This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/9Rw9HjBiECAUVxYX36cGTQBrzgU.roa File: 9Rw9HjBiECAUVxYX36cGTQBrzgU.roa (raw, json) Hash identifier: GJ7fGRkyTbBjdupFC7YOaoxIT0ejDo9/XKN0jdNtTmc= Subject key identifier: F5:1C:3D:1E:30:62:10:20:14:57:16:17:DF:A7:06:4D:00:6B:CE:05 Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771 Certificate serial: 019B76EB889C3DCB4B9E44C56AC5A210F24C Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/9Rw9HjBiECAUVxYX36cGTQBrzgU.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58130 IP address blocks: 176.116.96.0/20 maxlen: 20 176.116.96.0/24 maxlen: 24 176.116.97.0/24 maxlen: 24 176.116.99.0/24 maxlen: 24 176.116.101.0/24 maxlen: 24 176.116.104.0/24 maxlen: 24 176.116.105.0/24 maxlen: 24 176.116.106.0/24 maxlen: 24 176.116.107.0/24 maxlen: 24 176.116.108.0/23 maxlen: 23 176.116.108.0/24 maxlen: 24 176.116.111.0/24 maxlen: 24 176.116.112.0/22 maxlen: 22 185.165.140.0/23 maxlen: 23 185.165.142.0/23 maxlen: 23 2001:67c:1050::/48 maxlen: 48 2a0a:1a00::/29 maxlen: 29 2a0a:1a00::/30 maxlen: 30 2a0a:1a00::/32 maxlen: 32 2a0a:1a00:f000:9000::/56 maxlen: 56 2a0a:1a04::/30 maxlen: 30 2a0a:1a06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:88:9c:3d:cb:4b:9e:44:c5:6a:c5:a2:10:f2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f51c3d1e3062102014571617dfa7064d006bce05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:7c:24:24:dd:33:0e:ca:c6:07:70:71:11: f8:3e:c7:33:69:f1:39:17:97:6a:97:e7:4f:51:28: f9:a0:60:6c:79:84:ac:f3:a9:eb:f6:c8:83:55:89: e5:c1:ce:94:52:8c:b7:25:63:aa:67:dd:75:04:83: d1:e8:f1:18:dd:87:84:0c:29:df:79:a6:a9:3a:d6: ac:96:15:13:de:ad:04:f9:18:e2:ee:1c:25:ce:a9: a8:18:5f:92:af:66:98:ed:d5:7d:42:60:ec:84:16: 59:9f:c1:71:83:c0:ed:1d:06:06:b5:14:27:27:f0: 80:ae:a3:72:2a:db:93:90:6a:33:f1:32:b6:c8:60: 26:68:e8:2d:13:79:3a:88:83:c5:90:f9:a9:2d:60: 3c:24:3f:0c:aa:9f:19:ab:f4:87:f3:e1:7c:75:80: cc:a4:d1:cc:dc:79:78:b6:14:92:48:b2:0e:cd:42: 01:0e:f9:2c:83:d4:fa:54:64:2c:66:6b:d1:65:91: 12:88:2c:e7:70:73:87:99:2e:59:87:e0:2c:27:aa: c5:5b:ed:fc:e7:7d:38:d9:6f:0b:17:66:70:e2:7b: 68:19:c6:7d:97:40:9d:ad:f7:b5:62:74:c9:4f:7c: 98:5f:55:c2:3c:6e:82:a0:ac:19:ab:18:76:10:e9: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1C:3D:1E:30:62:10:20:14:57:16:17:DF:A7:06:4D:00:6B:CE:05 X509v3 Authority Key Identifier: keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/9Rw9HjBiECAUVxYX36cGTQBrzgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.96.0-176.116.115.255 185.165.140.0/22 IPv6: 