This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/sR6h0Cn5s-Bq9SjJGOCNFGe2Nh4.roa File: sR6h0Cn5s-Bq9SjJGOCNFGe2Nh4.roa (raw, json) Hash identifier: Gcl+FQ+1UdjTsp72zIusAoy+k/zDoz9dviOvEiJn6EU= Subject key identifier: B1:1E:A1:D0:29:F9:B3:E0:6A:F5:28:C9:18:E0:8D:14:67:B6:36:1E Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7495DCF4A77D931D10C07742DEE17 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/sR6h0Cn5s-Bq9SjJGOCNFGe2Nh4.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 84.247.59.0/24 maxlen: 24 86.104.8.0/24 maxlen: 24 89.42.40.0/24 maxlen: 24 192.200.192.0/19 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:49:5d:cf:4a:77:d9:31:d1:0c:07:74:2d:ee:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b11ea1d029f9b3e06af528c918e08d1467b6361e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b1:7c:a0:2b:3d:58:78:03:58:7e:9c:9b:ee: 0e:45:a9:14:db:e7:98:66:d7:1c:b4:ab:8f:b2:33: 41:d4:85:e4:fb:e6:a1:b5:e0:25:3a:c0:ed:cb:02: 2d:4f:76:77:19:86:08:d8:c3:f5:70:91:9c:4b:b9: ce:d6:20:d0:e9:4b:84:c0:e2:38:d5:66:3f:11:aa: 3b:60:da:12:05:da:16:ae:fb:55:81:18:2a:e6:e4: e2:7c:e0:d4:bb:a3:bb:da:52:d6:72:0e:31:58:4d: 93:a4:11:7c:97:5e:fd:00:01:35:93:12:c2:a0:04: 16:85:5f:fa:51:96:96:ff:91:9b:50:0b:5c:c3:9e: a7:a9:86:89:3b:c3:44:bb:fb:08:82:23:56:18:c3: 49:e9:c3:cf:dc:fa:f1:e2:76:ce:4a:27:26:55:4f: ec:02:b6:83:a8:8d:9c:25:c0:47:62:d0:1e:a2:55: 0f:90:48:21:7d:d8:a3:97:43:c9:0c:4c:cd:5c:05: 9f:31:71:78:3e:df:d8:7e:77:48:45:44:28:88:17: 62:0a:eb:39:f4:0b:ca:27:9c:c8:f5:a0:e9:aa:15: 09:c9:75:22:72:e3:f5:d5:7d:39:06:9c:4e:d9:29: 0f:a9:a1:49:d1:70:88:11:2a:d8:f1:d2:b7:39:62: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1E:A1:D0:29:F9:B3:E0:6A:F5:28:C9:18:E0:8D:14:67:B6:36:1E X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/sR6h0Cn5s-Bq9SjJGOCNFGe2Nh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.59.0/24 86.104.8.0/24 89.42.40.0/24 192.200.192.0/19 Signature Algorithm: sha256WithRSAEncryption 32:81:3e:2b:1a:60:a6:78:38:ca:57:80:10:39:82:1e:89:f2: 59:c7:b8:88:ed:99:81:5d:52:50:24:ba:54:ac:da:4e:2d:20: a7:e3:60:ee:d7:db:28:fd:0b:fc:81:8d:bc:69:ae:b1:fe:d8: a8:7d:e1:4f:f6:d5:3d:24:08:e2:74:58:1d:4e:31:41:a3:61: 23:e6:70:2f:4d:69:b6:e0:3b:3e:aa:44:2e:d2:62:91:67:f0: 6e:5b:e7:73:94:8a:af:bc:31:7b:cb:99:88:93:46:71:eb:40: 7f:9a:dd:52:69:ad:83:48:11:29:3a:e8:b5:9e:64:0b:ea:8c: 3e:bb:19:61:4a:23:97:70:46:81:a0:88:b7:ed:89:8c:a3:bd: aa:b5:43:22:dc:b2:2c:c3:78:a8:01:1d:61:5f:76:81:2d:53: 37:cc:3c:7c:97:f6:58:00:92:7e:b2:f0:64:e9:ac:cd:35:0e: ba:31:f6:a4:b6:f3:5f:2f:aa:e2:20:39:b8:e6:50:2c:2d:cd: ca:35:11:25:56:37:d3:ac:33:1b:f6:a3:a8:15:78:13:c5:09: de:28:89:d4:4f:8b:f0:fa:25:21:b3:c4:15:72:5f:90:03:a3: 91:72:94:44:10:d2:d8:0f:be:7f:42:bb:bc:81:a2:39:4a:f8: 9c:0d:5d:d8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x0ldz0p32THRDAd0Le4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTFlYTFkMDI5ZjliM2UwNmFmNTI4YzkxOGUwOGQxNDY3YjYzNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LF8oCs9WHgDWH6cm+4ORakU2+eY ZtcctKuPsjNB1IXk++ahteAlOsDtywItT3Z3GYYI2MP1cJGcS7nO1iDQ6UuEwOI4 1WY/Eao7YNoSBdoWrvtVgRgq5uTifODUu6O72lLWcg4xWE2TpBF8l179AAE1kxLC oAQWhV/6UZaW/5GbUAtcw56nqYaJO8NEu/sIgiNWGMNJ6cPP3Prx4nbOSicmVU/s AraDqI2cJcBHYtAeolUPkEghfdijl0PJDEzNXAWfMXF4Pt/YfndIRUQoiBdiCus5 9AvKJ5zI9aDpqhUJyXUicuP11X05BpxO2SkPqaFJ0XCIESrY8dK3OWLasQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLEeodAp+bPgavUoyRjgjRRntjYeMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvc1I2aDBDbjVzLUJxOVNqSkdPQ05GR2UyTmg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVPc7AwQA VmgIAwQAWSooAwQFwMjAMA0GCSqGSIb3DQEBCwUAA4IBAQAygT4rGmCmeDjKV4AQ OYIeifJZx7iI7ZmBXVJQJLpUrNpOLSCn42Du19so/Qv8gY28aa6x/tiofeFP9tU9 JAjidFgdTjFBo2Ej5nAvTWm24Ds+qkQu0mKRZ/BuW+dzlIqvvDF7y5mIk0Zx60B/ mt1Saa2DSBEpOui1nmQL6ow+uxlhSiOXcEaBoIi37YmMo72qtUMi3LIsw3ioAR1h X3aBLVM3zDx8l/ZYAJJ+svBk6azNNQ66MfaktvNfL6riIDm45lAsLc3KNRElVjfT rDMb9qOoFXgTxQneKInUT4vw+iUhs8QVcl+QA6ORcpREENLYD75/Qru8gaI5Svic DV3Y -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:36 2026 by rpki-client