This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/_Z9kIAQcE6-6EPrDFAlao0VNTuk.roa File: _Z9kIAQcE6-6EPrDFAlao0VNTuk.roa (raw, json) Hash identifier: YO3bTxD0d8jX4MfO5emz2hZodBfCrU0nERueP6IevH4= Subject key identifier: FD:9F:64:20:04:1C:13:AF:BA:10:FA:C3:14:09:5A:A3:45:4D:4E:E9 Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Certificate serial: 019B7E3939DE2AC9674F0A637A191C42D732 Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/_Z9kIAQcE6-6EPrDFAlao0VNTuk.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49025 IP address blocks: 95.173.200.0/22 maxlen: 24 95.173.200.0/23 maxlen: 24 95.173.201.0/24 maxlen: 24 95.173.202.0/23 maxlen: 23 95.173.202.0/24 maxlen: 24 95.173.208.0/21 maxlen: 22 95.173.208.0/22 maxlen: 22 95.173.213.0/24 maxlen: 24 95.173.214.0/23 maxlen: 24 185.2.40.0/22 maxlen: 23 185.2.40.0/23 maxlen: 23 185.2.43.0/24 maxlen: 24 2a02:a48:f000::/36 maxlen: 36 2a06:5d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:39:de:2a:c9:67:4f:0a:63:7a:19:1c:42:d7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd9f6420041c13afba10fac314095aa3454d4ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:3a:15:d5:7f:be:85:2a:a8:c2:64:ba:00: 2b:06:9d:29:d3:cc:4d:fc:33:3e:70:97:5d:f0:a3: fe:41:dd:00:92:6b:a6:b2:2b:2e:75:32:dd:50:58: ca:4e:02:13:ec:7b:d1:e5:6e:41:08:55:a5:60:d0: 8a:9d:a6:da:48:e9:04:53:6f:1a:c3:bb:64:6a:02: 27:f3:9e:67:14:19:eb:15:62:d1:24:70:4d:43:d0: 08:82:a0:c5:b8:e1:29:3f:1b:d8:8f:de:7c:f6:07: 94:00:06:36:aa:0f:2b:ab:27:11:5f:d5:53:66:ac: 76:d0:33:80:93:03:bc:5f:12:77:2a:1a:b2:5b:8a: 69:19:59:cd:07:ad:9d:c0:50:32:46:a3:37:50:88: f8:22:d7:b5:4b:9b:aa:da:b2:a2:33:11:1b:d5:e7: fc:f6:0d:f9:39:9f:72:35:39:ea:5a:a8:3e:13:ca: 25:8e:d0:c5:a8:4f:8b:31:d6:47:7f:39:91:e0:a9: 9b:fa:6e:8a:07:22:ef:b6:37:7b:c9:1e:51:67:72: 75:ae:36:17:f8:03:fb:1c:ab:d6:eb:be:72:bd:a7: 53:1d:9c:c5:87:d2:f5:98:8d:4a:57:b5:67:fc:05: f8:9a:05:66:c7:eb:92:00:46:95:b5:e0:f6:fc:69: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9F:64:20:04:1C:13:AF:BA:10:FA:C3:14:09:5A:A3:45:4D:4E:E9 X509v3 Authority Key Identifier: keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/_Z9kIAQcE6-6EPrDFAlao0VNTuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.173.200.0/22 95.173.208.0/21 185.2.40.0/22 IPv6: 2a02:a48:f000::/36 2a06:5d80::/32 Signature Algorithm: sha256WithRSAEncryption 24:78:73:c3:2f:08:2b:69:7c:ef:a6:8f:97:7c:43:b0:91:de: 