This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/ufSzeyDtwqyX2VcVaLd_bm70odg.roa File: ufSzeyDtwqyX2VcVaLd_bm70odg.roa (raw, json) Hash identifier: mOh78oLKMhO8N2vOwgRV00Yf6t8BsMyPRhqMpzfai3o= Subject key identifier: B9:F4:B3:7B:20:ED:C2:AC:97:D9:57:15:68:B7:7F:6E:6E:F4:A1:D8 Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Certificate serial: 019BBBBDD6B33533A610FF3977F5FC42250D Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/ufSzeyDtwqyX2VcVaLd_bm70odg.roa Signing time: Wed 14 Jan 2026 09:02:19 +0000 ROA not before: Wed 14 Jan 2026 09:02:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47927 IP address blocks: 46.28.120.0/21 maxlen: 21 94.126.8.0/21 maxlen: 21 159.255.140.0/22 maxlen: 22 159.255.152.0/22 maxlen: 22 185.63.40.0/22 maxlen: 22 188.95.72.0/21 maxlen: 21 2a02:b88::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:bd:d6:b3:35:33:a6:10:ff:39:77:f5:fc:42:25:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Validity Not Before: Jan 14 09:02:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9f4b37b20edc2ac97d9571568b77f6e6ef4a1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:cc:6d:f4:7c:75:66:3c:7c:16:39:14:cc: bd:28:59:42:3d:a2:fc:68:31:e7:5f:20:45:2d:b4: ab:0f:52:7e:54:3d:10:e5:5b:81:69:17:0b:ad:de: e0:04:c6:f8:6f:47:ed:e3:80:4a:3e:c8:30:1b:c4: b4:d6:19:ca:b4:3b:f4:01:a6:b3:a5:af:c7:12:26: 59:9e:ce:e8:c2:9b:65:ef:e1:7e:81:4b:70:82:49: f4:f0:d8:60:a5:ff:80:e2:c5:ed:93:db:c8:d0:32: e1:d8:15:f5:a8:c4:2a:6b:25:16:d0:b5:16:73:75: 72:c6:19:95:ee:eb:67:8a:55:29:08:31:67:82:9b: e9:4a:ff:aa:18:b0:33:ca:95:5d:61:f1:b8:e9:13: e9:74:eb:ce:b1:3c:4c:e0:30:14:0f:99:c8:f1:d1: ed:b5:17:d7:36:0f:52:5b:e5:d2:40:24:4a:8c:28: 15:5f:49:41:48:f8:e1:87:11:b7:50:f0:f8:c9:d5: 55:c9:fc:78:84:dd:d1:b4:dd:eb:65:a6:ed:1f:9d: ba:a9:c5:2e:3a:6a:43:cc:b2:f2:fa:d4:05:47:ea: 50:05:e1:6c:7c:d7:36:76:93:86:b7:70:24:f2:aa: e4:8a:44:a2:ce:6c:1a:32:0a:d9:8a:2f:58:aa:79: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F4:B3:7B:20:ED:C2:AC:97:D9:57:15:68:B7:7F:6E:6E:F4:A1:D8 X509v3 Authority Key Identifier: keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/ufSzeyDtwqyX2VcVaLd_bm70odg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.120.0/21 94.126.8.0/21 159.255.140.0/22 159.255.152.0/22 185.63.40.0/22 188.95.72.0/21 IPv6: 2a02:b88::/32 Signature Algorithm: sha256WithRSAEncryption 63:a9:09:af:c5:0c:2d:82:26:c2:b6:64:ba:48:4c:0d:a9:aa: 74:e2:bc:6e:b6:12:e3:43:81:7a:50:4d:dd:ae:3c:a9:35:08: 1c:73:cc:18:64:18:ba:de:ae:46:45:ec:a5:66:43:a2:13:3a: bc:06:c1:5d:c8:0e:12:e5:a2:85:ab:34:d2:c7:74:ee:98:1d: 83:14:1e:fb:b7:b6:9d:65:31:a9:50:3a:3e:25:ec:7d:cd:0e: fb:68:b2:55:34:50:ed:76:2d:46:62:b0:36:1e:4a:61:91:13: 77:ab:80:71:2d:53:6d:01:7b:5a:db:a9:3e:34:73:85:c3:98: 3b:bb:81:a5:c4:0b:4b:44:ad:11:f4:e1:e9:64:d3:cb:0a:b6: 42:5a:1e:82:40:1c:df:3f:78:d9:4e:b9:fa:e1:42:16:e2:9b: 5f:eb:31:e4:f1:d3:63:4a:8c:6f:9b:3c:1b:91:e7:59:a5:9a: 5a:f8:90:8b:73:c5:44:2d:eb:11:19:c1:47:f9:06:fe:d0:db: db:66:c8:a1:cc:1a:36:78:5a:3d:08:2f:21:a0:66:c1:5b:80: 00:ca:f4:ad:86:07:22:9b:78:33:b4:a8:49:40:dc:2f:47:7f: f3:c8:3f:73:83:dc:b4:e4:62:1b:f5:88:40:7e:f2:5e:68:e5: 0d:09:ed:77 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZu7vdazNTOmEP85d/X8QiUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh YzhmNTIwHhcNMjYwMTE0MDkwMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWY0YjM3YjIwZWRjMmFjOTdkOTU3MTU2OGI3N2Y2ZTZlZjRhMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArArMbfR8dWY8fBY5FMy9KFlCPaL8 aDHnXyBFLbSrD1J+VD0Q5VuBaRcLrd7gBMb4b0ft44BKPsgwG8S01hnKtDv0Aaaz pa/HEiZZns7owptl7+F+gUtwgkn08Nhgpf+A4sXtk9vI0DLh2BX1qMQqayUW0LUW c3VyxhmV7utnilUpCDFngpvpSv+qGLAzypVdYfG46RPpdOvOsTxM4DAUD5nI8dHt tRfXNg9SW+XSQCRKjCgVX0lBSPjhhxG3UPD4ydVVyfx4hN3RtN3rZabtH526qcUu OmpDzLLy+tQFR+pQBeFsfNc2dpOGt3Ak8qrkikSizmwaMgrZii9YqnmGpwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFLn0s3sg7cKsl9lXFWi3f25u9KHYMB8GA1UdIwQY MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt YzkxMTQ4M2RhNzhjLzEvdWZTemV5RHR3cXlYMlZjVmFMZF9ibTcwb2RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLhx4AwQD Xn4IAwQCn/+MAwQCn/+YAwQCuT8oAwQDvF9IMA0EAgACMAcDBQAqAguIMA0GCSqG SIb3DQEBCwUAA4IBAQBjqQmvxQwtgibCtmS6SEwNqap04rxuthLjQ4F6UE3drjyp NQgcc8wYZBi63q5GReylZkOiEzq8BsFdyA4S5aKFqzTSx3TumB2DFB77t7adZTGp UDo+Jex9zQ77aLJVNFDtdi1GYrA2HkphkRN3q4BxLVNtAXta26k+NHOFw5g7u4Gl xAtLRK0R9OHpZNPLCrZCWh6CQBzfP3jZTrn64UIW4ptf6zHk8dNjSoxvmzwbkedZ pZpa+JCLc8VELesRGcFH+Qb+0NvbZsihzBo2eFo9CC8hoGbBW4AAyvSthgcim3gz tKhJQNwvR3/zyD9zg9y05GIb9YhAfvJeaOUNCe13 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:40 2026 by rpki-client