This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rrE5_Xv44YbQ9qA5W_yVeWLWQqk.roa File: rrE5_Xv44YbQ9qA5W_yVeWLWQqk.roa (raw, json) Hash identifier: aWkyJwhgcYJNcVUtvT2FylXeuHe4GVHP7OIlYAfjgCA= Subject key identifier: AE:B1:39:FD:7B:F8:E1:86:D0:F6:A0:39:5B:FC:95:79:62:D6:42:A9 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019C4EB9ECC716E17037C561880FE3C4E57D Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rrE5_Xv44YbQ9qA5W_yVeWLWQqk.roa Signing time: Wed 11 Feb 2026 22:02:13 +0000 ROA not before: Wed 11 Feb 2026 22:02:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 31.187.92.0/22 maxlen: 24 91.210.80.0/22 maxlen: 24 95.178.8.0/21 maxlen: 24 95.215.144.0/22 maxlen: 24 116.50.16.0/21 maxlen: 24 141.193.108.0/22 maxlen: 24 162.250.216.0/22 maxlen: 24 188.215.12.0/22 maxlen: 24 192.109.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:4e:b9:ec:c7:16:e1:70:37:c5:61:88:0f:e3:c4:e5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Feb 11 22:02:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeb139fd7bf8e186d0f6a0395bfc957962d642a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:6c:76:df:52:4c:9d:d1:a7:42:9a:5f:c8: d9:1a:aa:47:f2:f5:be:20:cc:45:a6:d0:e4:8d:b8: c4:b5:fd:64:8a:11:2d:45:fe:7a:2f:57:ba:d6:84: 27:29:24:99:1c:a9:da:08:23:c4:e2:1e:a7:21:ac: f1:4f:91:8a:15:48:c5:c7:80:a4:7d:b9:52:60:9b: f5:f0:bf:17:a9:2d:fc:aa:f5:6a:14:78:4b:12:2e: 58:e7:35:65:59:55:78:a8:29:c2:98:ac:be:12:dc: 74:a5:0b:95:d2:60:ad:19:d9:40:16:cd:9d:96:34: 8e:10:7e:58:75:91:0b:a1:55:62:a1:c1:39:22:b2: 6e:6c:b9:18:b4:4f:88:8f:9c:c6:40:0a:56:ae:64: 5b:66:4a:57:57:f3:32:bb:3b:4b:10:d6:c2:1d:f1: 0e:1b:0c:3b:78:66:d5:58:4b:40:44:7e:18:4f:94: d5:2f:90:2a:9a:75:e5:3e:5f:77:91:71:ae:2a:65: 1b:86:b0:0e:1f:45:0a:a1:30:b6:47:b5:75:80:9e: 5d:91:b9:9c:d7:a2:6c:a8:4e:25:a1:5a:e9:ab:b7: d1:7d:9f:2e:91:f3:b5:5b:75:7a:54:dd:8c:a3:a3: 7d:21:e6:8c:3a:89:15:00:a3:60:18:41:2c:32:46: ea:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B1:39:FD:7B:F8:E1:86:D0:F6:A0:39:5B:FC:95:79:62:D6:42:A9 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rrE5_Xv44YbQ9qA5W_yVeWLWQqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.187.92.0/22 91.210.80.0/22 95.178.8.0/21 95.215.144.0/22 116.50.16.0/21 141.193.108.0/22 162.250.216.0/22 188.215.12.0/22 192.109.205.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:f6:5c:49:50:1f:c9:fd:cb:0c:fa:e0:26:53:b5:85:28:51: a7:fc:3d:44:fe:c7:70:ef:25:2d:bc:6f:3b:f4:17:f1:6a:03: c2:98:30:01:26:54:79:1e:89:8f:06:2b:59:35:19:ef:20:9d: 45:e1:fb:43:dd:e5:d6:a2:e3:21:5c:dc:d7:83:a9:d9:a6:6c: ed:a8:a8:64:3d:30:a6:75:20:18:75:bc:1f:db:f0:3b:fc:22: 96:cd:d7:5e:f9:43:27:f9:0f:0f:44:4a:c7:fb:88:51:5b:b4: 83:3d:af:c4:ae:90:bc:11:54:17:54:bd:01:f3:e8:13:c5:b9: 00:2a:c7:7d:49:81:f6:40:85:7f:84:43:9b:e1:36:fd:55:97: 34:8b:04:0d:b0:3c:cc:49:f7:4b:5c:89:ca:58:35:16:31:75: 4e:d2:4e:01:f1:01:22:41:7b:7d:19:0b:37:ba:08:77:c3:89: 3b:0e:87:6d:7e:ec:b4:89:5a:d4:a5:b0:b6:d0:ad:95:73:7d: 5d:4e:33:72:89:c9:98:c1:76:74:14:29:52:dd:4c:4a:ca:26: dc:9a:3d:1b:af:2c:09:87:39:3b:d5:79:2e:b3:75:b9:c9:dc: 9d:ae:91:c1:08:71:b6:1a:78:a8:87:75:8e:7c:74:41:32:a2: fb:ed:c2:d6 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZxOuezHFuFwN8VhiA/jxOV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMjExMjIwMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWIxMzlmZDdiZjhlMTg2ZDBmNmEwMzk1YmZjOTU3OTYyZDY0MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqENsdt9STJ3Rp0KaX8jZGqpH8vW+ IMxFptDkjbjEtf1kihEtRf56L1e61oQnKSSZHKnaCCPE4h6nIazxT5GKFUjFx4Ck fblSYJv18L8XqS38qvVqFHhLEi5Y5zVlWVV4qCnCmKy+Etx0pQuV0mCtGdlAFs2d ljSOEH5YdZELoVViocE5IrJubLkYtE+Ij5zGQApWrmRbZkpXV/MyuztLENbCHfEO Gww7eGbVWEtARH4YT5TVL5AqmnXlPl93kXGuKmUbhrAOH0UKoTC2R7V1gJ5dkbmc 16JsqE4loVrpq7fRfZ8ukfO1W3V6VN2Mo6N9IeaMOokVAKNgGEEsMkbqcwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFK6xOf17+OGG0PagOVv8lXli1kKpMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvcnJFNV9YdjQ0WWJROXFBNVdfeVZlV0xXUXFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCH7tcAwQC W9JQAwQDX7IIAwQCX9eQAwQDdDIQAwQCjcFsAwQCovrYAwQCvNcMAwQAwG3NMA0G CSqGSIb3DQEBCwUAA4IBAQA+9lxJUB/J/csM+uAmU7WFKFGn/D1E/sdw7yUtvG87 9BfxagPCmDABJlR5HomPBitZNRnvIJ1F4ftD3eXWouMhXNzXg6nZpmztqKhkPTCm dSAYdbwf2/A7/CKWzdde+UMn+Q8PRErH+4hRW7SDPa/ErpC8EVQXVL0B8+gTxbkA Ksd9SYH2QIV/hEOb4Tb9VZc0iwQNsDzMSfdLXInKWDUWMXVO0k4B8QEiQXt9GQs3 ugh3w4k7Dodtfuy0iVrUpbC20K2Vc31dTjNyicmYwXZ0FClS3UxKyibcmj0brywJ hzk71Xkus3W5ydydrpHBCHG2Gnioh3WOfHRBMqL77cLW -----END CERTIFICATE-----Generated at Thu Feb 12 17:23:09 2026 by rpki-client