This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/cPTwA-WDZknpvRWadYDiC1hTlD8.roa File: cPTwA-WDZknpvRWadYDiC1hTlD8.roa (raw, json) Hash identifier: ngWQIxxPMWuyGzNuqP9cz5iCC2kg95TlFmoRDl1/Gj4= Subject key identifier: 70:F4:F0:03:E5:83:66:49:E9:BD:15:9A:75:80:E2:0B:58:53:94:3F Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019C44AC5F989351370C8DAAFC792B9C56FB Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/cPTwA-WDZknpvRWadYDiC1hTlD8.roa Signing time: Mon 09 Feb 2026 23:11:13 +0000 ROA not before: Mon 09 Feb 2026 23:11:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200598 IP address blocks: 24.235.22.0/23 maxlen: 24 62.112.30.0/24 maxlen: 24 66.9.96.0/20 maxlen: 24 69.72.72.0/22 maxlen: 24 77.223.192.0/21 maxlen: 24 77.223.200.0/23 maxlen: 24 79.110.184.0/22 maxlen: 24 79.139.64.0/23 maxlen: 24 83.142.200.0/21 maxlen: 24 85.204.28.0/23 maxlen: 24 86.106.28.0/23 maxlen: 24 89.20.50.0/23 maxlen: 24 89.37.60.0/23 maxlen: 24 89.39.184.0/23 maxlen: 24 89.40.236.0/23 maxlen: 24 89.42.215.0/24 maxlen: 24 91.217.106.0/23 maxlen: 24 121.127.48.0/20 maxlen: 24 128.0.60.0/22 maxlen: 24 141.193.214.0/23 maxlen: 24 162.216.138.0/23 maxlen: 24 168.149.248.0/23 maxlen: 24 173.214.200.0/22 maxlen: 24 176.111.54.0/23 maxlen: 24 176.222.48.0/22 maxlen: 24 178.216.184.0/21 maxlen: 24 193.91.8.0/23 maxlen: 24 195.78.90.0/23 maxlen: 24 195.128.136.0/24 maxlen: 24 198.14.16.0/20 maxlen: 24 198.145.112.0/22 maxlen: 24 199.48.230.0/23 maxlen: 24 204.15.4.0/22 maxlen: 24 205.220.216.0/23 maxlen: 24 217.144.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:ac:5f:98:93:51:37:0c:8d:aa:fc:79:2b:9c:56:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Feb 9 23:11:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70f4f003e5836649e9bd159a7580e20b5853943f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:cc:89:c8:f6:77:3a:58:7c:f9:d0:bf:4c: e3:c1:89:ba:fd:a0:7f:b6:03:87:bf:c8:5e:39:a7: 36:74:db:70:51:96:da:8f:80:0b:69:16:c9:ca:fb: 9b:48:de:80:1e:11:5a:50:5c:30:49:65:38:f7:27: 44:1c:48:13:1b:44:67:0c:fd:b9:d4:be:e3:0f:b0: 6e:f8:02:f9:a0:c8:82:50:4b:dd:a6:38:f6:3b:ba: 56:d5:c9:53:8c:02:5a:98:9e:56:87:e1:38:3d:e9: 8e:be:57:2b:be:79:4e:dd:89:ca:6d:d0:ac:7f:34: 32:d0:10:e5:3c:d7:19:91:27:aa:d9:53:37:0e:90: ed:7e:56:ef:b7:a0:5d:0d:96:04:60:69:2f:3a:c4: e7:6e:3a:93:1a:1f:c1:bb:29:15:aa:63:fe:c4:04: cb:9a:b4:45:aa:75:c5:64:f2:a5:9b:e3:73:da:4a: bb:46:fb:d9:9e:fc:b7:30:f6:5a:a9:f8:6a:d2:38: a3:f4:0c:10:f9:f6:b1:f2:e8:61:27:2c:40:ef:e1: 11:dd:82:4d:ba:08:9e:50:f4:b0:ed:1a:02:fb:88: f6:6b:fc:af:55:b7:8a:14:03:06:4f:96:a2:45:ea: 32:aa:57:65:93:6e:02:ac:ac:2a:7a:3c:3d:b5:9a: 7d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F4:F0:03:E5:83:66:49:E9:BD:15:9A:75:80:E2:0B:58:53:94:3F X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/cPTwA-WDZknpvRWadYDiC1hTlD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.235.22.0/23 62.112.30.0/24 66.9.96.0/20 69.72.72.0/22 