This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/pOIHGUUuOPs9gK6e1Y9l7RwpvMs.roa File: pOIHGUUuOPs9gK6e1Y9l7RwpvMs.roa (raw, json) Hash identifier: SqTKikGbpOYjqCy/UCM9pe/PLZqFgP5MSdKpR876lUg= Subject key identifier: A4:E2:07:19:45:2E:38:FB:3D:80:AE:9E:D5:8F:65:ED:1C:29:BC:CB Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a Certificate serial: 019B7BA4FF98DE040C119491F66676F225A0 Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/pOIHGUUuOPs9gK6e1Y9l7RwpvMs.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136258 IP address blocks: 92.243.80.0/24 maxlen: 24 185.90.61.0/24 maxlen: 24 185.93.173.0/24 maxlen: 24 185.192.124.0/24 maxlen: 24 185.196.61.0/24 maxlen: 24 188.214.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ff:98:de:04:0c:11:94:91:f6:66:76:f2:25:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4e20719452e38fb3d80ae9ed58f65ed1c29bccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:8c:62:11:a8:83:86:ff:49:bd:66:f9:22: aa:31:12:6b:98:58:1f:65:3b:20:e1:06:52:94:4e: 27:12:d9:8e:4f:35:8f:a6:76:d6:42:41:16:d2:37: 01:74:8f:48:aa:81:b8:c3:21:f7:6c:51:f8:49:15: d1:60:f3:ea:d4:ad:f3:64:5f:3a:fb:c9:0d:83:a1: fd:57:b9:93:48:10:04:b2:2d:58:5e:67:c3:cd:f6: a0:43:da:52:37:24:3a:29:ff:ff:4d:ac:8a:60:a6: 2e:bf:26:8b:7c:dd:52:04:57:24:25:3d:bd:8c:00: d8:40:56:49:38:09:79:24:bd:e7:fd:6b:f5:03:e9: ee:3e:33:f5:15:96:28:c6:95:d8:44:b9:37:66:de: 22:69:c4:3f:a8:b4:4c:2d:93:d5:73:f0:05:d5:38: ee:32:57:8c:35:06:6d:fd:35:85:94:2e:92:e5:d9: 75:b8:42:40:4b:04:5f:d6:07:ca:5a:0f:c8:05:70: 9a:c2:b4:d6:56:8a:c1:2e:3f:2a:ac:4e:2a:02:c1: 99:4f:57:84:06:69:df:fc:a2:f9:42:1c:ab:50:ca: b8:bf:67:cc:c7:10:55:ee:45:99:21:22:25:00:93: ea:a3:29:4b:ad:97:5f:7f:47:f2:e6:3b:ed:25:d6: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E2:07:19:45:2E:38:FB:3D:80:AE:9E:D5:8F:65:ED:1C:29:BC:CB X509v3 Authority Key Identifier: keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/pOIHGUUuOPs9gK6e1Y9l7RwpvMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.80.0/24 185.90.61.0/24 185.93.173.0/24 185.192.124.0/24 185.196.61.0/24 188.214.157.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a7:59:67:80:f9:00:f6:8b:07:ce:68:cf:22:69:c2:f0:2e: b1:f9:32:b2:12:0c:b2:47:71:3f:ec:35:6d:f9:ec:bb:73:8e: 9a:39:18:d3:1d:df:7d:2a:e5:47:8f:f2:50:16:8a:17:42:c8: c0:88:39:10:b3:ca:67:ab:f0:c2:6c:2e:40:dd:6a:21:8b:f7: 80:c6:86:cf:e8:7b:ac:f6:75:be:13:9c:96:bf:9b:0e:c0:18: a6:9d:db:7a:9f:0d:03:74:dc:d9:90:b3:a5:3c:c8:e1:96:ba: d9:06:c4:72:c7:8b:bc:12:5d:db:3c:b6:6b:63:c5:e8:d8:c0: 6f:b5:52:e2:2f:dd:e2:73:c5:44:9d:dc:ad:89:47:e5:d8:b9: 9b:39:71:c0:60:ab:97:ff:89:79:88:7f:cc:ba:c4:03:34:88: 8e:d5:51:a4:f8:45:5e:dd:0d:ac:a1:f7:6e:f9:95:47:2b:b1: 4c:17:0d:21:9b:88:f3:28:f6:2f:79:0c:0f:21:35:95:47:1f: b4:4e:0a:1e:ea:20:87:96:e0:5a:0e:47:d3:a7:19:e0:17:25: 17:08:35:b1:2a:69:4d:ac:fc:5f:ea:55:33:31:c6:fc:5d:3f: 38:ce:18:0d:b3:3f:90:fb:52:e6:8a:a1:8a:8a:ac:29:3d:6c: 65:6a:57:d1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt7pP+Y3gQMEZSR9mZ28iWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4 YjhmNWEwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGUyMDcxOTQ1MmUzOGZiM2Q4MGFlOWVkNThmNjVlZDFjMjliY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6OMYhGog4b/Sb1m+SKqMRJrmFgf ZTsg4QZSlE4nEtmOTzWPpnbWQkEW0jcBdI9IqoG4wyH3bFH4SRXRYPPq1K3zZF86 +8kNg6H9V7mTSBAEsi1YXmfDzfagQ9pSNyQ6Kf//TayKYKYuvyaLfN1SBFckJT29 jADYQFZJOAl5JL3n/Wv1A+nuPjP1FZYoxpXYRLk3Zt4iacQ/qLRMLZPVc/AF1Tju MleMNQZt/TWFlC6S5dl1uEJASwRf1gfKWg/IBXCawrTWVorBLj8qrE4qAsGZT1eE Bmnf/KL5QhyrUMq4v2fMxxBV7kWZISIlAJPqoylLrZdff0fy5jvtJdZ3vwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKTiBxlFLjj7PYCuntWPZe0cKbzLMB8GA1UdIwQY MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt NGUxZGMxNTA1MjYwLzEvcE9JSEdVVXVPUHM5Z0s2ZTFZOWw3Undwdk1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAXPNQAwQA uVo9AwQAuV2tAwQAucB8AwQAucQ9AwQAvNadMA0GCSqGSIb3DQEBCwUAA4IBAQCG p1lngPkA9osHzmjPImnC8C6x+TKyEgyyR3E/7DVt+ey7c46aORjTHd99KuVHj/JQ FooXQsjAiDkQs8pnq/DCbC5A3Wohi/eAxobP6Hus9nW+E5yWv5sOwBimndt6nw0D dNzZkLOlPMjhlrrZBsRyx4u8El3bPLZrY8Xo2MBvtVLiL93ic8VEndytiUfl2Lmb OXHAYKuX/4l5iH/MusQDNIiO1VGk+EVe3Q2sofdu+ZVHK7FMFw0hm4jzKPYveQwP ITWVRx+0Tgoe6iCHluBaDkfTpxngFyUXCDWxKmlNrPxf6lUzMcb8XT84zhgNsz+Q +1LmiqGKiqwpPWxlalfR -----END CERTIFICATE-----Generated at Mon Jan 19 17:45:42 2026 by rpki-client