2001:67c:1050::/48 2a0a:1a00::/29 Signature Algorithm: sha256WithRSAEncryption 28:04:9e:37:84:1a:3b:21:d9:67:2a:71:ed:57:2a:da:45:44: 9f:f2:e4:b0:b4:bb:46:57:fb:50:d5:80:ad:fc:7b:dd:6c:75: fd:47:50:d8:a9:f1:8e:3d:60:7e:1e:c4:c0:15:fa:dc:3f:b4: a0:f9:e1:8a:4c:01:1f:1f:5d:53:e8:e2:7d:14:3b:cc:c3:0c: 00:ac:12:3a:7a:61:45:05:e0:b8:ba:f2:d8:d3:45:32:f1:e4: 06:e6:ab:4a:6b:9a:e2:fe:4a:26:97:2d:a2:c8:de:5b:9c:39: 7e:6d:d7:8d:53:0c:f8:56:1e:3e:36:df:11:5f:94:ec:fa:03: 78:48:9c:51:0a:8a:19:08:2c:ed:ff:b8:90:70:10:b9:fb:a1: 4c:a7:86:a5:11:ee:93:b9:f0:45:b4:aa:ab:17:4e:2d:aa:ff: ff:b0:db:1f:b8:9a:56:6a:80:8c:ab:c5:b6:f5:13:69:97:cc: 15:29:f3:54:73:12:6b:10:cd:33:c5:7b:62:b3:f2:d1:22:9d: cc:43:db:ee:31:fa:75:5f:29:bf:fc:fb:6f:91:78:9a:72:24: 8e:71:c8:53:e0:87:66:64:c2:f0:7c:f8:b5:18:36:6b:91:15: 85:0a:93:0a:0a:c0:d6:2b:d2:4c:86:ec:78:4b:59:ed:55:98: d8:ef:4a:f9 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt264icPctLnkTFasWiEPJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjFjMDMwODhlYmZlNTUzODEyYjMxNTQ3YzAzYzkwYTI1 ZDg3NzEwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTFjM2QxZTMwNjIxMDIwMTQ1NzE2MTdkZmE3MDY0ZDAwNmJjZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJp8JCTdMw7KxgdwcRH4PsczafE5 F5dql+dPUSj5oGBseYSs86nr9siDVYnlwc6UUoy3JWOqZ911BIPR6PEY3YeEDCnf eaapOtaslhUT3q0E+Rji7hwlzqmoGF+Sr2aY7dV9QmDshBZZn8Fxg8DtHQYGtRQn J/CArqNyKtuTkGoz8TK2yGAmaOgtE3k6iIPFkPmpLWA8JD8Mqp8Zq/SH8+F8dYDM pNHM3Hl4thSSSLIOzUIBDvksg9T6VGQsZmvRZZESiCzncHOHmS5Zh+AsJ6rFW+38 53042W8LF2Zw4ntoGcZ9l0Cdrfe1YnTJT3yYX1XCPG6CoKwZqxh2EOn/EQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFPUcPR4wYhAgFFcWF9+nBk0Aa84FMB8GA1UdIwQY MBaAFNqxwDCI6/5VOBKzFUfAPJCiXYdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEt YjcyMzk4MDcwODIzLzEvOVJ3OUhqQmlFQ0FVVnhZWDM2Y0dUUUJyemdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zNmMyYWEtMmUyNC00NGZiLTllMGEtYjcyMzk4MDcwODIz LzEvMnJIQU1JanJfbFU0RXJNVlI4QThrS0pkaDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAaBAIAATAUMAwDBAWwdGAD BAKwdHADBAK5pYwwFgQCAAIwEAMHACABBnwQUAMFAyoKGgAwDQYJKoZIhvcNAQEL BQADggEBACgEnjeEGjsh2Wcqce1XKtpFRJ/y5LC0u0ZX+1DVgK38e91sdf1HUNip 8Y49YH4exMAV+tw/tKD54YpMAR8fXVPo4n0UO8zDDACsEjp6YUUF4Li68tjTRTLx 5Abmq0prmuL+SiaXLaLI3lucOX5t141TDPhWHj423xFflOz6A3hInFEKihkILO3/ uJBwELn7oUynhqUR7pO58EW0qqsXTi2q//+w2x+4mlZqgIyrxbb1E2mXzBUp81Rz EmsQzTPFe2Kz8tEincxD2+4x+nVfKb/8+2+ReJpyJI5xyFPgh2ZkwvB8+LUYNmuR FYUKkwoKwNYr0kyG7HhLWe1VmNjvSvk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:59 2026 by rpki-client