This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9ySAsfKgZ6zFAZZNDasl70yZ4wE.roa File: 9ySAsfKgZ6zFAZZNDasl70yZ4wE.roa (raw, json) Hash identifier: npoqNO8zjTILHE/r0/WswjKmzNJjV2mCWG9XeplQcmI= Subject key identifier: F7:24:80:B1:F2:A0:67:AC:C5:01:96:4D:0D:AB:25:EF:4C:99:E3:01 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75CA53EA7AA899B1B6CDB5B6AAE69 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9ySAsfKgZ6zFAZZNDasl70yZ4wE.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12846 IP address blocks: 90.188.0.0/20 maxlen: 23 90.188.0.0/23 maxlen: 23 90.188.16.0/20 maxlen: 20 194.150.128.0/19 maxlen: 19 194.150.146.0/24 maxlen: 24 212.94.96.0/19 maxlen: 19 212.94.101.0/24 maxlen: 24 212.94.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5c:a5:3e:a7:aa:89:9b:1b:6c:db:5b:6a:ae:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f72480b1f2a067acc501964d0dab25ef4c99e301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:2e:15:af:2a:48:17:0a:22:9b:5c:56:c2: 96:2f:47:d0:87:16:e1:c5:21:c1:30:45:95:97:16: ae:2b:3b:5a:37:85:5f:ff:aa:8e:04:fe:c7:4c:68: 26:e5:cb:cf:f5:90:0a:68:c5:69:db:fa:51:f2:35: df:47:af:25:3d:4c:ba:11:1f:d4:76:fe:07:80:88: 8b:7a:0c:3d:94:bc:5d:4e:44:f5:9e:ae:2b:17:d4: 37:fa:7b:bd:d0:54:75:ea:63:92:61:fa:a9:55:0e: 26:96:10:9d:bb:04:ea:00:3b:09:07:51:20:2f:2f: 46:88:11:35:c8:77:c0:9f:cc:32:df:09:19:58:d9: e9:72:e1:31:2f:46:82:c6:ab:cf:d5:53:1a:40:1a: 68:76:da:4f:ef:83:bf:f3:0a:dc:de:49:3f:e3:11: f5:2d:62:ba:b3:aa:e0:f6:3e:32:00:9b:d9:f8:71: 00:76:84:38:2e:1e:63:4d:23:f6:d0:23:b5:1d:77: e4:4e:89:a7:7e:0c:3d:dd:0a:e0:8f:ac:e6:e6:9a: 61:49:3f:5c:8e:03:e9:8e:a2:47:a5:f6:55:4a:64: 7e:00:6c:56:66:33:82:0d:18:ac:41:dd:a1:ec:e1: 24:ce:64:2f:0f:ce:d9:ac:6a:1a:20:fc:d9:f7:d1: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:24:80:B1:F2:A0:67:AC:C5:01:96:4D:0D:AB:25:EF:4C:99:E3:01 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9ySAsfKgZ6zFAZZNDasl70yZ4wE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.188.0.0/19 194.150.128.0/19 212.94.96.0/19 Signature Algorithm: sha256WithRSAEncryption 98:76:65:0e:1d:28:40:31:59:6a:1a:20:04:3a:24:4d:e2:22: a3:41:1d:d9:02:64:c2:42:40:3b:b9:d1:d8:0e:89:dd:8b:42: d0:5c:fb:83:8f:a1:7d:9d:da:3c:c6:43:c8:98:d1:5e:f5:40: 3f:f1:bc:b0:ad:24:22:cc:85:85:aa:92:4b:36:c5:e2:f7:c5: 3e:78:dc:82:45:ce:0a:77:8b:7c:12:93:e4:5c:5e:aa:42:fc: fd:62:7a:9c:bf:48:28:f1:3a:4e:74:36:12:5a:3d:03:63:a8: 34:32:90:41:7d:d7:ca:77:75:7a:94:fe:5b:37:10:c4:b1:1d: 83:94:f8:3f:84:8d:79:77:63:86:32:73:43:96:0b:3f:8a:f6: 87:0f:ba:8f:96:a7:6c:f7:3c:cf:b5:56:77:eb:4e:ff:e0:b5: f7:3a:5e:83:fb:bc:71:20:aa:70:fa:5c:cd:34:32:1f:8d:a8: 4a:bc:07:a5:30:e3:e3:6f:96:27:c2:b8:a5:15:84:a6:0a:b7: 74:03:fe:8e:ba:15:4e:0b:7b:3b:64:00:67:7a:11:2f:05:e2: ee:af:8b:37:2f:70:0d:52:eb:d9:e3:ea:a5:da:21:50:e4:53: fb:b9:3d:6c:8f:29:a6:b0:e7:18:3b:2b:24:e9:1f:b5:01:64: 14:a9:c0:16 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p1ylPqeqiZsbbNtbaq5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzI0ODBiMWYyYTA2N2FjYzUwMTk2NGQwZGFiMjVlZjRjOTllMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8suFa8qSBcKIptcVsKWL0fQhxbh xSHBMEWVlxauKztaN4Vf/6qOBP7HTGgm5cvP9ZAKaMVp2/pR8jXfR68lPUy6ER/U dv4HgIiLegw9lLxdTkT1nq4rF9Q3+nu90FR16mOSYfqpVQ4mlhCduwTqADsJB1Eg Ly9GiBE1yHfAn8wy3wkZWNnpcuExL0aCxqvP1VMaQBpodtpP74O/8wrc3kk/4xH1 LWK6s6rg9j4yAJvZ+HEAdoQ4Lh5jTSP20CO1HXfkTomnfgw93Qrgj6zm5pphST9c jgPpjqJHpfZVSmR+AGxWZjOCDRisQd2h7OEkzmQvD87ZrGoaIPzZ99ELEwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPckgLHyoGesxQGWTQ2rJe9MmeMBMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvOXlTQXNmS2daNnpGQVpaTkRhc2w3MHlaNHdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFWrwAAwQF wpaAAwQF1F5gMA0GCSqGSIb3DQEBCwUAA4IBAQCYdmUOHShAMVlqGiAEOiRN4iKj QR3ZAmTCQkA7udHYDondi0LQXPuDj6F9ndo8xkPImNFe9UA/8bywrSQizIWFqpJL NsXi98U+eNyCRc4Kd4t8EpPkXF6qQvz9Ynqcv0go8TpOdDYSWj0DY6g0MpBBfdfK d3V6lP5bNxDEsR2DlPg/hI15d2OGMnNDlgs/ivaHD7qPlqds9zzPtVZ3607/4LX3 Ol6D+7xxIKpw+lzNNDIfjahKvAelMOPjb5YnwrilFYSmCrd0A/6OuhVOC3s7ZABn ehEvBeLur4s3L3ANUuvZ4+ql2iFQ5FP7uT1sjymmsOcYOysk6R+1AWQUqcAW -----END CERTIFICATE-----Generated at Mon Jan 26 10:15:00 2026 by rpki-client