This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/L9a6XlmixBDgTngX3OesnHMjCvQ.roa File: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (raw, json) Hash identifier: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8= Subject key identifier: 2F:D6:BA:5E:59:A2:C4:10:E0:4E:78:17:DC:E7:AC:9C:73:23:0A:F4 Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Certificate serial: 019BD559ED4D345309433236EDB22A612BEC Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/L9a6XlmixBDgTngX3OesnHMjCvQ.roa Signing time: Mon 19 Jan 2026 08:23:19 +0000 ROA not before: Mon 19 Jan 2026 08:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43942 IP address blocks: 91.200.128.0/22 maxlen: 22 91.200.128.0/24 maxlen: 24 91.200.129.0/24 maxlen: 24 91.200.130.0/24 maxlen: 24 91.200.131.0/24 maxlen: 24 91.223.155.0/24 maxlen: 24 185.208.16.0/24 maxlen: 24 212.84.48.0/21 maxlen: 21 212.84.48.0/24 maxlen: 24 212.84.49.0/24 maxlen: 24 212.84.50.0/24 maxlen: 24 212.84.51.0/24 maxlen: 24 212.84.52.0/24 maxlen: 24 212.84.53.0/24 maxlen: 24 212.84.54.0/24 maxlen: 24 212.84.55.0/24 maxlen: 24 2a01:4840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:59:ed:4d:34:53:09:43:32:36:ed:b2:2a:61:2b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Validity Not Before: Jan 19 08:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fd6ba5e59a2c410e04e7817dce7ac9c73230af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:bd:50:e1:fc:e3:4f:9c:cc:27:02:65:95: 00:55:d2:8f:d9:3e:92:6c:c2:14:66:b7:9f:ab:88: ab:8d:5d:72:9c:ee:44:c2:41:77:57:04:86:b1:8f: e2:4e:dc:f1:4c:cb:bc:db:24:55:41:c7:f5:9a:44: 34:ac:ef:eb:fa:80:44:4f:ab:8b:09:c9:1d:4d:53: f3:b1:4a:48:ca:60:7a:82:2f:6c:b7:90:20:f6:44: ab:a2:58:27:ad:61:e8:a7:4e:7a:87:26:87:fe:37: 20:24:88:11:e4:9a:8c:61:15:13:86:42:50:72:17: 13:f0:c4:4a:d3:5b:05:63:47:e1:07:41:c0:06:d0: 93:b5:8b:e3:0f:60:bc:fe:47:ab:6f:87:7c:e3:03: 20:5e:54:9b:fa:98:f9:62:3b:fa:00:52:c6:0e:ba: 1f:4f:f2:32:a5:fa:5a:5a:90:34:b8:eb:17:8e:bc: f4:47:09:1a:54:ba:1d:a4:22:43:fc:77:64:0d:71: 96:07:42:1a:aa:ca:3c:7e:11:e4:d5:77:c5:77:49: 9b:a0:a8:e4:c6:ef:89:d3:3f:18:4e:7b:d4:c0:92: c9:e8:aa:c3:9f:12:5f:e9:8e:7e:e7:ee:86:66:e1: 27:01:72:f9:12:b2:6e:f5:92:03:0a:c7:bf:78:29: 2d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:BA:5E:59:A2:C4:10:E0:4E:78:17:DC:E7:AC:9C:73:23:0A:F4 X509v3 Authority Key Identifier: keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/L9a6XlmixBDgTngX3OesnHMjCvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.128.0/22 91.223.155.0/24 185.208.16.0/24 212.84.48.0/21 IPv6: 2a01:4840::/32 Signature Algorithm: sha256WithRSAEncryption 25:5c:5e:b5:5a:74:44:f8:fa:c0:a6:ab:73:4d:e7:c4:9d:8f: bf:ee:56:f8:83:fc:5f:c2:4a:cc:da:56:b9:a8:31:bb:ac:24: 1c:6c:29:ee:37:6a:96:a8:1b:40:ae:ac:98:88:8f:d9:7b:3e: 2a:b2:d2:38:1a:1b:34:5c:90:8d:da:5a:38:97:03:15:55:20: fe:f2:97:c6:41:6d:41:6d:97:22:c2:85:62:0d:64:f2:23:e0: 16:09:11:8e:d8:e4:bf:e2:96:f0:e4:25:af:ea:3f:91:3a:d1: a9:80:b5:c4:ba:12:0c:80:6b:c8:66:ac:85:b1:fe:c0:9c:33: 46:89:68:62:d1:fe:53:13:fe:69:1d:bb:a4:b8:eb:68:e9:f8: fe:11:01:ab:d2:93:bb:9c:74:50:1a:17:c2:c0:16:42:4d:27: 74:ed:cb:a1:7c:c3:b3:15:86:1a:82:48:78:5c:df:2f:c1:f4: c3:46:42:e8:a5:ac:ce:87:c6:30:58:55:a2:d5:a9:09:75:e3: 8e:36:10:9e:9e:dc:ae:6a:ba:8c:28:2b:fb:1a:c1:13:1f:0c: 64:bc:4d:ff:01:be:9b:97:f1:c5:23:52:42:8e:64:a3:4c:79: 96:47:5b:2c:c0:ea:0c:c2:c6:ac:19:ea:be:b2:07:54:c8:94: f5:b1:a7:22 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZvVWe1NNFMJQzI27bIqYSvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw YTI5YzAwHhcNMjYwMTE5MDgyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmQ2YmE1ZTU5YTJjNDEwZTA0ZTc4MTdkY2U3YWM5YzczMjMwYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70i9UOH840+czCcCZZUAVdKP2T6S bMIUZrefq4irjV1ynO5EwkF3VwSGsY/iTtzxTMu82yRVQcf1mkQ0rO/r+oBET6uL CckdTVPzsUpIymB6gi9st5Ag9kSrolgnrWHop056hyaH/jcgJIgR5JqMYRUThkJQ chcT8MRK01sFY0fhB0HABtCTtYvjD2C8/kerb4d84wMgXlSb+pj5Yjv6AFLGDrof T/IypfpaWpA0uOsXjrz0RwkaVLodpCJD/HdkDXGWB0Iaqso8fhHk1XfFd0mboKjk xu+J0z8YTnvUwJLJ6KrDnxJf6Y5+5+6GZuEnAXL5ErJu9ZIDCse/eCktXQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFC/Wul5ZosQQ4E54F9znrJxzIwr0MB8GA1UdIwQY MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt NDJhZTc1Yjc5NTdkLzEvTDlhNlhsbWl4QkRnVG5nWDNPZXNuSE1qQ3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCW8iAAwQA W9+bAwQAudAQAwQD1FQwMA0EAgACMAcDBQAqAUhAMA0GCSqGSIb3DQEBCwUAA4IB AQAlXF61WnRE+PrApqtzTefEnY+/7lb4g/xfwkrM2la5qDG7rCQcbCnuN2qWqBtA rqyYiI/Zez4qstI4Ghs0XJCN2lo4lwMVVSD+8pfGQW1BbZciwoViDWTyI+AWCRGO 2OS/4pbw5CWv6j+ROtGpgLXEuhIMgGvIZqyFsf7AnDNGiWhi0f5TE/5pHbukuOto 6fj+EQGr0pO7nHRQGhfCwBZCTSd07cuhfMOzFYYagkh4XN8vwfTDRkLopazOh8Yw WFWi1akJdeOONhCentyuarqMKCv7GsETHwxkvE3/Ab6bl/HFI1JCjmSjTHmWR1ss wOoMwsasGeq+sgdUyJT1saci -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:33 2026 by rpki-client