77.223.192.0-77.223.201.255 79.110.184.0/22 79.139.64.0/23 83.142.200.0/21 85.204.28.0/23 86.106.28.0/23 89.20.50.0/23 89.37.60.0/23 89.39.184.0/23 89.40.236.0/23 89.42.215.0/24 91.217.106.0/23 121.127.48.0/20 128.0.60.0/22 141.193.214.0/23 162.216.138.0/23 168.149.248.0/23 173.214.200.0/22 176.111.54.0/23 176.222.48.0/22 178.216.184.0/21 193.91.8.0/23 195.78.90.0/23 195.128.136.0/24 198.14.16.0/20 198.145.112.0/22 199.48.230.0/23 204.15.4.0/22 205.220.216.0/23 217.144.108.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:d2:da:cc:c8:7b:e1:f7:f0:23:74:fa:c8:39:f1:73:c2:e3: 59:b0:06:78:26:ed:9f:bb:83:6b:af:4d:5e:0f:22:f2:e8:3f: 69:cb:fa:d8:fb:0d:47:db:72:82:9b:a9:a4:c7:43:12:67:e1: 66:a2:42:8b:f3:76:d8:55:36:5e:69:93:cc:6a:f8:b9:79:fb: 83:b6:0f:03:c8:39:e1:90:96:04:5e:15:1b:90:1f:36:3c:8b: 63:ae:48:86:78:fc:f8:ed:61:e7:f3:ba:87:d5:e5:63:e3:77: a7:83:53:cf:29:c8:02:ff:e8:74:a5:f2:1c:5f:4b:7d:98:f2: f4:b5:ce:ab:50:c0:3f:cc:27:05:69:ad:32:68:26:af:44:f8: dd:5f:e2:dc:7f:fb:ec:93:fb:3d:99:a1:80:2a:06:d0:fa:df: 77:2a:00:fb:08:b3:7c:0f:be:31:06:c7:16:eb:a3:6f:66:0d: 13:59:9a:a1:40:95:dc:a7:10:e8:3f:43:35:62:04:f9:88:72: 9f:e3:86:f8:30:c8:6d:39:ad:4c:8e:99:d5:5c:b1:17:f4:46: 3a:11:fd:a1:f1:c2:48:ab:68:74:85:37:ba:6c:73:a3:a1:b9: 12:7c:4f:bb:21:a3:5e:34:8b:a8:b9:4e:1d:0a:81:db:ca:70: d1:94:57:90 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZxErF+Yk1E3DI2q/HkrnFb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMjA5MjMxMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGY0ZjAwM2U1ODM2NjQ5ZTliZDE1OWE3NTgwZTIwYjU4NTM5NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MnMicj2dzpYfPnQv0zjwYm6/aB/ tgOHv8heOac2dNtwUZbaj4ALaRbJyvubSN6AHhFaUFwwSWU49ydEHEgTG0RnDP25 1L7jD7Bu+AL5oMiCUEvdpjj2O7pW1clTjAJamJ5Wh+E4PemOvlcrvnlO3YnKbdCs fzQy0BDlPNcZkSeq2VM3DpDtflbvt6BdDZYEYGkvOsTnbjqTGh/BuykVqmP+xATL mrRFqnXFZPKlm+Nz2kq7RvvZnvy3MPZaqfhq0jij9AwQ+fax8uhhJyxA7+ER3YJN ugieUPSw7RoC+4j2a/yvVbeKFAMGT5aiReoyqldlk24CrKwqejw9tZp97wIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFHD08APlg2ZJ6b0VmnWA4gtYU5Q/MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvY1BUd0EtV0Raa25wdlJXYWRZRGlDMWhUbEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAEY 6xYDBAA+cB4DBARCCWADBAJFSEgwDAMEBk3fwAMEAU3fyAMEAk9uuAMEAU+LQAME A1OOyAMEAVXMHAMEAVZqHAMEAVkUMgMEAVklPAMEAVknuAMEAVko7AMEAFkq1wME AVvZagMEBHl/MAMEAoAAPAMEAY3B1gMEAaLYigMEAaiV+AMEAq3WyAMEAbBvNgME ArDeMAMEA7LYuAMEAcFbCAMEAcNOWgMEAMOAiAMEBMYOEAMEAsaRcAMEAccw5gME AswPBAMEAc3c2AMEAtmQbDANBgkqhkiG9w0BAQsFAAOCAQEAjtLazMh74ffwI3T6 yDnxc8LjWbAGeCbtn7uDa69NXg8i8ug/acv62PsNR9tygpuppMdDEmfhZqJCi/N2 2FU2XmmTzGr4uXn7g7YPA8g54ZCWBF4VG5AfNjyLY65Ihnj8+O1h5/O6h9XlY+N3 p4NTzynIAv/odKXyHF9LfZjy9LXOq1DAP8wnBWmtMmgmr0T43V/i3H/77JP7PZmh gCoG0PrfdyoA+wizfA++MQbHFuujb2YNE1maoUCV3KcQ6D9DNWIE+Yhyn+OG+DDI bTmtTI6Z1VyxF/RGOhH9ofHCSKtodIU3umxzo6G5EnxPuyGjXjSLqLlOHQqB28pw 0ZRXkA== -----END CERTIFICATE-----Generated at Thu Feb 12 17:25:51 2026 by rpki-client