This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/9qhyf8XaXLBiOxT9FefpSvz7EAo.roa File: 9qhyf8XaXLBiOxT9FefpSvz7EAo.roa (raw, json) Hash identifier: LVzOeIuhXpbz7YMXKNB/lJ0KobWs5PmsNOZb547oGVM= Subject key identifier: F6:A8:72:7F:C5:DA:5C:B0:62:3B:14:FD:15:E7:E9:4A:FC:FB:10:0A Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81 Certificate serial: 019B7B3666D4A3BA75C8187395927C6A1516 Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/9qhyf8XaXLBiOxT9FefpSvz7EAo.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205334 IP address blocks: 176.119.132.0/22 maxlen: 22 176.119.132.0/23 maxlen: 23 176.119.132.0/24 maxlen: 24 176.119.133.0/24 maxlen: 24 176.119.134.0/23 maxlen: 23 176.119.134.0/24 maxlen: 24 176.119.135.0/24 maxlen: 24 185.193.172.0/24 maxlen: 24 185.193.173.0/24 maxlen: 24 185.193.174.0/24 maxlen: 24 185.193.175.0/24 maxlen: 24 185.211.41.0/24 maxlen: 24 185.214.169.0/24 maxlen: 24 185.214.170.0/24 maxlen: 24 185.214.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:66:d4:a3:ba:75:c8:18:73:95:92:7c:6a:15:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a8727fc5da5cb0623b14fd15e7e94afcfb100a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:66:31:84:bd:30:e5:54:9c:ba:e4:c1:ab: 24:b1:65:82:24:5e:73:cb:5e:a8:58:9a:2a:17:de: 3a:4f:d3:d7:41:4b:bd:74:86:7b:14:41:2e:a4:ea: e8:e7:39:0d:cb:14:6b:70:9d:be:47:20:8c:79:a1: 50:36:8c:c3:be:1d:de:d0:bb:cf:aa:d4:05:fc:cf: 1d:f1:d0:8d:62:a1:3a:ac:e6:78:8e:06:b2:96:52: 77:36:22:e1:13:a5:b5:ba:3d:7f:a6:e4:af:10:ef: f5:7c:9f:db:43:f9:31:12:c5:97:86:27:30:e1:52: bf:99:4f:5c:e5:7f:be:64:3d:d0:91:8e:48:61:fe: fb:89:c3:8e:fb:bb:46:db:84:cb:a0:1e:f4:44:cf: 80:a1:0a:34:ef:17:8c:0c:5c:e1:5b:81:ed:85:8d: bd:b6:7b:b0:7c:b4:01:15:4a:b3:76:ad:cc:48:8c: 72:df:84:2d:ee:5e:d9:bb:74:e3:6f:b8:8a:b7:6d: 77:34:84:7f:a2:1b:ec:5e:4a:92:1c:e1:36:13:5f: c0:24:9e:2f:75:72:4a:c7:41:d3:44:48:3c:9e:18: 16:b4:cb:73:30:80:c7:62:9e:ae:f7:ab:6f:47:41: 9f:e4:2c:7b:c7:4c:b0:5f:2b:f1:cc:5d:b6:4b:61: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A8:72:7F:C5:DA:5C:B0:62:3B:14:FD:15:E7:E9:4A:FC:FB:10:0A X509v3 Authority Key Identifier: keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/9qhyf8XaXLBiOxT9FefpSvz7EAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.132.0/22 185.193.172.0/22 185.211.41.0/24 185.214.169.0-185.214.171.255 Signature Algorithm: