This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/S9Ai0EIR2vtvvaNO40Q4o0XeJTY.roa File: S9Ai0EIR2vtvvaNO40Q4o0XeJTY.roa (raw, json) Hash identifier: cWthzt29Pk8WMPO8BPOfyi4Hia0WYfpLAfHXQiVL0p4= Subject key identifier: 4B:D0:22:D0:42:11:DA:FB:6F:BD:A3:4E:E3:44:38:A3:45:DE:25:36 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019BDAB2C24F9B949516C20E03DF26D34DAE Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/S9Ai0EIR2vtvvaNO40Q4o0XeJTY.roa Signing time: Tue 20 Jan 2026 09:18:26 +0000 ROA not before: Tue 20 Jan 2026 09:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40980 IP address blocks: 144.208.192.0/21 maxlen: 22 144.208.200.0/22 maxlen: 22 185.50.234.0/24 maxlen: 24 2a01:aea0:100::/48 maxlen: 48 2a01:aea0:101::/48 maxlen: 48 2a01:aea0:102::/48 maxlen: 48 2a01:aea0:200::/40 maxlen: 40 2a01:aea0:300::/40 maxlen: 40 2a01:aea0:dd3::/48 maxlen: 48 2a01:aea0:dd4::/48 maxlen: 48 2a01:aea0:dd5::/48 maxlen: 48 2a01:aea0:dd6::/48 maxlen: 48 2a01:aea0:df3::/48 maxlen: 48 2a01:aea0:df4::/48 maxlen: 48 2a01:aea0:df5::/48 maxlen: 48 2a01:aea0:df6::/48 maxlen: 48 2a01:aea0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:b2:c2:4f:9b:94:95:16:c2:0e:03:df:26:d3:4d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 20 09:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bd022d04211dafb6fbda34ee34438a345de2536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:83:06:86:2c:18:9a:91:ce:7b:74:e4:19: cd:1f:e3:a2:9e:c6:ef:32:36:64:87:aa:b7:d5:69: 44:12:70:62:6e:99:00:35:06:c5:59:92:31:75:73: 6d:a5:7d:6c:93:92:6a:4f:44:d9:79:94:89:1a:02: ec:87:32:b2:5b:29:3d:2b:fd:25:76:4d:37:6a:15: 16:7b:cb:59:05:b8:fd:e9:2d:2b:55:32:50:ce:89: 18:fa:91:52:bf:d2:9e:73:e6:8b:7d:a7:05:e4:f7: c9:0f:31:97:fe:47:6c:db:f4:76:20:da:1a:c1:d6: bf:97:f0:dd:02:b5:87:91:ba:00:69:05:55:55:39: 56:be:bf:70:98:41:6c:4a:5c:77:11:ab:fa:35:6a: ff:e6:4b:45:db:5d:50:51:d6:5c:08:43:8d:75:74: 33:2e:63:b4:43:10:2b:73:bc:6a:3b:c7:34:8f:12: b4:53:e0:12:34:65:54:17:b4:fa:d7:3f:8f:26:97: 29:48:79:88:ea:df:46:6a:91:92:c7:d2:80:e2:e2: 3c:98:39:c3:32:6e:02:6e:aa:51:56:a4:2f:aa:e2: 21:7f:92:9a:e3:6e:74:cb:b0:a6:2b:3e:64:9c:f7: e7:4c:fe:47:b5:1d:45:45:eb:8e:6d:d7:ce:e1:0d: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D0:22:D0:42:11:DA:FB:6F:BD:A3:4E:E3:44:38:A3:45:DE:25:36 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/S9Ai0EIR2vtvvaNO40Q4o0XeJTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.208.192.0-144.208.203.255 185.50.234.0/24 IPv6: 