This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/ru9Lv6OqB7V-7WaM7CY9CuYMU9U.roa File: ru9Lv6OqB7V-7WaM7CY9CuYMU9U.roa (raw, json) Hash identifier: pn31EwFoa+kLu5aisTeRHil2IKacpnZCCu4FI8vc0Eg= Subject key identifier: AE:EF:4B:BF:A3:AA:07:B5:7E:ED:66:8C:EC:26:3D:0A:E6:0C:53:D5 Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611 Certificate serial: 019B7BA46DE63855F3A23B869AD2DD122328 Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/ru9Lv6OqB7V-7WaM7CY9CuYMU9U.roa Signing time: Thu 01 Jan 2026 22:18:52 +0000 ROA not before: Thu 01 Jan 2026 22:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29611 IP address blocks: 45.157.84.0/22 maxlen: 24 185.2.216.0/22 maxlen: 24 185.43.184.0/22 maxlen: 24 185.73.184.0/22 maxlen: 24 217.68.240.0/20 maxlen: 24 217.69.32.0/20 maxlen: 24 2a00:c20::/32 maxlen: 32 2a03:2d20::/32 maxlen: 48 2a04:95c0::/29 maxlen: 29 2a0f:5280::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:6d:e6:38:55:f3:a2:3b:86:9a:d2:dd:12:23:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611 Validity Not Before: Jan 1 22:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeef4bbfa3aa07b57eed668cec263d0ae60c53d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:74:2c:92:e0:59:87:02:d2:3d:07:26:3a:4d: 4d:40:ad:a9:a5:f5:76:11:4a:83:63:33:b5:24:14: da:ed:13:a6:7e:c4:57:da:9c:54:2e:1e:6e:fa:9b: 13:c1:3a:76:37:3b:3f:81:f2:03:f9:07:dc:00:ed: da:83:17:0a:64:3c:75:4f:8c:64:2d:95:0b:c7:e0: 22:3d:2a:4f:d0:05:68:01:83:34:d2:85:49:50:ea: 37:2e:0f:05:73:15:b2:fc:19:8b:b7:4b:b5:0f:d9: bf:f0:45:c2:dd:ca:52:55:c9:ce:32:53:d2:6d:26: 3e:eb:7b:ec:55:d1:f4:65:46:4c:95:98:59:b7:a2: 4f:2a:f5:f6:a1:7b:6f:39:59:5e:5d:62:e0:94:59: 55:74:ab:8c:ae:0d:15:bc:04:e1:2c:59:e7:4d:a3: 2e:0f:d4:fe:39:42:0f:71:11:c8:a3:c1:cd:a4:4c: 5c:41:53:72:9d:8d:50:a7:8c:4a:4c:69:f9:8f:93: 30:7d:94:12:36:88:b7:dc:7b:91:14:2c:1c:ce:15: 9a:cc:a8:cf:fa:9b:b5:2a:75:b7:83:83:75:ca:49: 08:e9:30:5a:2c:41:30:d4:0c:84:c7:6a:f3:19:d7: 64:e6:cc:ba:a3:71:d1:34:83:95:9c:f8:56:aa:7a: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EF:4B:BF:A3:AA:07:B5:7E:ED:66:8C:EC:26:3D:0A:E6:0C:53:D5 X509v3 Authority Key Identifier: keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/ru9Lv6OqB7V-7WaM7CY9CuYMU9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.84.0/22 185.2.216.0/22 185.43.184.0/22 185.73.184.0/22 217.68.240.0/20 217.69.32.0/20 IPv6: 2a00:c20::/32 2a03:2d20::/32 2a04:95c0::/29 2a0f:5280::/29 Signature