This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/mSf_6hw9LbwczEGLxS7bvwkiv9c.roa File: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (raw, json) Hash identifier: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo= Subject key identifier: 99:27:FF:EA:1C:3D:2D:BC:1C:CC:41:8B:C5:2E:DB:BF:09:22:BF:D7 Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Certificate serial: 019B77C6E20B2D286C847C3E2CBCB0A94FAB Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/mSf_6hw9LbwczEGLxS7bvwkiv9c.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51069 IP address blocks: 31.129.64.0/19 maxlen: 19 178.219.80.0/20 maxlen: 20 193.194.108.0/22 maxlen: 22 2a13:fb40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e2:0b:2d:28:6c:84:7c:3e:2c:bc:b0:a9:4f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9927ffea1c3d2dbc1ccc418bc52edbbf0922bfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bf:1b:ce:3a:72:9a:8c:a0:73:7a:0f:c5:81: 3d:91:5e:df:c4:94:9c:79:91:44:98:ed:05:c4:04: e0:c0:19:c1:76:55:cc:eb:4a:be:71:8f:18:e2:bd: 07:75:73:09:57:03:d1:c3:98:08:b8:1d:86:c8:a9: 13:2e:04:68:90:22:9b:2a:fa:1b:21:61:27:13:25: 8f:9f:70:3d:c0:ec:e1:be:c9:80:e8:49:44:9a:f0: 0e:40:4d:d8:08:fb:13:e7:eb:b8:a7:eb:d1:55:45: 0c:19:d1:6f:32:35:9f:65:e2:c8:b3:e6:16:1b:82: 5b:fb:bb:3f:c8:7e:41:1f:f8:c5:51:fa:8d:fe:f7: 24:24:13:bc:0f:7d:a6:0c:8c:59:24:68:4d:f6:c5: 0d:37:18:8b:20:db:de:f1:59:35:e5:36:85:c2:e2: ae:db:b7:31:69:95:79:46:cf:16:74:66:49:c7:e8: de:f2:76:b6:7f:62:7b:11:f6:3e:29:80:76:0a:f3: 6b:cd:2f:81:e0:98:c2:ce:56:24:ad:6a:59:32:c1: 74:a4:8e:83:1c:44:45:87:96:1b:43:f9:88:a3:fa: 7c:87:5b:aa:4a:37:86:42:eb:f7:e1:71:f8:af:3b: 63:38:87:39:42:09:46:a0:12:00:1b:3f:42:9b:20: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:27:FF:EA:1C:3D:2D:BC:1C:CC:41:8B:C5:2E:DB:BF:09:22:BF:D7 X509v3 Authority Key Identifier: keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/mSf_6hw9LbwczEGLxS7bvwkiv9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.64.0/19 178.219.80.0/20 193.194.108.0/22 IPv6: 2a13:fb40::/29 Signature Algorithm: sha256WithRSAEncryption 22:4b:54:ec:a5:f1:0b:e7:7f:a5:0a:a1:46:0c:d5:1c:c2:b7: 01:40:62:1d:9f:dc:08:63:ae:0c:dd:35:ed:c3:96:e7:e0:b6: 63:88:20:22:a0:c7:25:74:e9:38:22:df:39:ae:e8:a0:40:ad: c0:36:bb:5d:a7:38:bc:16:53:d7:37:5f:59:98:b3:34:eb:31: e0:83:8b:76:04:2a:38:7b:fe:12:de:7e:30:41:19:82:0a:bf: 1b:90:ca:52:8f:69:4d:39:d5:1d:c1:48:39:1e:cc:e3:4f:92: d1:21:b8:ba:f9:d4:2a:95:15:a1:b8:54:42:c0:ce:ca:eb:63: 4e:26:03:1a:70:6b:26:83:93:de:43:30:a5:16:4c:a0:a9:8f: 84:f4:67:44:6a:7c:19:de:76:79:5b:a5:6e:1e:eb:63:3d:e0: 4f:3e:42:d7:6f:63:e7:8c:56:bf:71:b2:11:08:9b:65:6e:74: 87:68:93:93:95:54:c4:54:0e:06:2c:93:43:7c:12:0d:0e:7c: 98:91:36:2a:19:bb:76:3a:f1:9f:ee:a1:f9:36:d1:e8:cb:19: da:bb:17:16:29:28:b0:03:1f:5f:8d:b7:0d:c0:54:08:a0:77: d0:69:d0:a7:bc:86:89:76:7c:25:9d:c7:c6:8e:a0:18:b8:42: d5:32:85:f1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xuILLShshHw+LLywqU+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy ZDIxNWYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTI3ZmZlYTFjM2QyZGJjMWNjYzQxOGJjNTJlZGJiZjA5MjJiZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi78bzjpymoygc3oPxYE9kV7fxJSc eZFEmO0FxATgwBnBdlXM60q+cY8Y4r0HdXMJVwPRw5gIuB2GyKkTLgRokCKbKvob IWEnEyWPn3A9wOzhvsmA6ElEmvAOQE3YCPsT5+u4p+vRVUUMGdFvMjWfZeLIs+YW G4Jb+7s/yH5BH/jFUfqN/vckJBO8D32mDIxZJGhN9sUNNxiLINve8Vk15TaFwuKu 27cxaZV5Rs8WdGZJx+je8na2f2J7EfY+KYB2CvNrzS+B4JjCzlYkrWpZMsF0pI6D HERFh5YbQ/mIo/p8h1uqSjeGQuv34XH4rztjOIc5QglGoBIAGz9CmyBlBQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJkn/+ocPS28HMxBi8Uu278JIr/XMB8GA1UdIwQY MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et ZmIyYTk4M2NjNjZhLzEvbVNmXzZodzlMYndjekVHTHhTN2J2d2tpdjljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFH4FAAwQE sttQAwQCwcJsMA0EAgACMAcDBQMqE/tAMA0GCSqGSIb3DQEBCwUAA4IBAQAiS1Ts pfEL53+lCqFGDNUcwrcBQGIdn9wIY64M3TXtw5bn4LZjiCAioMcldOk4It85ruig QK3ANrtdpzi8FlPXN19ZmLM06zHgg4t2BCo4e/4S3n4wQRmCCr8bkMpSj2lNOdUd wUg5HszjT5LRIbi6+dQqlRWhuFRCwM7K62NOJgMacGsmg5PeQzClFkygqY+E9GdE anwZ3nZ5W6VuHutjPeBPPkLXb2PnjFa/cbIRCJtlbnSHaJOTlVTEVA4GLJNDfBIN DnyYkTYqGbt2OvGf7qH5NtHoyxnauxcWKSiwAx9fjbcNwFQIoHfQadCnvIaJdnwl ncfGjqAYuELVMoXx -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:31 2026 by rpki-client