This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/sIunFd-UhDIY2he6578HnH9KYM4.roa File: sIunFd-UhDIY2he6578HnH9KYM4.roa (raw, json) Hash identifier: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok= Subject key identifier: B0:8B:A7:15:DF:94:84:32:18:DA:17:BA:E7:BF:07:9C:7F:4A:60:CE Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d Certificate serial: 019B7BA54701278C4E01EFE0F6558555CEB1 Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/sIunFd-UhDIY2he6578HnH9KYM4.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205051 IP address blocks: 45.142.168.0/22 maxlen: 24 91.205.80.0/22 maxlen: 24 185.25.232.0/24 maxlen: 24 185.231.208.0/22 maxlen: 24 2a0c:8100::/29 maxlen: 32 2a0e:dac0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:47:01:27:8c:4e:01:ef:e0:f6:55:85:55:ce:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b08ba715df94843218da17bae7bf079c7f4a60ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:56:6b:25:a7:b3:09:e3:de:14:67:e5:e0: 76:f6:41:2b:9e:c1:03:79:92:d2:4e:43:f3:6d:34: 4d:fd:fc:27:8d:18:2b:e6:22:43:c7:2a:46:9b:d7: 6c:69:be:90:57:c0:14:6a:43:df:8e:e5:ec:f4:87: 65:43:80:09:66:d4:67:a9:87:11:8d:16:ee:f6:7e: 1a:ff:80:fa:a2:0e:84:29:c8:98:82:78:f2:b2:4a: 95:c1:32:97:bd:e3:9f:96:b3:3c:bb:b3:68:0d:e2: 7e:60:e9:05:d2:dc:71:a6:73:fb:1e:83:23:b2:db: 02:76:14:ef:34:71:a1:bf:fd:11:e6:1e:bb:69:b1: e3:91:e1:1e:c4:11:b6:22:32:8d:ae:d0:d1:b1:9c: 6f:49:d2:83:2e:cb:0e:85:80:0d:db:48:3f:58:2e: 8e:88:6c:76:84:ee:f1:94:34:a3:20:00:95:a5:40: fd:28:e4:46:97:ea:79:fd:24:84:c5:80:db:be:42: 00:5d:f4:35:c8:03:97:51:53:b0:aa:92:11:4c:a4: fe:e3:17:d9:6a:d6:73:86:44:d5:7c:21:16:1b:e0: 39:cb:2c:28:1f:f6:a1:06:83:08:47:43:04:26:38: 6f:b9:ee:7c:ad:4c:f2:d0:64:87:f2:46:45:8c:f9: 94:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8B:A7:15:DF:94:84:32:18:DA:17:BA:E7:BF:07:9C:7F:4A:60:CE X509v3 Authority Key Identifier: keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/sIunFd-UhDIY2he6578HnH9KYM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.168.0/22 91.205.80.0/22 185.25.232.0/24 185.231.208.0/22 IPv6: 2a0c:8100::/29 2a0e:dac0::/29 Signature Algorithm: sha256WithRSAEncryption 54:7d:5b:5a:bd:69:06:b1:fe:74:27:30:32:00:23:1e:27:7d: e0:50:99:f4:78:72:43:de:26:6c:29:49:3e:5e:24:04:87:2c: d5:c7:d4:5c:54:92:af:f4:3f:12:e0:52:da:85:9e:c2:1b:93: 3f:62:b6:a1:72:54:5e:d7:68:a2:4c:4c:8c:21:fe:16:35:68: 13:72:c5:3e:05:19:28:c1:44:8e:e1:e9:6b:10:86:f4:82:1b: 31:0a:bb:49:d7:83:7d:27:68:46:e0:f4:0c:15:d2:97:33:f6: ce:01:6c:1a:e4:79:66:ee:57:43:ea:53:e5:91:c0:38:7a:75: af:1b:0c:b5:03:f9:9f:58:36:7e:9d:9d:16:aa:0f:e0:88:c8: 9f:39:6a:a1:ef:01:98:8b:de:e6:c3:b0:85:87:a0:5d:5a:23: 6e:67:01:47:09:ce:62:72:ea:00:0c:22:42:59:ca:be:c6:34: e9:00:86:e1:e7:7a:f1:15:1d:0f:3b:66:e7:62:c2:48:40:75: 31:a5:a0:aa:00:8b:85:25:84:36:10:15:21:67:4e:0c:3e:ec: 02:dd:59:25:e2:25:43:cb:11:e5:32:db:be:f3:25:4d:d0:bd: b0:4d:d0:50:a3:d6:9e:0c:cf:d3:88:23:1c:95:32:e5:9a:7e: 96:f4:3a:65 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt7pUcBJ4xOAe/g9lWFVc6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz NzBkMWQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDhiYTcxNWRmOTQ4NDMyMThkYTE3YmFlN2JmMDc5YzdmNGE2MGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKNWayWnswnj3hRn5eB29kErnsED eZLSTkPzbTRN/fwnjRgr5iJDxypGm9dsab6QV8AUakPfjuXs9IdlQ4AJZtRnqYcR jRbu9n4a/4D6og6EKciYgnjyskqVwTKXveOflrM8u7NoDeJ+YOkF0txxpnP7HoMj stsCdhTvNHGhv/0R5h67abHjkeEexBG2IjKNrtDRsZxvSdKDLssOhYAN20g/WC6O iGx2hO7xlDSjIACVpUD9KORGl+p5/SSExYDbvkIAXfQ1yAOXUVOwqpIRTKT+4xfZ atZzhkTVfCEWG+A5yywoH/ahBoMIR0MEJjhvue58rUzy0GSH8kZFjPmUjQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFLCLpxXflIQyGNoXuue/B5x/SmDOMB8GA1UdIwQY MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt N2JhZmQ0M2U3ODYyLzEvc0l1bkZkLVVoRElZMmhlNjU3OEhuSDlLWU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCLY6oAwQC W81QAwQAuRnoAwQCuefQMBQEAgACMA4DBQMqDIEAAwUDKg7awDANBgkqhkiG9w0B AQsFAAOCAQEAVH1bWr1pBrH+dCcwMgAjHid94FCZ9HhyQ94mbClJPl4kBIcs1cfU XFSSr/Q/EuBS2oWewhuTP2K2oXJUXtdookxMjCH+FjVoE3LFPgUZKMFEjuHpaxCG 9IIbMQq7SdeDfSdoRuD0DBXSlzP2zgFsGuR5Zu5XQ+pT5ZHAOHp1rxsMtQP5n1g2 fp2dFqoP4IjInzlqoe8BmIve5sOwhYegXVojbmcBRwnOYnLqAAwiQlnKvsY06QCG 4ed68RUdDztm52LCSEB1MaWgqgCLhSWENhAVIWdODD7sAt1ZJeIlQ8sR5TLbvvMl TdC9sE3QUKPWngzP04gjHJUy5Zp+lvQ6ZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:29 2026 by rpki-client