This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/9PGq0B7AC-zJ-L0Q3TG3hN4oObE.roa File: 9PGq0B7AC-zJ-L0Q3TG3hN4oObE.roa (raw, json) Hash identifier: 6D9R0IBfDMT40g6CEBy8W3M8kqiFYFX93dGioQ6h2MU= Subject key identifier: F4:F1:AA:D0:1E:C0:0B:EC:C9:F8:BD:10:DD:31:B7:84:DE:28:39:B1 Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a Certificate serial: 019B7F8282F096239AC689E5FCBA766F7961 Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/9PGq0B7AC-zJ-L0Q3TG3hN4oObE.roa Signing time: Fri 02 Jan 2026 16:20:18 +0000 ROA not before: Fri 02 Jan 2026 16:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3308 IP address blocks: 62.44.128.0/18 maxlen: 18 62.198.0.0/15 maxlen: 15 85.235.224.0/19 maxlen: 19 89.233.0.0/18 maxlen: 18 89.233.0.0/24 maxlen: 24 185.223.12.0/22 maxlen: 22 194.19.128.0/18 maxlen: 18 194.19.192.0/19 maxlen: 19 194.255.0.0/16 maxlen: 16 195.184.96.0/19 maxlen: 19 212.97.192.0/18 maxlen: 18 213.150.32.0/19 maxlen: 19 213.173.224.0/19 maxlen: 19 217.74.128.0/19 maxlen: 19 2a01:3a0::/29 maxlen: 29 2a01:3a0::/32 maxlen: 32 2a01:3a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:82:f0:96:23:9a:c6:89:e5:fc:ba:76:6f:79:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a Validity Not Before: Jan 2 16:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4f1aad01ec00becc9f8bd10dd31b784de2839b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:50:1f:47:53:4f:4e:83:d2:56:66:92:ef: 96:6c:3f:86:5c:e8:f3:07:55:7c:bb:91:20:02:38: f7:b7:67:ee:de:00:af:f9:bc:a4:45:fe:1d:a2:4a: 20:c2:49:2c:77:14:9e:bf:3a:02:bd:b1:60:b4:0d: cf:97:bc:16:3a:59:6b:e9:b6:82:66:12:f3:a8:85: 8e:a7:39:d8:77:34:e9:96:b6:e6:27:fb:0f:65:03: cf:76:0f:ab:60:cc:85:de:4d:39:fe:2c:cf:cd:29: 5b:f6:dd:fc:8c:1b:d6:5f:7f:af:44:27:cb:eb:8a: 31:74:fb:32:b5:7c:5c:51:ac:5c:aa:79:91:c2:4b: f7:99:63:2e:c9:2e:02:b9:51:74:7b:9d:5c:41:d5: 5f:52:cc:6b:13:d7:77:d9:8e:cb:05:74:9c:96:e6: 9d:78:7b:88:82:06:b4:6d:08:1b:d6:5d:45:f9:6f: 0a:68:46:b1:00:f1:5f:e8:fb:a9:69:4f:1f:fc:6e: b5:fa:23:75:49:93:32:aa:69:d6:c1:dc:eb:60:79: 19:11:37:20:7d:59:d4:70:95:b7:4b:3f:60:df:f6: 6e:6a:5a:aa:45:c1:39:e8:6e:dc:7c:00:b6:73:20: 31:51:20:d7:8c:dd:1f:6b:70:00:36:7f:44:01:2d: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:AA:D0:1E:C0:0B:EC:C9:F8:BD:10:DD:31:B7:84:DE:28:39:B1 X509v3 Authority Key Identifier: keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/9PGq0B7AC-zJ-L0Q3TG3hN4oObE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.44.128.0/18 62.198.0.0/15 85.235.224.0/19 