This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/_cQuzm-YuvVE0JApXAQknL1rNjs.roa File: _cQuzm-YuvVE0JApXAQknL1rNjs.roa (raw, json) Hash identifier: 2EBINJJXlhJwdD2BP0WCI2pHnbzFmHkxpM3UxvmPudE= Subject key identifier: FD:C4:2E:CE:6F:98:BA:F5:44:D0:90:29:5C:04:24:9C:BD:6B:36:3B Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2 Certificate serial: 019B7BA38019D5A74511CFF399FC5A9879B1 Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/_cQuzm-YuvVE0JApXAQknL1rNjs.roa Signing time: Thu 01 Jan 2026 22:17:51 +0000 ROA not before: Thu 01 Jan 2026 22:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201814 IP address blocks: 5.181.188.0/22 maxlen: 22 91.223.3.0/24 maxlen: 24 91.226.198.0/23 maxlen: 23 91.226.198.0/24 maxlen: 24 91.226.199.0/24 maxlen: 24 95.214.52.0/22 maxlen: 23 95.214.52.0/23 maxlen: 23 95.214.54.0/23 maxlen: 23 146.19.24.0/24 maxlen: 24 178.211.139.0/24 maxlen: 24 185.16.36.0/22 maxlen: 24 185.225.191.0/24 maxlen: 24 185.248.24.0/24 maxlen: 24 193.34.212.0/22 maxlen: 22 193.34.212.0/23 maxlen: 23 193.34.214.0/23 maxlen: 23 193.34.215.0/24 maxlen: 24 195.3.220.0/22 maxlen: 22 195.3.220.0/23 maxlen: 23 195.3.222.0/23 maxlen: 23 195.3.222.0/24 maxlen: 24 212.23.222.0/24 maxlen: 24 2a03:cfc0::/32 maxlen: 32 2a03:cfc0::/33 maxlen: 33 2a03:cfc0:8000::/33 maxlen: 33 2a09:d580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:80:19:d5:a7:45:11:cf:f3:99:fc:5a:98:79:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2 Validity Not Before: Jan 1 22:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc42ece6f98baf544d090295c04249cbd6b363b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:f3:0e:b2:26:75:a0:a6:40:2a:2f:75:40: d3:32:57:6e:7e:4c:bc:f2:8e:ea:13:f3:76:c9:d8: 0c:ff:59:3c:9c:bd:c7:98:70:5c:3c:97:34:27:e2: 2d:83:3e:36:07:95:55:a3:0b:52:60:71:2f:3c:7d: fd:d1:56:b4:d9:46:fa:13:ad:b3:92:5e:91:eb:df: 70:ea:52:f5:ff:b2:15:59:cd:87:3b:aa:6d:93:5e: a7:63:6c:38:a4:af:33:de:16:2c:4c:03:2e:dd:06: 5a:b0:a5:3b:37:5c:09:2c:68:83:28:d8:1a:64:cd: 76:0b:05:d9:1b:2f:28:48:97:e2:d5:68:e7:31:c6: 15:1e:40:34:95:4f:f0:76:f2:e2:4f:2a:89:18:46: d3:1e:80:69:de:53:11:48:dc:a9:6d:9c:40:42:81: d2:b2:6f:81:e0:e2:fa:65:5a:1e:6f:5b:7d:12:cd: 7f:e4:93:4b:67:df:eb:d2:9e:4b:c3:a1:2f:0c:3d: d8:45:9a:08:25:cc:50:17:e4:f4:2d:15:f8:ed:ae: 61:d9:1b:73:de:af:5e:e7:7d:31:e8:e9:e9:99:e7: 8c:e7:8f:33:c9:74:4f:4a:3e:78:53:bb:d0:fe:8d: 7f:f2:12:b7:cb:7c:30:30:65:4b:6f:39:41:62:7d: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C4:2E:CE:6F:98:BA:F5:44:D0:90:29:5C:04:24:9C:BD:6B:36:3B X509v3 Authority Key Identifier: keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/_cQuzm-YuvVE0JApXAQknL1rNjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.188.0/22 91.223.3.0/24 