This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa File: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (raw, json) Hash identifier: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o= Subject key identifier: F6:BC:82:FC:5C:15:A8:58:70:ED:80:AD:62:17:B7:9B:DB:20:B4:F4 Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20 Certificate serial: 019B7E38F2716A2BCE2542ACAA25F832B49D Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24796 IP address blocks: 185.33.108.0/22 maxlen: 22 185.33.108.0/23 maxlen: 23 185.33.108.0/24 maxlen: 24 185.33.109.0/24 maxlen: 24 185.33.110.0/23 maxlen: 23 185.33.110.0/24 maxlen: 24 185.33.111.0/24 maxlen: 24 193.24.29.0/24 maxlen: 24 193.201.40.0/24 maxlen: 24 2a0f:80:1::/48 maxlen: 48 2a0f:80:2::/48 maxlen: 48 2a0f:80:3::/48 maxlen: 48 2a0f:80:a::/48 maxlen: 48 2a0f:80:b::/48 maxlen: 48 2a0f:80:c::/48 maxlen: 48 2a0f:80:d::/48 maxlen: 48 2a0f:80:e::/48 maxlen: 48 2a0f:80:f::/48 maxlen: 48 2a0f:80:10::/48 maxlen: 48 2a0f:80:11::/48 maxlen: 48 2a0f:80:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f2:71:6a:2b:ce:25:42:ac:aa:25:f8:32:b4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6bc82fc5c15a85870ed80ad6217b79bdb20b4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:6a:74:69:65:5b:12:23:fb:33:b8:8c:92: 5c:56:8b:9d:d2:b8:84:a5:cc:d8:08:35:71:9e:ee: 45:3b:55:40:54:b8:52:57:90:83:45:8a:5e:58:f4: 9b:51:92:42:8f:c2:ce:8a:fe:cc:c8:50:da:58:c8: d2:4c:74:dd:af:cb:92:dd:85:d0:c6:49:28:59:c5: c4:c3:ee:ba:b7:d6:11:4d:40:1b:53:18:86:4e:7b: 30:20:e3:29:5c:19:04:29:86:47:dd:ce:49:f0:22: aa:7b:6d:13:04:cd:51:0e:c4:1d:4d:3b:26:44:e0: 00:d6:aa:38:1b:f1:ac:ae:52:2c:60:d1:66:a8:a1: 9d:63:ae:23:ea:09:05:ce:07:66:ab:99:0f:b6:d3: 8d:08:c6:af:f6:66:4a:27:51:91:5b:9d:58:c0:df: 4f:09:20:f0:f9:f4:1e:f9:ca:bc:63:67:a5:62:9f: 82:73:ac:ea:20:d2:f0:20:fc:9e:b8:38:c9:e8:88: 48:71:c5:7c:8a:cf:b9:3d:17:63:bd:bd:30:d7:75: ab:8b:1d:9d:2b:2c:77:3c:a5:af:8b:32:19:9b:92: ba:43:50:85:da:b8:c8:20:17:98:85:ae:08:0a:aa: e8:f6:0f:aa:4c:87:a0:ef:12:ff:98:17:e6:ac:32: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:82:FC:5C:15:A8:58:70:ED:80:AD:62:17:B7:9B:DB:20:B4:F4 X509v3 Authority Key Identifier: keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.108.0/22 193.24.29.0/24 193.201.40.0/24 IPv6: 2a0f:80:1::-2a0f:80:3:ffff:ffff:ffff:ffff:ffff 2a0f:80:a::-2a0f:80:12:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5b:40:cc:19:48:e0:fb:c3:26:0b:c3:52:61:33:f1:52:14:b0: