This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/_uRGOQez4F9IJ4Gje99KnY5dr8A.roa File: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (raw, json) Hash identifier: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y= Subject key identifier: FE:E4:46:39:07:B3:E0:5F:48:27:81:A3:7B:DF:4A:9D:8E:5D:AF:C0 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC793B422DEB10EF0BDF78DCEE8249F Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/_uRGOQez4F9IJ4Gje99KnY5dr8A.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58121 IP address blocks: 85.9.94.0/24 maxlen: 24 95.215.160.0/23 maxlen: 23 185.155.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:93:b4:22:de:b1:0e:f0:bd:f7:8d:ce:e8:24:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee4463907b3e05f482781a37bdf4a9d8e5dafc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:0b:87:3d:67:50:a1:df:77:b5:c1:37:c8: d0:c3:fc:6f:c5:0a:a5:d4:5e:70:1c:95:60:89:cd: d6:9f:9c:fb:5a:39:1b:cc:aa:ce:71:43:0e:52:d8: de:30:ba:c7:5e:b3:3c:2a:35:c7:1e:e5:00:a7:63: 9a:59:01:76:96:9b:69:80:e4:a4:6a:3c:3d:b3:a6: d3:02:e3:c9:c2:88:14:e0:73:d7:99:75:3b:c9:d9: 9e:fe:b8:f4:f5:96:4d:62:ff:cf:5f:68:ae:63:0c: 61:47:c0:a6:23:ab:83:a1:99:3c:4a:41:19:0b:7e: 57:23:c2:74:26:bc:0b:01:15:b9:b4:84:fe:37:ea: 79:87:44:a5:38:c2:01:df:1c:f3:55:c9:1d:50:54: 21:b7:58:c9:68:6e:98:b1:26:66:e5:2a:b8:e1:d4: 75:f9:33:f7:f4:d1:a8:d8:e3:96:8a:0f:7b:0d:f4: 2a:12:11:0e:89:37:b5:2a:7e:c9:a3:fe:82:67:18: 2f:83:d2:ea:5d:61:6d:f0:5d:76:82:64:ab:0e:ae: b7:0c:ca:a8:65:df:59:93:0e:4a:52:dd:41:25:7b: 20:48:54:ba:c8:b8:05:33:c9:e6:8e:ab:42:9b:b3: a9:69:eb:e9:9c:d2:ea:49:6b:59:e6:1f:b9:d9:c8: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E4:46:39:07:B3:E0:5F:48:27:81:A3:7B:DF:4A:9D:8E:5D:AF:C0 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/_uRGOQez4F9IJ4Gje99KnY5dr8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.9.94.0/24 95.215.160.0/23 185.155.14.0/23 Signature Algorithm: sha256WithRSAEncryption 54:81:3a:28:22:cb:fb:03:37:5b:1b:1b:28:ec:58:c5:74:99: 09:50:b5:9e:44:8a:fd:51:7e:c4:df:2b:6a:0b:0d:ff:26:41: cf:8b:0a:f0:1c:09:8c:45:f6:c2:6b:f5:b9:b7:0b:37:dc:d0: 81:7b:32:a8:c0:b0:94:89:e4:9c:56:07:44:cb:dc:05:ad:49: b6:e9:10:48:e7:bb:d4:d0:e3:06:d0:9a:2e:ec:7c:10:e5:81: f4:bb:ae:6a:34:14:21:3f:bf:be:4d:60:56:73:0b:ad:f7:56: cb:b4:ac:14:49:c8:7a:b0:77:00:8f:5d:b2:fc:39:24:41:cd: 82:0e:83:2a:4f:45:05:27:96:c7:f0:c3:44:c4:05:3a:35:c8: 28:cd:78:83:f7:59:62:f1:ea:c5:82:ee:aa:85:0f:9f:8a:86: b6:0b:41:c6:39:5f:71:a1:1a:03:ea:e4:86:c5:d9:ef:e4:87: a7:fd:6c:d4:19:6f:2e:42:b6:63:7b:77:27:86:59:00:b4:9c: 11:86:1b:5f:cb:3f:29:5a:93:dd:31:7c:36:4d:18:fc:9d:63: 88:30:a5:f4:9f:26:f8:16:4b:47:f3:2b:75:28:9e:67:bc:1b: 62:36:9c:f7:c4:01:3c:7e:88:58:d0:20:89:e8:13:03:7f:bd: 2e:f0:94:bc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x5O0It6xDvC9943O6CSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWU0NDYzOTA3YjNlMDVmNDgyNzgxYTM3YmRmNGE5ZDhlNWRhZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAoLhz1nUKHfd7XBN8jQw/xvxQql 1F5wHJVgic3Wn5z7WjkbzKrOcUMOUtjeMLrHXrM8KjXHHuUAp2OaWQF2lptpgOSk ajw9s6bTAuPJwogU4HPXmXU7ydme/rj09ZZNYv/PX2iuYwxhR8CmI6uDoZk8SkEZ C35XI8J0JrwLARW5tIT+N+p5h0SlOMIB3xzzVckdUFQht1jJaG6YsSZm5Sq44dR1 +TP39NGo2OOWig97DfQqEhEOiTe1Kn7Jo/6CZxgvg9LqXWFt8F12gmSrDq63DMqo Zd9Zkw5KUt1BJXsgSFS6yLgFM8nmjqtCm7OpaevpnNLqSWtZ5h+52cjfvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP7kRjkHs+BfSCeBo3vfSp2OXa/AMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvX3VSR09RZXo0RjlJSjRHamU5OUtuWTVkcjhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVQleAwQB X9egAwQBuZsOMA0GCSqGSIb3DQEBCwUAA4IBAQBUgTooIsv7AzdbGxso7FjFdJkJ ULWeRIr9UX7E3ytqCw3/JkHPiwrwHAmMRfbCa/W5tws33NCBezKowLCUieScVgdE y9wFrUm26RBI57vU0OMG0Jou7HwQ5YH0u65qNBQhP7++TWBWcwut91bLtKwUSch6 sHcAj12y/DkkQc2CDoMqT0UFJ5bH8MNExAU6NcgozXiD91li8erFgu6qhQ+fioa2 C0HGOV9xoRoD6uSGxdnv5Ien/WzUGW8uQrZje3cnhlkAtJwRhhtfyz8pWpPdMXw2 TRj8nWOIMKX0nyb4FktH8yt1KJ5nvBtiNpz3xAE8fohY0CCJ6BMDf70u8JS8 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:54 2026 by rpki-client