89.233.0.0/18 185.223.12.0/22 194.19.128.0-194.19.223.255 194.255.0.0/16 195.184.96.0/19 212.97.192.0/18 213.150.32.0/19 213.173.224.0/19 217.74.128.0/19 IPv6: 2a01:3a0::/29 Signature Algorithm: sha256WithRSAEncryption 5b:e6:9a:aa:f8:37:06:f1:1f:8a:8a:24:41:bf:a4:68:5d:80: 9d:3e:8c:84:e6:8b:97:7e:51:f7:0d:20:94:c6:04:75:6a:33: 9e:4d:55:0b:d5:ee:19:35:68:9d:23:b1:0e:10:0e:ba:37:f9: d6:a3:29:3c:42:7f:1a:a4:34:04:10:f0:7c:6d:9e:0f:b2:62: 71:71:20:ca:9b:25:36:76:8c:29:2b:92:f6:e4:24:7d:a1:0b: ff:bb:c2:a1:bb:fb:83:b0:91:48:2a:3d:66:a6:46:5d:74:e8: 75:2b:c7:86:16:8c:9c:9a:71:3f:3c:b8:9c:a8:30:f5:74:17: 5d:a1:ed:2c:60:80:c2:f6:79:83:01:bd:d1:fe:2f:19:0d:e1: ef:13:65:76:a2:60:33:50:ec:43:b2:de:4e:cc:e7:00:f9:5c: e6:8e:21:51:df:96:70:7b:ec:f5:76:20:9a:43:32:47:ef:36: 3f:2b:d8:0a:c9:87:b3:67:b3:fd:9f:f2:a9:ea:4d:25:30:1b: dd:35:46:44:35:70:05:8b:23:a2:aa:43:19:9e:52:20:50:0f: d0:c6:91:b8:7f:a5:3f:12:cb:79:5e:6d:58:35:af:01:c6:a0: 36:7c:00:dc:32:c0:81:73:4f:e7:fa:3a:5a:17:fc:76:ba:b1: e0:30:6a:8f -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZt/goLwliOaxonl/Lp2b3lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm MmE1NmEwHhcNMjYwMTAyMTYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGYxYWFkMDFlYzAwYmVjYzlmOGJkMTBkZDMxYjc4NGRlMjgzOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vdQH0dTT06D0lZmku+WbD+GXOjz B1V8u5EgAjj3t2fu3gCv+bykRf4dokogwkksdxSevzoCvbFgtA3Pl7wWOllr6baC ZhLzqIWOpznYdzTplrbmJ/sPZQPPdg+rYMyF3k05/izPzSlb9t38jBvWX3+vRCfL 64oxdPsytXxcUaxcqnmRwkv3mWMuyS4CuVF0e51cQdVfUsxrE9d32Y7LBXScluad eHuIgga0bQgb1l1F+W8KaEaxAPFf6PupaU8f/G61+iN1SZMyqmnWwdzrYHkZETcg fVnUcJW3Sz9g3/ZualqqRcE56G7cfAC2cyAxUSDXjN0fa3AANn9EAS0sywIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFPTxqtAewAvsyfi9EN0xt4TeKDmxMB8GA1UdIwQY MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt NjNjZDNjODYxZDhlLzEvOVBHcTBCN0FDLXpKLUwwUTNURzNoTjRvT2JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQGPiyAAwMB PsYDBAVV6+ADBAZZ6QADBAK53wwwDAMEB8ITgAMEBcITwAMDAML/AwQFw7hgAwQG 1GHAAwQF1ZYgAwQF1a3gAwQF2UqAMA0EAgACMAcDBQMqAQOgMA0GCSqGSIb3DQEB CwUAA4IBAQBb5pqq+DcG8R+KiiRBv6RoXYCdPoyE5ouXflH3DSCUxgR1ajOeTVUL 1e4ZNWidI7EOEA66N/nWoyk8Qn8apDQEEPB8bZ4PsmJxcSDKmyU2dowpK5L25CR9 oQv/u8Khu/uDsJFIKj1mpkZddOh1K8eGFoycmnE/PLicqDD1dBddoe0sYIDC9nmD Ab3R/i8ZDeHvE2V2omAzUOxDst5OzOcA+VzmjiFR35Zwe+z1diCaQzJH7zY/K9gK yYezZ7P9n/Kp6k0lMBvdNUZENXAFiyOiqkMZnlIgUA/QxpG4f6U/Est5Xm1YNa8B xqA2fADcMsCBc0/n+jpaF/x2urHgMGqP -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:17 2026 by rpki-client