sha256WithRSAEncryption 02:a7:14:68:e5:c8:65:dd:4e:8d:65:df:2c:55:7a:52:d6:63: f4:eb:01:fd:c2:d6:f2:0c:d8:1c:c6:36:65:ce:2e:59:6b:48: dd:65:c3:81:b0:89:dd:4b:3e:8c:20:38:7c:d9:5a:37:06:6b: 0e:e8:43:fb:bd:a5:00:6d:30:5c:50:b5:8d:f7:ac:d9:92:dc: f5:28:04:c6:c2:a9:3e:f5:bc:ce:dc:5d:49:e7:62:59:bd:37: b0:ad:3f:72:58:a7:82:25:ef:f5:2a:a2:57:33:51:16:f9:df: 95:52:d2:b3:32:fa:69:ec:0a:6f:c7:02:12:84:69:ed:3e:df: 78:9e:f2:44:d5:2f:2b:40:7d:5c:75:49:2f:0b:30:e6:9e:f7: 3b:3d:57:da:21:8b:a2:37:5a:89:e0:e2:d6:92:e1:16:b0:23: 62:74:57:1a:05:27:6b:50:9c:94:df:21:e7:02:49:96:ac:9d: 7a:0c:87:4b:65:36:ec:0b:c2:e8:59:d2:5c:38:9e:6a:08:ac: 88:52:f2:60:a2:99:5e:82:ff:8b:7d:48:35:9d:71:ab:19:37: 76:b7:05:f9:57:8a:da:21:d5:85:9d:61:88:93:91:b9:8e:5e: 8a:c9:1a:de:89:6f:3e:7e:3c:d4:80:8b:2e:ba:74:33:2b:1c: c8:43:69:54 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NmbUo7p1yBhzlZJ8ahUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxN2JmNGZiZWE4OTRmNDNlZWIzZGIxYjIxNmU1Nzc2NmUw MWFiODEwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmE4NzI3ZmM1ZGE1Y2IwNjIzYjE0ZmQxNWU3ZTk0YWZjZmIxMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+1mMYS9MOVUnLrkwasksWWCJF5z y16oWJoqF946T9PXQUu9dIZ7FEEupOro5zkNyxRrcJ2+RyCMeaFQNozDvh3e0LvP qtQF/M8d8dCNYqE6rOZ4jgayllJ3NiLhE6W1uj1/puSvEO/1fJ/bQ/kxEsWXhicw 4VK/mU9c5X++ZD3QkY5IYf77icOO+7tG24TLoB70RM+AoQo07xeMDFzhW4HthY29 tnuwfLQBFUqzdq3MSIxy34Qt7l7Zu3Tjb7iKt213NIR/ohvsXkqSHOE2E1/AJJ4v dXJKx0HTREg8nhgWtMtzMIDHYp6u96tvR0Gf5Cx7x0ywXyvxzF22S2Ff7wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPaocn/F2lywYjsU/RXn6Ur8+xAKMB8GA1UdIwQY MBaAFNF79PvqiU9D7rPbGyFuV3ZuAauBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDIt MmMyMDFkMzBhZTA1LzEvOXFoeWY4WGFYTEJpT3hUOUZlZnBTdno3RUFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDItMmMyMDFkMzBhZTA1 LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCsHeEAwQC ucGsAwQAudMpMAwDBAC51qkDBAK51qgwDQYJKoZIhvcNAQELBQADggEBAAKnFGjl yGXdTo1l3yxVelLWY/TrAf3C1vIM2BzGNmXOLllrSN1lw4Gwid1LPowgOHzZWjcG aw7oQ/u9pQBtMFxQtY33rNmS3PUoBMbCqT71vM7cXUnnYlm9N7CtP3JYp4Il7/Uq olczURb535VS0rMy+mnsCm/HAhKEae0+33ie8kTVLytAfVx1SS8LMOae9zs9V9oh i6I3Wong4taS4RawI2J0VxoFJ2tQnJTfIecCSZasnXoMh0tlNuwLwuhZ0lw4nmoI rIhS8mCimV6C/4t9SDWdcasZN3a3BflXitoh1YWdYYiTkbmOXorJGt6Jbz5+PNSA iy66dDMrHMhDaVQ= -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:27 2026 by rpki-client