91.226.198.0/23 95.214.52.0/22 146.19.24.0/24 178.211.139.0/24 185.16.36.0/22 185.225.191.0/24 185.248.24.0/24 193.34.212.0/22 195.3.220.0/22 212.23.222.0/24 IPv6: 2a03:cfc0::/32 2a09:d580::/29 Signature Algorithm: sha256WithRSAEncryption 57:3a:c6:1e:f9:b2:91:36:f7:cd:53:19:a1:40:1f:d2:1e:f2: e4:c0:9b:87:da:3a:92:eb:24:40:fa:5e:ac:61:ea:28:ae:cc: 9b:5a:d0:07:77:d7:37:d4:65:b3:29:c2:ac:4c:c7:86:ed:35: cf:14:43:5b:f2:9f:2c:eb:26:23:27:d2:ae:f2:14:48:e0:85: c6:48:b0:f5:eb:87:91:d4:a2:f8:83:3d:dd:a2:2a:70:f8:33: 11:44:cd:77:b6:83:3b:69:9d:d8:9f:65:ac:2e:1e:d5:71:d0: d0:9c:ec:78:2b:e6:a8:f0:c5:78:a5:92:1d:7b:e3:8f:99:fb: bb:b6:95:22:22:d0:8c:c2:12:ec:ca:7b:2a:52:e3:56:c6:4f: f1:7d:dc:4c:10:94:c0:4e:ce:a5:07:e3:a4:5f:37:79:83:2d: 2b:b6:0b:27:60:03:32:27:89:15:56:85:67:7b:6b:b6:54:96: 22:98:ba:3a:c4:27:eb:b5:f5:f0:e6:94:e0:ba:b4:3c:d6:15: 02:62:b8:ae:a2:c7:9c:c0:60:fe:46:84:68:d9:27:ed:eb:50: ba:d8:45:c9:c8:0c:f6:a6:4b:30:78:94:9b:d1:23:bc:f6:17: a9:52:26:33:3c:23:61:7e:3e:3d:fa:1f:38:cf:fd:43:af:eb: cc:06:59:84 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt7o4AZ1adFEc/zmfxamHmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTM5NzFhMzJjMDY5MmM0ZTM0MmU5MTE3OTA2NjI0NzBj ZjMxYjIwHhcNMjYwMTAxMjIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGM0MmVjZTZmOThiYWY1NDRkMDkwMjk1YzA0MjQ5Y2JkNmIzNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UPzDrImdaCmQCovdUDTMldufky8 8o7qE/N2ydgM/1k8nL3HmHBcPJc0J+Itgz42B5VVowtSYHEvPH390Va02Ub6E62z kl6R699w6lL1/7IVWc2HO6ptk16nY2w4pK8z3hYsTAMu3QZasKU7N1wJLGiDKNga ZM12CwXZGy8oSJfi1WjnMcYVHkA0lU/wdvLiTyqJGEbTHoBp3lMRSNypbZxAQoHS sm+B4OL6ZVoeb1t9Es1/5JNLZ9/r0p5Lw6EvDD3YRZoIJcxQF+T0LRX47a5h2Rtz 3q9e530x6OnpmeeM548zyXRPSj54U7vQ/o1/8hK3y3wwMGVLbzlBYn2ouQIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFP3ELs5vmLr1RNCQKVwEJJy9azY7MB8GA1UdIwQY MBaAFL/jlxoywGksTjQukReQZiRwzzGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUt YzRkY2M3ZjZiN2RmLzEvX2NRdXptLVl1dlZFMEpBcFhBUWtuTDFyTmpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kNzZiZjgtNTQxZi00ZWZjLTk4YzUtYzRkY2M3ZjZiN2Rm LzEvdi1PWEdqTEFhU3hPTkM2UkY1Qm1KSERQTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwQCBbW8AwQA W98DAwQBW+LGAwQCX9Y0AwQAkhMYAwQAstOLAwQCuRAkAwQAueG/AwQAufgYAwQC wSLUAwQCwwPcAwQA1BfeMBQEAgACMA4DBQAqA8/AAwUDKgnVgDANBgkqhkiG9w0B AQsFAAOCAQEAVzrGHvmykTb3zVMZoUAf0h7y5MCbh9o6kuskQPperGHqKK7Mm1rQ B3fXN9RlsynCrEzHhu01zxRDW/KfLOsmIyfSrvIUSOCFxkiw9euHkdSi+IM93aIq cPgzEUTNd7aDO2md2J9lrC4e1XHQ0JzseCvmqPDFeKWSHXvjj5n7u7aVIiLQjMIS 7Mp7KlLjVsZP8X3cTBCUwE7OpQfjpF83eYMtK7YLJ2ADMieJFVaFZ3trtlSWIpi6 OsQn67X18OaU4Lq0PNYVAmK4rqLHnMBg/kaEaNkn7etQuthFycgM9qZLMHiUm9Ej vPYXqVImMzwjYX4+PfofOM/9Q6/rzAZZhA== -----END CERTIFICATE-----Generated at Fri Jan 23 12:53:06 2026 by rpki-client