This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa File: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (raw, json) Hash identifier: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM= Subject key identifier: 7F:6C:E4:9C:1F:69:07:32:EA:24:D2:80:F7:16:BB:4D:FE:96:E0:87 Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Certificate serial: 019B7DCB4C3E81A0383CA4B5D6FE119D4275 Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43588 IP address blocks: 31.131.0.0/22 maxlen: 22 31.131.1.0/24 maxlen: 24 31.131.2.0/24 maxlen: 24 31.131.3.0/24 maxlen: 24 31.131.4.0/23 maxlen: 23 31.131.4.0/24 maxlen: 24 31.131.5.0/24 maxlen: 24 31.131.6.0/24 maxlen: 24 31.131.7.0/24 maxlen: 24 91.216.47.0/24 maxlen: 24 91.228.108.0/22 maxlen: 22 91.228.108.0/24 maxlen: 24 91.228.110.0/24 maxlen: 24 91.228.111.0/24 maxlen: 24 2a0a:6480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4c:3e:81:a0:38:3c:a4:b5:d6:fe:11:9d:42:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6ce49c1f690732ea24d280f716bb4dfe96e087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:5f:8f:d7:9e:ea:0d:97:41:ac:5c:65:d9: d8:fd:52:60:9b:ee:2f:8c:f4:f5:00:34:b9:33:04: 47:52:b4:1d:52:93:44:b9:66:08:8a:19:fd:38:88: 28:d5:a3:17:bc:11:0f:9a:91:f5:da:8e:e8:85:3a: b4:44:cc:88:67:b9:4f:de:62:58:06:1c:26:1e:67: 9a:25:9d:4e:f4:fb:ca:e4:ec:c1:2c:f4:50:00:3b: aa:70:92:56:8a:77:ed:54:7c:1d:24:e9:68:22:93: c7:63:ba:87:21:75:a3:c7:f1:77:5a:7f:0d:1a:8a: 7d:2e:b8:e2:12:02:1f:e7:11:9c:e9:7d:ad:b8:ad: 15:ab:c1:cd:05:eb:2d:22:6c:a3:76:45:e9:2c:5f: 69:02:a6:ed:2a:f3:bb:ef:cb:f6:ba:06:d0:33:3d: 57:fa:d8:1a:f2:77:79:43:59:87:94:64:13:8b:5c: 41:58:3a:20:94:0a:54:cd:f5:18:bf:bc:f9:aa:0b: 2b:80:f0:93:54:ef:0d:6d:92:36:31:b8:ba:ab:50: ef:7d:44:05:35:71:28:c7:fd:33:a2:f6:3a:c9:8c: 10:ba:3d:66:da:d7:73:8c:31:a1:f0:eb:43:99:1e: 28:33:bd:eb:7d:31:02:41:ec:a7:31:fa:d8:df:5d: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:E4:9C:1F:69:07:32:EA:24:D2:80:F7:16:BB:4D:FE:96:E0:87 X509v3 Authority Key Identifier: keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.0.0/21 91.216.47.0/24 91.228.108.0/22 IPv6: 2a0a:6480::/29 Signature Algorithm: sha256WithRSAEncryption 19:a1:98:ac:32:58:44:09:35:9b:58:ec:da:37:ea:9d:dd:6f: cd:9a:93:d5:4a:82:b3:4d:c9:b0:c5:03:33:8a:61:d3:0f:a8: 70:f1:6a:a6:1a:17:18:7a:ec:ed:cb:b3:94:5a:11:66:e0:c2: 17:97:85:65:be:15:56:3b:2e:f2:de:39:e7:29:f1:96:4b:80: 39:f9:18:43:11:f7:19:4b:a5:79:b0:18:7c:b1:d8:71:c1:b7: fc:22:19:37:11:08:60:23:8e:17:4a:67:87:a8:f3:85:fb:ad: 59:6b:02:99:2f:bb:b8:89:4c:be:62:87:86:fc:c2:7c:4c:bf: bd:3c:bf:87:0a:9a:33:4e:17:b1:34:18:88:70:69:32:76:59: da:c1:ed:6a:d7:a2:9b:d7:d0:1c:97:d2:45:9c:14:7b:a9:86: 86:1e:f6:a6:5d:37:e9:e1:de:9c:17:41:9b:9d:66:89:8c:d8: 49:78:17:a7:1b:0f:e8:16:08:4a:04:05:6c:96:be:69:1a:4c: 34:62:33:35:52:71:b4:67:0c:77:26:ff:0b:ef:1a:95:e1:d0: 13:bd:f5:c9:e6:e3:26:66:12:b6:dc:3a:08:0d:cd:69:e8:0d: 1c:6a:1f:d0:66:bd:66:0d:29:b2:9b:f3:99:ff:53:ee:8a:b8: b1:d7:a0:ee -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9y0w+gaA4PKS11v4RnUJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4 OGQ0ZWMwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjZjZTQ5YzFmNjkwNzMyZWEyNGQyODBmNzE2YmI0ZGZlOTZlMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArppfj9ee6g2XQaxcZdnY/VJgm+4v jPT1ADS5MwRHUrQdUpNEuWYIihn9OIgo1aMXvBEPmpH12o7ohTq0RMyIZ7lP3mJY BhwmHmeaJZ1O9PvK5OzBLPRQADuqcJJWinftVHwdJOloIpPHY7qHIXWjx/F3Wn8N Gop9LrjiEgIf5xGc6X2tuK0Vq8HNBestImyjdkXpLF9pAqbtKvO778v2ugbQMz1X +tga8nd5Q1mHlGQTi1xBWDoglApUzfUYv7z5qgsrgPCTVO8NbZI2Mbi6q1DvfUQF NXEox/0zovY6yYwQuj1m2tdzjDGh8OtDmR4oM73rfTECQeynMfrY310vwQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFH9s5JwfaQcy6iTSgPcWu03+luCHMB8GA1UdIwQY MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt NmRmYmJhNGVkZDU5LzEvZjJ6a25COXBCekxxSk5LQTl4YTdUZjZXNEljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5 LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDH4MAAwQA W9gvAwQCW+RsMA0EAgACMAcDBQMqCmSAMA0GCSqGSIb3DQEBCwUAA4IBAQAZoZis MlhECTWbWOzaN+qd3W/NmpPVSoKzTcmwxQMzimHTD6hw8WqmGhcYeuzty7OUWhFm 4MIXl4VlvhVWOy7y3jnnKfGWS4A5+RhDEfcZS6V5sBh8sdhxwbf8Ihk3EQhgI44X SmeHqPOF+61ZawKZL7u4iUy+YoeG/MJ8TL+9PL+HCpozThexNBiIcGkydlnawe1q 16Kb19Acl9JFnBR7qYaGHvamXTfp4d6cF0GbnWaJjNhJeBenGw/oFghKBAVslr5p Gkw0YjM1UnG0Zwx3Jv8L7xqV4dATvfXJ5uMmZhK23DoIDc1p6A0cah/QZr1mDSmy m/OZ/1Puirix16Du -----END CERTIFICATE-----Generated at Mon Feb 9 21:18:45 2026 by rpki-client