This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa File: 9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa (raw, json) Hash identifier: M8D9X9HUQkQdMWCylk5MMocwUSM9A6MJTfk46/lEGqw= Subject key identifier: F5:C2:DA:09:13:26:91:44:AC:CB:11:43:38:88:13:1D:8A:86:8E:B0 Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Certificate serial: 019B7B3575B67C0D64CCF7210BD0F5564E5B Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12324 IP address blocks: 5.201.0.0/17 maxlen: 17 87.246.192.0/19 maxlen: 19 87.246.240.0/20 maxlen: 20 185.76.104.0/22 maxlen: 22 212.182.0.0/18 maxlen: 18 212.182.64.0/20 maxlen: 20 2a04:440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:75:b6:7c:0d:64:cc:f7:21:0b:d0:f5:56:4e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5c2da0913269144accb11433888131d8a868eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:87:f0:95:21:a3:cf:05:ec:f2:00:fc:1a: 1f:ec:4e:8b:de:98:ca:b7:be:fa:1d:6a:bd:d7:c1: ed:cc:90:82:e6:a5:f2:19:c1:3a:81:65:59:87:9c: fb:28:dc:17:bc:64:2c:06:3a:1e:36:11:f0:3e:7a: cd:23:2f:97:2a:53:0d:d6:3c:97:9a:1a:17:f1:09: e8:38:70:9b:3f:1d:5f:5a:c5:1c:5b:b2:a3:0b:6c: 73:55:20:2d:bf:9c:67:bd:03:6b:ec:7f:ef:2b:b9: bb:c8:37:37:2c:31:79:e5:82:fe:8e:d0:6e:1d:28: ba:e6:72:21:89:ad:b9:45:53:4d:f6:3a:4f:a4:c5: 5b:49:b9:3e:be:32:63:37:3c:60:ea:4c:e2:67:6b: 8c:6c:27:3d:62:8f:49:69:b9:ec:98:06:36:82:df: 7b:94:11:3b:29:e3:b4:7d:28:91:fc:7e:20:aa:ac: 6e:c8:32:3e:18:3c:26:14:cb:df:51:bc:2e:52:aa: c5:6c:4f:e4:9c:53:00:f8:6b:f5:6c:9c:8c:b9:26: 08:3c:7a:76:da:70:59:6f:18:39:4c:59:4e:ad:e1: 04:ce:4f:86:31:d2:43:f3:66:91:b1:29:a7:e7:ed: 4b:1b:b1:c4:45:38:dd:fb:54:82:96:3f:03:5a:0a: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C2:DA:09:13:26:91:44:AC:CB:11:43:38:88:13:1D:8A:86:8E:B0 X509v3 Authority Key Identifier: keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.201.0.0/17 87.246.192.0/19 87.246.240.0/20 185.76.104.0/22 212.182.0.0-212.182.79.255 IPv6: 2a04:440::/32 Signature Algorithm: sha256WithRSAEncryption 0c:bf:c8:63:d5:1d:a5:8f:7f:2c:0d:17:c7:73:3d:e7:a9:23: d9:3a:a1:c9:66:be:d9:16:f3:b7:3d:6d:aa:5c:ec:93:19:6e: 20:43:7c:28:a7:7a:7c:c6:93:49:f2:d7:f7:26:43:84:10:99: da:61:bf:1c:53:10:96:71:c6:26:98:3f:86:2d:1c:78:93:e9: 14:4e:35:6b:f6:63:72:df:6b:71:27:12:dc:a2:49:d1:5c:1d: 19:59:34:c4:2f:e2:05:0f:d6:f7:a3:b7:1d:0c:7f:4b:af:9c: 7f:02:a9:30:e1:de:d6:3b:79:91:5b:7f:61:05:6c:7c:19:25: 02:bd:c9:f0:38:af:06:ec:16:4f:aa:c6:ed:1e:fc:fa:8b:ff: fa:d0:b9:23:99:92:f1:e2:46:e1:2b:20:3f:d9:28:40:88:83: ed:61:15:c8:0c:83:1e:59:e2:4f:f4:7c:fd:4c:e0:cf:3d:49: 94:dc:f2:d7:21:bb:90:50:0f:51:9e:4c:8a:1d:18:29:45:00: 41:f4:2c:46:92:09:c9:ec:ce:eb:c1:ac:aa:4f:d6:52:52:67: 61:98:db:f5:88:98:dc:86:f1:84:f6:03:a8:39:69:7a:2a:dc: ec:9e:ab:4b:99:a1:7f:95:d9:79:c4:13:89:78:5c:8b:a4:60: 24:a9:b0:fd -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt7NXW2fA1kzPchC9D1Vk5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2 M2MwYTkwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWMyZGEwOTEzMjY5MTQ0YWNjYjExNDMzODg4MTMxZDhhODY4ZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsCH8JUho88F7PIA/Bof7E6L3pjK t776HWq918HtzJCC5qXyGcE6gWVZh5z7KNwXvGQsBjoeNhHwPnrNIy+XKlMN1jyX mhoX8QnoOHCbPx1fWsUcW7KjC2xzVSAtv5xnvQNr7H/vK7m7yDc3LDF55YL+jtBu HSi65nIhia25RVNN9jpPpMVbSbk+vjJjNzxg6kziZ2uMbCc9Yo9JabnsmAY2gt97 lBE7KeO0fSiR/H4gqqxuyDI+GDwmFMvfUbwuUqrFbE/knFMA+Gv1bJyMuSYIPHp2 2nBZbxg5TFlOreEEzk+GMdJD82aRsSmn5+1LG7HERTjd+1SClj8DWgrB4wIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFPXC2gkTJpFErMsRQziIEx2Kho6wMB8GA1UdIwQY MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt OGFjYmZlYTJlY2ZhLzEvOWNMYUNSTW1rVVNzeXhGRE9JZ1RIWXFHanJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlAwQHBckAAwQF V/bAAwQEV/bwAwQCuUxoMAsDAwHUtgMEBNS2QDANBAIAAjAHAwUAKgQEQDANBgkq hkiG9w0BAQsFAAOCAQEADL/IY9UdpY9/LA0Xx3M956kj2TqhyWa+2Rbztz1tqlzs kxluIEN8KKd6fMaTSfLX9yZDhBCZ2mG/HFMQlnHGJpg/hi0ceJPpFE41a/Zjct9r cScS3KJJ0VwdGVk0xC/iBQ/W96O3HQx/S6+cfwKpMOHe1jt5kVt/YQVsfBklAr3J 8DivBuwWT6rG7R78+ov/+tC5I5mS8eJG4SsgP9koQIiD7WEVyAyDHlniT/R8/Uzg zz1JlNzy1yG7kFAPUZ5Mih0YKUUAQfQsRpIJyezO68Gsqk/WUlJnYZjb9YiY3Ibx hPYDqDlpeirc7J6rS5mhf5XZecQTiXhci6RgJKmw/Q== -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:11 2026 by rpki-client