This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/9eoRvvLX_RmbQFZes5lg0TygUZY.roa File: 9eoRvvLX_RmbQFZes5lg0TygUZY.roa (raw, json) Hash identifier: mSu/oV2VBjI1jwLXTnid5qYp4S60LI+3LeXxDbnUngs= Subject key identifier: F5:EA:11:BE:F2:D7:FD:19:9B:40:56:5E:B3:99:60:D1:3C:A0:51:96 Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Certificate serial: 019B79ED34A1E43AA3887974D7AD2F6F12E4 Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/9eoRvvLX_RmbQFZes5lg0TygUZY.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34946 IP address blocks: 80.244.192.0/20 maxlen: 20 92.42.72.0/21 maxlen: 21 185.16.92.0/22 maxlen: 22 2a00:f600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:34:a1:e4:3a:a3:88:79:74:d7:ad:2f:6f:12:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5ea11bef2d7fd199b40565eb39960d13ca05196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:ec:90:8a:51:17:bf:55:71:69:79:52:27: 0a:6a:22:be:41:eb:f9:cf:9c:18:cc:64:bb:11:79: e7:83:bb:a8:38:03:e0:37:e0:16:ff:01:58:ac:7a: 16:c7:b4:f0:dd:48:12:15:b7:30:ec:d5:e3:e2:4d: 9d:c5:8b:ad:3d:c7:4f:37:36:17:c5:46:67:3d:48: f4:2c:65:56:6e:31:6e:80:7c:7f:ac:00:1c:37:65: f1:8a:85:21:f7:7e:65:9b:e5:09:06:9a:fd:73:d3: c3:4e:06:c8:7a:55:f3:dd:ac:5d:76:6f:2e:4e:13: 12:6e:ab:cf:87:7b:0d:1a:51:5f:40:7b:9d:fa:d9: e7:5f:f0:c9:fe:55:8a:b4:e9:18:bb:8e:56:24:b3: 5d:76:bc:a2:a5:ff:46:55:7a:b1:c5:d1:47:ec:3b: 18:c8:dc:02:08:7a:6c:b8:ad:7d:48:64:fd:83:97: 45:8a:23:4e:97:7a:80:55:33:05:7e:3f:a1:a6:01: e9:dd:3b:e2:0b:13:71:e7:eb:c1:48:2e:91:6d:e6: f3:02:ed:99:9b:7c:25:17:ae:57:af:73:dd:b0:44: d0:7e:49:43:2b:6e:eb:4b:0b:f1:54:1b:4d:17:47: d6:5a:92:f1:53:a9:d9:b2:2b:59:16:43:b7:59:c7: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EA:11:BE:F2:D7:FD:19:9B:40:56:5E:B3:99:60:D1:3C:A0:51:96 X509v3 Authority Key Identifier: keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/9eoRvvLX_RmbQFZes5lg0TygUZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.192.0/20 92.42.72.0/21 185.16.92.0/22 IPv6: 2a00:f600::/32 Signature Algorithm: sha256WithRSAEncryption 37:b0:f3:e4:97:f3:d7:6c:cd:4a:9b:7e:c7:52:66:26:ac:24: e8:ff:e3:a7:a1:dd:db:a9:50:77:42:e4:e1:f6:de:e0:77:44: 92:33:51:aa:ef:9f:b2:81:8b:aa:17:79:12:e8:d5:b5:6e:50: a4:51:86:d2:1d:f2:58:bd:d9:5b:c7:32:e8:1f:fa:19:79:67: 16:aa:18:fe:1e:ff:ae:80:c4:b1:d2:13:89:db:52:d2:6a:cd: e2:54:51:59:a2:5d:1b:bc:e8:16:44:75:cd:35:42:dc:7a:8c: 45:92:56:2e:ec:ec:09:74:18:f4:92:b0:d9:51:f3:f9:19:09: 35:ef:94:52:6c:91:cc:a5:cb:a3:7b:03:76:89:eb:7b:cf:79: ad:e9:ef:1f:16:77:bd:cc:ce:76:ac:19:18:0b:91:4d:a7:4e: d1:de:18:6e:c6:07:e7:84:ec:58:dc:a4:d9:50:2d:85:0e:cd: 0e:12:ea:aa:83:f3:af:91:f9:f9:3a:eb:56:54:5d:79:0b:e8: 55:d7:1d:79:d2:1b:5b:38:da:62:17:cb:bd:1b:1c:d0:6b:5f: d5:84:57:fb:f8:d2:4e:6e:69:01:59:bd:d8:35:ed:b1:dd:5d: 0c:31:e6:2b:01:a5:66:45:b7:00:7d:82:ea:5d:6f:ea:c3:b6: a3:4d:05:9c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57TSh5DqjiHl0160vbxLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YjIxMDYxYTNlYWQ3NDEwZTA0NTBkYmJmMjE3MGZlMGM5 MzhiYjEwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWVhMTFiZWYyZDdmZDE5OWI0MDU2NWViMzk5NjBkMTNjYTA1MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjHskIpRF79VcWl5UicKaiK+Qev5 z5wYzGS7EXnng7uoOAPgN+AW/wFYrHoWx7Tw3UgSFbcw7NXj4k2dxYutPcdPNzYX xUZnPUj0LGVWbjFugHx/rAAcN2XxioUh935lm+UJBpr9c9PDTgbIelXz3axddm8u ThMSbqvPh3sNGlFfQHud+tnnX/DJ/lWKtOkYu45WJLNddryipf9GVXqxxdFH7DsY yNwCCHpsuK19SGT9g5dFiiNOl3qAVTMFfj+hpgHp3TviCxNx5+vBSC6RbebzAu2Z m3wlF65Xr3PdsETQfklDK27rSwvxVBtNF0fWWpLxU6nZsitZFkO3WcefwwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPXqEb7y1/0Zm0BWXrOZYNE8oFGWMB8GA1UdIwQY MBaAFKWyEGGj6tdBDgRQ278hcP4Mk4uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEt YTA4ODNjMGIwOTViLzEvOWVvUnZ2TFhfUm1iUUZaZXM1bGcwVHlnVVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mZmFjNGQtYTI3Mi00ZTZjLTk0MzEtYTA4ODNjMGIwOTVi LzEvcGJJUVlhUHExMEVPQkZEYnZ5RndfZ3lUaTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPTAAwQD XCpIAwQCuRBcMA0EAgACMAcDBQAqAPYAMA0GCSqGSIb3DQEBCwUAA4IBAQA3sPPk l/PXbM1Km37HUmYmrCTo/+Onod3bqVB3QuTh9t7gd0SSM1Gq75+ygYuqF3kS6NW1 blCkUYbSHfJYvdlbxzLoH/oZeWcWqhj+Hv+ugMSx0hOJ21LSas3iVFFZol0bvOgW RHXNNULceoxFklYu7OwJdBj0krDZUfP5GQk175RSbJHMpcujewN2iet7z3mt6e8f Fne9zM52rBkYC5FNp07R3hhuxgfnhOxY3KTZUC2FDs0OEuqqg/Ovkfn5OutWVF15 C+hV1x150htbONpiF8u9GxzQa1/VhFf7+NJObmkBWb3YNe2x3V0MMeYrAaVmRbcA fYLqXW/qw7ajTQWc -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:05 2026 by rpki-client