This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/9hu7fHrkkmjPI3bYCmJsPA9MZh0.roa File: 9hu7fHrkkmjPI3bYCmJsPA9MZh0.roa (raw, json) Hash identifier: bfX4JCPjltuMbEEveKKx9e6WHODIPOLYoUS1Ge5P3uc= Subject key identifier: F6:1B:BB:7C:7A:E4:92:68:CF:23:76:D8:0A:62:6C:3C:0F:4C:66:1D Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Certificate serial: 019B7D5CEB060D9E63AE5C1DD84259492BDD Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/9hu7fHrkkmjPI3bYCmJsPA9MZh0.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60721 IP address blocks: 45.136.104.0/24 maxlen: 24 45.136.105.0/24 maxlen: 24 45.136.107.0/24 maxlen: 24 185.26.144.0/24 maxlen: 24 185.26.145.0/24 maxlen: 24 185.26.146.0/24 maxlen: 24 185.26.147.0/24 maxlen: 24 185.126.176.0/24 maxlen: 24 185.153.228.0/24 maxlen: 24 185.153.229.0/24 maxlen: 24 185.153.230.0/24 maxlen: 24 185.153.231.0/24 maxlen: 24 185.162.144.0/24 maxlen: 24 185.162.147.0/24 maxlen: 24 185.171.24.0/24 maxlen: 24 185.171.25.0/24 maxlen: 24 185.171.26.0/24 maxlen: 24 185.171.27.0/24 maxlen: 24 185.247.136.0/24 maxlen: 24 185.247.138.0/24 maxlen: 24 185.247.139.0/24 maxlen: 24 2a04:3880::/30 maxlen: 30 2a06:c380::/29 maxlen: 29 2a0b:6000::/29 maxlen: 29 2a0d:a2c0::/29 maxlen: 29 2a0d:c480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:eb:06:0d:9e:63:ae:5c:1d:d8:42:59:49:2b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f61bbb7c7ae49268cf2376d80a626c3c0f4c661d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:ec:db:cf:b7:86:4c:c3:da:4a:ee:7d:1d: c7:5c:74:2a:f5:9d:fb:c6:7b:e5:a3:0b:63:3f:6c: 86:8f:71:43:e5:cd:d8:18:8c:af:08:dc:8b:a3:d2: 77:91:f7:62:74:65:c8:a9:be:71:12:90:71:34:f5: 81:c4:a8:80:5f:2f:af:3a:a3:5d:49:38:67:4f:4e: f3:e2:cb:cb:c9:0b:1a:23:45:35:ad:22:46:e3:b1: 73:98:42:29:9e:11:8c:f8:e0:10:57:1f:d6:bf:c9: a3:74:ae:1e:fe:1e:fc:4d:cf:c4:7a:24:c3:71:4b: ed:20:77:17:61:3c:df:28:ad:73:10:6e:c4:43:a8: df:f7:f1:29:5b:00:99:87:e7:dc:e4:94:dd:f5:3c: 8c:4c:03:62:68:ea:f4:91:e5:88:5a:b2:55:67:d0: 98:eb:6e:e7:d3:95:21:92:d9:44:fb:56:8b:f7:e3: b2:42:49:fe:09:67:00:90:3c:e1:63:4a:e2:7b:69: 18:1a:85:a3:f9:8d:b3:98:ff:42:0b:fc:e0:66:27: e3:72:b2:cd:9d:25:d7:26:a7:53:79:6d:7c:78:81: e8:2f:a9:f3:87:2c:07:6b:28:fc:63:6c:9f:94:ac: 0c:44:71:98:33:8b:4e:91:7a:85:0b:0c:46:07:17: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1B:BB:7C:7A:E4:92:68:CF:23:76:D8:0A:62:6C:3C:0F:4C:66:1D X509v3 Authority Key Identifier: keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/9hu7fHrkkmjPI3bYCmJsPA9MZh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.104.0/23 45.136.107.0/24 185.26.144.0/22 185.126.176.0/24 