This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/9n4VcJdW8qnQyuWz0vME2QO1fbA.roa File: 9n4VcJdW8qnQyuWz0vME2QO1fbA.roa (raw, json) Hash identifier: S37EYsMTrmOyNa0qB2TT/fhsEUbmtLIrd9epgXzmCws= Subject key identifier: F6:7E:15:70:97:56:F2:A9:D0:CA:E5:B3:D2:F3:04:D9:03:B5:7D:B0 Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26 Certificate serial: 019B7CEE0B11B26D3BDB3545E20DE524326C Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/9n4VcJdW8qnQyuWz0vME2QO1fbA.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35579 IP address blocks: 37.122.220.0/22 maxlen: 24 78.142.66.0/23 maxlen: 23 78.142.80.0/22 maxlen: 24 78.142.85.0/24 maxlen: 24 78.142.86.0/23 maxlen: 23 78.142.88.0/23 maxlen: 23 78.142.90.0/24 maxlen: 24 78.142.91.0/24 maxlen: 24 78.142.92.0/24 maxlen: 24 78.142.118.0/24 maxlen: 24 78.142.119.0/24 maxlen: 24 78.142.120.0/24 maxlen: 24 78.142.121.0/24 maxlen: 24 91.226.156.0/22 maxlen: 24 92.63.213.0/24 maxlen: 24 195.16.239.0/24 maxlen: 24 195.16.240.0/24 maxlen: 24 195.16.244.0/24 maxlen: 24 195.16.248.0/23 maxlen: 24 195.16.250.0/24 maxlen: 24 195.16.252.0/24 maxlen: 24 195.69.104.0/22 maxlen: 24 195.69.104.0/23 maxlen: 24 195.69.106.0/24 maxlen: 24 2a04:5080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0b:11:b2:6d:3b:db:35:45:e2:0d:e5:24:32:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f67e15709756f2a9d0cae5b3d2f304d903b57db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:94:8d:10:94:78:a1:77:7d:47:01:ad:82: 4d:c8:21:da:ac:a4:26:7e:82:2a:a4:f7:cb:14:42: b1:2a:48:95:1d:be:cf:a4:ab:99:43:53:1b:fb:5d: dc:2a:c3:46:69:4b:32:70:21:ca:bf:78:4c:ab:6d: ff:c8:e9:4e:00:e4:9f:e5:3b:90:04:cf:c1:2c:bd: de:02:a4:a8:ca:53:66:29:db:48:3e:7e:2e:53:1f: 69:b6:8a:a6:c8:04:2d:d1:80:d8:1a:10:e7:cb:74: cc:b7:9c:32:3a:f6:99:80:c6:4c:d7:fb:f6:16:f7: f2:98:16:2d:fc:29:f6:9a:7c:75:45:63:2c:60:7f: af:82:a0:0b:d5:f8:70:c4:f8:dd:f3:88:13:f1:5b: c3:53:5a:b0:fb:86:1c:e1:18:47:ad:aa:c7:96:60: 18:4a:83:e3:4c:1b:e3:5d:0a:3e:22:83:eb:3e:98: 1f:67:c1:0f:bd:5b:7c:eb:8d:3f:ca:fb:ad:b0:5f: b9:31:10:d4:f9:fc:9e:ea:ab:95:37:e6:69:25:65: f1:a1:75:82:9e:fe:f4:2f:ff:d0:51:be:34:38:f6: c1:7a:11:c0:58:90:39:3c:17:f8:46:3b:09:7f:fa: 59:ac:32:05:e8:bf:fd:c9:ce:52:3f:01:fa:4e:bd: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7E:15:70:97:56:F2:A9:D0:CA:E5:B3:D2:F3:04:D9:03:B5:7D:B0 X509v3 Authority Key Identifier: keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/9n4VcJdW8qnQyuWz0vME2QO1fbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.220.0/22 78.142.66.0/23 78.142.80.0/22 