0e:85:75:ca:ff:69:c4:de:24:9e:aa:d7:21:a7:2e:0e:a4:7c: 79:8a:d6:a1:30:74:2a:a9:c8:62:5a:cf:ba:d5:19:0f:2e:20: bb:83:59:ea:d2:b1:f6:ed:d1:72:91:51:2a:72:d2:ae:4f:e7: 8d:8d:92:ad:f5:df:5d:de:cf:3e:50:5e:fc:c6:57:16:7f:a3: f8:18:de:af:0e:81:9d:41:08:53:4f:bf:89:e0:3a:5b:6d:83: bb:e4:2e:93:8f:e5:5b:fc:30:3f:4a:9c:57:1f:8c:56:b8:60: 55:36:55:58:65:be:7b:a3:69:55:bb:cc:22:02:a9:03:87:a6: 9c:51:09:c5:bd:d7:59:71:0c:3b:e5:63:67:e8:ea:e5:ed:0d: 74:e1:c6:41:a4:ac:46:28:a4:e0:1f:bf:24:ba:f3:6c:76:d4: f9:eb:5c:1a:ae:df:6a:04:3f:0c:a2:19:5b:1b:a7:a9:a6:23: eb:1a:40:81:89:83:38:2d:44:9b:cd:b2:1c:64:f5:1c:ad:90: 37:5e:3e:f9:74:58:18:55:14:b2:ff:03:c1:e1:f2:f0:01:36: 85:f1:a9:d1:44:88:49:2d:db:10:c9:c4:eb:ab:22:e8:34:56: b0:c0:fe:27 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+OTneKslnTwpjehkcQtcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3Y2NhMDk1MmRiOGFhOWZlNWU1NzAzYzZmMTg5YTA2YTU3 ZjRiYjEwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDlmNjQyMDA0MWMxM2FmYmExMGZhYzMxNDA5NWFhMzQ1NGQ0ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWI6FdV/voUqqMJkugArBp0p08xN /DM+cJdd8KP+Qd0AkmumsisudTLdUFjKTgIT7HvR5W5BCFWlYNCKnabaSOkEU28a w7tkagIn855nFBnrFWLRJHBNQ9AIgqDFuOEpPxvYj9589geUAAY2qg8rqycRX9VT Zqx20DOAkwO8XxJ3KhqyW4ppGVnNB62dwFAyRqM3UIj4Ite1S5uq2rKiMxEb1ef8 9g35OZ9yNTnqWqg+E8oljtDFqE+LMdZHfzmR4Kmb+m6KByLvtjd7yR5RZ3J1rjYX +AP7HKvW675yvadTHZzFh9L1mI1KV7Vn/AX4mgVmx+uSAEaVteD2/GmQwwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFP2fZCAEHBOvuhD6wxQJWqNFTU7pMB8GA1UdIwQY MBaAFJfMoJUtuKqf5eVwPG8Ymgalf0uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYt NWQ2ZGQwYmE1MmNmLzEvX1o5a0lBUWNFNi02RVByREZBbGFvMFZOVHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85YTBlYjItZTk5NC00NzE5LWExNjYtNWQ2ZGQwYmE1MmNm LzEvbDh5Z2xTMjRxcF9sNVhBOGJ4aWFCcVZfUzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAYBAIAATASAwQCX63IAwQD X63QAwQCuQIoMBUEAgACMA8DBgQqAgpI8AMFACoGXYAwDQYJKoZIhvcNAQELBQAD ggEBACR4c8MvCCtpfO+mj5d8Q7CR3g6Fdcr/acTeJJ6q1yGnLg6kfHmK1qEwdCqp yGJaz7rVGQ8uILuDWerSsfbt0XKRUSpy0q5P542Nkq31313ezz5QXvzGVxZ/o/gY 3q8OgZ1BCFNPv4ngOlttg7vkLpOP5Vv8MD9KnFcfjFa4YFU2VVhlvnujaVW7zCIC qQOHppxRCcW911lxDDvlY2fo6uXtDXThxkGkrEYopOAfvyS682x21PnrXBqu32oE PwyiGVsbp6mmI+saQIGJgzgtRJvNshxk9RytkDdePvl0WBhVFLL/A8Hh8vABNoXx qdFEiEkt2xDJxOurIug0VrDA/ic= -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:51 2026 by rpki-client