This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa File: 9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa (raw, json) Hash identifier: EvKHDQxBQtqNQYihgVJcZyfTiv7kA1w7YuXBnwu1TSA= Subject key identifier: F4:C5:05:AF:F4:6C:15:1B:02:70:48:3D:33:41:A6:0D:99:AC:18:60 Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5 Certificate serial: 019B7DCA4BD9A4842A7390889437B5E5BD1F Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa Signing time: Fri 02 Jan 2026 08:19:28 +0000 ROA not before: Fri 02 Jan 2026 08:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51395 IP address blocks: 91.192.100.0/22 maxlen: 22 91.192.102.0/24 maxlen: 24 91.201.56.0/22 maxlen: 22 176.10.96.0/19 maxlen: 24 176.10.97.0/25 maxlen: 25 176.10.104.240/32 maxlen: 32 176.10.111.0/24 maxlen: 24 176.10.118.128/25 maxlen: 25 176.10.119.0/24 maxlen: 24 176.10.124.128/26 maxlen: 26 176.10.125.0/25 maxlen: 25 185.32.220.0/22 maxlen: 22 185.32.221.0/24 maxlen: 24 185.32.223.0/24 maxlen: 24 185.85.108.0/22 maxlen: 22 185.189.148.0/22 maxlen: 22 185.189.149.128/25 maxlen: 25 185.189.151.0/24 maxlen: 24 185.195.68.0/23 maxlen: 23 185.195.68.0/24 maxlen: 24 185.195.69.0/24 maxlen: 24 195.225.117.0/24 maxlen: 24 195.225.118.0/23 maxlen: 23 2a00:bd80::/32 maxlen: 32 2a00:bd80:a176:10::/64 maxlen: 64 2a0a:5dc0::/29 maxlen: 29 2a0b:ee80::/29 maxlen: 29 2a0b:ee80:0:2::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4b:d9:a4:84:2a:73:90:88:94:37:b5:e5:bd:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5 Validity Not Before: Jan 2 08:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4c505aff46c151b0270483d3341a60d99ac1860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:ff:bf:d4:15:3c:5a:59:23:e0:cc:5a:1a: 91:e0:3b:e0:64:e6:f6:6f:9d:e1:7c:99:d7:e4:65: c1:12:db:8c:a5:ba:3a:ac:23:42:7c:a2:76:de:85: 22:f6:68:01:6b:62:d2:e1:6c:cb:bf:e4:6b:fa:6c: 53:12:dc:8e:7e:52:ee:a7:5c:5e:3e:c6:b6:b0:a7: f5:ef:29:4c:d3:82:28:03:a2:bd:d0:4a:cf:39:42: 91:f8:84:62:95:f9:de:2d:7a:c8:aa:67:7c:0f:1a: 3a:af:f8:ae:7f:69:b8:f3:fb:2a:49:60:34:72:49: aa:73:5f:0f:56:87:0d:e0:be:1f:18:26:ff:b5:eb: b7:b9:57:f0:06:b7:d3:66:f6:8c:00:d2:e5:c1:81: 65:67:6f:18:3e:40:67:11:48:d6:18:ec:eb:af:95: ca:bc:86:1e:99:01:a7:32:d7:68:49:ba:8b:33:e6: 80:ba:9f:32:a0:1b:3b:3a:74:3d:04:ed:1c:f4:2c: f3:7d:07:11:3b:41:ba:13:42:76:bc:d1:9a:fe:4d: b1:c4:b5:a5:f9:25:e9:3f:34:5d:b5:60:17:8c:c4: 6e:d2:7e:fa:67:18:b4:fa:0e:0c:a8:7f:49:6d:fa: 09:2a:77:af:b1:a4:f1:7e:08:6b:fa:89:df:30:9b: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C5:05:AF:F4:6C:15:1B:02:70:48:3D:33:41:A6:0D:99:AC:18:60 X509v3 Authority Key Identifier: keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/9MUFr_RsFRsCcEg9M0GmDZmsGGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.100.0/22 