This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/tdrrEw2QhUroasWZGcJ2TASPuNk.roa File: tdrrEw2QhUroasWZGcJ2TASPuNk.roa (raw, json) Hash identifier: 5qK59vOHIiTj9OvpFdOa8R0zqMTVoz3YO9USMYAJNt4= Subject key identifier: B5:DA:EB:13:0D:90:85:4A:E8:6A:C5:99:19:C2:76:4C:04:8F:B8:D9 Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Certificate serial: 019B7F842A172F7FCDBA5CEC200914524FFA Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/tdrrEw2QhUroasWZGcJ2TASPuNk.roa Signing time: Fri 02 Jan 2026 16:22:06 +0000 ROA not before: Fri 02 Jan 2026 16:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56694 IP address blocks: 31.177.108.0/22 maxlen: 24 91.219.148.0/22 maxlen: 24 94.198.50.0/23 maxlen: 24 94.198.52.0/22 maxlen: 24 109.238.92.0/22 maxlen: 24 152.89.216.0/22 maxlen: 24 178.255.126.0/23 maxlen: 24 185.9.144.0/22 maxlen: 24 185.130.248.0/22 maxlen: 24 188.127.224.0/20 maxlen: 24 188.127.240.0/22 maxlen: 24 188.127.244.0/23 maxlen: 24 188.127.248.0/22 maxlen: 24 188.127.253.0/24 maxlen: 24 188.127.254.0/23 maxlen: 24 213.171.16.0/21 maxlen: 24 2a06:dd00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2a:17:2f:7f:cd:ba:5c:ec:20:09:14:52:4f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5daeb130d90854ae86ac59919c2764c048fb8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:f0:42:e6:09:e3:89:ee:39:00:e8:ec:15: 24:6f:03:8a:6c:25:1f:bc:94:60:52:dd:d3:06:15: 71:8c:c9:79:8f:ad:a3:be:42:88:6d:2d:cf:10:51: d6:38:6a:af:3c:ab:25:cc:97:37:3b:bb:fd:c2:2a: a5:bd:3a:46:57:ff:49:a8:a1:3a:e3:6c:35:66:7a: e8:ea:4a:e3:06:e4:d7:11:f2:a5:64:26:95:20:a9: 5e:56:26:df:a1:e8:a8:7c:52:9a:26:5c:43:f1:65: d1:dc:f5:34:9e:0a:a2:1c:f7:f3:3b:92:d7:75:6f: e8:27:09:d4:e1:36:61:19:97:f7:e3:89:52:9a:41: 31:88:25:46:5c:5b:53:92:e2:b8:e1:70:38:07:17: 78:59:91:82:d0:e2:e3:17:8b:04:93:80:a3:70:31: b6:f0:80:95:d3:42:43:92:75:d5:39:f6:13:42:6e: 78:19:d4:c0:06:88:22:d6:d2:28:8e:b4:ec:71:7a: 8c:fb:ad:0b:16:dd:84:02:c0:bc:5f:ef:6a:5d:de: da:ce:2d:06:71:fb:3e:75:0b:f8:ef:03:80:58:49: 19:fb:8c:9e:e9:ee:8f:ac:05:cf:86:e4:79:00:32: 97:6d:13:23:0d:5b:c0:2a:4e:54:84:76:1e:25:02: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DA:EB:13:0D:90:85:4A:E8:6A:C5:99:19:C2:76:4C:04:8F:B8:D9 X509v3 Authority Key Identifier: keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/tdrrEw2QhUroasWZGcJ2TASPuNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.108.0/22 91.219.148.0/22 94.198.50.0-94.198.55.255 109.238.92.0/22 152.89.216.0/22 178.255.126.0/23 185.9.144.0/22 185.130.248.0/22 