This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa File: iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa (raw, json) Hash identifier: 4bH7BrC7xILPkVZ3kcGwCvI7Oji+afFT1aTAsrKOTnM= Subject key identifier: 88:AB:91:0A:84:2D:AA:B7:C5:0C:F8:53:22:AF:9F:D8:9E:A4:FE:62 Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Certificate serial: 019B7F1576F620193C89A2F638679F90BEA2 Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 31.220.14.0/24 maxlen: 24 45.12.52.0/23 maxlen: 23 45.12.91.0/24 maxlen: 24 185.238.249.0/24 maxlen: 24 185.238.251.0/24 maxlen: 24 193.9.45.0/24 maxlen: 24 2a14:640:2::/48 maxlen: 48 2a14:640:3::/48 maxlen: 48 2a14:640:4::/48 maxlen: 48 2a14:640:5::/48 maxlen: 48 2a14:640:6::/48 maxlen: 48 2a14:640:7::/48 maxlen: 48 2a14:640:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:76:f6:20:19:3c:89:a2:f6:38:67:9f:90:be:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ab910a842daab7c50cf85322af9fd89ea4fe62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:3a:e7:6c:30:a5:1b:45:8f:c2:5d:86:5b: 1c:a6:b1:a7:bf:70:3c:ae:2f:70:d7:2b:bf:84:a8: 5e:fa:41:6e:62:4b:c2:b9:e4:96:eb:2e:20:af:88: c0:91:cc:52:51:da:bf:50:04:ca:71:66:ba:6b:05: dd:ae:7d:4f:d5:73:41:bd:d3:13:ae:fe:ab:59:c8: a5:d1:b2:7f:e3:71:70:e3:97:e8:0c:63:ed:85:c4: e8:53:88:d4:ec:23:06:f4:10:91:c7:d4:14:5b:56: 84:f1:6d:a6:86:e5:2d:9d:bc:11:f9:aa:9c:25:f2: 36:c4:09:62:d1:8c:ef:71:dd:d1:0d:8e:64:cb:9c: 40:e6:77:0a:ea:41:3d:69:7b:12:93:07:58:bb:55: e1:bb:53:92:e0:6a:a9:10:47:25:8a:31:dd:0e:c9: 60:d8:c8:99:99:e5:37:1b:60:42:93:f3:5f:91:7c: 8f:63:d9:8d:3a:be:7f:7d:e5:17:4c:21:ec:8f:04: e4:84:33:f0:03:62:3b:4d:4d:cd:51:dc:2f:76:8e: 2e:7e:6f:cf:9f:ed:af:35:1d:a5:81:85:60:2c:14: 44:df:5b:18:b6:51:c6:e9:bb:e0:51:6d:f6:1d:03: 7e:87:a3:da:ac:52:0e:97:94:0a:07:40:41:5b:d7: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:91:0A:84:2D:AA:B7:C5:0C:F8:53:22:AF:9F:D8:9E:A4:FE:62 X509v3 Authority Key Identifier: keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/iKuRCoQtqrfFDPhTIq-f2J6k_mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.14.0/24 45.12.52.0/23 45.12.91.0/24 185.238.249.0/24 185.238.251.0/24 193.9.45.0/24 IPv6: 2a14:640:2::-2a14:640:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0b:47:a4:9b:51:bd:e5:7b:fe:c4:8f:67:3f:16:4a:7c:0b:70: d2:e2:fd:82:e4:b2:67:f5:75:ee:bf:0e:94:b0:a1:7e:77:7e: 74:52:41:65:0a:d8:a3:70:33:fa:c1:ff:19:2a:39:5d:3b:f2: 18:27:2d:cb:1f:bf:3e:0e:cd:78:ac:a3:7d:9a:06:f4:11:85: f9:64:0f:99:64:f6:67:96:d7:65:e0:14:8b:90:3d:86:07:3e: 5a:d8:53:c7:b1:52:a1:36:49:fc:8e:93:ab:d9:e1:63:83:88: 6a:8c:ee:b6:27:dd:3b:fa:64:05:08:80:e5:76:e0:d6:d7:5e: d2:3f:b3:92:dd:c6:bb:b3:a1:c4:02:2f:3e:01:93:2a:14:95: 42:4e:a4:0a:fa:41:2b:92:c6:2c:e6:a0:53:38:4b:16:08:6a: 72:7f:a7:9d:f1:88:f0:08:d1:ed:f0:76:b7:0e:45:ae:0e:57: 9e:5e:e3:65:1a:ab:ea:d3:b0:5d:7b:80:cc:b7:18:f7:47:4e: 9d:6d:3b:31:5c:6a:02:d7:56:62:e3:ac:24:52:5f:63:cc:9c: ae:ce:ae:e1:f8:fc:42:16:ca:4a:5d:81:1a:ce:fe:67:36:c5: 7d:b3:e2:0b:8a:0a:27:1c:43:84:65:cc:ac:19:a6:e5:a3:21: 32:ed:c0:ab -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt/FXb2IBk8iaL2OGefkL6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1 YmVlZTMwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGFiOTEwYTg0MmRhYWI3YzUwY2Y4NTMyMmFmOWZkODllYTRmZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHM652wwpRtFj8JdhlscprGnv3A8 ri9w1yu/hKhe+kFuYkvCueSW6y4gr4jAkcxSUdq/UATKcWa6awXdrn1P1XNBvdMT rv6rWcil0bJ/43Fw45foDGPthcToU4jU7CMG9BCRx9QUW1aE8W2mhuUtnbwR+aqc JfI2xAli0Yzvcd3RDY5ky5xA5ncK6kE9aXsSkwdYu1Xhu1OS4GqpEEclijHdDslg 2MiZmeU3G2BCk/NfkXyPY9mNOr5/feUXTCHsjwTkhDPwA2I7TU3NUdwvdo4ufm/P n+2vNR2lgYVgLBRE31sYtlHG6bvgUW32HQN+h6ParFIOl5QKB0BBW9dClQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFIirkQqELaq3xQz4UyKvn9iepP5iMB8GA1UdIwQY MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt YTQ3M2VjNTQxMGMzLzEvaUt1UkNvUXRxcmZGRFBoVElxLWYySjZrX21JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAqBAIAATAkAwQAH9wOAwQB LQw0AwQALQxbAwQAue75AwQAue77AwQAwQktMBoEAgACMBQwEgMHASoUBkAAAgMH ACoUBkAACDANBgkqhkiG9w0BAQsFAAOCAQEAC0ekm1G95Xv+xI9nPxZKfAtw0uL9 guSyZ/V17r8OlLChfnd+dFJBZQrYo3Az+sH/GSo5XTvyGCctyx+/Pg7NeKyjfZoG 9BGF+WQPmWT2Z5bXZeAUi5A9hgc+WthTx7FSoTZJ/I6Tq9nhY4OIaozutifdO/pk BQiA5Xbg1tde0j+zkt3Gu7OhxAIvPgGTKhSVQk6kCvpBK5LGLOagUzhLFghqcn+n nfGI8AjR7fB2tw5Frg5Xnl7jZRqr6tOwXXuAzLcY90dOnW07MVxqAtdWYuOsJFJf Y8ycrs6u4fj8QhbKSl2BGs7+ZzbFfbPiC4oKJxxDhGXMrBmm5aMhMu3Aqw== -----END CERTIFICATE-----Generated at Fri Jan 23 02:01:46 2026 by rpki-client