This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/t-l9Vs8ayE79aW3oHxMqNfSEsqc.roa File: t-l9Vs8ayE79aW3oHxMqNfSEsqc.roa (raw, json) Hash identifier: zSRFRPiAG5UhuNuJs++2UpnJZqPU6QT/6ncvooD2vh4= Subject key identifier: B7:E9:7D:56:CF:1A:C8:4E:FD:69:6D:E8:1F:13:2A:35:F4:84:B2:A7 Certificate issuer: /CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Certificate serial: 019B7E382EA6DB5943C071C93D1A008D747F Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/t-l9Vs8ayE79aW3oHxMqNfSEsqc.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202619 IP address blocks: 94.158.32.0/21 maxlen: 32 94.158.40.0/21 maxlen: 32 176.109.176.0/21 maxlen: 32 176.109.184.0/21 maxlen: 32 176.109.224.0/20 maxlen: 32 176.109.240.0/20 maxlen: 32 185.33.140.0/23 maxlen: 32 185.33.142.0/23 maxlen: 32 193.192.36.0/24 maxlen: 32 193.192.37.0/24 maxlen: 32 194.246.92.0/23 maxlen: 32 194.246.94.0/23 maxlen: 32 2a03:a9c0::/30 maxlen: 128 2a03:a9c4::/30 maxlen: 128 2a0d:ec0::/30 maxlen: 128 2a0d:ec4::/30 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2e:a6:db:59:43:c0:71:c9:3d:1a:00:8d:74:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7e97d56cf1ac84efd696de81f132a35f484b2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:76:a8:5d:99:d5:49:2c:c8:0f:ac:ad:1e: 13:b7:27:aa:fe:1a:d5:85:60:c0:f5:0f:c9:16:d3: eb:29:ef:6e:c4:bb:c3:34:ff:d6:5b:09:18:e9:91: 74:a8:d8:fd:6e:5f:d6:8e:5f:97:55:46:50:df:42: 27:27:c0:14:82:0e:20:d2:32:e9:ac:b8:7a:d5:fa: e7:96:29:4d:03:f2:d5:24:f8:3f:23:3d:22:a5:9e: 6d:32:7e:81:01:71:c7:d2:47:e4:ac:3c:37:37:aa: f2:36:41:50:63:f8:6a:41:fb:18:57:3e:39:77:c7: 13:ef:c1:f2:1b:3d:08:b8:93:ae:03:66:74:48:c4: 02:f5:f3:22:6c:ec:bb:97:ee:9b:a1:91:2a:17:35: 2c:3c:67:8b:54:a1:5a:ce:44:e5:12:65:81:27:ca: ac:0d:4e:a7:5b:95:be:b4:15:2e:4c:17:50:2b:f5: 57:fa:ad:4c:7c:b0:e6:5a:d6:c6:86:83:53:dd:35: 8e:e0:0e:56:31:73:e8:67:0a:9e:8f:9b:1c:9b:63: 36:77:c0:68:5d:58:04:24:12:fc:25:f8:73:f0:1a: 01:b3:ea:e2:bc:ee:76:ad:88:e2:66:06:5b:ab:bb: a8:da:01:7b:cf:4f:3b:ea:ee:f1:db:56:2c:e5:80: a1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E9:7D:56:CF:1A:C8:4E:FD:69:6D:E8:1F:13:2A:35:F4:84:B2:A7 X509v3 Authority Key Identifier: keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/t-l9Vs8ayE79aW3oHxMqNfSEsqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.158.32.0/20 176.109.176.0/20 176.109.224.0/19 185.33.140.0/22 193.192.36.0/23 194.246.92.0/22 IPv6: 2a03:a9c0::/29 