This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/9aLc8spuhknepdIuXl9_G-7lgCo.roa File: 9aLc8spuhknepdIuXl9_G-7lgCo.roa (raw, json) Hash identifier: c9hPYKhcAXRzZ0I45eLxMe1++ngSF8swg1cOGJyVE0A= Subject key identifier: F5:A2:DC:F2:CA:6E:86:49:DE:A5:D2:2E:5E:5F:7F:1B:EE:E5:80:2A Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019B7C12D417A6381B1DE58CF945763CA6DB Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/9aLc8spuhknepdIuXl9_G-7lgCo.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206837 IP address blocks: 91.195.34.0/23 maxlen: 23 91.195.34.0/24 maxlen: 24 91.195.35.0/24 maxlen: 24 185.44.60.0/23 maxlen: 23 185.44.60.0/24 maxlen: 24 185.44.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d4:17:a6:38:1b:1d:e5:8c:f9:45:76:3c:a6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5a2dcf2ca6e8649dea5d22e5e5f7f1beee5802a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:34:7c:d6:a9:9b:be:fd:ac:f9:83:7a:5f: f7:b0:14:e7:18:34:5c:cc:4a:ac:a4:fc:51:61:51: ee:0d:3f:b2:57:32:b6:5f:c6:a9:3c:28:d2:5f:8b: 3c:20:39:f6:ba:d8:32:80:41:56:a3:73:40:88:33: 11:c9:bb:73:dd:09:b3:92:c4:7d:54:f6:ad:8e:0a: 2e:f7:46:1d:00:98:2d:81:56:c4:a0:fe:5e:c8:53: 77:a2:64:5c:d7:ba:99:4b:55:59:93:38:67:31:0a: 18:93:9b:4c:f2:23:f1:90:a8:2b:a9:e2:60:0b:b9: e1:f7:ce:c8:f5:30:93:60:48:41:f7:9a:ef:1f:cb: 60:1c:ad:68:27:72:a3:8c:a9:f8:93:5a:99:ab:bd: 47:b0:61:28:13:5a:25:3b:81:14:40:2d:e1:bb:00: 43:73:14:79:80:ee:35:b2:ef:f1:f6:9b:fc:f7:68: 09:87:e0:08:b6:8f:e7:96:37:b4:52:a7:a1:7b:1d: 0a:d1:50:b0:be:7a:08:7b:9b:83:9a:aa:28:1b:c8: 84:fd:20:ec:48:07:b1:0d:15:9b:80:8e:a4:0b:1d: 8d:e9:1d:ce:b9:4b:f3:01:6f:5c:ae:8d:42:8f:84: d4:e0:46:01:cb:9a:4a:ba:99:8f:ca:b2:7d:35:9d: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A2:DC:F2:CA:6E:86:49:DE:A5:D2:2E:5E:5F:7F:1B:EE:E5:80:2A X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/9aLc8spuhknepdIuXl9_G-7lgCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.34.0/23 185.44.60.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:f8:c7:ac:03:4a:ff:6c:b6:39:ba:e7:61:54:90:4b:ba:67: 44:fb:e3:bf:64:8e:8e:1a:2e:39:59:d2:50:94:1b:b9:c6:93: 1e:be:20:ee:39:9a:75:7b:bd:ec:32:c7:a1:fe:8f:81:a8:16: 35:3e:2c:17:ca:7e:fa:60:fc:55:08:9b:69:13:17:56:a7:36: 7a:d9:af:36:2b:a6:a1:c4:93:26:af:ea:80:5d:d5:76:e5:52: df:c1:5d:b4:7e:4a:9d:35:5a:04:46:09:62:c9:06:33:aa:77: 80:a1:3b:84:97:0e:ba:08:6c:52:7a:64:5a:ba:86:e2:84:cf: e4:4f:8a:bd:3e:a2:d4:1b:ba:96:ae:d1:d8:25:69:31:3e:de: a0:da:2e:94:ff:ba:71:d1:a1:bc:7a:e6:58:59:b8:af:38:a6: 6f:0e:54:f0:d2:5b:3e:6d:ff:5c:13:92:27:2c:34:40:bd:05: 1e:a8:10:c9:4f:61:30:7c:36:08:1b:e0:fb:05:8f:f4:91:d1: ef:cc:06:81:ef:18:91:fb:1a:29:37:0d:d2:76:cf:eb:79:73: 6a:26:9b:db:1f:9f:e5:fc:f8:db:d2:73:d8:95:e6:69:4b:5d: 2f:19:18:34:e5:79:82:a6:12:23:23:38:f9:3f:74:58:c4:03: 51:90:c5:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EtQXpjgbHeWM+UV2PKbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWEyZGNmMmNhNmU4NjQ5ZGVhNWQyMmU1ZTVmN2YxYmVlZTU4MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoY0fNapm779rPmDel/3sBTnGDRc zEqspPxRYVHuDT+yVzK2X8apPCjSX4s8IDn2utgygEFWo3NAiDMRybtz3QmzksR9 VPatjgou90YdAJgtgVbEoP5eyFN3omRc17qZS1VZkzhnMQoYk5tM8iPxkKgrqeJg C7nh987I9TCTYEhB95rvH8tgHK1oJ3KjjKn4k1qZq71HsGEoE1olO4EUQC3huwBD cxR5gO41su/x9pv892gJh+AIto/nlje0Uqehex0K0VCwvnoIe5uDmqooG8iE/SDs SAexDRWbgI6kCx2N6R3OuUvzAW9cro1Cj4TU4EYBy5pKupmPyrJ9NZ0M2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPWi3PLKboZJ3qXSLl5ffxvu5YAqMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvOWFMYzhzcHVoa25lcGRJdVhsOV9HLTdsZ0NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8MiAwQB uSw8MA0GCSqGSIb3DQEBCwUAA4IBAQCO+MesA0r/bLY5uudhVJBLumdE++O/ZI6O Gi45WdJQlBu5xpMeviDuOZp1e73sMseh/o+BqBY1PiwXyn76YPxVCJtpExdWpzZ6 2a82K6ahxJMmr+qAXdV25VLfwV20fkqdNVoERgliyQYzqneAoTuElw66CGxSemRa uobihM/kT4q9PqLUG7qWrtHYJWkxPt6g2i6U/7px0aG8euZYWbivOKZvDlTw0ls+ bf9cE5InLDRAvQUeqBDJT2EwfDYIG+D7BY/0kdHvzAaB7xiR+xopNw3Sds/reXNq JpvbH5/l/Pjb0nPYleZpS10vGRg05XmCphIjIzj5P3RYxANRkMXy -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:53 2026 by rpki-client