This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/9fkLcboDV5K8RkYKhccms358mIY.roa File: 9fkLcboDV5K8RkYKhccms358mIY.roa (raw, json) Hash identifier: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU= Subject key identifier: F5:F9:0B:71:BA:03:57:92:BC:46:46:0A:85:C7:26:B3:7E:7C:98:86 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37AA7702C43ACF95C0AA32DC0538B1 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/9fkLcboDV5K8RkYKhccms358mIY.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213538 IP address blocks: 31.135.0.0/24 maxlen: 24 64.43.92.0/24 maxlen: 24 77.36.64.0/24 maxlen: 24 77.36.88.0/24 maxlen: 24 91.200.134.0/24 maxlen: 24 91.237.92.0/24 maxlen: 24 91.245.90.0/24 maxlen: 24 91.246.217.0/24 maxlen: 24 93.120.33.0/24 maxlen: 24 93.120.72.0/24 maxlen: 24 176.96.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:aa:77:02:c4:3a:cf:95:c0:aa:32:dc:05:38:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5f90b71ba035792bc46460a85c726b37e7c9886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:d7:af:27:bd:7a:1d:fb:eb:41:9c:d3:00: 33:2f:d6:4b:22:01:c9:bd:70:57:9b:07:a5:b2:5d: 0f:3c:2f:48:d8:34:c4:f8:40:5f:39:12:4b:a4:d2: ce:89:fb:b3:b0:05:e4:23:1c:7e:05:3b:c7:b5:45: 7a:c9:d2:b8:ab:b9:56:5d:07:a8:2b:ac:7a:db:e8: 40:de:cf:22:c0:46:94:4c:b5:bf:e2:e3:fd:a1:70: 42:53:08:3c:2e:f6:f7:c9:d0:c4:bb:40:4c:54:75: 1c:c6:44:39:18:b4:1c:17:0d:ea:04:7d:a6:ee:d2: aa:5e:35:ca:2e:e8:d8:7b:ab:02:cc:be:24:c6:2c: fa:1f:92:e1:8a:92:ad:63:64:95:0c:2d:f4:f9:2e: 16:34:cb:00:c1:dc:ab:89:54:e2:e4:09:17:fa:6f: 70:8c:b0:18:a9:ca:7c:66:de:79:7f:50:09:aa:fd: 37:8d:b1:ec:2f:86:73:a5:ad:1f:a4:7c:e8:56:8b: c5:f7:f3:77:86:0d:91:1b:eb:fe:60:72:b2:ac:4b: 37:69:1f:61:dd:27:06:e9:43:f4:69:02:60:f3:27: c6:84:1c:5c:84:3d:69:2e:9b:55:d6:9d:12:10:16: 01:a6:d0:70:c4:2f:64:ed:06:9f:ec:3f:7c:9c:2a: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F9:0B:71:BA:03:57:92:BC:46:46:0A:85:C7:26:B3:7E:7C:98:86 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/9fkLcboDV5K8RkYKhccms358mIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.0.0/24 64.43.92.0/24 77.36.64.0/24 77.36.88.0/24 91.200.134.0/24 91.237.92.0/24 91.245.90.0/24 91.246.217.0/24 93.120.33.0/24 93.120.72.0/24 176.96.89.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:a2:b3:7c:ee:1b:81:cc:fb:b3:58:5e:1b:e5:6f:d3:a4:a1: e1:c0:b2:61:7d:60:ec:ad:ec:eb:66:50:be:94:ac:ea:d7:5a: 2e:b2:d5:2b:91:f8:da:4a:36:51:6d:9c:74:57:6c:c9:07:2a: de:d1:b0:69:c9:2c:8b:49:dd:2f:b3:31:c6:4c:bf:b9:3a:26: 71:09:8e:38:76:cd:96:2e:1f:b9:0e:07:c6:e6:8c:af:f1:de: ed:af:bc:bf:9f:d9:05:e7:72:22:5b:e3:f9:b3:24:53:61:d9: 10:95:a9:2c:20:8c:ec:87:35:cd:ea:d6:91:e4:1b:ca:ac:86: 8f:e8:f9:f9:d9:f3:01:1b:df:11:ce:c5:e5:ef:fc:67:5d:df: 06:9d:c4:e0:cc:a9:04:e5:ec:50:af:b2:5d:84:d1:e0:dd:04: 09:e6:49:4c:25:eb:79:f6:8f:f7:f6:84:54:19:89:d0:59:61: e4:81:4a:eb:a3:14:3a:af:89:8e:65:bc:84:a7:cd:35:50:f0: 0d:60:0b:06:bc:9e:ef:9a:75:a0:57:88:2c:0b:0b:1a:cb:5c: b9:59:ba:80:71:b0:d1:49:12:76:69:ea:41:0f:06:fa:69:a5: 7a:cd:31:45:61:17:7b:53:40:87:f8:dd:ec:7a:0c:7b:46:18: 3e:e1:57:ed -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt+N6p3AsQ6z5XAqjLcBTixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWY5MGI3MWJhMDM1NzkyYmM0NjQ2MGE4NWM3MjZiMzdlN2M5ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc7Xrye9eh3760Gc0wAzL9ZLIgHJ vXBXmwelsl0PPC9I2DTE+EBfORJLpNLOifuzsAXkIxx+BTvHtUV6ydK4q7lWXQeo K6x62+hA3s8iwEaUTLW/4uP9oXBCUwg8Lvb3ydDEu0BMVHUcxkQ5GLQcFw3qBH2m 7tKqXjXKLujYe6sCzL4kxiz6H5LhipKtY2SVDC30+S4WNMsAwdyriVTi5AkX+m9w jLAYqcp8Zt55f1AJqv03jbHsL4Zzpa0fpHzoVovF9/N3hg2RG+v+YHKyrEs3aR9h 3ScG6UP0aQJg8yfGhBxchD1pLptV1p0SEBYBptBwxC9k7Qaf7D98nCoJgQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFPX5C3G6A1eSvEZGCoXHJrN+fJiGMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvOWZrTGNib0RWNUs4UmtZS2hjY21zMzU4bUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAH4cAAwQA QCtcAwQATSRAAwQATSRYAwQAW8iGAwQAW+1cAwQAW/VaAwQAW/bZAwQAXXghAwQA XXhIAwQAsGBZMA0GCSqGSIb3DQEBCwUAA4IBAQAdorN87huBzPuzWF4b5W/TpKHh wLJhfWDsrezrZlC+lKzq11oustUrkfjaSjZRbZx0V2zJByre0bBpySyLSd0vszHG TL+5OiZxCY44ds2WLh+5DgfG5oyv8d7tr7y/n9kF53IiW+P5syRTYdkQlaksIIzs hzXN6taR5BvKrIaP6Pn52fMBG98RzsXl7/xnXd8GncTgzKkE5exQr7JdhNHg3QQJ 5klMJet59o/39oRUGYnQWWHkgUrroxQ6r4mOZbyEp801UPANYAsGvJ7vmnWgV4gs Cwsay1y5WbqAcbDRSRJ2aepBDwb6aaV6zTFFYRd7U0CH+N3segx7Rhg+4Vft -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:36 2026 by rpki-client