This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/9muaEb76gYCulXMmMLPDvSg3Tfs.roa File: 9muaEb76gYCulXMmMLPDvSg3Tfs.roa (raw, json) Hash identifier: V31luJDNiwqlc5PDFE/H4c6gZhVQ7dVXjrntc2C134k= Subject key identifier: F6:6B:9A:11:BE:FA:81:80:AE:95:73:26:30:B3:C3:BD:28:37:4D:FB Certificate issuer: /CN=229a038176c796ea4f2769f6be3cace1a3597634 Certificate serial: 019B7C130A0A680A34A92AB52FE8E6EDB477 Authority key identifier: 22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/9muaEb76gYCulXMmMLPDvSg3Tfs.roa Signing time: Fri 02 Jan 2026 00:19:41 +0000 ROA not before: Fri 02 Jan 2026 00:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34722 IP address blocks: 94.125.208.0/21 maxlen: 21 94.125.208.0/24 maxlen: 24 94.125.209.0/24 maxlen: 24 94.125.210.0/24 maxlen: 24 94.125.211.0/24 maxlen: 24 94.125.212.0/24 maxlen: 24 94.125.213.0/24 maxlen: 24 94.125.214.0/24 maxlen: 24 94.125.215.0/24 maxlen: 24 185.160.16.0/22 maxlen: 22 185.160.16.0/24 maxlen: 24 185.160.17.0/24 maxlen: 24 185.160.18.0/24 maxlen: 24 185.160.19.0/24 maxlen: 24 194.30.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0a:0a:68:0a:34:a9:2a:b5:2f:e8:e6:ed:b4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229a038176c796ea4f2769f6be3cace1a3597634 Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f66b9a11befa8180ae95732630b3c3bd28374dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:e8:ee:dd:2b:75:56:04:cb:84:9d:e1:4a: 60:ed:af:17:fd:76:86:66:cb:f5:fa:17:ac:5c:f4: 30:30:bd:1e:70:86:f9:bb:19:27:95:82:5f:70:72: 4e:9a:75:0f:4e:2a:9c:ea:2e:85:0b:2e:45:15:93: d5:0f:a9:26:c1:c0:6b:05:0a:9a:81:f5:db:b7:6a: 06:ea:49:d8:07:49:06:29:09:5a:82:86:54:f7:7b: 82:f4:74:1c:52:ed:bc:27:3e:b5:72:05:fe:f3:94: 9c:9f:5f:2e:bb:51:0b:55:17:05:f7:da:4e:2b:cd: 7e:8c:ed:76:92:08:64:3c:df:f3:13:47:6f:94:c0: 6a:f2:b3:93:cd:46:63:b8:50:8a:83:b8:1c:3e:86: 81:79:23:1c:a9:f5:68:52:00:72:82:a9:23:cf:05: f3:5c:af:71:55:21:fd:f8:c9:3b:2b:35:9f:52:1e: a5:3a:71:4a:a6:98:d1:a3:e8:12:be:b5:cf:89:52: 82:33:c9:44:21:c6:76:73:9d:a2:56:a3:ba:6d:52: a6:b1:ba:6f:ae:22:cb:7f:75:a6:a8:51:1b:4a:82: 80:78:59:a8:7b:64:4c:ed:34:7e:8c:02:e2:25:51: 57:f6:0b:89:6b:50:28:5a:4e:3e:c5:a3:c3:43:69: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6B:9A:11:BE:FA:81:80:AE:95:73:26:30:B3:C3:BD:28:37:4D:FB X509v3 Authority Key Identifier: keyid:22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/9muaEb76gYCulXMmMLPDvSg3Tfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.208.0/21 185.160.16.0/22 194.30.162.