This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/IC9Ns8k-mnJUdybx7kS8Wv78lOI.roa File: IC9Ns8k-mnJUdybx7kS8Wv78lOI.roa (raw, json) Hash identifier: BxDcPCbOz6XR3G4J6Ne0tK/TjkqaeP330z2R/8vAIdM= Subject key identifier: 20:2F:4D:B3:C9:3E:9A:72:54:77:26:F1:EE:44:BC:5A:FE:FC:94:E2 Certificate issuer: /CN=6de8ac4959725e4fed1c330d22b5cd060241a514 Certificate serial: 019B791126D72299689A5EEBB6943C71BB84 Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/IC9Ns8k-mnJUdybx7kS8Wv78lOI.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211075 IP address blocks: 185.92.152.0/22 maxlen: 22 185.206.230.0/24 maxlen: 24 2a11:9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:26:d7:22:99:68:9a:5e:eb:b6:94:3c:71:bb:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=202f4db3c93e9a72547726f1ee44bc5afefc94e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:82:5b:71:79:a9:f8:28:53:9a:b2:49:10: 5b:88:54:68:81:8c:4d:88:b7:cd:e5:a0:c1:7e:cc: 20:48:3d:10:ab:63:40:9e:ee:ee:9b:60:3e:be:4c: 0d:c3:2a:27:77:1c:4a:ab:19:d4:5c:d6:0c:86:81: 1c:f6:15:e9:59:b4:b0:c8:6a:b3:a7:cd:97:26:00: 11:d1:6b:5c:64:5c:bd:32:61:2e:39:6f:d4:b4:c3: 2e:81:af:a2:c8:d2:f5:b2:90:2d:c0:0c:12:82:19: db:df:0f:ad:6d:2f:43:97:24:89:8e:0e:fe:7d:a0: 52:44:57:78:6e:91:0f:24:c8:84:0d:40:94:f2:b2: 2d:4d:6d:ee:6d:c8:7e:9a:28:dc:ed:55:83:13:75: 7b:47:88:a3:ab:d4:00:76:ef:cb:61:a5:62:ee:72: 21:12:37:a0:cd:3b:28:04:f4:a1:dd:6c:02:07:9b: 95:cc:b2:c9:17:b9:93:42:b9:ec:f2:78:e5:d3:6f: c6:9c:cb:6e:5b:12:54:f9:04:34:65:35:fb:5d:48: 9e:c1:c6:d2:66:6b:39:8e:85:41:11:61:57:05:d2: 4c:8b:9f:18:87:c5:93:21:4e:52:ce:35:04:8f:ba: 8f:73:a5:2f:4e:6e:3d:55:04:87:d4:fb:55:18:4c: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2F:4D:B3:C9:3E:9A:72:54:77:26:F1:EE:44:BC:5A:FE:FC:94:E2 X509v3 Authority Key Identifier: keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/IC9Ns8k-mnJUdybx7kS8Wv78lOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.152.0/22 185.206.230.0/24 IPv6: 2a11:9c0::/32 Signature Algorithm: sha256WithRSAEncryption 32:57:46:bd:db:2e:cc:4e:e7:51:3f:2e:66:43:fe:36:26:22: 98:89:1b:ce:7c:dc:82:25:ff:f7:cd:13:7b:15:df:47:3d:bc: 32:88:00:dc:48:33:5a:e6:04:95:ed:fe:ce:a1:64:82:e6:df: 00:32:13:bb:75:b7:fe:f0:3e:66:50:7b:80:8d:9a:3e:d5:4b: 96:1e:e0:64:f2:ec:70:12:96:6a:39:38:4a:0e:93:83:1e:ef: 74:24:e2:34:2f:c1:94:0f:a2:f3:6a:61:75:cb:73:34:f5:d2: 8e:89:f9:37:5e:29:e6:8a:c1:b6:f4:4a:b2:4a:31:4d:0f:d9: d9:1b:9d:cd:03:47:4d:40:7b:03:55:d4:a3:fa:6f:32:2d:9c: 7c:38:cd:e0:a7:65:8d:36:87:5f:e2:c6:d2:44:80:6f:e5:24: f2:f6:43:73:79:41:34:23:4b:0b:5d:e9:df:81:44:b8:bf:83: a9:0a:34:43:85:8d:1f:02:b5:fe:d9:07:c7:31:31:f2:32:e5: 58:8c:d7:02:f8:01:70:3b:57:f5:89:59:63:1f:8a:b0:a9:2b: 8f:e2:f2:65:c0:48:56:b1:5e:02:6d:2c:a8:9b:6b:43:ae:30: 94:0a:6f:38:34:7b:e4:9d:53:32:47:39:87:4d:a0:87:f1:21: da:a1:fa:83 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ESbXIploml7rtpQ8cbuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZThhYzQ5NTk3MjVlNGZlZDFjMzMwZDIyYjVjZDA2MDI0 MWE1MTQwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDJmNGRiM2M5M2U5YTcyNTQ3NzI2ZjFlZTQ0YmM1YWZlZmM5NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4SCW3F5qfgoU5qySRBbiFRogYxN iLfN5aDBfswgSD0Qq2NAnu7um2A+vkwNwyondxxKqxnUXNYMhoEc9hXpWbSwyGqz p82XJgAR0WtcZFy9MmEuOW/UtMMuga+iyNL1spAtwAwSghnb3w+tbS9DlySJjg7+ faBSRFd4bpEPJMiEDUCU8rItTW3ubch+mijc7VWDE3V7R4ijq9QAdu/LYaVi7nIh EjegzTsoBPSh3WwCB5uVzLLJF7mTQrns8njl02/GnMtuWxJU+QQ0ZTX7XUiewcbS Zms5joVBEWFXBdJMi58Yh8WTIU5SzjUEj7qPc6UvTm49VQSH1PtVGEwFvwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCAvTbPJPppyVHcm8e5EvFr+/JTiMB8GA1UdIwQY MBaAFG3orElZcl5P7RwzDSK1zQYCQaUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVpc1NWbHlYa190SERNTklyWE5CZ0pCcFJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NGQwMmUtNjk0Ny00Mjg2LWE2MDgt YTI3ZjU1MDE4YTVjLzEvSUM5TnM4ay1tbkpVZHlieDdrUzhXdjc4bE9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NGQwMmUtNjk0Ny00Mjg2LWE2MDgtYTI3ZjU1MDE4YTVj LzEvYmVpc1NWbHlYa190SERNTklyWE5CZ0pCcFJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVyYAwQA uc7mMA0EAgACMAcDBQAqEQnAMA0GCSqGSIb3DQEBCwUAA4IBAQAyV0a92y7MTudR Py5mQ/42JiKYiRvOfNyCJf/3zRN7Fd9HPbwyiADcSDNa5gSV7f7OoWSC5t8AMhO7 dbf+8D5mUHuAjZo+1UuWHuBk8uxwEpZqOThKDpODHu90JOI0L8GUD6LzamF1y3M0 9dKOifk3XinmisG29EqySjFND9nZG53NA0dNQHsDVdSj+m8yLZx8OM3gp2WNNodf 4sbSRIBv5STy9kNzeUE0I0sLXenfgUS4v4OpCjRDhY0fArX+2QfHMTHyMuVYjNcC +AFwO1f1iVljH4qwqSuP4vJlwEhWsV4CbSyom2tDrjCUCm84NHvknVMyRzmHTaCH 8SHaofqD -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:37 2026 by rpki-client