2a01:aea0:100::-2a01:aea0:102:ffff:ffff:ffff:ffff:ffff 2a01:aea0:200::/39 2a01:aea0:dd3::-2a01:aea0:dd6:ffff:ffff:ffff:ffff:ffff 2a01:aea0:df3::-2a01:aea0:df6:ffff:ffff:ffff:ffff:ffff 2a01:aea0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 6d:08:2f:03:0e:27:22:a9:aa:89:44:23:b1:48:86:56:d9:6e: 3e:29:2d:4a:c2:74:71:ae:a2:4e:b6:5f:97:95:72:2c:dc:3a: 7b:72:6f:6c:a5:9e:11:36:df:60:e0:05:18:a9:49:80:5b:d5: a6:b3:8a:08:b4:b1:66:ff:9b:07:55:aa:fb:a0:22:70:91:98: 19:1f:63:0f:82:32:fc:02:8c:01:de:c4:2c:1c:91:4b:93:1e: 5a:08:e6:e6:9e:3a:60:da:27:c6:d4:98:c8:b9:ae:be:4c:cd: cf:44:24:4b:56:07:75:2f:fd:2a:48:bd:ec:78:df:60:79:88: 81:34:f9:cf:ba:29:6a:e5:72:2e:ff:44:0c:86:d4:48:da:0b: 37:e4:52:21:24:c2:a7:03:9a:e0:0c:60:85:05:8c:0a:12:01: 9b:90:23:21:75:85:ab:75:55:1f:97:41:93:07:7f:24:94:a8: 0e:7c:fc:d0:e3:79:86:7e:09:95:3d:2d:76:a2:e7:dd:a8:99: d9:f0:dc:39:4c:59:e8:37:c4:10:d0:3a:0f:59:d4:6f:47:b6: d5:19:f0:0f:e8:44:ba:82:2f:51:d7:7f:4a:bb:cb:e6:4b:be: 84:b7:47:a3:f3:90:0c:87:cc:81:5a:b7:71:20:0d:06:df:94: f6:f6:0d:f2 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZvassJPm5SVFsIOA98m002uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTIwMDkxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQwMjJkMDQyMTFkYWZiNmZiZGEzNGVlMzQ0MzhhMzQ1ZGUyNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUiDBoYsGJqRznt05BnNH+Oinsbv MjZkh6q31WlEEnBibpkANQbFWZIxdXNtpX1sk5JqT0TZeZSJGgLshzKyWyk9K/0l dk03ahUWe8tZBbj96S0rVTJQzokY+pFSv9Kec+aLfacF5PfJDzGX/kds2/R2INoa wda/l/DdArWHkboAaQVVVTlWvr9wmEFsSlx3Eav6NWr/5ktF211QUdZcCEONdXQz LmO0QxArc7xqO8c0jxK0U+ASNGVUF7T61z+PJpcpSHmI6t9GapGSx9KA4uI8mDnD Mm4CbqpRVqQvquIhf5Ka4250y7CmKz5knPfnTP5HtR1FReuObdfO4Q3xJwIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFEvQItBCEdr7b72jTuNEOKNF3iU2MB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvUzlBaTBFSVIydnR2dmFOTzQwUTRvMFhlSlRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wGgQCAAEwFDAMAwQGkNDA AwQCkNDIAwQAuTLqMFEEAgACMEswEQMGACoBrqABAwcAKgGuoAECAwYBKgGuoAIw EgMHACoBrqAN0wMHACoBrqAN1jASAwcAKgGuoA3zAwcAKgGuoA32AwYEKgGuoBAw DQYJKoZIhvcNAQELBQADggEBAG0ILwMOJyKpqolEI7FIhlbZbj4pLUrCdHGuok62 X5eVcizcOntyb2ylnhE232DgBRipSYBb1aazigi0sWb/mwdVqvugInCRmBkfYw+C MvwCjAHexCwckUuTHloI5uaeOmDaJ8bUmMi5rr5Mzc9EJEtWB3Uv/SpIvex432B5 iIE0+c+6KWrlci7/RAyG1EjaCzfkUiEkwqcDmuAMYIUFjAoSAZuQIyF1hat1VR+X QZMHfySUqA58/NDjeYZ+CZU9LXai592omdnw3DlMWeg3xBDQOg9Z1G9HttUZ8A/o RLqCL1HXf0q7y+ZLvoS3R6PzkAyHzIFat3EgDQbflPb2DfI= -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:44 2026 by rpki-client