This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/r-ctfubw9UTIH_idiBrGqwNk0x0.roa File: r-ctfubw9UTIH_idiBrGqwNk0x0.roa (raw, json) Hash identifier: MEv59vY2msaSZKND2KcxPp1lNxW8U5cHMg9rXN2b58I= Subject key identifier: AF:E7:2D:7E:E6:F0:F5:44:C8:1F:F8:9D:88:1A:C6:AB:03:64:D3:1D Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019B7D5C60D8A74E02CC5E1BF8F68649CD4B Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/r-ctfubw9UTIH_idiBrGqwNk0x0.roa Signing time: Fri 02 Jan 2026 06:19:24 +0000 ROA not before: Fri 02 Jan 2026 06:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197071 IP address blocks: 31.214.149.0/24 maxlen: 32 31.214.240.0/21 maxlen: 32 46.251.225.0/24 maxlen: 32 46.251.227.0/24 maxlen: 32 91.217.251.0/24 maxlen: 32 95.156.225.0/24 maxlen: 32 95.156.226.0/23 maxlen: 32 95.156.228.0/22 maxlen: 32 95.156.232.0/24 maxlen: 32 109.230.195.0/24 maxlen: 32 109.230.224.0/20 maxlen: 32 109.230.252.0/22 maxlen: 32 134.255.220.0/22 maxlen: 32 134.255.224.0/22 maxlen: 32 134.255.228.0/23 maxlen: 32 134.255.230.0/24 maxlen: 32 134.255.235.0/24 maxlen: 32 134.255.236.0/22 maxlen: 32 134.255.252.0/22 maxlen: 32 185.87.20.0/22 maxlen: 32 185.122.4.0/22 maxlen: 32 193.25.201.0/24 maxlen: 32 2a05:bec0::/29 maxlen: 128 2a05:bec0:53::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:60:d8:a7:4e:02:cc:5e:1b:f8:f6:86:49:cd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Jan 2 06:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afe72d7ee6f0f544c81ff89d881ac6ab0364d31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:aa:d2:77:4e:4e:f0:ba:56:e9:07:73:c1: 22:8c:c2:65:59:2a:19:93:02:04:ee:56:76:39:d1: 60:db:e6:93:89:b5:4f:f6:e8:70:a8:06:31:75:72: b5:b1:15:3e:c2:0b:aa:da:19:bf:09:1a:7a:cd:83: 57:46:2d:a1:dc:66:46:d3:df:f5:90:f2:04:b6:03: 7a:cb:61:b0:5e:55:05:93:c5:87:17:f4:ab:46:c4: c0:17:7c:2a:32:a3:9b:d4:d7:78:ab:0a:8c:48:0e: 69:20:e4:05:ea:7f:26:d8:5f:34:f1:b0:19:87:d1: c6:d0:c4:c1:39:d0:2a:dc:7a:d7:f3:65:20:7f:0a: d6:3b:16:fb:31:62:8a:3d:a9:ab:3a:a9:ab:06:0a: d5:04:19:e9:cc:14:52:4b:9e:e3:71:f8:c0:d7:4c: f1:5d:21:78:dd:25:f0:7d:cd:71:70:4d:01:22:7e: c6:19:32:01:b3:36:bb:57:f9:37:8a:aa:b0:ad:b7: b0:1c:c4:21:8c:07:84:80:8d:00:2f:2e:0d:fb:8f: 19:da:69:42:87:a8:fc:aa:42:6a:4e:68:81:37:70: 13:23:aa:e8:54:23:cc:a8:ad:47:fa:ae:07:c2:22: e1:9c:51:6a:9d:5c:d8:7d:ae:e3:87:ec:57:c1:75: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E7:2D:7E:E6:F0:F5:44:C8:1F:F8:9D:88:1A:C6:AB:03:64:D3:1D X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/r-ctfubw9UTIH_idiBrGqwNk0x0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.149.0/24 