This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/E89yAQtO79M-1Ms7Kd_oXCvLPh8.roa
File: E89yAQtO79M-1Ms7Kd_oXCvLPh8.roa (raw, json)
Hash identifier: 5du/pnLCkjqXOpm9RfFvPGgH9EWazk1nBHyV5aHULNo=
Subject key identifier: 13:CF:72:01:0B:4E:EF:D3:3E:D4:CB:3B:29:DF:E8:5C:2B:CB:3E:1F
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019C4EB9EDDF5A2DEE4BF3E69C97F81C322D
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/E89yAQtO79M-1Ms7Kd_oXCvLPh8.roa
Signing time: Wed 11 Feb 2026 22:02:13 +0000
ROA not before: Wed 11 Feb 2026 22:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
88.135.100.0/22 maxlen: 24
88.135.104.0/21 maxlen: 24
93.119.184.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
121.127.56.0/21 maxlen: 24
176.222.48.0/22 maxlen: 24
195.133.202.0/23 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Feb 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4e:b9:ed:df:5a:2d:ee:4b:f3:e6:9c:97:f8:1c:32:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Feb 11 22:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13cf72010b4eefd33ed4cb3b29dfe85c2bcb3e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:7a:f8:f6:1d:26:82:d0:d2:7c:bd:ae:0b:
73:8b:e0:b2:e1:e7:28:75:2a:ae:1d:cb:db:92:1e:
99:c0:0c:c3:01:8e:80:75:1e:4d:35:00:8b:ac:f3:
16:d3:ab:7d:8b:ab:1b:62:e7:25:66:ce:d8:61:3a:
85:7c:e3:1e:5f:84:21:a4:6c:45:0d:47:07:5f:c8:
a7:94:cb:48:c9:8a:8a:37:ac:51:e3:52:9d:17:fe:
bd:0c:7f:84:89:d9:37:29:a5:f8:6f:2d:6a:37:3b:
bb:b3:64:ae:c7:b5:22:34:9b:16:b5:3f:66:cc:37:
b4:92:db:f7:a7:d3:08:92:1e:0a:f8:b8:9b:98:20:
c2:00:3a:80:84:0e:28:10:0e:39:48:85:47:28:95:
39:49:c6:b9:1f:24:a4:5a:73:0c:50:e6:08:43:fd:
8b:25:fa:54:e4:fe:81:88:40:90:d3:c8:c6:e4:31:
ce:53:76:00:4b:8b:17:3a:7a:77:a7:4a:e0:dc:46:
83:a4:64:70:aa:73:ee:2e:5c:a9:19:f8:c8:5d:39:
40:d1:6f:ef:cc:12:f7:82:44:22:4b:60:2f:00:80:
c9:7d:36:87:21:3a:2b:c4:8e:e0:84:b8:9a:3c:55:
43:14:2b:04:19:ee:75:7a:85:d5:80:95:10:d8:79:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CF:72:01:0B:4E:EF:D3:3E:D4:CB:3B:29:DF:E8:5C:2B:CB:3E:1F
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/E89yAQtO79M-1Ms7Kd_oXCvLPh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.96.0/20
66.117.8.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
88.135.100.0-88.135.111.255
93.119.184.0/21
94.26.110.0/23
94.101.103.0/24
121.127.56.0/21
176.222.48.0/22
195.133.202.0/23
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
81:9e:35:7a:10:ce:42:0f:f2:85:e4:e9:77:f1:9f:63:5a:51:
45:c0:50:68:ae:8f:01:87:79:46:42:f7:a0:f3:b4:c0:50:43:
8d:90:ca:19:3c:71:17:d6:99:dc:50:8c:f9:2c:04:e8:ee:65:
d4:41:0c:60:1a:f1:97:8b:5c:83:5d:8e:87:31:8e:9c:a4:73:
b2:59:a9:8a:27:41:78:53:ab:88:a9:7a:eb:a7:e2:bb:4b:94:
ac:a7:b2:2d:65:42:8e:68:c7:c8:9f:a3:56:f2:94:89:75:c4:
c9:2f:e9:e3:28:02:5c:b3:0b:ce:6e:3a:9e:e9:38:0c:20:68:
23:6b:f7:b8:f7:34:c3:a4:41:3f:47:1e:0e:a9:ad:71:3a:ed:
c0:44:75:c7:04:da:8c:bb:4b:ef:97:e4:16:91:31:9e:8d:ef:
f0:f4:94:ab:4e:b1:e1:d4:d0:42:e6:7b:85:70:7e:a3:01:ec:
6c:2b:97:39:64:d1:be:52:73:4a:ca:84:0a:8f:18:2a:99:69:
d6:15:e1:7a:ce:f5:db:c1:99:23:3d:88:2a:c7:90:df:d9:f2:
6c:ed:7b:33:d4:27:99:ab:aa:f6:48:26:81:59:5d:ab:44:05:
7e:75:8e:f7:2d:91:5b:8c:b3:6a:bb:7a:da:52:e6:41:8c:27:
de:38:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 17:24:04 2026 by rpki-client