This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/1-YBS9Feac70kadsYg363ME9yGgQ.roa File: 1-YBS9Feac70kadsYg363ME9yGgQ.roa (raw, json) Hash identifier: 8fDUAsKuvJ5/4WkI3CfxYzu10PkFm+h5ZzqaY78cj9A= Subject key identifier: F9:80:52:F4:57:9A:73:BD:24:69:DB:18:83:7E:B7:30:4F:72:1A:04 Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Certificate serial: 019B7BA4C600BACC2A77DD8A62B562739B96 Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/1-YBS9Feac70kadsYg363ME9yGgQ.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31726 IP address blocks: 31.204.72.0/21 maxlen: 21 94.139.64.0/19 maxlen: 19 109.109.64.0/19 maxlen: 19 185.211.72.0/22 maxlen: 22 2a00:1680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c6:00:ba:cc:2a:77:dd:8a:62:b5:62:73:9b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f98052f4579a73bd2469db18837eb7304f721a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:53:05:13:0a:c4:93:40:ed:fa:df:4c:b5: e7:eb:a2:cd:99:1b:f9:e7:25:47:73:29:d3:a8:54: f7:83:e2:8e:ce:8c:6e:b0:d1:da:b5:77:0a:7b:73: 27:33:fe:12:14:fd:53:a6:de:b6:e9:36:7c:4f:30: 7a:40:4e:35:ba:b9:ed:aa:e5:8d:b6:c8:b1:fa:53: 2e:d9:8f:b2:ea:8b:65:59:ff:cf:3c:25:cb:ac:30: 82:5d:91:a5:01:fa:3e:04:1f:4b:32:f2:a0:31:33: 72:40:17:6b:27:57:6e:00:34:00:ef:13:ac:a2:70: dc:f2:85:fc:3f:79:0f:0e:b8:24:54:0f:17:11:f6: 9c:a9:db:d2:48:24:37:95:58:ea:f1:6f:7c:a3:4b: f9:d4:7b:3d:97:44:d8:4a:e8:96:76:47:08:91:27: 09:e4:38:56:3f:61:46:22:23:b0:c8:03:07:66:75: c4:f1:c6:a5:25:8a:9b:18:7d:21:8f:2e:c1:12:1f: 18:c7:fc:1c:26:9a:27:ac:a9:2a:42:c5:a3:54:18: 62:0f:06:37:2b:a6:c6:69:f2:39:68:d1:64:46:60: fe:94:ea:ae:0e:8d:da:fb:11:0e:9a:99:05:22:2f: 58:78:87:91:f9:47:5d:40:b0:dc:cc:1a:79:b8:92: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:80:52:F4:57:9A:73:BD:24:69:DB:18:83:7E:B7:30:4F:72:1A:04 X509v3 Authority Key Identifier: keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/1-YBS9Feac70kadsYg363ME9yGgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.204.72.0/21 94.139.64.0/19 109.109.64.0/19 185.211.72.0/22 IPv6: 2a00:1680::/32 Signature Algorithm: sha256WithRSAEncryption 12:dd:0a:eb:ee:d1:c9:ee:e0:c7:65:31:3c:d5:e1:a3:53:0a: 9c:1d:9d:8b:fc:65:f8:ec:a5:5e:86:3a:4a:cf:28:88:28:d6: 65:ec:9f:d7:8e:d9:29:11:f2:24:e7:a2:d0:54:16:54:48:30: 0e:ef:b7:8e:06:15:86:3b:aa:d4:50:06:fa:d4:47:d0:b2:af: e8:fe:0e:48:00:29:40:d0:7c:cf:bd:94:41:fb:a9:10:d8:2e: 3c:64:6e:bf:f8:a5:08:4f:20:34:dd:dd:49:ec:32:55:3a:d5: 14:f9:03:8d:b8:74:61:79:97:97:21:f8:5f:ac:6c:c2:94:ea: 9c:9e:4e:c9:90:72:b9:de:9b:81:e9:06:be:33:71:b9:a1:6b: 3a:45:bb:bc:d2:76:9c:5a:1f:1c:fd:57:36:63:51:a5:57:bf: a4:ef:8d:8e:7d:a9:52:78:87:ab:1b:7f:a1:58:d4:01:d7:87: d5:a9:4e:9c:c1:ac:d4:cf:25:86:6c:2b:4d:6b:b8:f5:c1:15: 09:c9:68:02:06:f6:f2:a6:bf:3f:b9:7c:93:46:1c:59:68:dc: d6:06:6f:a5:47:21:d2:82:b3:fe:c8:a4:ee:03:3a:9b:04:d4: 86:7e:1c:c3:1f:87:f6:21:a0:b1:c0:66:83:6b:41:1b:b7:f9: c9:34:a3:93 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7pMYAuswqd92KYrVic5uWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWY4YmNmMmEyZWMxMGY5ZTRiNjMwMmUxYjM1MDlmM2Qw MzM2ZWUwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTgwNTJmNDU3OWE3M2JkMjQ2OWRiMTg4MzdlYjczMDRmNzIxYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+NTBRMKxJNA7frfTLXn66LNmRv5 5yVHcynTqFT3g+KOzoxusNHatXcKe3MnM/4SFP1Tpt626TZ8TzB6QE41urntquWN tsix+lMu2Y+y6otlWf/PPCXLrDCCXZGlAfo+BB9LMvKgMTNyQBdrJ1duADQA7xOs onDc8oX8P3kPDrgkVA8XEfacqdvSSCQ3lVjq8W98o0v51Hs9l0TYSuiWdkcIkScJ 5DhWP2FGIiOwyAMHZnXE8calJYqbGH0hjy7BEh8Yx/wcJponrKkqQsWjVBhiDwY3 K6bGafI5aNFkRmD+lOquDo3a+xEOmpkFIi9YeIeR+UddQLDczBp5uJJxUwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPmAUvRXmnO9JGnbGIN+tzBPchoEMB8GA1UdIwQY MBaAFPafi88qLsEPnktjAuGzUJ89AzbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEt MDBhNzcwNDc3NGUxLzEvMS1ZQlM5RmVhYzcwa2Fkc1lnMzYzTUU5eUdnUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjIvOWM4YmExLTg0MDctNGMyYS05MTJhLTAwYTc3MDQ3NzRl MS8xLzlwLUx6eW91d1EtZVMyTUM0Yk5RbnowRE51NC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAx/MSAME BV6LQAMEBW1tQAMEArnTSDANBAIAAjAHAwUAKgAWgDANBgkqhkiG9w0BAQsFAAOC AQEAEt0K6+7Rye7gx2UxPNXho1MKnB2di/xl+OylXoY6Ss8oiCjWZeyf147ZKRHy JOei0FQWVEgwDu+3jgYVhjuq1FAG+tRH0LKv6P4OSAApQNB8z72UQfupENguPGRu v/ilCE8gNN3dSewyVTrVFPkDjbh0YXmXlyH4X6xswpTqnJ5OyZByud6bgekGvjNx uaFrOkW7vNJ2nFofHP1XNmNRpVe/pO+Njn2pUniHqxt/oVjUAdeH1alOnMGs1M8l hmwrTWu49cEVCcloAgb28qa/P7l8k0YcWWjc1gZvpUch0oKz/sik7gM6mwTUhn4c wx+H9iGgscBmg2tBG7f5yTSjkw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:01 2026 by rpki-client