This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/1-9MzMIRI9EZUWy0_EdU5hjULaQY.roa File: 1-9MzMIRI9EZUWy0_EdU5hjULaQY.roa (raw, json) Hash identifier: 6DcD4YBSDKFcP7fuSl9OrTUJJR5lZIill0/ldDdy3gw= Subject key identifier: FB:D3:33:30:84:48:F4:46:54:5B:2D:3F:11:D5:39:86:35:0B:69:06 Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69 Certificate serial: 019B7F15B1862662B24EA321BBE431F28925 Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/1-9MzMIRI9EZUWy0_EdU5hjULaQY.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28941 IP address blocks: 185.103.112.0/22 maxlen: 24 185.199.24.0/22 maxlen: 24 185.204.132.0/22 maxlen: 24 2a0a:9440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b1:86:26:62:b2:4e:a3:21:bb:e4:31:f2:89:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd333308448f446545b2d3f11d53986350b6906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:5f:52:71:48:23:ca:bd:3a:1c:d1:39:a6: c0:d1:9d:c3:6e:e3:fa:00:44:36:ec:35:36:e3:ac: 30:12:75:a1:a6:fa:79:32:8d:db:5c:4e:72:b6:ac: 9e:0d:96:2e:fd:01:4a:b2:0f:d1:a2:b0:c5:c2:94: 53:ec:08:00:12:cd:02:e8:74:29:ee:8c:fb:2d:45: e2:21:7b:c0:cc:09:d9:e9:8f:b4:9e:40:26:c7:1d: a9:88:50:ed:80:c8:fa:13:3d:76:61:cc:56:2b:41: 56:09:41:53:ce:7e:db:57:a4:3b:29:e6:21:d5:c4: cd:0a:0e:3e:1d:99:b0:65:e0:5b:c5:7f:45:d0:d1: 7b:68:dc:86:06:7a:85:b3:bb:be:6b:18:eb:06:4b: 8b:b8:da:90:3d:6b:37:c6:a8:fc:e3:c3:49:3d:33: 11:a2:1e:63:2c:69:61:5f:13:96:47:5b:57:01:00: 3f:08:3a:2a:b8:25:0c:27:eb:6d:41:b4:0e:97:16: c0:e1:bb:aa:e3:92:7d:25:78:80:da:84:bc:6b:2a: 6e:d4:0d:36:bd:7b:9a:18:b9:3e:79:c4:63:28:e9: 69:43:2e:ef:5f:a1:58:b7:05:20:db:74:4b:36:e1: 72:f5:b1:56:f3:32:6d:85:9e:63:e0:1c:a1:3d:c1: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:33:30:84:48:F4:46:54:5B:2D:3F:11:D5:39:86:35:0B:69:06 X509v3 Authority Key Identifier: keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/1-9MzMIRI9EZUWy0_EdU5hjULaQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.112.0/22 185.199.24.0/22 185.204.132.0/22 IPv6: 2a0a:9440::/29 Signature Algorithm: sha256WithRSAEncryption 48:4c:f4:45:00:42:b4:2b:1b:dc:85:04:52:91:ab:2e:a6:0c: a8:ca:61:db:e8:8e:48:db:a6:57:d4:b0:ad:b6:a5:88:1e:11: 4e:27:82:eb:45:5b:75:c2:c6:21:38:d6:26:0e:f6:c8:a6:c1: b7:55:94:fc:3c:1e:bd:1d:0b:54:1d:25:3a:e5:fd:76:51:f5: a3:eb:45:8d:24:ba:0a:f2:19:ec:39:b4:38:56:dc:0c:bb:b7: d2:2a:cf:17:23:a1:87:fa:6d:5a:1b:6a:de:e7:29:f5:9f:36: d5:36:eb:b9:61:d0:f4:02:40:4c:db:cb:52:0e:6c:f9:29:22: 36:c5:c0:b5:79:da:91:32:90:eb:02:73:16:b9:aa:6a:6f:8c: 27:21:f4:69:c5:69:19:fd:d0:6d:1e:8e:fd:c0:75:f6:a3:c0: 25:97:43:26:cf:91:22:12:fd:c3:b1:61:4c:5e:ee:ef:be:08: 98:e4:3c:ae:85:f5:fd:ad:43:8f:7b:02:5c:7c:cd:0e:b0:36: e1:4c:14:a8:6a:6a:fd:26:ad:9d:e7:9f:ec:9b:a8:70:5c:5c: c0:b7:f0:4a:73:b0:ea:1f:48:59:e2:fa:b7:11:91:ef:4a:1d: e9:ce:3d:5d:e7:6a:0b:3d:69:da:88:32:ac:1f:b5:48:04:2b: a8:b2:99:8d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/FbGGJmKyTqMhu+Qx8oklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGYwMGYzOGNjZWQ5MjE5Nzk5MzA3NmNiMzY4NWJmMzJi YzVlNjkwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQzMzMzMDg0NDhmNDQ2NTQ1YjJkM2YxMWQ1Mzk4NjM1MGI2OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFxfUnFII8q9OhzROabA0Z3DbuP6 AEQ27DU246wwEnWhpvp5Mo3bXE5ytqyeDZYu/QFKsg/RorDFwpRT7AgAEs0C6HQp 7oz7LUXiIXvAzAnZ6Y+0nkAmxx2piFDtgMj6Ez12YcxWK0FWCUFTzn7bV6Q7KeYh 1cTNCg4+HZmwZeBbxX9F0NF7aNyGBnqFs7u+axjrBkuLuNqQPWs3xqj848NJPTMR oh5jLGlhXxOWR1tXAQA/CDoquCUMJ+ttQbQOlxbA4buq45J9JXiA2oS8aypu1A02 vXuaGLk+ecRjKOlpQy7vX6FYtwUg23RLNuFy9bFW8zJthZ5j4ByhPcGh3wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPvTMzCESPRGVFstPxHVOYY1C2kGMB8GA1UdIwQY MBaAFLLfAPOMztkhl5kwdss2hb8yvF5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q4QTg0ek8yU0dYbVRCMnl6YUZ2eks4WG1rLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MDZmYTgtNTJhMi00ZWQyLWEyZTEt MDRlNGU0ZGM1ZmJhLzEvMS05TXpNSVJJOUVaVVd5MF9FZFU1aGpVTGFRWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmYvNzA2ZmE4LTUyYTItNGVkMi1hMmUxLTA0ZTRlNGRjNWZi YS8xL3N0OEE4NHpPMlNHWG1UQjJ5emFGdnpLOFhtay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEArlncAME ArnHGAMEArnMhDANBAIAAjAHAwUDKgqUQDANBgkqhkiG9w0BAQsFAAOCAQEASEz0 RQBCtCsb3IUEUpGrLqYMqMph2+iOSNumV9SwrbaliB4RTieC60VbdcLGITjWJg72 yKbBt1WU/DwevR0LVB0lOuX9dlH1o+tFjSS6CvIZ7Dm0OFbcDLu30irPFyOhh/pt Whtq3ucp9Z821TbruWHQ9AJATNvLUg5s+SkiNsXAtXnakTKQ6wJzFrmqam+MJyH0 acVpGf3QbR6O/cB19qPAJZdDJs+RIhL9w7FhTF7u774ImOQ8roX1/a1Dj3sCXHzN DrA24UwUqGpq/Satneef7JuocFxcwLfwSnOw6h9IWeL6txGR70od6c49XedqCz1p 2ogyrB+1SAQrqLKZjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:45 2026 by rpki-client