This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/dEe9kef00viBgag16NgYd-MmkFk.roa File: dEe9kef00viBgag16NgYd-MmkFk.roa (raw, json) Hash identifier: ijeJQOQCPV+rQCmqff64uTf1aTuDHnwhJzXA65R50R0= Subject key identifier: 74:47:BD:91:E7:F4:D2:F8:81:81:A8:35:E8:D8:18:77:E3:26:90:59 Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c Certificate serial: 019B7B36CA7CEC4228FA8E814815068ED91C Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/dEe9kef00viBgag16NgYd-MmkFk.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202074 IP address blocks: 91.189.212.0/22 maxlen: 24 185.54.152.0/22 maxlen: 24 185.125.144.0/22 maxlen: 24 185.254.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ca:7c:ec:42:28:fa:8e:81:48:15:06:8e:d9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7447bd91e7f4d2f88181a835e8d81877e3269059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:3b:4d:5c:a1:84:23:17:cf:f4:62:e1:5f: 36:ee:5a:83:ea:d2:e8:e4:19:b7:4c:33:ff:5a:33: 04:10:e7:6c:67:ad:bd:e6:ad:42:47:83:57:20:3e: e2:2b:ba:45:47:ba:81:5c:e7:3a:a3:09:df:7f:e9: b4:7a:2b:d1:e0:d9:ac:4e:98:c8:19:5b:ad:46:6e: 38:33:f6:f7:9a:9c:36:5f:09:17:66:33:92:a9:ec: 51:76:06:1b:ec:41:be:ba:9c:0f:1a:0b:f8:e8:1c: 03:63:47:3d:a4:4d:4f:9c:79:89:8c:cb:12:33:e3: 7f:98:3a:c2:61:e2:a9:03:5c:21:e2:78:8e:9d:4a: 25:fe:c1:ee:14:e9:03:ef:b7:f6:d2:4d:40:d5:34: 05:c2:5f:41:b2:09:52:1a:18:43:08:8f:38:a7:b4: 76:55:75:c9:aa:47:3f:bf:cc:0d:cd:a9:a9:08:3f: 08:45:02:73:ab:54:41:2b:2c:21:de:6a:14:8e:45: f1:f8:0a:21:ec:f0:02:3b:c1:d6:00:a8:be:6f:30: d3:8d:ad:3f:19:27:f5:c8:fb:c4:43:9b:11:92:e3: 82:12:95:b7:16:03:a4:21:c6:fb:9a:c3:77:f6:1d: 26:66:a2:b3:2f:0f:e5:b9:de:a4:ca:a2:5f:c7:d4: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:47:BD:91:E7:F4:D2:F8:81:81:A8:35:E8:D8:18:77:E3:26:90:59 X509v3 Authority Key Identifier: keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/dEe9kef00viBgag16NgYd-MmkFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.212.0/22 185.54.152.0/22 185.125.144.0/22 185.254.168.0/22 Signature Algorithm: sha256WithRSAEncryption 98:29:05:fe:e2:17:93:67:9b:e7:5c:ff:a0:6d:b7:52:37:36: 3b:d0:72:fe:73:27:a9:24:32:f6:16:1e:d7:9d:6e:3d:d1:9f: 20:4d:80:35:c3:d1:f3:a0:67:72:3c:67:f5:6a:eb:b7:dd:4f: cd:5f:35:be:1e:86:c7:c9:98:17:e6:33:de:c6:e4:a1:d1:a4: 7d:22:4d:bd:ce:13:d7:d4:76:03:81:6e:d9:28:ae:c7:b2:ed: 1a:b8:46:18:25:c9:53:d2:dc:dd:9d:52:d7:fe:82:ca:90:74: e6:0f:3b:28:b4:f4:46:d3:1e:f6:60:84:f2:b8:2d:38:d8:51: 75:f9:c8:27:3c:96:28:02:ae:10:0f:fb:31:d4:68:04:b4:46: 35:c6:a3:55:81:aa:6f:c0:12:7c:d4:74:62:f9:ac:94:d2:8f: 4a:82:e3:1f:4a:05:df:63:ee:40:7c:0d:a7:8e:94:f0:cf:fe: 73:71:18:60:46:2b:20:2d:23:45:0f:80:52:1f:b5:77:51:54: 56:27:58:4c:43:a1:2a:47:be:19:0c:fc:e7:30:a2:d8:6d:5b: 06:0c:6c:d5:e4:08:77:83:1e:30:a9:7d:0e:a6:9d:12:37:17: 92:64:fa:98:82:80:2b:c0:eb:55:8d:2f:1d:33:3a:69:f3:12: de:8a:f5:ed -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7Nsp87EIo+o6BSBUGjtkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYTY5MTc4NzZmZDc4OTI2YzE5MjdiOWZkYzc5NjU4ZDc0 NmM4NGMwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQ3YmQ5MWU3ZjRkMmY4ODE4MWE4MzVlOGQ4MTg3N2UzMjY5MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttk7TVyhhCMXz/Ri4V827lqD6tLo 5Bm3TDP/WjMEEOdsZ6295q1CR4NXID7iK7pFR7qBXOc6ownff+m0eivR4NmsTpjI GVutRm44M/b3mpw2XwkXZjOSqexRdgYb7EG+upwPGgv46BwDY0c9pE1PnHmJjMsS M+N/mDrCYeKpA1wh4niOnUol/sHuFOkD77f20k1A1TQFwl9BsglSGhhDCI84p7R2 VXXJqkc/v8wNzampCD8IRQJzq1RBKywh3moUjkXx+Aoh7PACO8HWAKi+bzDTja0/ GSf1yPvEQ5sRkuOCEpW3FgOkIcb7msN39h0mZqKzLw/lud6kyqJfx9TuCwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHRHvZHn9NL4gYGoNejYGHfjJpBZMB8GA1UdIwQY MBaAFEqmkXh2/XiSbBknuf3HlljXRshMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQt OWNlMjdjMTJiMmY0LzEvZEVlOWtlZjAwdmlCZ2FnMTZOZ1lkLU1ta0ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lMTFlYTMtODcwNS00MGFjLWE2OGQtOWNlMjdjMTJiMmY0 LzEvU3FhUmVIYjllSkpzR1NlNV9jZVdXTmRHeUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW73UAwQC uTaYAwQCuX2QAwQCuf6oMA0GCSqGSIb3DQEBCwUAA4IBAQCYKQX+4heTZ5vnXP+g bbdSNzY70HL+cyepJDL2Fh7XnW490Z8gTYA1w9HzoGdyPGf1auu33U/NXzW+HobH yZgX5jPexuSh0aR9Ik29zhPX1HYDgW7ZKK7Hsu0auEYYJclT0tzdnVLX/oLKkHTm DzsotPRG0x72YITyuC042FF1+cgnPJYoAq4QD/sx1GgEtEY1xqNVgapvwBJ81HRi +ayU0o9KguMfSgXfY+5AfA2njpTwz/5zcRhgRisgLSNFD4BSH7V3UVRWJ1hMQ6Eq R74ZDPznMKLYbVsGDGzV5Ah3gx4wqX0Opp0SNxeSZPqYgoArwOtVjS8dMzpp8xLe ivXt -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:28 2026 by rpki-client