2a0d:ec0::/29 Signature Algorithm: sha256WithRSAEncryption 4a:d7:6a:8a:37:77:1a:12:9a:c6:60:72:6e:0c:c2:8e:3b:2a: 9c:a4:ed:8d:fe:d1:38:e7:de:7c:d4:ee:65:24:02:a8:fc:0a: 26:7c:59:83:fb:6e:56:1f:d4:25:1a:3c:d0:b7:4c:7c:80:4d: e6:8f:d3:87:b1:a1:23:5a:5d:c9:00:8a:7e:f4:55:b0:17:7b: 8e:d6:91:40:a0:62:8e:50:6b:1d:0c:f3:b6:60:96:47:83:32: 17:99:99:45:e2:58:f8:35:bf:02:fe:48:21:bd:76:6a:43:ac: 29:ee:f9:93:3c:44:46:b2:80:f0:7a:76:6f:d3:3e:7d:3f:db: c1:03:d0:98:c7:a4:c7:4b:bf:3f:83:5b:fd:77:9e:40:0a:c1: 95:55:e0:2b:93:5b:21:d9:61:6c:1d:54:1c:f2:ea:31:17:7e: 74:a5:d6:54:54:39:a5:64:25:17:1f:a3:85:6a:b4:a3:61:e8: 1b:cf:97:d0:ed:17:65:8b:8f:b3:f7:c1:bd:4c:85:50:0f:6f: 1c:97:0a:19:09:f2:0c:86:57:33:ed:cd:96:e5:19:78:04:85: 84:51:d1:07:91:55:ed:3e:19:92:12:23:33:e8:1d:53:51:74: 34:42:fd:87:8f:e7:fa:23:34:9c:4a:a1:38:f6:5c:11:12:e9: 07:50:e4:02 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt+OC6m21lDwHHJPRoAjXR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmVlZDRkZjIwN2MzNjA5YWRmZGVkODBkZGRkOTMxNmYw YTliNDUwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2U5N2Q1NmNmMWFjODRlZmQ2OTZkZTgxZjEzMmEzNWY0ODRiMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPV2qF2Z1UksyA+srR4Ttyeq/hrV hWDA9Q/JFtPrKe9uxLvDNP/WWwkY6ZF0qNj9bl/Wjl+XVUZQ30InJ8AUgg4g0jLp rLh61frnlilNA/LVJPg/Iz0ipZ5tMn6BAXHH0kfkrDw3N6ryNkFQY/hqQfsYVz45 d8cT78HyGz0IuJOuA2Z0SMQC9fMibOy7l+6boZEqFzUsPGeLVKFazkTlEmWBJ8qs DU6nW5W+tBUuTBdQK/VX+q1MfLDmWtbGhoNT3TWO4A5WMXPoZwqej5scm2M2d8Bo XVgEJBL8Jfhz8BoBs+rivO52rYjiZgZbq7uo2gF7z0876u7x21Ys5YChWwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFLfpfVbPGshO/Wlt6B8TKjX0hLKnMB8GA1UdIwQY MBaAFPK+7U3yB8Ngmt/e2A3d2TFvCptFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEt YTQ2MTUzMTQ1Y2Y4LzEvdC1sOVZzOGF5RTc5YVczb0h4TXFOZlNFc3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEtYTQ2MTUzMTQ1Y2Y4 LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQEXp4gAwQE sG2wAwQFsG3gAwQCuSGMAwQBwcAkAwQCwvZcMBQEAgACMA4DBQMqA6nAAwUDKg0O wDANBgkqhkiG9w0BAQsFAAOCAQEAStdqijd3GhKaxmBybgzCjjsqnKTtjf7ROOfe fNTuZSQCqPwKJnxZg/tuVh/UJRo80LdMfIBN5o/Th7GhI1pdyQCKfvRVsBd7jtaR QKBijlBrHQzztmCWR4MyF5mZReJY+DW/Av5IIb12akOsKe75kzxERrKA8Hp2b9M+ fT/bwQPQmMekx0u/P4Nb/XeeQArBlVXgK5NbIdlhbB1UHPLqMRd+dKXWVFQ5pWQl Fx+jhWq0o2HoG8+X0O0XZYuPs/fBvUyFUA9vHJcKGQnyDIZXM+3NluUZeASFhFHR B5FV7T4ZkhIjM+gdU1F0NEL9h4/n+iM0nEqhOPZcERLpB1DkAg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:09 2026 by rpki-client