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:f8:c1:32:cb:83:ff:bb:6a:e7:90:85:62:81:14:8b:1e:55: 8d:f9:31:2e:9a:8d:53:d9:6e:4d:6d:01:af:96:38:df:fa:1b: 25:21:52:c7:a1:3a:c5:f8:4d:78:83:5c:25:c4:d0:d3:1b:d0: 9a:bf:ce:9f:24:62:7c:51:2a:ee:2e:6c:22:9d:57:55:43:6a: dd:44:94:86:d7:06:f2:8f:f5:0d:fa:3c:22:59:09:48:53:ac: ba:a2:87:c0:13:40:1a:10:c8:5e:5f:2e:5e:88:c4:cb:9a:67: c6:44:37:e7:12:2e:53:10:71:16:62:64:f4:a1:1d:19:04:38: 3c:17:8e:1c:d4:77:52:f7:3b:78:f6:16:db:12:44:b8:b6:c6: 0c:8f:e4:e7:3a:48:1d:91:e1:56:17:66:0a:83:f8:74:84:4e: 45:56:f1:f2:ca:a2:57:b6:1f:a7:11:bd:89:a9:c5:ec:e8:dc: 0b:a5:fc:ef:8b:c0:96:af:bc:63:14:7f:2d:3b:4a:a2:87:37: a9:96:b2:f0:f1:46:7c:9e:a8:f5:b5:07:ba:d8:0b:11:fe:4d: cf:f7:56:bf:34:ad:39:6f:8f:65:04:01:d1:b6:00:30:c1:7b: c2:a5:5f:29:bb:74:fa:0f:29:41:17:d2:37:ac:64:9b:ab:d3: 7a:e7:0e:69 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EwoKaAo0qSq1L+jm7bR3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOWEwMzgxNzZjNzk2ZWE0ZjI3NjlmNmJlM2NhY2UxYTM1 OTc2MzQwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjZiOWExMWJlZmE4MTgwYWU5NTczMjYzMGIzYzNiZDI4Mzc0ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1vo7t0rdVYEy4Sd4Upg7a8X/XaG Zsv1+hesXPQwML0ecIb5uxknlYJfcHJOmnUPTiqc6i6FCy5FFZPVD6kmwcBrBQqa gfXbt2oG6knYB0kGKQlagoZU93uC9HQcUu28Jz61cgX+85Scn18uu1ELVRcF99pO K81+jO12kghkPN/zE0dvlMBq8rOTzUZjuFCKg7gcPoaBeSMcqfVoUgBygqkjzwXz XK9xVSH9+Mk7KzWfUh6lOnFKppjRo+gSvrXPiVKCM8lEIcZ2c52iVqO6bVKmsbpv riLLf3WmqFEbSoKAeFmoe2RM7TR+jALiJVFX9guJa1AoWk4+xaPDQ2nIPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPZrmhG++oGArpVzJjCzw70oN037MB8GA1UdIwQY MBaAFCKaA4F2x5bqTydp9r48rOGjWXY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zYjVmNGUtOTNmZi00ZGZiLWIwMmQt ZGMyMzAxZmJiYjdjLzEvOW11YUViNzZnWUN1bFhNbU1MUER2U2czVGZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zYjVmNGUtOTNmZi00ZGZiLWIwMmQtZGMyMzAxZmJiYjdj LzEvSXBvRGdYYkhsdXBQSjJuMnZqeXM0YU5aZGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXn3QAwQC uaAQAwQAwh6iMA0GCSqGSIb3DQEBCwUAA4IBAQAq+MEyy4P/u2rnkIVigRSLHlWN +TEumo1T2W5NbQGvljjf+hslIVLHoTrF+E14g1wlxNDTG9Cav86fJGJ8USruLmwi nVdVQ2rdRJSG1wbyj/UN+jwiWQlIU6y6oofAE0AaEMheXy5eiMTLmmfGRDfnEi5T EHEWYmT0oR0ZBDg8F44c1HdS9zt49hbbEkS4tsYMj+TnOkgdkeFWF2YKg/h0hE5F VvHyyqJXth+nEb2JqcXs6NwLpfzvi8CWr7xjFH8tO0qihzeplrLw8UZ8nqj1tQe6 2AsR/k3P91a/NK05b49lBAHRtgAwwXvCpV8pu3T6DylBF9I3rGSbq9N65w5p -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:56 2026 by rpki-client