This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/I1mm66oM2FV4eaJVlqE4cO8L7zY.roa File: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (raw, json) Hash identifier: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes= Subject key identifier: 23:59:A6:EB:AA:0C:D8:55:78:79:A2:55:96:A1:38:70:EF:0B:EF:36 Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc Certificate serial: 019B77C70B708D5259EF1D43978B948113C5 Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/I1mm66oM2FV4eaJVlqE4cO8L7zY.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205495 IP address blocks: 45.153.44.0/22 maxlen: 24 185.136.184.0/22 maxlen: 24 185.216.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0b:70:8d:52:59:ef:1d:43:97:8b:94:81:13:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2359a6ebaa0cd8557879a25596a13870ef0bef36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:53:6e:87:0a:64:8f:7b:21:a4:9b:58:af: ca:38:1f:88:db:43:54:e1:4f:53:fe:56:46:45:6e: 0e:d3:9f:31:f5:cd:29:32:3f:b6:4d:c8:c4:91:c5: 9a:68:5b:3a:d4:80:a8:47:fb:b0:0a:dc:3f:13:a6: f4:3a:fc:6d:ed:2d:fe:2f:28:7a:c8:b6:13:3b:21: 86:42:72:8e:4b:42:e3:71:08:6e:14:19:a3:55:09: e9:8d:e2:4b:48:39:6c:ae:97:96:56:be:32:3e:59: 3f:9f:79:cc:6e:f1:8a:e4:90:39:8b:a5:9e:4e:b4: 35:06:d0:eb:3e:51:b9:5e:27:07:ec:a3:e1:7d:19: 4b:3e:36:9d:31:2a:c8:cf:1f:37:59:21:55:42:6d: ac:77:1e:d0:bb:1b:a6:9a:3b:34:73:d6:5f:dd:c0: df:22:9f:de:59:79:33:fd:5b:f4:c8:ab:de:64:08: 67:17:75:bb:9c:c9:a0:e9:a1:da:29:0d:17:93:ba: 47:cb:9f:3e:43:85:99:43:40:66:91:d2:0c:0c:93: d2:76:e7:48:69:70:f0:a2:76:8c:5e:89:8e:89:f4: ee:a3:4b:eb:bf:2b:2a:22:92:fb:79:db:c0:85:76: 66:5d:08:3d:ab:1a:01:a8:64:cf:93:f3:f1:cc:12: 12:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:A6:EB:AA:0C:D8:55:78:79:A2:55:96:A1:38:70:EF:0B:EF:36 X509v3 Authority Key Identifier: keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/I1mm66oM2FV4eaJVlqE4cO8L7zY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.44.0/22 185.136.184.0/22 185.216.80.0/23 Signature Algorithm: sha256WithRSAEncryption a0:a1:93:a1:47:47:01:2d:86:7a:b4:7f:53:4e:d5:5e:d1:fb: 8a:8b:c3:a3:7e:68:c0:3e:dd:14:ba:53:c1:2c:cc:15:f4:1c: d6:46:b2:67:a5:d1:b5:67:da:ad:8a:83:55:d4:2c:b4:3e:5d: e0:1e:96:6b:d0:f5:40:23:96:d3:07:bd:02:85:14:fb:12:a0: e2:48:1c:48:bd:19:03:56:68:ac:40:9b:15:7c:79:7f:39:80: c7:66:17:29:73:66:f7:5b:db:43:e8:4b:57:79:a5:d1:93:ee: cc:5c:99:f3:ad:d6:18:22:39:f0:6c:41:7c:bc:6f:bf:c7:be: e0:a2:3b:3d:69:c8:6c:d3:af:3e:80:bd:c1:b0:d8:94:88:c6: 93:12:92:bf:8b:8f:9d:97:86:36:69:70:fc:a0:ef:3c:da:53: dd:7c:4e:cf:54:b1:62:04:b6:45:36:6c:37:69:53:76:48:4b: 1f:47:a4:83:8c:12:e1:dd:d1:87:ab:23:0c:a7:bd:b0:93:6e: 83:58:dc:e2:b7:b8:dd:fc:3e:c9:45:6e:cf:a0:d3:9b:52:0a: f3:4b:c1:72:0e:7a:f2:19:76:48:9a:e3:c5:b1:49:81:c8:e8: 90:7b:40:a4:d5:bf:50:3e:0c:d0:c9:e1:6c:d4:99:0c:86:a3: b1:d3:06:1d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xwtwjVJZ7x1Dl4uUgRPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTljZmYyNDk4MWQ3MjYzZDFiN2Q2Mzc3OWY1ZDY3M2Rl MmJkYmMwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzU5YTZlYmFhMGNkODU1Nzg3OWEyNTU5NmExMzg3MGVmMGJlZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxFTbocKZI97IaSbWK/KOB+I20NU 4U9T/lZGRW4O058x9c0pMj+2TcjEkcWaaFs61ICoR/uwCtw/E6b0Ovxt7S3+Lyh6 yLYTOyGGQnKOS0LjcQhuFBmjVQnpjeJLSDlsrpeWVr4yPlk/n3nMbvGK5JA5i6We TrQ1BtDrPlG5XicH7KPhfRlLPjadMSrIzx83WSFVQm2sdx7Quxummjs0c9Zf3cDf Ip/eWXkz/Vv0yKveZAhnF3W7nMmg6aHaKQ0Xk7pHy58+Q4WZQ0BmkdIMDJPSdudI aXDwonaMXomOifTuo0vrvysqIpL7edvAhXZmXQg9qxoBqGTPk/PxzBISYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCNZpuuqDNhVeHmiVZahOHDvC+82MB8GA1UdIwQY MBaAFASpz/JJgdcmPRt9Y3efXWc94r28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQt Y2QwZDllNTc0MmNiLzEvSTFtbTY2b00yRlY0ZWFKVmxxRTRjTzhMN3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lZWNmOGItM2Q2My00YzljLWJkODQtY2QwZDllNTc0MmNi LzEvQktuUDhrbUIxeVk5RzMxamQ1OWRaejNpdmJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZksAwQC uYi4AwQBudhQMA0GCSqGSIb3DQEBCwUAA4IBAQCgoZOhR0cBLYZ6tH9TTtVe0fuK i8OjfmjAPt0UulPBLMwV9BzWRrJnpdG1Z9qtioNV1Cy0Pl3gHpZr0PVAI5bTB70C hRT7EqDiSBxIvRkDVmisQJsVfHl/OYDHZhcpc2b3W9tD6EtXeaXRk+7MXJnzrdYY IjnwbEF8vG+/x77gojs9achs068+gL3BsNiUiMaTEpK/i4+dl4Y2aXD8oO882lPd fE7PVLFiBLZFNmw3aVN2SEsfR6SDjBLh3dGHqyMMp72wk26DWNzit7jd/D7JRW7P oNObUgrzS8FyDnryGXZImuPFsUmByOiQe0Ck1b9QPgzQyeFs1JkMhqOx0wYd -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:37 2026 by rpki-client