This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa File: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (raw, json) Hash identifier: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0= Subject key identifier: F9:66:24:21:DC:CA:92:3F:13:20:D4:47:55:A8:19:E1:AF:A9:24:9C Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A784EF364A2EBB1CCB3E46057161 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210878 IP address blocks: 31.135.3.0/24 maxlen: 24 64.43.76.0/24 maxlen: 24 77.36.59.0/24 maxlen: 24 91.235.166.0/24 maxlen: 24 91.237.195.0/24 maxlen: 24 91.246.201.0/24 maxlen: 24 109.207.131.0/24 maxlen: 24 193.36.202.0/24 maxlen: 24 193.221.82.0/24 maxlen: 24 195.80.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a7:84:ef:36:4a:2e:bb:1c:cb:3e:46:05:71:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9662421dcca923f1320d44755a819e1afa9249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:ad:1b:79:2d:c1:b7:d4:9d:03:5a:5e:f3: de:a5:5c:e8:ba:98:96:cc:83:3a:88:43:70:d9:59: 69:79:da:1a:a9:47:ae:ea:f2:87:c4:84:5b:8e:c7: e5:3d:68:8c:02:5e:77:1c:a0:0e:2b:19:2a:02:f2: 45:26:2a:c6:02:6b:f5:6b:b4:21:28:79:51:59:56: fc:4e:11:fb:40:bb:18:53:ac:e2:ee:ad:54:5a:77: 87:58:ec:e8:56:55:f1:27:17:cf:fb:60:74:d1:91: df:d8:83:fa:a8:11:8c:94:7b:dc:94:6b:76:d0:3b: fc:60:8b:6d:09:d9:e7:44:e5:0a:65:5a:42:ab:9a: 0c:78:04:a8:e1:aa:cb:fd:40:91:ab:9a:e4:46:c0: 04:09:ec:99:86:04:9f:8e:46:67:31:6b:3f:4d:e2: 46:69:13:bc:e4:fd:92:85:aa:59:0a:d3:c3:5d:d9: 87:52:dd:25:d7:65:98:02:86:13:61:e0:3c:ec:12: 55:ba:20:93:86:43:2d:26:c4:ec:75:1f:85:31:dd: bd:d9:39:02:ad:0b:c5:7c:04:57:94:a0:57:58:5e: bd:27:04:c8:e6:62:ba:a0:d3:69:f3:77:ac:0f:9e: 40:3e:e2:26:20:1f:95:03:1c:01:1c:45:77:07:e5: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:66:24:21:DC:CA:92:3F:13:20:D4:47:55:A8:19:E1:AF:A9:24:9C X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.3.0/24 64.43.76.0/24 77.36.59.0/24 91.235.166.0/24 91.237.195.0/24 91.246.201.0/24 109.207.131.0/24 193.36.202.0/24 193.221.82.0/24 195.80.142.0/24 Signature Algorithm: sha256WithRSAEncryption 97:12:b7:07:d7:1e:49:f2:96:46:b4:c4:98:b5:ff:b9:80:f5: d2:0d:93:fa:51:06:a9:0c:15:2e:08:fe:1d:4b:9c:7e:12:34: b2:b8:5f:0b:ea:51:29:77:29:8b:3c:4f:0b:39:0b:a8:e0:b1: e7:6b:07:d8:a7:55:06:52:06:25:2b:41:63:6d:72:5a:40:e9: 00:4e:7a:7e:a7:af:5f:b4:41:61:59:66:62:c2:14:a3:b8:ae: bf:fc:18:9c:87:27:14:48:12:9a:f4:30:e7:a3:c3:01:73:a4: fb:ab:e8:c5:9f:81:06:4a:ce:53:7b:74:4f:c4:23:8c:88:de: 0b:6e:dd:41:6c:bb:6f:50:8a:f2:ec:01:0a:3a:e9:98:7a:44: 4a:e1:52:af:c0:7b:44:b5:58:14:65:77:97:2d:8d:5f:28:e2: ca:e5:ff:46:30:f9:b8:c8:9d:14:3a:a3:f7:3e:96:cf:11:0a: 36:78:24:38:28:56:0e:f0:5c:2b:05:eb:e2:7c:e0:4e:19:40: 45:ad:6f:bc:b2:a8:c8:79:c0:17:46:9f:ca:6d:9e:89:7d:b1: 0b:47:8e:cc:03:b8:10:1e:4d:35:1c:64:e3:14:50:8e:7e:2a: cd:08:ef:7f:4e:b3:29:bf:e9:70:1c:28:03:44:59:73:68:e1: da:91:23:a6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt+N6eE7zZKLrscyz5GBXFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTY2MjQyMWRjY2E5MjNmMTMyMGQ0NDc1NWE4MTllMWFmYTkyNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkmtG3ktwbfUnQNaXvPepVzoupiW zIM6iENw2VlpedoaqUeu6vKHxIRbjsflPWiMAl53HKAOKxkqAvJFJirGAmv1a7Qh KHlRWVb8ThH7QLsYU6zi7q1UWneHWOzoVlXxJxfP+2B00ZHf2IP6qBGMlHvclGt2 0Dv8YIttCdnnROUKZVpCq5oMeASo4arL/UCRq5rkRsAECeyZhgSfjkZnMWs/TeJG aRO85P2ShapZCtPDXdmHUt0l12WYAoYTYeA87BJVuiCThkMtJsTsdR+FMd292TkC rQvFfARXlKBXWF69JwTI5mK6oNNp83esD55APuImIB+VAxwBHEV3B+ULcwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFPlmJCHcypI/EyDUR1WoGeGvqSScMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvMS1XWWtJZHpLa2o4VElOUkhWYWdaNGEtcEpKdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2 MC8xL05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAB+HAwME AEArTAMEAE0kOwMEAFvrpgMEAFvtwwMEAFv2yQMEAG3PgwMEAMEkygMEAMHdUgME AMNQjjANBgkqhkiG9w0BAQsFAAOCAQEAlxK3B9ceSfKWRrTEmLX/uYD10g2T+lEG qQwVLgj+HUucfhI0srhfC+pRKXcpizxPCzkLqOCx52sH2KdVBlIGJStBY21yWkDp AE56fqevX7RBYVlmYsIUo7iuv/wYnIcnFEgSmvQw56PDAXOk+6voxZ+BBkrOU3t0 T8QjjIjeC27dQWy7b1CK8uwBCjrpmHpESuFSr8B7RLVYFGV3ly2NXyjiyuX/RjD5 uMidFDqj9z6WzxEKNngkOChWDvBcKwXr4nzgThlARa1vvLKoyHnAF0afym2eiX2x C0eOzAO4EB5NNRxk4xRQjn4qzQjvf06zKb/pcBwoA0RZc2jh2pEjpg== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:00 2026 by rpki-client