188.127.224.0-188.127.245.255 188.127.248.0/22 188.127.253.0-188.127.255.255 213.171.16.0/21 IPv6: 2a06:dd00::/32 Signature Algorithm: sha256WithRSAEncryption 3a:67:c1:9b:e8:d2:0a:6b:20:4b:12:fa:ad:5e:c1:a9:a3:01: 82:a8:ec:22:9a:6d:cb:bd:7d:1f:a9:5b:1d:fd:d5:3f:26:70: 8d:25:d9:c0:5e:28:e5:85:42:e5:70:6a:36:3e:92:a0:6a:4d: e7:f2:b4:7f:2c:5c:19:8a:4e:94:e9:d0:e2:ec:9a:17:42:fe: da:fa:16:2f:bb:d5:0b:5f:92:63:24:5b:ae:03:72:4d:c1:b9: 84:9b:c5:d0:2d:7c:1b:52:d5:e4:f6:8e:7a:43:b9:4c:58:fd: d9:d1:0f:81:5e:1a:7a:ed:7e:98:16:59:78:8e:18:34:6b:f2: 3d:97:a6:73:3c:6a:8b:98:09:7c:5a:d5:a7:5b:2b:a7:8c:de: 32:d2:2d:ee:e3:05:a8:67:39:cd:c1:e7:e5:18:20:e6:fc:0f: 8e:2d:61:dc:1a:9c:0e:21:cf:5f:39:4c:d8:3f:1f:38:94:f1: 1f:d6:4f:8d:d8:cc:54:27:87:f9:c2:ce:a4:0d:48:a6:2a:e3: bc:5e:ce:04:78:12:0a:3e:56:48:ca:bd:b7:76:57:02:20:dd: 08:79:3e:24:79:e8:22:de:47:f8:a4:ba:f4:bd:35:f1:eb:2a: 3e:d1:2f:93:45:a9:fa:9e:4c:ab:86:a3:4d:16:1e:ba:99:b2: 0b:d3:d0:0c -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt/hCoXL3/NulzsIAkUUk/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2 ZDU0NDMwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWRhZWIxMzBkOTA4NTRhZTg2YWM1OTkxOWMyNzY0YzA0OGZiOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG7wQuYJ44nuOQDo7BUkbwOKbCUf vJRgUt3TBhVxjMl5j62jvkKIbS3PEFHWOGqvPKslzJc3O7v9wiqlvTpGV/9JqKE6 42w1Znro6krjBuTXEfKlZCaVIKleVibfoeiofFKaJlxD8WXR3PU0ngqiHPfzO5LX dW/oJwnU4TZhGZf344lSmkExiCVGXFtTkuK44XA4Bxd4WZGC0OLjF4sEk4CjcDG2 8ICV00JDknXVOfYTQm54GdTABogi1tIojrTscXqM+60LFt2EAsC8X+9qXd7azi0G cfs+dQv47wOAWEkZ+4ye6e6PrAXPhuR5ADKXbRMjDVvAKk5UhHYeJQKrGwIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFLXa6xMNkIVK6GrFmRnCdkwEj7jZMB8GA1UdIwQY MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt NWEzNjYzMTVjMTY2LzEvdGRyckV3MlFoVXJvYXNXWkdjSjJUQVNQdU5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2 LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwZQQCAAEwXwMEAh+xbAME AlvblDAMAwQBXsYyAwQDXsYwAwQCbe5cAwQCmFnYAwQBsv9+AwQCuQmQAwQCuYL4 MAwDBAW8f+ADBAG8f/QDBAK8f/gwCwMEALx//QMDB7wAAwQD1asQMA0EAgACMAcD BQAqBt0AMA0GCSqGSIb3DQEBCwUAA4IBAQA6Z8Gb6NIKayBLEvqtXsGpowGCqOwi mm3LvX0fqVsd/dU/JnCNJdnAXijlhULlcGo2PpKgak3n8rR/LFwZik6U6dDi7JoX Qv7a+hYvu9ULX5JjJFuuA3JNwbmEm8XQLXwbUtXk9o56Q7lMWP3Z0Q+BXhp67X6Y Fll4jhg0a/I9l6ZzPGqLmAl8WtWnWyunjN4y0i3u4wWoZznNweflGCDm/A+OLWHc GpwOIc9fOUzYPx84lPEf1k+N2MxUJ4f5ws6kDUimKuO8Xs4EeBIKPlZIyr23dlcC IN0IeT4keegi3kf4pLr0vTXx6yo+0S+TRan6nkyrhqNNFh66mbIL09AM -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:30 2026 by rpki-client