This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/i72bIypIf2CpFKoEg8C1pt-mNRo.roa File: i72bIypIf2CpFKoEg8C1pt-mNRo.roa (raw, json) Hash identifier: IFGCEB1czLr3SQqiMmwkpKpmacuW/s1RIwvjueqrec8= Subject key identifier: 8B:BD:9B:23:2A:48:7F:60:A9:14:AA:04:83:C0:B5:A6:DF:A6:35:1A Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Certificate serial: 019B797F1A65568018E794DB9D5C946618E2 Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/i72bIypIf2CpFKoEg8C1pt-mNRo.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44574 IP address blocks: 91.230.181.0/24 maxlen: 24 95.215.174.0/24 maxlen: 24 193.104.113.0/24 maxlen: 24 193.150.34.0/24 maxlen: 24 193.238.80.0/22 maxlen: 22 2001:678:498::/48 maxlen: 48 2001:678:49c::/48 maxlen: 48 2001:678:4a0::/48 maxlen: 48 2001:678:4a4::/48 maxlen: 48 2001:67c:16d0::/48 maxlen: 48 2001:67c:16d1::/48 maxlen: 48 2001:67c:1954::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1a:65:56:80:18:e7:94:db:9d:5c:94:66:18:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bbd9b232a487f60a914aa0483c0b5a6dfa6351a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:70:3d:39:30:48:88:0a:c2:31:f3:8f:24: 4d:0a:da:c2:72:08:c1:b9:34:0f:17:c3:f2:68:26: 16:c4:89:58:55:1b:24:e7:9f:00:73:c8:84:df:2e: 57:e3:47:c3:04:2b:6d:33:a9:29:14:8d:20:6a:d3: ca:b0:38:46:34:57:57:2d:0d:d4:d1:18:76:94:dd: 8d:e5:85:05:28:c9:9e:f6:ca:94:a0:57:88:9c:57: 24:5c:d0:c0:17:9d:63:32:f3:6a:9d:77:49:59:72: 2a:7b:3f:eb:2c:26:cd:47:75:cb:ef:24:7e:26:2c: e2:1a:60:02:56:11:21:48:00:73:d7:49:34:8b:b3: 4b:15:e1:11:a6:dc:08:1e:ed:97:4e:8e:c1:4b:7b: 76:1e:8a:d7:db:dd:37:59:fb:6c:f3:aa:83:37:ed: c9:80:9d:28:1e:95:32:f4:bb:88:a5:87:8c:9f:40: 2c:3c:a1:4f:30:8b:11:86:1e:85:ee:1a:8a:b3:70: a6:58:d6:6d:12:a9:5e:cf:25:ac:2e:cb:96:00:4d: 5f:2b:ae:ba:e8:16:e1:83:45:87:a5:7e:39:5d:5c: d4:b8:f6:0f:ab:cb:40:d8:74:e8:e8:6b:e8:83:5c: c5:a6:ca:1a:36:d4:fc:f0:2e:7d:09:d9:c4:49:e2: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BD:9B:23:2A:48:7F:60:A9:14:AA:04:83:C0:B5:A6:DF:A6:35:1A X509v3 Authority Key Identifier: keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/i72bIypIf2CpFKoEg8C1pt-mNRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.181.0/24 95.215.174.0/24 193.104.113.0/24 193.150.34.0/24 193.238.80.0/22 IPv6: 2001:678:498::/48 2001:678:49c::/48 2001:678:4a0::/48 2001:678:4a4::/48 2001:67c:16d0::/47 2001:67c:1954::/48 Signature Algorithm: sha256WithRSAEncryption