Algorithm: sha256WithRSAEncryption 6e:a7:dd:f7:7d:fc:3a:d9:64:1d:61:b5:13:1f:7e:89:72:1e: 57:a4:39:a6:f0:2d:4e:14:c6:b8:fa:2a:63:93:a1:d7:c8:d2: c8:dc:86:90:91:7e:08:ca:41:bb:17:45:73:dc:7e:96:16:94: f3:d2:53:c1:7c:aa:5d:99:34:63:7c:75:0f:92:ef:ae:a1:bc: b6:7b:9a:50:83:30:18:75:fe:ae:11:88:3f:4a:9f:a1:a9:66: 6a:3b:89:c6:3d:f4:2c:3c:c8:8c:23:6c:3d:20:08:27:87:89: 3a:64:19:a9:06:3f:8f:0e:d0:df:2b:7d:11:5d:bd:1e:56:78: 27:39:d4:67:d8:c7:3d:7c:00:b4:49:6c:c9:4e:62:d7:56:9a: 67:20:e8:ef:60:ea:f5:65:4d:a7:72:d9:cc:2e:f5:cc:3a:d6: 81:94:70:1b:42:a7:18:ca:72:3b:23:7a:97:6a:48:56:6d:20: b5:e5:04:70:82:c3:af:28:c1:4f:a2:6d:63:bf:53:83:06:4a: c4:35:4f:b7:72:1a:5a:23:b6:9a:d0:c8:22:4f:2c:50:bd:8e: 7a:05:f5:53:88:50:31:70:d2:c8:04:77:fd:42:c3:ba:d0:93: 2a:c1:84:8a:ab:4f:46:65:80:58:65:df:b8:8f:f1:44:0f:8b: e9:c5:fd:69 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt7pG3mOFXzojuGmtLdEiMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YTk4N2M2Y2QwYTM2Zjk0ZGJlZjEwZWYyYTJjNjYwMjBh OTU2MTEwHhcNMjYwMTAxMjIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWVmNGJiZmEzYWEwN2I1N2VlZDY2OGNlYzI2M2QwYWU2MGM1M2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33QskuBZhwLSPQcmOk1NQK2ppfV2 EUqDYzO1JBTa7ROmfsRX2pxULh5u+psTwTp2Nzs/gfID+QfcAO3agxcKZDx1T4xk LZULx+AiPSpP0AVoAYM00oVJUOo3Lg8FcxWy/BmLt0u1D9m/8EXC3cpSVcnOMlPS bSY+63vsVdH0ZUZMlZhZt6JPKvX2oXtvOVleXWLglFlVdKuMrg0VvAThLFnnTaMu D9T+OUIPcRHIo8HNpExcQVNynY1Qp4xKTGn5j5MwfZQSNoi33HuRFCwczhWazKjP +pu1KnW3g4N1ykkI6TBaLEEw1AyEx2rzGddk5sy6o3HRNIOVnPhWqnrAcQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK7vS7+jqge1fu1mjOwmPQrmDFPVMB8GA1UdIwQY MBaAFJiph8bNCjb5Tb7xDvKixmAgqVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGIt ZjNiNDU4MTlmMmIwLzEvcnU5THY2T3FCN1YtN1dhTTdDWTlDdVlNVTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGItZjNiNDU4MTlmMmIw LzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAqBAIAATAkAwQCLZ1UAwQC uQLYAwQCuSu4AwQCuUm4AwQE2UTwAwQE2UUgMCIEAgACMBwDBQAqAAwgAwUAKgMt IAMFAyoElcADBQMqD1KAMA0GCSqGSIb3DQEBCwUAA4IBAQBup933ffw62WQdYbUT H36Jch5XpDmm8C1OFMa4+ipjk6HXyNLI3IaQkX4IykG7F0Vz3H6WFpTz0lPBfKpd mTRjfHUPku+uoby2e5pQgzAYdf6uEYg/Sp+hqWZqO4nGPfQsPMiMI2w9IAgnh4k6 ZBmpBj+PDtDfK30RXb0eVngnOdRn2Mc9fAC0SWzJTmLXVppnIOjvYOr1ZU2nctnM LvXMOtaBlHAbQqcYynI7I3qXakhWbSC15QRwgsOvKMFPom1jv1ODBkrENU+3chpa I7aa0MgiTyxQvY56BfVTiFAxcNLIBHf9QsO60JMqwYSKq09GZYBYZd+4j/FED4vp xf1p -----END CERTIFICATE-----Generated at Mon Jan 26 14:54:44 2026 by rpki-client