78.142.85.0-78.142.92.255 78.142.118.0-78.142.121.255 91.226.156.0/22 92.63.213.0/24 195.16.239.0-195.16.240.255 195.16.244.0/24 195.16.248.0-195.16.250.255 195.16.252.0/24 195.69.104.0/22 IPv6: 2a04:5080::/29 Signature Algorithm: sha256WithRSAEncryption 1a:d8:9a:d1:da:c8:af:61:8b:77:d4:e7:95:2f:e4:47:ba:b1: 67:a3:95:3e:79:36:74:d6:ef:f3:e4:8f:df:f9:58:b8:20:1d: 75:c7:c8:90:00:3c:ae:3d:91:3f:fb:91:c0:2d:d9:0f:53:78: e8:e3:e1:42:76:90:cc:79:49:dd:a6:2b:90:48:e2:dc:f3:10: 87:11:61:12:76:7f:35:ae:30:93:f6:df:ca:e2:ac:ad:4c:7a: 76:8d:23:b0:4c:93:b0:93:36:3a:b4:4b:18:58:37:db:27:b3: cb:0f:f3:b5:96:c3:2d:4b:49:9b:7a:a0:d5:0f:e3:45:9a:21: 7c:bb:eb:a9:35:6a:9c:0d:d1:f8:64:0e:0c:da:cb:b7:b7:64: 48:e2:75:f5:01:dd:96:d0:12:b2:73:93:28:0d:0c:65:eb:62: 2c:c3:ae:4f:34:fd:3f:83:9e:50:ca:b8:d7:cb:1f:35:84:1c: 12:74:ce:89:1f:49:91:52:7b:2a:56:51:12:8d:a1:5b:15:e0: 64:86:e0:0b:c7:ae:81:b8:05:28:fb:68:fb:9f:4c:aa:b9:50: dc:1c:f5:e3:1e:cd:59:c1:ba:2e:a0:b4:b5:ef:3f:fc:0f:38: 48:ef:ec:26:0a:a2:e1:3d:a9:42:eb:45:18:90:69:76:13:8a: d1:9d:98:fe -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZt87gsRsm072zVF4g3lJDJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj MzBhMjYwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjdlMTU3MDk3NTZmMmE5ZDBjYWU1YjNkMmYzMDRkOTAzYjU3ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArviUjRCUeKF3fUcBrYJNyCHarKQm foIqpPfLFEKxKkiVHb7PpKuZQ1Mb+13cKsNGaUsycCHKv3hMq23/yOlOAOSf5TuQ BM/BLL3eAqSoylNmKdtIPn4uUx9ptoqmyAQt0YDYGhDny3TMt5wyOvaZgMZM1/v2 FvfymBYt/Cn2mnx1RWMsYH+vgqAL1fhwxPjd84gT8VvDU1qw+4Yc4RhHrarHlmAY SoPjTBvjXQo+IoPrPpgfZ8EPvVt8640/yvutsF+5MRDU+fye6quVN+ZpJWXxoXWC nv70L//QUb40OPbBehHAWJA5PBf4RjsJf/pZrDIF6L/9yc5SPwH6Tr2m+QIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFPZ+FXCXVvKp0Mrls9LzBNkDtX2wMB8GA1UdIwQY MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct NDY1MzhjYTUzODNjLzEvOW40VmNKZFc4cW5ReXVXejB2TUUyUU8xZmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAIletwD BAFOjkIDBAJOjlAwDAMEAE6OVQMEAE6OXDAMAwQBTo52AwQBTo54AwQCW+KcAwQA XD/VMAwDBADDEO8DBADDEPADBADDEPQwDAMEA8MQ+AMEAMMQ+gMEAMMQ/AMEAsNF aDANBAIAAjAHAwUDKgRQgDANBgkqhkiG9w0BAQsFAAOCAQEAGtia0drIr2GLd9Tn lS/kR7qxZ6OVPnk2dNbv8+SP3/lYuCAddcfIkAA8rj2RP/uRwC3ZD1N46OPhQnaQ zHlJ3aYrkEji3PMQhxFhEnZ/Na4wk/bfyuKsrUx6do0jsEyTsJM2OrRLGFg32yez yw/ztZbDLUtJm3qg1Q/jRZohfLvrqTVqnA3R+GQODNrLt7dkSOJ19QHdltASsnOT KA0MZetiLMOuTzT9P4OeUMq418sfNYQcEnTOiR9JkVJ7KlZREo2hWxXgZIbgC8eu gbgFKPto+59MqrlQ3Bz14x7NWcG6LqC0te8//A84SO/sJgqi4T2pQutFGJBpdhOK 0Z2Y/g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:57 2026 by rpki-client