This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/9qWhVqf6C_xieoQAGSbyHE5D5KY.roa File: 9qWhVqf6C_xieoQAGSbyHE5D5KY.roa (raw, json) Hash identifier: dQhiQTySNdZRBr01avpOVxF4siCZ2CkUjQbcEP9vBIg= Subject key identifier: F6:A5:A1:56:A7:FA:0B:FC:62:7A:84:00:19:26:F2:1C:4E:43:E4:A6 Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Certificate serial: 019C000CF57D2285785CC05150DFA5BA2D87 Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/9qWhVqf6C_xieoQAGSbyHE5D5KY.roa Signing time: Tue 27 Jan 2026 15:22:55 +0000 ROA not before: Tue 27 Jan 2026 15:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199170 IP address blocks: 46.19.213.0/24 maxlen: 24 185.238.172.0/24 maxlen: 24 2a01:ad00:5::/48 maxlen: 48 2a01:ad00:128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:0c:f5:7d:22:85:78:5c:c0:51:50:df:a5:ba:2d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Validity Not Before: Jan 27 15:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a5a156a7fa0bfc627a84001926f21c4e43e4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:2e:32:a1:ab:7c:0f:7f:88:d6:78:9a:d1: e4:d3:d3:9c:02:31:03:84:e5:99:8c:97:5d:8a:72: cd:4c:b9:29:ab:ea:be:8a:20:56:0f:82:45:8e:63: 87:c3:0d:15:99:43:8d:c5:a8:d8:07:cb:64:23:6f: a5:2f:61:10:10:39:c1:c6:69:ee:ca:ab:95:cb:df: ca:cf:ed:fe:63:48:06:60:9e:37:22:ee:6e:b8:49: 8e:95:49:2e:f3:00:5c:95:04:04:5b:dc:d4:6f:90: 52:93:04:b8:67:75:8f:bd:b0:37:32:95:20:2a:86: dc:51:a8:53:4d:68:23:e9:4c:f6:13:cd:b0:1c:6a: a3:38:03:54:c9:94:e3:9d:0d:6e:fd:27:8c:b5:a1: 91:e0:ec:a3:66:91:2f:e5:69:96:9f:19:63:9f:64: d4:f9:d0:3b:a2:ab:77:67:0a:b4:10:ae:e3:ca:d6: 10:d6:65:19:b0:23:e5:79:cf:62:4f:eb:d9:13:6a: cb:fd:50:c0:f7:e0:4e:11:fa:7d:56:a2:53:75:76: d6:bb:c1:50:e1:9c:04:fe:1c:6c:d1:d6:29:b2:c1: 50:ea:e2:b9:04:40:63:e2:6f:83:f9:ef:bf:f3:14: b0:1b:49:ce:7e:f3:13:e5:44:cb:65:f2:21:f5:7e: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A5:A1:56:A7:FA:0B:FC:62:7A:84:00:19:26:F2:1C:4E:43:E4:A6 X509v3 Authority Key Identifier: keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/9qWhVqf6C_xieoQAGSbyHE5D5KY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.213.0/24 185.238.172.0/24 IPv6: 2a01:ad00:5::/48 2a01:ad00:128::/48 Signature Algorithm: sha256WithRSAEncryption 3b:78:33:ad:79:35:74:fb:3d:2a:0b:de:14:a9:d4:9e:5a:6d: 53:9c:d2:35:f5:4f:2d:ae:47:55:93:dc:35:52:2c:9f:97:b4: 89:52:9a:72:82:eb:32:5c:16:b0:de:03:4c:79:fb:ff:03:e7: be:04:bc:fb:f4:be:67:ae:72:43:d1:f6:a7:bb:51:54:be:41: ee:bd:fa:f0:02:f4:72:ce:63:a3:e0:ac:62:93:90:6d:0e:78: 5f:5e:74:2d:5a:19:24:40:4e:4a:9d:ce:15:f3:5a:96:84:6c: 2e:8c:11:f3:3f:3b:57:0e:01:79:da:81:1a:6f:05:fb:44:7d: 31:6b:3f:79:35:fc:d2:da:1c:ae:91:bc:5b:fd:5b:0a:6f:21: 0b:f9:a5:82:e0:19:90:b7:2c:bf:de:2c:9c:e0:3e:d4:41:2d: bb:ae:4f:79:a4:87:4f:25:79:af:8b:27:95:39:ad:83:c7:53: 84:3f:e6:eb:73:70:c1:4c:79:c2:1f:02:4a:2a:17:f6:2d:9e: 49:b9:45:99:d0:e3:d3:b6:5c:b0:1a:10:39:50:d0:6f:28:01: 00:8a:7b:6a:67:77:b4:29:18:66:6b:1d:e2:13:f9:35:10:33: b5:b4:a5:14:97:f7:e2:dc:27:04:13:59:25:72:e3:86:b5:b3: 3c:4e:44:49 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZwADPV9IoV4XMBRUN+lui2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGRmYzJhNjUxYjVlZmFiMmMwY2Q1OTMyMmQ2ZDNiNTU5 MDY1NjMwHhcNMjYwMTI3MTUyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmE1YTE1NmE3ZmEwYmZjNjI3YTg0MDAxOTI2ZjIxYzRlNDNlNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ4uMqGrfA9/iNZ4mtHk09OcAjED hOWZjJddinLNTLkpq+q+iiBWD4JFjmOHww0VmUONxajYB8tkI2+lL2EQEDnBxmnu yquVy9/Kz+3+Y0gGYJ43Iu5uuEmOlUku8wBclQQEW9zUb5BSkwS4Z3WPvbA3MpUg KobcUahTTWgj6Uz2E82wHGqjOANUyZTjnQ1u/SeMtaGR4OyjZpEv5WmWnxljn2TU +dA7oqt3Zwq0EK7jytYQ1mUZsCPlec9iT+vZE2rL/VDA9+BOEfp9VqJTdXbWu8FQ 4ZwE/hxs0dYpssFQ6uK5BEBj4m+D+e+/8xSwG0nOfvMT5UTLZfIh9X4aXQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFPaloVan+gv8YnqEABkm8hxOQ+SmMB8GA1UdIwQY MBaAFLkN/CplG176ssDNWTItbTtVkGVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2Yt ZDNlMTZhMTYzZGQzLzEvOXFXaFZxZjZDX3hpZW9RQUdTYnlIRTVENUtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2YtZDNlMTZhMTYzZGQz LzEvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALhPVAwQA ue6sMBgEAgACMBIDBwAqAa0AAAUDBwAqAa0AASgwDQYJKoZIhvcNAQELBQADggEB ADt4M615NXT7PSoL3hSp1J5abVOc0jX1Ty2uR1WT3DVSLJ+XtIlSmnKC6zJcFrDe A0x5+/8D574EvPv0vmeuckPR9qe7UVS+Qe69+vAC9HLOY6PgrGKTkG0OeF9edC1a GSRATkqdzhXzWpaEbC6MEfM/O1cOAXnagRpvBftEfTFrP3k1/NLaHK6RvFv9Wwpv IQv5pYLgGZC3LL/eLJzgPtRBLbuuT3mkh08lea+LJ5U5rYPHU4Q/5utzcMFMecIf AkoqF/Ytnkm5RZnQ49O2XLAaEDlQ0G8oAQCKe2pnd7QpGGZrHeIT+TUQM7W0pRSX 9+LcJwQTWSVy44a1szxOREk= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:55 2026 by rpki-client