This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/9k0dsqb1d6KW0H9rWBxGERBZOic.roa File: 9k0dsqb1d6KW0H9rWBxGERBZOic.roa (raw, json) Hash identifier: FhB4cjzWorn9MftYwNSX8WEXFBMVO6EYBKbMGx2rmWM= Subject key identifier: F6:4D:1D:B2:A6:F5:77:A2:96:D0:7F:6B:58:1C:46:11:10:59:3A:27 Certificate issuer: /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359 Certificate serial: 019B7E390F8429E65848C4C7DCAEF0F3A7B5 Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/9k0dsqb1d6KW0H9rWBxGERBZOic.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44881 IP address blocks: 93.94.232.0/21 maxlen: 21 109.68.208.0/22 maxlen: 22 185.117.28.0/22 maxlen: 22 185.117.30.0/23 maxlen: 23 2a05:ce80::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0f:84:29:e6:58:48:c4:c7:dc:ae:f0:f3:a7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f64d1db2a6f577a296d07f6b581c461110593a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:1b:ba:7b:67:a9:42:99:26:c0:84:af:7a: c2:87:eb:7f:e6:50:e0:84:bf:45:ce:3d:98:5f:87: 70:1f:88:f2:6e:a7:7b:04:e7:15:fb:2a:78:e1:96: 89:ee:67:2b:f0:05:4c:15:ee:5a:74:e4:07:46:ba: ee:28:d7:20:68:1b:b8:6f:89:3f:0d:c4:38:60:62: bd:55:5b:e1:7b:92:1f:be:ca:a7:54:a2:c8:99:b6: ef:69:fd:ed:e8:58:20:77:7a:0a:29:8e:14:7e:74: e6:5e:81:3f:d2:30:35:db:f2:50:c6:3e:e7:bd:a5: 1f:e3:91:cd:73:00:e4:d8:ac:96:95:d0:97:b4:53: 82:ff:1d:d8:71:34:2b:18:16:13:ad:88:1b:62:3a: e7:18:d0:c6:ec:4b:5c:d2:c2:27:25:19:f4:b0:69: 14:6e:e2:bd:27:c6:d6:64:04:42:ac:7f:26:b2:43: b8:c0:2d:fb:f4:d7:d9:0e:7d:54:32:3a:07:11:14: a2:57:39:15:bc:79:4e:dd:76:f2:86:61:e5:e5:81: 37:0c:83:d0:0f:dd:fb:a5:ad:b9:df:54:af:54:89: 7b:d6:23:30:64:27:5f:ac:98:6e:1b:61:dc:db:55: 8b:6a:35:a3:cf:a6:53:49:3e:67:0b:f4:19:5c:23: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:1D:B2:A6:F5:77:A2:96:D0:7F:6B:58:1C:46:11:10:59:3A:27 X509v3 Authority Key Identifier: keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/9k0dsqb1d6KW0H9rWBxGERBZOic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.232.0/21 109.68.208.0/22 185.117.28.0/22 IPv6: 2a05:ce80::/36 Signature Algorithm: sha256WithRSAEncryption 78:d4:92:f2:3d:14:ff:a5:0d:99:99:74:9c:2b:0a:c3:48:c0: 4f:80:79:09:a9:a1:7d:be:e5:d9:21:92:0c:8a:de:26:66:51: 38:2e:8c:7c:19:c5:82:9c:56:48:8c:d1:c6:d2:b7:f1:ea:02: 15:f7:ce:f0:14:a3:0b:2e:03:f4:3a:c8:6a:0e:3b:c1:a5:c9: d7:fc:e6:aa:5b:66:75:c9:b4:cc:04:4f:ea:8f:de:e1:cc:a9: 87:22:a9:7a:e7:59:1e:a0:20:64:8a:21:3e:b0:3b:ee:c5:14: 80:90:e8:70:96:55:0d:f2:c9:79:e1:80:f7:87:92:b9:6d:44: 29:43:db:c3:65:b2:b9:d2:ee:ab:cc:34:ff:13:78:62:b7:61: ab:82:9e:cb:a4:88:1c:89:5f:4f:92:7b:20:c7:b5:07:37:d4: b7:56:98:f9:9a:a2:c2:56:9d:2e:d5:16:d1:92:cd:b7:d5:07: ef:50:22:cf:2e:1c:c1:90:11:34:f9:65:36:54:83:79:25:dd: 4f:24:2d:b4:20:68:ab:c5:b3:02:fe:98:38:f9:c3:42:35:21: a7:cb:07:fe:d7:a2:8e:43:05:02:dd:31:e7:53:35:05:6b:f9: ca:32:60:ff:d9:26:52:69:5b:34:38:4e:46:8a:21:7d:04:de: 18:4c:73:e6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+OQ+EKeZYSMTH3K7w86e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTVjMGY5NWFiN2JlOGI4NWY3MTFmYTQzMzY2NWMxNGU2 ZTkzNTkwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjRkMWRiMmE2ZjU3N2EyOTZkMDdmNmI1ODFjNDYxMTEwNTkzYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMkbuntnqUKZJsCEr3rCh+t/5lDg hL9Fzj2YX4dwH4jybqd7BOcV+yp44ZaJ7mcr8AVMFe5adOQHRrruKNcgaBu4b4k/ DcQ4YGK9VVvhe5IfvsqnVKLImbbvaf3t6Fggd3oKKY4UfnTmXoE/0jA12/JQxj7n vaUf45HNcwDk2KyWldCXtFOC/x3YcTQrGBYTrYgbYjrnGNDG7Etc0sInJRn0sGkU buK9J8bWZARCrH8mskO4wC379NfZDn1UMjoHERSiVzkVvHlO3XbyhmHl5YE3DIPQ D937pa2531SvVIl71iMwZCdfrJhuG2Hc21WLajWjz6ZTST5nC/QZXCPisQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPZNHbKm9XeiltB/a1gcRhEQWTonMB8GA1UdIwQY MBaAFH7lwPlat76LhfcR+kM2ZcFObpNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEt OTAxOTRiZDY4NDI4LzEvOWswZHNxYjFkNktXMEg5cldCeEdFUkJaT2ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hODM4ODYtOGI0YS00YjIzLWI0YWEtOTAxOTRiZDY4NDI4 LzEvZnVYQS1WcTN2b3VGOXhINlF6Wmx3VTV1azFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQDXV7oAwQC bUTQAwQCuXUcMA4EAgACMAgDBgQqBc6AADANBgkqhkiG9w0BAQsFAAOCAQEAeNSS 8j0U/6UNmZl0nCsKw0jAT4B5Camhfb7l2SGSDIreJmZROC6MfBnFgpxWSIzRxtK3 8eoCFffO8BSjCy4D9DrIag47waXJ1/zmqltmdcm0zARP6o/e4cyphyKpeudZHqAg ZIohPrA77sUUgJDocJZVDfLJeeGA94eSuW1EKUPbw2WyudLuq8w0/xN4Yrdhq4Ke y6SIHIlfT5J7IMe1BzfUt1aY+ZqiwladLtUW0ZLNt9UH71Aizy4cwZARNPllNlSD eSXdTyQttCBoq8WzAv6YOPnDQjUhp8sH/teijkMFAt0x51M1BWv5yjJg/9kmUmlb NDhORoohfQTeGExz5g== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:36 2026 by rpki-client