d3:68:42:16:bd:57:1d:e9:4c:68:ca:a0:c6:da:6e:f0:ab:39: e4:db:7e:8d:b3:e8:b8:59:b9:d1:59:c2:be:b1:cc:c2:fd:8e: b1:0a:da:55:97:15:59:e1:0d:8c:2d:04:80:c2:e1:bc:ce:5c: c2:6e:b6:5d:82:b7:9d:8e:7e:18:47:a3:fe:5b:4d:ce:a6:1a: 47:6b:b6:3d:9f:27:c7:20:72:59:fd:b6:7f:cc:62:7a:55:7e: f1:33:d0:e1:cf:56:e7:0c:86:0f:ba:62:92:de:be:2e:4c:42: 98:30:77:0c:e9:5f:61:c3:2d:50:90:a8:b4:09:32:e5:76:e7: 82:fd:52:c4:54:89:f4:c6:63:e7:b4:a0:f3:78:77:f3:33:74: 40:59:94:6a:1d:34:86:48:96:4e:33:e4:b1:d8:3a:14:f2:58: c8:02:9e:fd:ce:dd:27:1c:0d:93:7b:a6:75:db:e4:0b:40:7f: e1:dd:39:ba:ba:4f:f6:95:e1:89:97:70:b5:7e:a4:00:94:78: a4:91:b0:fe:87:c7:3f:20:af:6e:7e:7e:80:be:71:a4:06:22: 19:0b:b6:84:60:fc:5b:93:83:48:f6:46:53:23:88:fc:f1:09: 5e:0c:2f:1e -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt+OPJxaivOJUKsqiX4MrSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiM2RhZWY4OTMwNmE3NWYwYjg4MTkxNDQwNzQyYTcyMGFm YjNmMjAwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmJjODJmYzVjMTVhODU4NzBlZDgwYWQ2MjE3Yjc5YmRiMjBiNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOVqdGllWxIj+zO4jJJcVoud0riE pczYCDVxnu5FO1VAVLhSV5CDRYpeWPSbUZJCj8LOiv7MyFDaWMjSTHTdr8uS3YXQ xkkoWcXEw+66t9YRTUAbUxiGTnswIOMpXBkEKYZH3c5J8CKqe20TBM1RDsQdTTsm ROAA1qo4G/GsrlIsYNFmqKGdY64j6gkFzgdmq5kPttONCMav9mZKJ1GRW51YwN9P CSDw+fQe+cq8Y2elYp+Cc6zqINLwIPyeuDjJ6IhIccV8is+5PRdjvb0w13Wrix2d Kyx3PKWvizIZm5K6Q1CF2rjIIBeYha4ICqro9g+qTIeg7xL/mBfmrDIYaQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFPa8gvxcFahYcO2ArWIXt5vbILT0MB8GA1UdIwQY MBaAFDs9rviTBqdfC4gZFEB0KnIK+z8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUt YWFjYWQ4NmM2MTdkLzEvOXJ5Q19Gd1ZxRmh3N1lDdFloZTNtOXNndFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUtYWFjYWQ4NmM2MTdk LzEvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAYBAIAATASAwQCuSFsAwQA wRgdAwQAwckoMC4EAgACMCgwEgMHACoPAIAAAQMHAioPAIAAADASAwcBKg8AgAAK AwcAKg8AgAASMA0GCSqGSIb3DQEBCwUAA4IBAQBbQMwZSOD7wyYLw1JhM/FSFLDT aEIWvVcd6UxoyqDG2m7wqznk236Ns+i4WbnRWcK+sczC/Y6xCtpVlxVZ4Q2MLQSA wuG8zlzCbrZdgredjn4YR6P+W03OphpHa7Y9nyfHIHJZ/bZ/zGJ6VX7xM9Dhz1bn DIYPumKS3r4uTEKYMHcM6V9hwy1QkKi0CTLldueC/VLEVIn0xmPntKDzeHfzM3RA WZRqHTSGSJZOM+Sx2DoU8ljIAp79zt0nHA2Te6Z12+QLQH/h3Tm6uk/2leGJl3C1 fqQAlHikkbD+h8c/IK9ufn6AvnGkBiIZC7aEYPxbk4NI9kZTI4j88QleDC8e -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:43 2026 by rpki-client