31.214.240.0/21 46.251.225.0/24 46.251.227.0/24 91.217.251.0/24 95.156.225.0-95.156.232.255 109.230.195.0/24 109.230.224.0/20 109.230.252.0/22 134.255.220.0-134.255.230.255 134.255.235.0-134.255.239.255 134.255.252.0/22 185.87.20.0/22 185.122.4.0/22 193.25.201.0/24 IPv6: 2a05:bec0::/29 Signature Algorithm: sha256WithRSAEncryption b6:17:2d:e1:f3:4b:ce:cf:c5:fa:a5:7d:7c:f4:71:00:2c:23: 4f:fd:52:2d:5d:73:d2:2b:42:0c:d1:4c:12:0e:44:8d:19:7d: fc:41:42:2f:81:ed:47:74:79:a1:21:08:3b:f8:8e:ee:cc:4a: 63:38:07:d5:bd:5e:d3:4d:11:b0:1f:f0:36:f7:9b:ba:9e:c7: ad:64:70:63:f8:10:b8:cf:cd:e3:af:c7:92:9b:3b:d7:83:ce: 3d:61:d3:84:5d:80:a8:3a:8f:01:8e:87:dc:a8:b3:0b:90:17: d1:aa:b8:d7:d7:73:03:52:41:da:67:c7:76:9e:c1:a3:56:25: 12:10:e0:8f:5f:dc:bf:eb:0d:5d:89:10:cf:72:d7:40:fc:0c: c4:07:84:85:34:48:c1:b8:e4:90:59:6b:53:17:34:0c:f3:6d: 3e:1a:b6:7e:22:bb:1c:07:d4:28:89:fd:aa:1c:3e:96:13:8f: 3b:89:4e:1c:25:10:af:ed:2e:dc:1e:89:1b:5d:43:aa:37:c8: 56:a4:97:82:e2:44:2d:f7:24:02:c6:fe:fd:2b:c1:96:fb:53: 1b:b5:63:9f:89:01:a7:51:de:74:d2:6a:1a:74:5f:5d:21:c8: 01:38:b2:57:94:cc:63:07:72:27:67:f2:47:d6:50:5a:77:23: ac:af:f0:98 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt9XGDYp04CzF4b+PaGSc1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjYwMTAyMDYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmU3MmQ3ZWU2ZjBmNTQ0YzgxZmY4OWQ4ODFhYzZhYjAzNjRkMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXeq0ndOTvC6VukHc8EijMJlWSoZ kwIE7lZ2OdFg2+aTibVP9uhwqAYxdXK1sRU+wguq2hm/CRp6zYNXRi2h3GZG09/1 kPIEtgN6y2GwXlUFk8WHF/SrRsTAF3wqMqOb1Nd4qwqMSA5pIOQF6n8m2F808bAZ h9HG0MTBOdAq3HrX82UgfwrWOxb7MWKKPamrOqmrBgrVBBnpzBRSS57jcfjA10zx XSF43SXwfc1xcE0BIn7GGTIBsza7V/k3iqqwrbewHMQhjAeEgI0ALy4N+48Z2mlC h6j8qkJqTmiBN3ATI6roVCPMqK1H+q4HwiLhnFFqnVzYfa7jh+xXwXXBEQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFK/nLX7m8PVEyB/4nYgaxqsDZNMdMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvci1jdGZ1Ync5VVRJSF9pZGlCckdxd05rMHgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwQAH9aV AwQDH9bwAwQALvvhAwQALvvjAwQAW9n7MAwDBABfnOEDBABfnOgDBABt5sMDBARt 5uADBAJt5vwwDAMEAob/3AMEAIb/5jAMAwQAhv/rAwQEhv/gAwQChv/8AwQCuVcU AwQCuXoEAwQAwRnJMA0EAgACMAcDBQMqBb7AMA0GCSqGSIb3DQEBCwUAA4IBAQC2 Fy3h80vOz8X6pX189HEALCNP/VItXXPSK0IM0UwSDkSNGX38QUIvge1HdHmhIQg7 +I7uzEpjOAfVvV7TTRGwH/A295u6nsetZHBj+BC4z83jr8eSmzvXg849YdOEXYCo Oo8BjofcqLMLkBfRqrjX13MDUkHaZ8d2nsGjViUSEOCPX9y/6w1diRDPctdA/AzE B4SFNEjBuOSQWWtTFzQM820+GrZ+IrscB9Qoif2qHD6WE487iU4cJRCv7S7cHokb XUOqN8hWpJeC4kQt9yQCxv79K8GW+1MbtWOfiQGnUd500moadF9dIcgBOLJXlMxj B3InZ/JH1lBadyOsr/CY -----END CERTIFICATE-----Generated at Thu Jan 22 03:23:00 2026 by rpki-client