a7:b2:d7:8a:32:e2:2e:1f:e5:d2:c4:57:5a:a8:f8:42:80:3b: cd:ab:aa:09:a1:e4:9c:fe:d1:07:ba:1e:0a:de:47:8b:bf:15: 34:15:41:f5:c9:7d:89:41:3b:05:34:28:04:4c:b5:f4:8d:e4: 94:70:3e:e4:20:70:f2:49:95:d0:13:2b:e5:7b:b0:3e:20:5a: 87:fb:58:40:4e:8e:a3:b4:55:bb:a4:b1:5d:31:a9:0e:81:ef: 37:78:ad:d5:30:46:ae:ae:be:93:3a:8d:6f:2d:62:3d:3a:95: 31:24:ea:55:de:39:1e:f1:62:e4:40:13:33:bc:33:8b:d0:a2: 66:db:f6:25:83:a8:75:0c:cf:fe:a7:b5:18:59:39:8a:5e:ac: 1b:0d:5b:ac:d0:e9:4c:95:35:bd:c0:2f:a5:24:24:4b:0c:d9: 41:5b:95:13:5b:bf:7a:5b:2b:53:55:03:81:57:3f:3e:cc:93: 61:96:04:20:62:f5:2b:d9:b4:94:37:be:d0:58:03:01:ee:c0: 05:8f:52:d8:ac:b8:76:a6:0b:75:93:cc:02:87:4d:13:e2:68: 7a:02:44:f9:8b:42:64:b9:93:d3:35:5f:c0:a1:ae:62:87:93: 1f:5c:3f:20:e2:e6:fe:1a:0c:c3:61:a4:0a:b4:28:45:8d:ad: 51:fc:66:be -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt5fxplVoAY55TbnVyUZhjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmU0ZmQyMTlmNWI3N2NlODBjZGZhZjllM2E2NDQxZGVj NTAwNDIwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmJkOWIyMzJhNDg3ZjYwYTkxNGFhMDQ4M2MwYjVhNmRmYTYzNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyhwPTkwSIgKwjHzjyRNCtrCcgjB uTQPF8PyaCYWxIlYVRsk558Ac8iE3y5X40fDBCttM6kpFI0gatPKsDhGNFdXLQ3U 0Rh2lN2N5YUFKMme9sqUoFeInFckXNDAF51jMvNqnXdJWXIqez/rLCbNR3XL7yR+ JiziGmACVhEhSABz10k0i7NLFeERptwIHu2XTo7BS3t2HorX2903Wfts86qDN+3J gJ0oHpUy9LuIpYeMn0AsPKFPMIsRhh6F7hqKs3CmWNZtEqlezyWsLsuWAE1fK666 6Bbhg0WHpX45XVzUuPYPq8tA2HTo6Gvog1zFpsoaNtT88C59CdnESeL1pwIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFIu9myMqSH9gqRSqBIPAtabfpjUaMB8GA1UdIwQY MBaAFA4uT9IZ9bd86Azfr546ZEHexQBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTkt MjM4ZmVlNjkyNDMwLzEvaTcyYkl5cElmMkNwRktvRWc4QzFwdC1tTlJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTktMjM4ZmVlNjkyNDMw LzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDAkBAIAATAeAwQAW+a1AwQA X9euAwQAwWhxAwQAwZYiAwQCwe5QMDwEAgACMDYDBwAgAQZ4BJgDBwAgAQZ4BJwD BwAgAQZ4BKADBwAgAQZ4BKQDBwEgAQZ8FtADBwAgAQZ8GVQwDQYJKoZIhvcNAQEL BQADggEBAKey14oy4i4f5dLEV1qo+EKAO82rqgmh5Jz+0Qe6HgreR4u/FTQVQfXJ fYlBOwU0KARMtfSN5JRwPuQgcPJJldATK+V7sD4gWof7WEBOjqO0VbuksV0xqQ6B 7zd4rdUwRq6uvpM6jW8tYj06lTEk6lXeOR7xYuRAEzO8M4vQombb9iWDqHUMz/6n tRhZOYperBsNW6zQ6UyVNb3AL6UkJEsM2UFblRNbv3pbK1NVA4FXPz7Mk2GWBCBi 9SvZtJQ3vtBYAwHuwAWPUtisuHamC3WTzAKHTRPiaHoCRPmLQmS5k9M1X8ChrmKH kx9cPyDi5v4aDMNhpAq0KEWNrVH8Zr4= -----END CERTIFICATE-----Generated at Mon Jan 12 03:48:09 2026 by rpki-client