This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/A9X4cShQaD_mK0qE56RcWv1n6WM.roa File: A9X4cShQaD_mK0qE56RcWv1n6WM.roa (raw, json) Hash identifier: 9IXqUIjUTj9O7jC2WLB7h7sR0zwiNThCiC66By6Zpvg= Subject key identifier: 03:D5:F8:71:28:50:68:3F:E6:2B:4A:84:E7:A4:5C:5A:FD:67:E9:63 Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Certificate serial: 019B7C7FBC1CEA24371AFC55094035964241 Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/A9X4cShQaD_mK0qE56RcWv1n6WM.roa Signing time: Fri 02 Jan 2026 02:18:24 +0000 ROA not before: Fri 02 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202611 IP address blocks: 91.107.80.0/22 maxlen: 24 188.72.103.0/24 maxlen: 24 188.72.104.0/24 maxlen: 24 188.72.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bc:1c:ea:24:37:1a:fc:55:09:40:35:96:42:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03d5f8712850683fe62b4a84e7a45c5afd67e963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:f9:84:07:4e:7c:68:29:bb:fc:f7:9d:3d: 98:14:e5:26:eb:69:77:3e:47:0c:44:d1:15:11:30: 21:68:57:6f:f3:fb:24:de:04:95:b7:30:38:38:37: 1d:4c:fe:db:57:4f:fe:99:ef:09:20:59:82:44:1b: a8:1e:91:d7:cb:f4:e1:66:2c:b2:fe:5d:84:3d:96: 43:f2:6a:5e:53:32:46:f0:cd:a6:0f:e9:06:c8:52: ba:5b:34:bc:41:c9:04:ae:40:3d:91:f9:37:86:10: 7e:5d:81:dc:af:c9:01:61:39:ab:99:86:3b:13:08: 15:fd:12:ab:a4:90:a4:d8:40:b9:68:67:be:4e:36: b5:9a:34:65:32:d3:c5:8e:3e:bc:c9:08:bf:19:87: bd:11:b0:49:7b:67:55:cd:8e:ab:f1:bb:fc:1f:3d: b6:fe:bd:21:32:94:fb:82:93:10:33:0a:79:50:d5: c0:10:d5:dc:0d:5d:f6:f5:79:2b:39:83:ff:05:e3: 8b:7d:3d:0f:d6:34:af:36:d6:b1:2f:e1:98:0e:bc: ba:e7:62:7c:1f:8d:4c:8f:3a:20:ba:4a:47:07:95: 7b:bb:c1:60:7d:1a:2c:45:26:b8:4b:c5:e1:6b:1e: e0:56:9d:67:12:cc:75:e4:5b:15:47:c8:76:ad:4f: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D5:F8:71:28:50:68:3F:E6:2B:4A:84:E7:A4:5C:5A:FD:67:E9:63 X509v3 Authority Key Identifier: keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/A9X4cShQaD_mK0qE56RcWv1n6WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.107.80.0/22 188.72.103.0-188.72.105.255 Signature Algorithm: sha256WithRSAEncryption 45:2a:c0:9c:4d:33:cf:5f:04:03:88:7b:59:79:80:3e:0e:5b: ff:46:86:d9:5f:c3:a7:e9:82:b9:fe:cd:3f:cd:43:9d:b9:17: 6a:e5:01:7b:ce:04:15:cb:00:56:8a:6b:25:96:b2:06:0d:c8: a0:21:52:be:b2:b5:61:28:da:da:19:62:f3:a4:e4:43:80:d2: bd:ef:3d:be:a6:5a:91:d2:d3:8a:82:94:29:7f:73:d4:b7:9a: d8:43:9f:b1:3d:b1:4c:ef:e4:4b:f3:49:27:30:42:c8:0c:12: fc:d7:4a:3b:4b:7c:c7:cb:09:cb:0f:52:65:4d:60:e5:a5:f2: 44:89:15:f3:86:c5:89:35:01:19:ce:ad:53:9f:74:d4:1d:3b: 4c:f1:8d:aa:81:e7:f4:bc:f4:02:3a:bb:19:4f:92:46:e1:5b: 17:9c:41:a3:dd:92:65:9f:66:45:6a:9f:1e:0f:25:73:a2:8b: 28:c1:6f:44:17:3f:0d:47:53:9f:1f:c0:0b:af:03:02:ee:b1: 2d:27:ed:32:7f:0f:07:dc:e6:9e:3f:f5:76:94:8c:5a:fb:fb: cf:43:80:10:78:ab:4f:81:ce:50:4c:91:85:35:2b:24:6e:92: fe:d6:85:62:6e:17:90:13:79:0b:2f:a2:04:79:69:2a:40:92: 87:a2:60:8d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8f7wc6iQ3GvxVCUA1lkJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODZlM2U5MjhjN2YwYzlkYjY5NTE1ZmYzYWExZjY3OGNl ZTQzYzAwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2Q1Zjg3MTI4NTA2ODNmZTYyYjRhODRlN2E0NWM1YWZkNjdlOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwn5hAdOfGgpu/z3nT2YFOUm62l3 PkcMRNEVETAhaFdv8/sk3gSVtzA4ODcdTP7bV0/+me8JIFmCRBuoHpHXy/ThZiyy /l2EPZZD8mpeUzJG8M2mD+kGyFK6WzS8QckErkA9kfk3hhB+XYHcr8kBYTmrmYY7 EwgV/RKrpJCk2EC5aGe+Tja1mjRlMtPFjj68yQi/GYe9EbBJe2dVzY6r8bv8Hz22 /r0hMpT7gpMQMwp5UNXAENXcDV329XkrOYP/BeOLfT0P1jSvNtaxL+GYDry652J8 H41MjzogukpHB5V7u8FgfRosRSa4S8Xhax7gVp1nEsx15FsVR8h2rU993QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAPV+HEoUGg/5itKhOekXFr9Z+ljMB8GA1UdIwQY MBaAFNyG4+kox/DJ22lRX/OqH2eM7kPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjIt OWM4ZTU5YzI3NzFjLzEvQTlYNGNTaFFhRF9tSzBxRTU2UmNXdjFuNldNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80NzFhYTUtYzNmNy00YWZkLWIxMjItOWM4ZTU5YzI3NzFj LzEvM0liajZTakg4TW5iYVZGZjg2b2ZaNHp1UThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCW2tQMAwD BAC8SGcDBAG8SGgwDQYJKoZIhvcNAQELBQADggEBAEUqwJxNM89fBAOIe1l5gD4O W/9Ghtlfw6fpgrn+zT/NQ525F2rlAXvOBBXLAFaKayWWsgYNyKAhUr6ytWEo2toZ YvOk5EOA0r3vPb6mWpHS04qClCl/c9S3mthDn7E9sUzv5EvzSScwQsgMEvzXSjtL fMfLCcsPUmVNYOWl8kSJFfOGxYk1ARnOrVOfdNQdO0zxjaqB5/S89AI6uxlPkkbh WxecQaPdkmWfZkVqnx4PJXOiiyjBb0QXPw1HU58fwAuvAwLusS0n7TJ/Dwfc5p4/ 9XaUjFr7+89DgBB4q0+BzlBMkYU1KyRukv7WhWJuF5ATeQsvogR5aSpAkoeiYI0= -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:50 2026 by rpki-client