This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa File: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (raw, json) Hash identifier: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ= Subject key identifier: F6:A7:1D:13:56:0B:FF:40:B5:4B:F7:B3:3E:2E:A9:57:08:D8:2F:A9 Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa Certificate serial: 019B7EA70A5499722F255916BAA2A988D9BF Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60237 IP address blocks: 185.34.44.0/22 maxlen: 22 2a00:d5e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0a:54:99:72:2f:25:59:16:ba:a2:a9:88:d9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a71d13560bff40b54bf7b33e2ea95708d82fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:9d:9f:5f:a9:2a:1d:aa:1d:09:08:fd:38: 35:80:1b:ea:84:37:39:73:ae:fa:2a:bc:99:ee:52: e0:7d:70:8d:d3:3d:21:6f:68:82:a0:db:2a:37:af: bc:e8:c5:e1:eb:f4:c2:ab:1c:8f:12:ed:c4:c7:2e: 73:ea:e8:40:a0:74:d5:76:84:9e:dc:5d:1a:f0:bc: 63:44:e3:91:bc:1f:49:a9:4a:4b:e3:e5:5f:c2:7b: b7:6f:a5:ee:fb:58:44:9d:f6:30:cb:ef:22:94:ce: 21:42:0e:ef:62:b9:95:44:df:8f:09:a8:89:f6:d9: 34:32:53:53:f3:00:14:a3:02:a9:16:75:81:7e:3a: 09:fe:18:7d:51:3b:7c:d3:f3:0b:6a:21:35:f5:85: ae:ab:d6:90:ab:fd:39:8f:e8:36:c6:61:30:65:e6: 28:68:d3:ef:f0:a4:d9:53:dd:2c:c7:00:0d:d2:7c: d6:1d:6a:80:cb:d9:0a:92:29:cc:1a:62:da:64:65: 38:17:86:0c:f0:26:bc:c3:d2:40:64:17:02:52:7e: e0:25:6b:68:2c:e2:e5:8d:58:f1:b8:bd:1a:e6:3d: ad:9f:21:61:f8:f7:22:50:f9:10:bc:bf:84:4b:b3: 21:52:67:cd:ee:fc:b0:85:7e:7b:7e:1d:12:0c:33: ac:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A7:1D:13:56:0B:FF:40:B5:4B:F7:B3:3E:2E:A9:57:08:D8:2F:A9 X509v3 Authority Key Identifier: keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.44.0/22 IPv6: 2a00:d5e0::/32 Signature Algorithm: sha256WithRSAEncryption e4:ea:1e:b2:f1:ff:0c:9d:10:7c:85:45:37:1b:d9:65:78:9a: ec:b4:29:12:e0:a9:a8:82:a5:d5:6a:50:e5:97:36:d1:ec:ee: 7c:d7:0b:0c:05:56:48:32:a9:53:e0:37:51:03:ff:b5:6c:4a: 51:7b:77:52:e3:c5:fa:1a:44:99:cd:8b:f3:94:ad:4e:14:2f: db:89:75:58:23:e8:dd:9f:74:f2:f5:78:d3:f6:dc:61:23:38: bc:63:76:45:a3:56:f7:a2:c3:f8:e2:dd:3c:b4:a8:66:3a:be: 79:58:45:9c:9c:c0:aa:24:4d:ce:b5:43:75:7e:32:2f:90:9a: 1b:84:c5:ec:04:ca:7d:17:ca:fb:ee:6f:4b:3c:40:fb:16:38: fb:cd:8e:4c:83:9d:d9:75:f8:3e:e0:fa:d1:75:66:50:db:4f: 2d:be:fa:45:2f:ab:19:77:c7:31:3d:7f:2b:2e:a4:31:f7:dd: 56:bb:b2:ca:f2:94:f1:27:d9:7a:2c:5e:7a:ec:80:af:14:21: fb:fa:17:71:ac:7f:7d:5a:fc:4e:4c:b1:35:66:51:21:7d:4a: 03:90:79:8a:60:63:46:51:57:18:4d:dc:a2:9c:48:bc:17:f4: 64:84:72:f8:ee:dc:72:b2:f6:c0:d7:6c:d9:8e:16:32:25:3f: e4:44:55:ef -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pwpUmXIvJVkWuqKpiNm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj MjdiZmEwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmE3MWQxMzU2MGJmZjQwYjU0YmY3YjMzZTJlYTk1NzA4ZDgyZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibudn1+pKh2qHQkI/Tg1gBvqhDc5 c676KryZ7lLgfXCN0z0hb2iCoNsqN6+86MXh6/TCqxyPEu3Exy5z6uhAoHTVdoSe 3F0a8LxjROORvB9JqUpL4+Vfwnu3b6Xu+1hEnfYwy+8ilM4hQg7vYrmVRN+PCaiJ 9tk0MlNT8wAUowKpFnWBfjoJ/hh9UTt80/MLaiE19YWuq9aQq/05j+g2xmEwZeYo aNPv8KTZU90sxwAN0nzWHWqAy9kKkinMGmLaZGU4F4YM8Ca8w9JAZBcCUn7gJWto LOLljVjxuL0a5j2tnyFh+PciUPkQvL+ES7MhUmfN7vywhX57fh0SDDOsrQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPanHRNWC/9AtUv3sz4uqVcI2C+pMB8GA1UdIwQY MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et YzMxZmE3MWUyNjM1LzEvOXFjZEUxWUxfMEMxU19lelBpNnBWd2pZTDZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1 LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSIsMA0E AgACMAcDBQAqANXgMA0GCSqGSIb3DQEBCwUAA4IBAQDk6h6y8f8MnRB8hUU3G9ll eJrstCkS4KmogqXValDllzbR7O581wsMBVZIMqlT4DdRA/+1bEpRe3dS48X6GkSZ zYvzlK1OFC/biXVYI+jdn3Ty9XjT9txhIzi8Y3ZFo1b3osP44t08tKhmOr55WEWc nMCqJE3OtUN1fjIvkJobhMXsBMp9F8r77m9LPED7Fjj7zY5Mg53Zdfg+4PrRdWZQ 208tvvpFL6sZd8cxPX8rLqQx991Wu7LK8pTxJ9l6LF567ICvFCH7+hdxrH99WvxO TLE1ZlEhfUoDkHmKYGNGUVcYTdyinEi8F/RkhHL47txysvbA12zZjhYyJT/kRFXv -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:25 2026 by rpki-client