This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa File: h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa (raw, json) Hash identifier: F0ol1/t/MHG3rheVuTMinY7d1uEEc3ChRKFw6MqUlUk= Subject key identifier: 87:D6:44:15:0F:CC:DD:EA:86:F5:2A:5E:2F:EF:55:7F:B9:21:0A:51 Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Certificate serial: 019B7D5C8C42B83CF76CE483EDF589CDE946 Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa Signing time: Fri 02 Jan 2026 06:19:35 +0000 ROA not before: Fri 02 Jan 2026 06:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61124 IP address blocks: 85.193.144.0/20 maxlen: 24 148.252.32.0/19 maxlen: 24 176.123.32.0/20 maxlen: 24 185.13.188.0/22 maxlen: 24 2a03:3ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:8c:42:b8:3c:f7:6c:e4:83:ed:f5:89:cd:e9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Validity Not Before: Jan 2 06:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d644150fccddea86f52a5e2fef557fb9210a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:cf:72:df:74:cc:a6:88:f4:f4:03:34:cd: 2f:0f:17:c2:98:11:5b:4b:a3:3c:08:3b:09:2d:c8: dc:a7:be:a1:4c:57:10:4c:bd:34:0d:9d:54:48:ba: 10:c5:82:50:9c:90:28:77:04:38:91:0d:d3:80:dd: fc:f4:74:cc:4e:b1:df:d8:7a:82:58:ff:50:fe:b4: 55:46:fd:13:a8:1b:af:be:3e:84:8d:ad:d6:f3:b9: 53:77:df:3c:b4:df:a9:e8:35:be:db:27:eb:63:66: 68:20:e1:e3:80:8d:dd:17:c7:c9:be:3c:64:ab:ae: 25:0c:0f:3a:1c:ec:89:06:94:ad:7a:b3:d1:e5:e8: 9e:15:63:ec:2b:78:68:72:d8:23:59:ee:fe:1e:c8: 63:91:80:13:28:bc:cc:2b:18:a3:4d:8c:12:8c:73: bc:f5:e0:f6:7a:89:63:51:b3:5e:f3:38:39:d3:0f: 39:c5:ae:ec:c0:25:a4:fe:17:d9:3a:f1:01:87:73: e4:d6:ed:51:15:0d:9d:14:ba:38:1f:1e:64:67:95: 85:44:69:4c:7c:34:b0:ba:de:c8:05:cd:32:a0:2d: c0:7e:a3:f8:62:ec:61:e6:c3:19:48:31:91:aa:3d: fc:45:bb:29:5e:85:46:0e:8e:43:91:95:62:62:18: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:44:15:0F:CC:DD:EA:86:F5:2A:5E:2F:EF:55:7F:B9:21:0A:51 X509v3 Authority Key Identifier: keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.193.144.0/20 148.252.32.0/19 176.123.32.0/20 185.13.188.0/22 IPv6: 2a03:3ec0::/32 Signature Algorithm: sha256WithRSAEncryption 33:4e:74:4c:9e:07:46:21:4f:fd:29:d8:63:f7:f6:62:7a:50: 34:e0:1d:13:32:c7:66:cf:45:3c:01:d4:52:1e:fb:4e:a9:28: 0c:b5:09:de:75:8f:44:05:ad:db:16:bd:cf:19:48:a1:86:1b: ee:dd:98:8f:c4:df:3d:33:2c:d3:77:bb:76:01:75:5b:b5:26: e7:a7:c5:91:54:2d:cd:57:ae:10:eb:21:a6:8c:bf:b5:33:f6: af:59:35:a4:d3:f1:97:fa:41:94:e2:33:29:72:f0:b5:b7:56: 75:fd:46:22:a6:be:0a:cf:ce:47:8a:0e:95:9e:55:79:c7:ac: b0:85:36:df:c0:16:9e:20:73:91:90:10:28:53:96:6d:e7:96: 00:e3:76:be:80:50:76:8d:cf:38:0e:9d:81:bb:51:d9:fa:59: 13:20:40:b5:d5:11:ae:69:1d:00:0c:0e:34:d1:fc:30:5f:b9: 3c:69:dd:be:b9:ce:06:66:b7:29:cc:c5:85:4e:dd:c1:f1:08: f1:95:82:79:19:0d:39:37:85:f6:45:21:64:5f:1b:57:a2:c9: 02:2e:9b:08:c9:e4:d4:e7:a0:85:df:79:a8:29:39:76:48:85: 71:6c:cc:9a:36:bf:56:b4:46:65:41:44:95:c7:61:84:45:91: 23:a5:99:82 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9XIxCuDz3bOSD7fWJzelGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZDNhOTE0NTk3M2M3OWEzZTdiOTU1MzFlM2QwZGY3ZDI4 YzRhMDQwHhcNMjYwMTAyMDYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q2NDQxNTBmY2NkZGVhODZmNTJhNWUyZmVmNTU3ZmI5MjEwYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AbPct90zKaI9PQDNM0vDxfCmBFb S6M8CDsJLcjcp76hTFcQTL00DZ1USLoQxYJQnJAodwQ4kQ3TgN389HTMTrHf2HqC WP9Q/rRVRv0TqBuvvj6Eja3W87lTd988tN+p6DW+2yfrY2ZoIOHjgI3dF8fJvjxk q64lDA86HOyJBpSterPR5eieFWPsK3hoctgjWe7+HshjkYATKLzMKxijTYwSjHO8 9eD2eoljUbNe8zg50w85xa7swCWk/hfZOvEBh3Pk1u1RFQ2dFLo4Hx5kZ5WFRGlM fDSwut7IBc0yoC3AfqP4Yuxh5sMZSDGRqj38RbspXoVGDo5DkZViYhjyHQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIfWRBUPzN3qhvUqXi/vVX+5IQpRMB8GA1UdIwQY MBaAFInTqRRZc8eaPnuVUx49DffSjEoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUt N2Q0MGMxMWE5NTAwLzEvaDlaRUZRX00zZXFHOVNwZUwtOVZmN2toQ2xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUtN2Q0MGMxMWE5NTAw LzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEVcGQAwQF lPwgAwQEsHsgAwQCuQ28MA0EAgACMAcDBQAqAz7AMA0GCSqGSIb3DQEBCwUAA4IB AQAzTnRMngdGIU/9Kdhj9/ZielA04B0TMsdmz0U8AdRSHvtOqSgMtQnedY9EBa3b Fr3PGUihhhvu3ZiPxN89MyzTd7t2AXVbtSbnp8WRVC3NV64Q6yGmjL+1M/avWTWk 0/GX+kGU4jMpcvC1t1Z1/UYipr4Kz85Hig6VnlV5x6ywhTbfwBaeIHORkBAoU5Zt 55YA43a+gFB2jc84Dp2Bu1HZ+lkTIEC11RGuaR0ADA400fwwX7k8ad2+uc4GZrcp zMWFTt3B8QjxlYJ5GQ05N4X2RSFkXxtXoskCLpsIyeTU56CF33moKTl2SIVxbMya Nr9WtEZlQUSVx2GERZEjpZmC -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:12 2026 by rpki-client