This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa File: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (raw, json) Hash identifier: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY= Subject key identifier: 7E:C4:09:72:75:AE:C0:3D:97:71:DF:1E:78:AF:90:1B:C8:36:31:B4 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A66C7A20F7CEDAD02D4347AA95D2 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209767 IP address blocks: 31.132.192.0/22 maxlen: 22 31.132.196.0/22 maxlen: 22 46.174.204.0/22 maxlen: 22 91.224.213.0/24 maxlen: 24 91.226.52.0/23 maxlen: 23 91.226.54.0/23 maxlen: 23 91.229.30.0/24 maxlen: 24 91.239.179.0/24 maxlen: 24 91.239.224.0/24 maxlen: 24 91.245.92.0/22 maxlen: 24 91.246.204.0/22 maxlen: 22 91.246.216.0/24 maxlen: 24 109.207.133.0/24 maxlen: 24 109.207.142.0/24 maxlen: 24 109.207.143.0/24 maxlen: 24 176.113.176.0/22 maxlen: 24 176.116.229.0/24 maxlen: 24 176.116.237.0/24 maxlen: 24 176.124.172.0/22 maxlen: 22 178.213.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a6:6c:7a:20:f7:ce:da:d0:2d:43:47:aa:95:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ec4097275aec03d9771df1e78af901bc83631b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:91:09:56:f4:39:4c:e8:6b:50:c3:24:2b: de:29:0d:e1:28:70:75:4f:c8:c6:7a:05:48:21:1a: f1:c2:79:e4:13:a3:52:67:7c:64:71:f1:86:76:2d: 83:30:8a:1e:de:d5:df:9f:d3:ec:d7:42:9b:38:0b: 3d:dc:fb:fd:8e:00:5f:11:03:55:ad:5b:fc:4e:5e: 34:a7:82:1d:ef:ef:e7:85:42:1f:4f:8d:27:7d:d1: d2:c1:de:32:fd:1c:49:c3:56:6f:09:fd:71:90:7c: b0:07:55:00:bb:7e:3b:3f:5d:61:47:5f:e1:af:f7: ce:22:d3:c9:76:b0:83:75:30:e4:13:ae:e8:ee:92: cb:18:a3:da:ad:25:35:c7:a9:4b:b6:56:d0:a8:07: 8c:17:15:c2:de:55:53:27:2a:71:42:45:22:2d:5c: dd:55:d0:14:f5:49:69:87:47:a5:20:77:5d:e2:24: 39:66:60:34:a7:3c:0b:d6:d3:df:b5:94:70:5f:44: 9e:15:e3:e8:e1:74:7d:cf:1b:1e:ee:48:30:b3:10: b4:81:be:d1:a0:9e:3e:66:69:14:11:c6:14:ca:77: ab:e4:33:d3:0b:af:fe:b9:98:74:12:7f:90:d2:cc: e9:09:d4:57:9f:41:9a:62:a4:7e:83:71:37:1c:e8: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C4:09:72:75:AE:C0:3D:97:71:DF:1E:78:AF:90:1B:C8:36:31:B4 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.132.192.0/21 46.174.204.0/22 91.224.213.0/24 91.226.52.0/22 91.229.30.0/24 91.239.179.0/24 91.239.224.0/24 91.245.92.0/22 91.246.204.0/22 91.246.216.0/24 109.207.133.0/24 109.207.142.0/23 176.113.176.0/22 176.116.229.0/24 176.116.237.0/24 176.124.172.0/22 178.213.176.0/22 Signature Algorithm: sha256WithRSAEncryption 65:a8:6b:ee:d0:60:5f:b9:c6:e6:62:b7:35:ea:4a:ea:79:9b: 3a:58:8f:e8:3f:fb:66:ed:34:de:6d:3c:ff:20:6a:3c:6d:9e: a9:da:ce:a7:34:64:11:4a:c8:f9:29:32:e0:ee:be:1b:07:6b: ae:0e:a4:41:36:7a:26:2c:bb:e1:5e:a9:0b:9b:e5:da:a7:ed: e7:8f:83:aa:a0:c5:1b:ee:9d:51:d2:e8:e8:bb:51:5a:4d:44: ab:84:5f:a5:fe:7f:a2:a6:d7:6b:4b:a3:ae:64:9f:e6:2e:cc: 68:27:13:4b:6d:e1:2d:e1:54:2b:04:2c:aa:2d:7b:f8:bc:be: 3a:41:fb:12:05:d4:63:e3:75:50:d2:f6:a9:ff:f1:83:e4:48: 6f:0f:7a:64:1b:93:55:74:95:f5:77:74:42:35:28:d9:0d:ba: e2:9a:79:33:f4:80:63:65:65:67:9b:09:cb:62:b3:70:32:4f: ed:dc:3e:0e:3f:f1:36:d2:f7:03:e1:92:b2:b6:93:6f:af:1b: 00:29:2d:bf:f4:fa:89:b0:cc:df:27:a3:f1:39:64:1d:57:01: 36:fd:90:7e:74:55:a0:85:10:8d:a7:53:36:e3:91:63:92:b7: e9:08:81:b0:3d:07:93:88:97:6f:e7:5e:19:0e:89:f7:c0:82: 42:80:b5:16 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt+N6ZseiD3ztrQLUNHqpXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWM0MDk3Mjc1YWVjMDNkOTc3MWRmMWU3OGFmOTAxYmM4MzYzMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bKRCVb0OUzoa1DDJCveKQ3hKHB1 T8jGegVIIRrxwnnkE6NSZ3xkcfGGdi2DMIoe3tXfn9Ps10KbOAs93Pv9jgBfEQNV rVv8Tl40p4Id7+/nhUIfT40nfdHSwd4y/RxJw1ZvCf1xkHywB1UAu347P11hR1/h r/fOItPJdrCDdTDkE67o7pLLGKParSU1x6lLtlbQqAeMFxXC3lVTJypxQkUiLVzd VdAU9Ulph0elIHdd4iQ5ZmA0pzwL1tPftZRwX0SeFePo4XR9zxse7kgwsxC0gb7R oJ4+ZmkUEcYUyner5DPTC6/+uZh0En+Q0szpCdRXn0GaYqR+g3E3HOhpWQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFH7ECXJ1rsA9l3HfHnivkBvINjG0MB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvZnNRSmNuV3V3RDJYY2Q4ZWVLLVFHOGcyTWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQDH4TAAwQC Lq7MAwQAW+DVAwQCW+I0AwQAW+UeAwQAW++zAwQAW+/gAwQCW/VcAwQCW/bMAwQA W/bYAwQAbc+FAwQBbc+OAwQCsHGwAwQAsHTlAwQAsHTtAwQCsHysAwQCstWwMA0G CSqGSIb3DQEBCwUAA4IBAQBlqGvu0GBfucbmYrc16krqeZs6WI/oP/tm7TTebTz/ IGo8bZ6p2s6nNGQRSsj5KTLg7r4bB2uuDqRBNnomLLvhXqkLm+Xap+3nj4OqoMUb 7p1R0ujou1FaTUSrhF+l/n+iptdrS6OuZJ/mLsxoJxNLbeEt4VQrBCyqLXv4vL46 QfsSBdRj43VQ0vap//GD5EhvD3pkG5NVdJX1d3RCNSjZDbrimnkz9IBjZWVnmwnL YrNwMk/t3D4OP/E20vcD4ZKytpNvrxsAKS2/9PqJsMzfJ6PxOWQdVwE2/ZB+dFWg hRCNp1M245FjkrfpCIGwPQeTiJdv514ZDon3wIJCgLUW -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:25 2026 by rpki-client