:30:58:17:f4:f2:da:53:5f:b5:4c:aa:24: 99:d4:ef:4e:f2:e8:1b:da:c0:fa:56:98:18:89:8c:d3:86:57: 38:31:85:f0:ec:37:bc:f2:1b:34:55:db:e3:2b:42:01:22:9c: 7f:96:7e:1e:e7:1b:3f:9a:14:4c:96:3a:32:f1:e2:0f:0f:10: 50:de:c2:93:b7:c6:ed:76:0f:82:85:be:79:3d:db:02:4b:43: 82:87:5f:7b:e7:a7:36:01:dd:4e:42:f9:cf:49:ac:1b:1d:fc: de:07:7d:ee:cd:94:55:16:33:5a:24:97:17:0d:8b:cb:1b:35: 60:5e:3e:b6:6d:b0:ed:35:a5:81:17:90:37:c1:09:d0:a8:f0: 19:65:12:f4:0b:43:bd:41:c5:3b:e9:06:36:71:7a:fa:f2:ca: 1b:d4:b3:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87gsffCEQ87a8lUxReiBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTUwMjYzMDdhMzZlZWM1ZTY4MWMzOTQ4YWVmNTNhMjdm OTk3MzYwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2FiNDhmNDVmNDIzMDUzNTE2N2EwYzI5ZDE1NDNmN2I4ZjNkNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+GTrxbQYRgZdyglVhePLKWs9nvk oOXsvo3mfK09QaXUAhStbMqccO3Ih17ANpAFYabuvj9zjYq7hhAPGaOMBPb6fBpB WS9J+KxG83xAKIJipnzpQD2qaLSkPPf3ulPJgkeqQfhWOAIGBKAqIPlwc4p7dvLM dDJginnq+kB6+AcOUXxQfDN+f6eZkbbwEWQ2qhxKWZse4dgmmdKbEI9IzpkVQBSK tYD0i6nZ/wc/ty7OyIUyYRaoH7N/+025ruCJCWif1mRZ+qUMFI1Q1jvG1dmfewgH T0c2hjR6BcqUmtOgXp8wC7te4bYvk6aosNaALzW6qYS/ni+jmfp/6zt3dQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPerSPRfQjBTUWegwp0VQ/e489StMB8GA1UdIwQY MBaAFGBVAmMHo27sXmgcOUiu9Ton+Zc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZVQ1l3ZWpidXhlYUJ3NVNLNzFPaWY1bHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85YWE4NTgtZTFiZS00MGU5LWJkOWEt MGVlNjMzNTdkODQ3LzEvOTZ0STlGOUNNRk5SWjZEQ25SVkQ5N2p6MUswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85YWE4NTgtZTFiZS00MGU5LWJkOWEtMGVlNjMzNTdkODQ3 LzEvWUZVQ1l3ZWpidXhlYUJ3NVNLNzFPaWY1bHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbcW4AwQA udpqMA0GCSqGSIb3DQEBCwUAA4IBAQAq/N7ruZUMWzQUfb5ogaluhdjXteuBt/vP i7YqY4eIh0MTMPigEl0tTLTd+H/prS7xhAZyOP2zFTitqX6SNwgnSm8vRihWcK9e YMJMkdkwvuA8MbV4eqx0wGOnC3Pz9zUwWBf08tpTX7VMqiSZ1O9O8ugb2sD6VpgY iYzThlc4MYXw7De88hs0VdvjK0IBIpx/ln4e5xs/mhRMljoy8eIPDxBQ3sKTt8bt dg+Chb55PdsCS0OCh19756c2Ad1OQvnPSawbHfzeB33uzZRVFjNaJJcXDYvLGzVg Xj62bbDtNaWBF5A3wQnQqPAZZRL0C0O9QcU76QY2cXr68sob1LND -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:23 2026 by rpki-client