91.201.56.0/22 176.10.96.0/19 185.32.220.0/22 185.85.108.0/22 185.189.148.0/22 185.195.68.0/23 195.225.117.0-195.225.119.255 IPv6: 2a00:bd80::/32 2a0a:5dc0::/29 2a0b:ee80::/29 Signature Algorithm: sha256WithRSAEncryption 67:c9:22:ae:b0:2d:d5:f3:26:47:5b:3c:92:b3:19:82:74:4b: 44:71:e3:07:ca:0a:c7:a6:8a:1c:81:e3:fd:86:ec:7c:e5:06: 73:db:15:91:71:8a:62:51:58:fd:27:73:e4:59:b6:ef:ca:62: a8:d0:91:92:cd:55:66:3f:8c:53:5d:d4:98:1d:a7:89:ae:f8: 37:f7:7f:e5:2f:90:fc:30:4e:b4:85:60:50:2c:36:13:10:2d: d9:1e:95:86:74:08:ad:b1:ab:7e:80:36:02:c5:fe:cf:79:fa: 48:1e:d8:3a:0a:cc:02:22:2c:ca:54:20:c0:e7:1e:75:a0:fd: 87:5e:eb:ae:b5:2e:ff:55:f0:04:c2:a6:f3:65:a2:6b:9c:27: 2c:e9:87:f8:ae:17:72:70:25:20:4c:53:44:3e:ec:e4:dc:31: 5f:f8:ac:c5:d9:53:4a:9d:b3:32:b5:ab:db:8b:1b:60:db:ab: 9c:96:7c:b0:0b:78:64:12:7c:42:7e:5c:52:d1:1a:7a:52:5c: 75:7c:ad:e6:bd:a9:3f:e7:c1:f5:a3:82:1e:00:38:08:a6:5f: 03:7e:a7:be:1c:a3:0b:f9:ba:37:25:1f:62:7b:f5:e7:85:2f: 9c:db:fb:4d:cc:44:31:91:3c:d7:32:5d:3b:88:6b:6b:2d:41: c1:e2:56:62 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt9ykvZpIQqc5CIlDe15b0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGExYzZiMWE2NWY3YTNkOTdmOWJkNzVlN2NhYzMxMzUy NDZmYTUwHhcNMjYwMTAyMDgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGM1MDVhZmY0NmMxNTFiMDI3MDQ4M2QzMzQxYTYwZDk5YWMxODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQT/v9QVPFpZI+DMWhqR4DvgZOb2 b53hfJnX5GXBEtuMpbo6rCNCfKJ23oUi9mgBa2LS4WzLv+Rr+mxTEtyOflLup1xe Psa2sKf17ylM04IoA6K90ErPOUKR+IRilfneLXrIqmd8Dxo6r/iuf2m48/sqSWA0 ckmqc18PVocN4L4fGCb/teu3uVfwBrfTZvaMANLlwYFlZ28YPkBnEUjWGOzrr5XK vIYemQGnMtdoSbqLM+aAup8yoBs7OnQ9BO0c9CzzfQcRO0G6E0J2vNGa/k2xxLWl +SXpPzRdtWAXjMRu0n76Zxi0+g4MqH9JbfoJKnevsaTxfghr+onfMJu+mQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFPTFBa/0bBUbAnBIPTNBpg2ZrBhgMB8GA1UdIwQY MBaAFAbaHGsaZfej2X+b1158rDE1JG+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjIt NDVlYjczOGNiOWM4LzEvOU1VRnJfUnNGUnNDY0VnOU0wR21EWm1zR0dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjItNDVlYjczOGNiOWM4 LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTA+BAIAATA4AwQCW8BkAwQC W8k4AwQFsApgAwQCuSDcAwQCuVVsAwQCub2UAwQBucNEMAwDBADD4XUDBAPD4XAw GwQCAAIwFQMFACoAvYADBQMqCl3AAwUDKgvugDANBgkqhkiG9w0BAQsFAAOCAQEA Z8kirrAt1fMmR1s8krMZgnRLRHHjB8oKx6aKHIHj/YbsfOUGc9sVkXGKYlFY/Sdz 5Fm278piqNCRks1VZj+MU13UmB2nia74N/d/5S+Q/DBOtIVgUCw2ExAt2R6VhnQI rbGrfoA2AsX+z3n6SB7YOgrMAiIsylQgwOcedaD9h17rrrUu/1XwBMKm82Wia5wn LOmH+K4XcnAlIExTRD7s5NwxX/isxdlTSp2zMrWr24sbYNurnJZ8sAt4ZBJ8Qn5c UtEaelJcdXyt5r2pP+fB9aOCHgA4CKZfA36nvhyjC/m6NyUfYnv154UvnNv7TcxE MZE81zJdO4hray1BweJWYg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:18 2026 by rpki-client