This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/9FFbtl92SQwflV8MtJzAZegLGXA.roa File: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (raw, json) Hash identifier: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU= Subject key identifier: F4:51:5B:B6:5F:76:49:0C:1F:95:5F:0C:B4:9C:C0:65:E8:0B:19:70 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019B7F84A1452BA8A11F2D75E485A27044F2 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/9FFbtl92SQwflV8MtJzAZegLGXA.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209906 IP address blocks: 5.182.164.0/22 maxlen: 22 5.182.164.0/24 maxlen: 24 5.182.165.0/24 maxlen: 24 5.182.166.0/24 maxlen: 24 5.182.167.0/24 maxlen: 24 185.238.144.0/22 maxlen: 22 185.238.144.0/24 maxlen: 24 185.238.145.0/24 maxlen: 24 185.238.146.0/24 maxlen: 24 185.238.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a1:45:2b:a8:a1:1f:2d:75:e4:85:a2:70:44:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4515bb65f76490c1f955f0cb49cc065e80b1970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:92:ed:76:53:ae:33:13:d0:cb:e3:fc:10: d7:54:ce:dd:07:06:80:73:51:c1:fa:9a:fc:c9:b4: 0d:79:da:77:0a:b4:3e:c2:40:23:d6:c2:55:7f:54: 4f:ed:50:59:97:51:12:64:2d:6c:91:8a:f8:b8:db: 99:f7:f8:c5:b3:03:ae:f5:5d:0d:44:c8:1c:20:13: 1e:9b:92:aa:b0:89:ee:f6:d3:ef:e6:42:68:2f:3a: 5a:bc:18:37:39:34:c5:b7:70:fb:41:0b:a2:f1:76: 8c:47:28:a7:35:68:5a:8f:0b:57:67:71:a4:60:3d: 1e:d2:ad:8a:68:40:4a:74:46:00:37:4b:cd:ff:ab: ae:43:c7:7e:d0:ae:81:50:c1:ae:b8:f8:96:86:9d: 31:39:35:df:da:17:e9:23:c7:a2:df:da:47:62:70: 22:26:cd:b8:04:92:e2:8c:c6:64:8d:63:e0:9a:1f: db:41:fe:b6:55:ca:25:ff:bd:86:69:4e:b5:f1:45: 56:2b:6c:85:91:05:63:92:8c:2c:d5:c4:90:8e:d8: 34:54:c5:19:e6:3f:d8:10:50:69:38:a0:82:bb:89: f9:6a:44:77:e3:3a:32:aa:90:3c:f2:86:7d:87:2b: 2a:4f:4d:f6:f0:7d:f5:e5:9a:52:8d:1c:56:8c:ad: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:51:5B:B6:5F:76:49:0C:1F:95:5F:0C:B4:9C:C0:65:E8:0B:19:70 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/9FFbtl92SQwflV8MtJzAZegLGXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.164.0/22 185.238.144.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:a8:d6:1d:19:b6:76:d8:3f:2e:d2:39:9a:5a:62:c0:8a:d4: 2b:8e:f3:e8:c5:90:98:61:f3:51:d0:61:f1:1f:29:43:b8:c5: bd:8a:4a:7c:8d:43:47:81:48:60:a9:33:18:20:35:0e:e7:a4: 4c:d5:cd:2d:db:86:a7:f4:72:15:0b:f0:d1:88:29:c7:c9:94: a6:41:5b:f0:dc:2b:f9:4c:7f:76:99:10:ab:1f:0e:49:b5:49: f1:44:15:ac:cb:1c:85:05:15:9f:42:10:6d:b1:3e:cf:49:3e: b7:08:8b:2d:c8:1c:52:07:60:1a:13:05:37:51:be:4a:aa:8d: 81:d3:0f:38:83:08:54:a6:f4:fe:32:ee:46:b6:9e:88:11:3f: b8:1e:da:64:89:49:3b:2f:c6:1a:37:20:dd:fa:37:7d:c7:17: ad:ee:4e:f7:98:65:a1:e8:56:c9:d3:57:6e:30:5d:b5:0b:fd: b1:48:71:c5:52:89:bd:5e:63:c0:ca:b6:a6:33:7c:36:21:01: 27:91:98:fd:a6:d6:a8:38:77:82:74:b1:51:2c:b2:d3:64:62: 7e:e2:33:f6:c0:e5:e5:b7:2c:79:5c:4a:57:cb:84:11:c2:a4: a5:56:18:48:37:dc:a0:a1:36:c0:ab:eb:82:b5:67:97:5e:db: bf:7b:c7:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hKFFK6ihHy115IWicETyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDUxNWJiNjVmNzY0OTBjMWY5NTVmMGNiNDljYzA2NWU4MGIxOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgyS7XZTrjMT0Mvj/BDXVM7dBwaA c1HB+pr8ybQNedp3CrQ+wkAj1sJVf1RP7VBZl1ESZC1skYr4uNuZ9/jFswOu9V0N RMgcIBMem5KqsInu9tPv5kJoLzpavBg3OTTFt3D7QQui8XaMRyinNWhajwtXZ3Gk YD0e0q2KaEBKdEYAN0vN/6uuQ8d+0K6BUMGuuPiWhp0xOTXf2hfpI8ei39pHYnAi Js24BJLijMZkjWPgmh/bQf62Vcol/72GaU618UVWK2yFkQVjkows1cSQjtg0VMUZ 5j/YEFBpOKCCu4n5akR34zoyqpA88oZ9hysqT0328H315ZpSjRxWjK2NnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPRRW7ZfdkkMH5VfDLScwGXoCxlwMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvOUZGYnRsOTJTUXdmbFY4TXRKekFaZWdMR1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBbakAwQC ue6QMA0GCSqGSIb3DQEBCwUAA4IBAQAOqNYdGbZ22D8u0jmaWmLAitQrjvPoxZCY YfNR0GHxHylDuMW9ikp8jUNHgUhgqTMYIDUO56RM1c0t24an9HIVC/DRiCnHyZSm QVvw3Cv5TH92mRCrHw5JtUnxRBWsyxyFBRWfQhBtsT7PST63CIstyBxSB2AaEwU3 Ub5Kqo2B0w84gwhUpvT+Mu5Gtp6IET+4HtpkiUk7L8YaNyDd+jd9xxet7k73mGWh 6FbJ01duMF21C/2xSHHFUom9XmPAyramM3w2IQEnkZj9ptaoOHeCdLFRLLLTZGJ+ 4jP2wOXltyx5XEpXy4QRwqSlVhhIN9ygoTbAq+uCtWeXXtu/e8ch -----END CERTIFICATE-----Generated at Tue Feb 10 05:49:07 2026 by rpki-client