This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/9Fey2fL5T-I6iWRQjnl5tFPgV78.roa File: 9Fey2fL5T-I6iWRQjnl5tFPgV78.roa (raw, json) Hash identifier: 65yGgePTUWKVgMKzNn1p8ghRnq/EigUAh+Mwu8coGnY= Subject key identifier: F4:57:B2:D9:F2:F9:4F:E2:3A:89:64:50:8E:79:79:B4:53:E0:57:BF Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Certificate serial: 019B7FF15F238F390DB2FC920B9CDDD6894D Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/9Fey2fL5T-I6iWRQjnl5tFPgV78.roa Signing time: Fri 02 Jan 2026 18:21:23 +0000 ROA not before: Fri 02 Jan 2026 18:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35197 IP address blocks: 89.187.216.0/21 maxlen: 21 89.187.220.0/24 maxlen: 24 185.176.144.0/22 maxlen: 22 185.176.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:5f:23:8f:39:0d:b2:fc:92:0b:9c:dd:d6:89:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Validity Not Before: Jan 2 18:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f457b2d9f2f94fe23a8964508e7979b453e057bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:10:58:f9:09:e4:f4:44:df:d9:87:e6:5e: 6d:a2:ce:06:43:ca:61:70:0e:73:d5:c0:da:ba:62: 13:8c:21:4a:33:31:59:25:2d:3a:d2:31:69:87:a9: 90:cb:bb:44:15:43:8f:f9:53:e7:99:33:98:8b:29: 14:f7:c3:4c:50:8e:c0:04:8e:87:80:7a:bf:b7:81: f6:df:8e:5b:11:e4:83:69:7b:ee:8b:d9:d0:1a:a9: db:d9:12:40:d3:85:e6:ac:4b:6c:59:2b:a6:e3:9c: ae:70:d7:5d:93:ba:20:bf:38:97:fe:16:4f:43:16: 90:12:a3:88:c0:65:79:9c:9c:84:10:f7:47:b7:14: 87:17:2d:dc:4f:9d:69:4d:17:74:41:a6:9d:aa:9d: 1a:02:8e:c7:6e:11:f3:e8:65:1e:da:e7:b1:90:22: 6c:a2:b1:94:4e:99:9d:c5:8a:ae:4d:3b:e8:da:d8: 31:fc:c2:10:74:b2:cf:bf:ab:17:a2:bc:eb:e1:e6: 4b:37:6b:26:d2:ee:fc:54:9f:79:3f:1f:e6:ee:8d: 4b:8e:eb:f5:19:91:6f:72:1b:e1:42:69:be:61:e6: 61:f4:42:a3:04:1d:11:62:f1:f2:92:36:8b:fb:27: b5:48:d3:29:1e:b9:11:ec:c5:55:e3:8f:d1:dd:fd: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:57:B2:D9:F2:F9:4F:E2:3A:89:64:50:8E:79:79:B4:53:E0:57:BF X509v3 Authority Key Identifier: keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/9Fey2fL5T-I6iWRQjnl5tFPgV78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.216.0/21 185.176.144.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:d1:aa:37:cd:cb:e9:4a:ef:db:fe:2c:c4:e4:6d:89:6a:60: 3f:a6:17:72:34:50:c6:8e:b9:11:42:ac:00:ae:d9:cb:16:db: ad:a6:a9:31:fb:46:d7:19:97:84:2c:0c:39:5a:b7:6a:17:e8: 49:a7:d8:35:9d:54:84:20:7a:90:ec:de:17:6a:4d:cf:1a:d6: 79:77:6c:b8:5f:80:48:0f:02:92:e9:83:d7:43:7d:fd:db:e0: 6c:f7:a6:76:a3:fe:d4:c0:bc:cc:c7:89:40:89:9e:38:a0:62: 61:18:bd:82:02:50:3c:5e:bd:46:b0:cc:30:f7:b2:cb:be:da: a6:b5:46:9d:14:d4:d5:09:8c:c2:f9:42:43:66:1e:fc:14:cd: 46:27:14:1d:14:9e:7a:96:2c:96:49:85:23:4e:9d:ff:80:e9: 94:19:d7:1f:21:a7:18:b8:21:8d:95:d6:01:ca:4b:0f:d4:ef: bc:9b:a7:aa:5a:9d:42:da:e9:c1:73:d8:de:0e:82:2b:59:0a: 86:28:8d:72:d5:c4:d5:1b:fd:a6:33:27:e1:99:1d:c6:8d:ed: bf:58:42:c8:f6:68:ce:14:46:9a:e6:a4:7d:f5:7b:7b:be:dc: 5e:e2:d0:0c:e7:23:76:21:f7:3b:fb:dd:15:fb:b8:50:93:12: 7c:63:fc:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8V8jjzkNsvySC5zd1olNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2 NmYwNzEwHhcNMjYwMTAyMTgyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDU3YjJkOWYyZjk0ZmUyM2E4OTY0NTA4ZTc5NzliNDUzZTA1N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMYQWPkJ5PRE39mH5l5tos4GQ8ph cA5z1cDaumITjCFKMzFZJS060jFph6mQy7tEFUOP+VPnmTOYiykU98NMUI7ABI6H gHq/t4H2345bEeSDaXvui9nQGqnb2RJA04XmrEtsWSum45yucNddk7ogvziX/hZP QxaQEqOIwGV5nJyEEPdHtxSHFy3cT51pTRd0Qaadqp0aAo7HbhHz6GUe2uexkCJs orGUTpmdxYquTTvo2tgx/MIQdLLPv6sXorzr4eZLN2sm0u78VJ95Px/m7o1Ljuv1 GZFvchvhQmm+YeZh9EKjBB0RYvHykjaL+ye1SNMpHrkR7MVV44/R3f2QrwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPRXstny+U/iOolkUI55ebRT4Fe/MB8GA1UdIwQY MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt MjMzNmNkYjliYTlmLzEvOUZleTJmTDVULUk2aVdSUWpubDV0RlBnVjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDWbvYAwQC ubCQMA0GCSqGSIb3DQEBCwUAA4IBAQAL0ao3zcvpSu/b/izE5G2JamA/phdyNFDG jrkRQqwArtnLFtutpqkx+0bXGZeELAw5WrdqF+hJp9g1nVSEIHqQ7N4Xak3PGtZ5 d2y4X4BIDwKS6YPXQ3392+Bs96Z2o/7UwLzMx4lAiZ44oGJhGL2CAlA8Xr1GsMww 97LLvtqmtUadFNTVCYzC+UJDZh78FM1GJxQdFJ56liyWSYUjTp3/gOmUGdcfIacY uCGNldYByksP1O+8m6eqWp1C2unBc9jeDoIrWQqGKI1y1cTVG/2mMyfhmR3Gje2/ WELI9mjOFEaa5qR99Xt7vtxe4tAM5yN2Ifc7+90V+7hQkxJ8Y/xX -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:02 2026 by rpki-client