185.153.228.0/22 185.162.144.0/24 185.162.147.0/24 185.171.24.0/22 185.247.136.0/24 185.247.138.0/23 IPv6: 2a04:3880::/30 2a06:c380::/29 2a0b:6000::/29 2a0d:a2c0::/29 2a0d:c480::/29 Signature Algorithm: sha256WithRSAEncryption 26:d5:27:48:ea:2d:67:8e:56:b4:c6:35:b9:e2:fa:f5:4f:ba: ec:08:87:8a:e4:0b:fd:91:23:86:4c:76:1b:63:9b:1d:b9:11: a1:c0:da:1b:28:23:6c:7b:bd:2c:a8:e5:a1:8d:4e:2f:e9:85: 6c:c2:b2:4c:8e:c1:42:ce:cc:70:fc:fb:5e:58:81:44:56:5f: bd:ca:aa:b9:c0:f8:55:4c:1d:fd:93:13:d8:5d:c8:98:e8:ce: 5d:f0:b3:10:3d:76:57:2a:cf:a1:0c:70:90:2c:d0:9f:ff:32: 17:7c:77:44:44:16:48:ae:f9:4f:ed:3d:26:58:3a:de:a9:9c: fc:b1:bf:eb:cf:5a:42:85:d0:fc:1a:ae:be:48:73:bd:fd:21: f4:46:54:c6:a0:5c:4b:71:9b:db:68:86:de:a0:2c:71:da:4c: 18:cd:b1:8f:fd:37:36:c6:29:2e:35:c7:fc:7a:fb:59:4d:05: 33:ec:3b:74:74:92:cf:73:f3:93:32:48:92:76:1c:2c:e4:f5: d6:51:b8:2a:43:7f:93:63:7d:1e:5f:7c:d3:bb:2f:9a:65:e4: 01:47:31:06:7b:60:68:24:7e:9e:fc:0a:c0:4b:fc:39:12:2e: 06:3f:2a:be:62:da:a6:72:9d:08:f6:92:bc:02:90:d1:06:5e: 76:ba:42:dd -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt9XOsGDZ5jrlwd2EJZSSvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx ODhhYzcwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjFiYmI3YzdhZTQ5MjY4Y2YyMzc2ZDgwYTYyNmMzYzBmNGM2NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQvs28+3hkzD2krufR3HXHQq9Z37 xnvlowtjP2yGj3FD5c3YGIyvCNyLo9J3kfdidGXIqb5xEpBxNPWBxKiAXy+vOqNd SThnT07z4svLyQsaI0U1rSJG47FzmEIpnhGM+OAQVx/Wv8mjdK4e/h78Tc/EeiTD cUvtIHcXYTzfKK1zEG7EQ6jf9/EpWwCZh+fc5JTd9TyMTANiaOr0keWIWrJVZ9CY 627n05UhktlE+1aL9+OyQkn+CWcAkDzhY0rie2kYGoWj+Y2zmP9CC/zgZifjcrLN nSXXJqdTeW18eIHoL6nzhywHayj8Y2yflKwMRHGYM4tOkXqFCwxGBxcoXQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFPYbu3x65JJozyN22ApibDwPTGYdMB8GA1UdIwQY MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh LTMzODk2MjBjMWJkNy8xLzlodTdmSHJra21qUEkzYllDbUpzUEE5TVpoMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNhLTMzODk2MjBjMWJk Ny8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgYAGCCsGAQUFBwEHAQH/BHEwbzBCBAIAATA8AwQBLYho AwQALYhrAwQCuRqQAwQAuX6wAwQCuZnkAwQAuaKQAwQAuaKTAwQCuasYAwQAufeI AwQBufeKMCkEAgACMCMDBQIqBDiAAwUDKgbDgAMFAyoLYAADBQMqDaLAAwUDKg3E gDANBgkqhkiG9w0BAQsFAAOCAQEAJtUnSOotZ45WtMY1ueL69U+67AiHiuQL/ZEj hkx2G2ObHbkRocDaGygjbHu9LKjloY1OL+mFbMKyTI7BQs7McPz7XliBRFZfvcqq ucD4VUwd/ZMT2F3ImOjOXfCzED12VyrPoQxwkCzQn/8yF3x3REQWSK75T+09Jlg6 3qmc/LG/689aQoXQ/Bquvkhzvf0h9EZUxqBcS3Gb22iG3qAscdpMGM2xj/03NsYp LjXH/Hr7WU0FM+w7dHSSz3PzkzJIknYcLOT11lG4KkN/k2N9Hl9807svmmXkAUcx BntgaCR+nvwKwEv8ORIuBj8qvmLapnKdCPaSvAKQ0QZedrpC3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:32 2026 by rpki-client