This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa File: 9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa (raw, json) Hash identifier: eOLmOGsXdxwjrVkNUc39nNMoOTMIs4RJ3w9pYcYKSIo= Subject key identifier: F6:B0:1C:31:BF:D3:F9:4E:0F:A4:DC:F0:F7:F9:60:AD:F5:4A:39:28 Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019B7A5B475FB2D587470D7235F58279D96C Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa Signing time: Thu 01 Jan 2026 16:19:20 +0000 ROA not before: Thu 01 Jan 2026 16:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60241 IP address blocks: 185.34.60.0/22 maxlen: 22 185.120.128.0/22 maxlen: 22 198.52.44.0/22 maxlen: 24 198.52.46.0/23 maxlen: 23 2a04:5d00::/29 maxlen: 29 2a06:9a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:47:5f:b2:d5:87:47:0d:72:35:f5:82:79:d9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6b01c31bfd3f94e0fa4dcf0f7f960adf54a3928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:05:f0:d4:7b:ce:7f:69:61:4e:37:49:6f: 86:ea:e4:22:a8:f0:bc:95:09:2e:97:8b:d4:fb:24: 8c:63:a7:84:78:0a:cd:5d:fb:d4:2c:94:a4:f3:81: df:c1:19:fd:b1:a7:54:29:19:ad:07:08:ae:0f:80: 51:d7:23:7d:4b:92:4e:5d:bf:67:7d:90:62:74:68: 7d:75:31:09:a3:3d:6c:af:28:d4:60:29:b9:7d:71: 36:a0:68:ac:1a:5e:e8:48:38:cb:51:ae:88:d9:97: a1:f0:86:9c:a5:0e:e8:63:b6:46:94:bd:04:d5:20: 7c:ef:04:6b:de:b0:b9:e9:97:70:49:7d:b0:02:49: 9a:4d:76:90:47:da:97:f6:c2:50:c9:85:a9:26:40: 28:fc:f8:56:19:6d:66:62:68:bd:24:50:dc:42:5c: 25:9b:d3:1e:c1:8d:69:2a:1b:66:b1:0b:9f:00:10: d4:76:11:ae:e7:57:42:f2:c3:56:e0:24:76:fe:c4: 90:00:d4:70:c6:32:32:76:e5:e4:a2:80:35:48:02: 00:ae:f7:cd:a5:23:44:ce:bb:a4:04:89:d2:2a:4f: d9:44:95:0b:12:9e:64:6f:86:8a:95:02:9b:c8:89: fd:c1:9b:a3:d4:67:24:15:ac:ed:aa:d1:b9:d5:07: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B0:1C:31:BF:D3:F9:4E:0F:A4:DC:F0:F7:F9:60:AD:F5:4A:39:28 X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/9rAcMb_T-U4PpNzw9_lgrfVKOSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.60.0/22 185.120.128.0/22 198.52.44.0/22 IPv6: 2a04:5d00::/29 2a06:9a80::/29 Signature Algorithm: sha256WithRSAEncryption 00:7f:39:48:15:79:38:62:0e:3c:a8:ca:c6:a7:aa:78:c2:2d: 43:9d:99:03:bd:ed:d3:77:f4:c0:80:b3:58:23:23:95:9b:a9: 4e:34:28:c4:40:c3:af:69:b3:e1:2d:89:ba:a2:4d:c0:b9:94: 69:e1:bd:75:31:d5:96:67:1b:5d:39:da:fa:b5:c3:80:5b:c2: 2e:7a:f1:88:c9:e9:3a:22:dc:10:07:44:6b:50:19:84:78:80: f9:03:31:5f:fa:c4:1a:f2:0a:94:c1:25:85:43:2e:f3:e5:12: ef:ac:c7:b6:d8:10:3b:eb:7a:e6:40:cd:ed:11:60:ef:f1:c2: d3:67:06:32:55:cc:ff:6a:ed:a5:73:f4:51:80:1d:0f:52:95: 95:30:ec:ae:e1:9c:a5:b7:76:03:2c:e4:bc:c7:37:cf:35:ba: be:d3:fc:43:ca:57:e3:e5:86:e1:6e:cd:08:d1:35:14:74:f2: 18:76:8c:ad:8b:e4:b6:d2:51:08:58:49:9b:66:14:07:c4:bb: a6:a8:71:c6:47:7e:86:e3:46:81:f0:fd:82:24:63:d3:7e:66: b4:2b:25:07:59:61:de:89:f2:56:f7:13:ed:35:4f:f6:22:66: 7c:22:5c:31:56:bb:f5:09:c9:cf:cd:f4:67:4a:5b:41:2a:94: 6d:4c:4a:e3 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt6W0dfstWHRw1yNfWCedlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmIwMWMzMWJmZDNmOTRlMGZhNGRjZjBmN2Y5NjBhZGY1NGEzOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyMF8NR7zn9pYU43SW+G6uQiqPC8 lQkul4vU+ySMY6eEeArNXfvULJSk84HfwRn9sadUKRmtBwiuD4BR1yN9S5JOXb9n fZBidGh9dTEJoz1sryjUYCm5fXE2oGisGl7oSDjLUa6I2Zeh8IacpQ7oY7ZGlL0E 1SB87wRr3rC56ZdwSX2wAkmaTXaQR9qX9sJQyYWpJkAo/PhWGW1mYmi9JFDcQlwl m9MewY1pKhtmsQufABDUdhGu51dC8sNW4CR2/sSQANRwxjIyduXkooA1SAIArvfN pSNEzrukBInSKk/ZRJULEp5kb4aKlQKbyIn9wZuj1GckFaztqtG51QcSiQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPawHDG/0/lOD6Tc8Pf5YK31SjkoMB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvOXJBY01iX1QtVTRQcE56dzlfbGdyZlZLT1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuSI8AwQC uXiAAwQCxjQsMBQEAgACMA4DBQMqBF0AAwUDKgaagDANBgkqhkiG9w0BAQsFAAOC AQEAAH85SBV5OGIOPKjKxqeqeMItQ52ZA73t03f0wICzWCMjlZupTjQoxEDDr2mz 4S2JuqJNwLmUaeG9dTHVlmcbXTna+rXDgFvCLnrxiMnpOiLcEAdEa1AZhHiA+QMx X/rEGvIKlMElhUMu8+US76zHttgQO+t65kDN7RFg7/HC02cGMlXM/2rtpXP0UYAd D1KVlTDsruGcpbd2AyzkvMc3zzW6vtP8Q8pX4+WG4W7NCNE1FHTyGHaMrYvkttJR CFhJm2YUB8S7pqhxxkd+huNGgfD9giRj035mtCslB1lh3onyVvcT7TVP9iJmfCJc MVa79QnJz830Z0pbQSqUbUxK4w== -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:56 2026 by rpki-client