This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/T3lGsdRYO3Jiv8YeumY1-URxH8k.roa File: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (raw, json) Hash identifier: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI= Subject key identifier: 4F:79:46:B1:D4:58:3B:72:62:BF:C6:1E:BA:66:35:F9:44:71:1F:C9 Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Certificate serial: 019BDB951E8E02DD240802298864C84211BE Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/T3lGsdRYO3Jiv8YeumY1-URxH8k.roa Signing time: Tue 20 Jan 2026 13:25:41 +0000 ROA not before: Tue 20 Jan 2026 13:25:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202632 IP address blocks: 31.47.0.0/19 maxlen: 19 31.47.0.0/24 maxlen: 24 31.47.4.0/23 maxlen: 23 31.47.8.0/24 maxlen: 24 31.47.9.0/24 maxlen: 24 31.47.10.0/24 maxlen: 24 31.47.14.0/23 maxlen: 23 31.47.16.0/20 maxlen: 20 185.12.168.0/22 maxlen: 22 185.173.28.0/22 maxlen: 22 185.210.180.0/22 maxlen: 22 185.210.181.0/24 maxlen: 24 185.210.182.0/24 maxlen: 24 213.91.64.0/21 maxlen: 21 213.91.64.0/22 maxlen: 22 213.91.68.0/22 maxlen: 22 213.91.112.0/20 maxlen: 20 213.91.112.0/21 maxlen: 21 213.91.124.0/24 maxlen: 24 213.91.125.0/24 maxlen: 24 213.91.126.0/24 maxlen: 24 213.91.127.0/24 maxlen: 24 217.71.48.0/24 maxlen: 24 217.71.56.0/21 maxlen: 21 2a03:9240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:95:1e:8e:02:dd:24:08:02:29:88:64:c8:42:11:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Validity Not Before: Jan 20 13:25:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f7946b1d4583b7262bfc61eba6635f944711fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:81:05:4f:5e:45:43:8a:aa:ef:63:f2:18: 3b:35:e7:a2:54:fb:ba:17:4f:34:f7:84:43:37:d4: 76:7f:ec:d5:20:19:46:72:8f:52:18:e3:25:d3:1e: 4c:2f:b0:1f:dc:00:e9:d2:b0:a8:fb:09:f4:35:45: a2:85:cf:f1:02:26:09:8f:8e:a1:d5:70:ff:2f:71: 8b:61:e1:be:5f:63:37:06:6e:68:d0:3c:63:c2:95: 8c:ca:82:1f:03:ad:40:82:5a:aa:70:02:26:eb:51: 4e:4c:db:5f:30:dd:99:82:8b:7a:25:b0:18:a0:68: d2:f7:66:76:98:e8:d0:c5:89:4d:61:f5:4a:8c:9c: 88:ce:df:db:b6:04:55:80:84:bc:ff:f8:27:24:72: 69:e3:34:e4:8f:07:a5:b7:a6:d3:98:28:a6:94:89: 41:ae:3f:d0:06:df:9b:10:ce:ca:51:e5:7e:c0:ef: 39:fb:fc:ef:c2:12:89:71:78:5a:d4:6b:67:2d:5f: 25:b3:4f:81:9b:b5:3f:46:ae:48:aa:a2:8c:b4:0c: ce:b4:00:49:e4:fe:8c:15:6a:d6:27:f6:0c:16:c5: b5:f9:58:09:04:be:99:68:2c:40:69:a3:99:40:ca: a6:f2:fa:3f:0f:91:5c:03:5d:1c:3c:8f:3e:2f:76: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:79:46:B1:D4:58:3B:72:62:BF:C6:1E:BA:66:35:F9:44:71:1F:C9 X509v3 Authority Key Identifier: keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/T3lGsdRYO3Jiv8YeumY1-URxH8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.0.0/19 185.12.168.0/22 185.173.28.0/22 185.210.180.0/22 213.91.64.0/21 213.91.112.0/20 217.71.48.0/24 217.71.56.0/21 IPv6: 2a03:9240::/32 Signature Algorithm: sha256WithRSAEncryption bb:6a:c2:62:6d:ff:da:06:72:a0:29:18:e1:b1:9b:79:02:2d: 2f:8b:05:e2:a9:b3:9d:d5:75:e8:b4:9d:c4:3a:a3:f5:fd:0b: 3f:48:11:9f:31:f8:79:1d:26:f3:88:8f:b4:7a:0c:e0:36:1d: 52:69:ce:e0:02:4d:f1:c0:11:96:3f:81:65:6a:90:4c:5e:bd: f9:30:4a:49:a0:5e:a0:f2:69:0a:50:00:f5:7c:f9:0a:f4:f2: 99:95:28:38:06:a7:d5:bc:ea:a5:cd:f2:59:59:be:21:15:47: 07:6d:ac:2f:d5:bd:86:ed:5b:39:89:2a:b5:ff:93:04:93:64: 37:13:1c:71:1a:0b:5a:41:10:14:99:ab:44:c8:d4:fd:76:b3: de:6f:ad:51:01:0f:28:b4:30:d4:bd:8c:8b:40:d4:f9:f3:26: 7b:70:fc:0b:08:6a:02:7c:f8:50:e5:a0:bc:04:7e:cf:ea:3f: c4:16:e5:2e:6e:84:e1:2b:75:3b:bb:e5:40:bb:7e:04:7d:a7: a5:96:d7:9a:bd:d4:47:da:0b:37:bd:5b:35:c6:c0:f4:42:50: 1a:09:38:01:66:38:a3:fc:61:14:29:53:d6:37:71:4d:07:9e: be:a8:ed:92:45:72:b5:ba:b6:fb:47:49:45:27:af:1f:b1:9e: 1b:89:d0:2a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZvblR6OAt0kCAIpiGTIQhG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTRkMmY2ODkxM2VhY2U2YzlmNTA5MmJkYzdkZDIwZjU3 NGY0MzgwHhcNMjYwMTIwMTMyNTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Zjc5NDZiMWQ0NTgzYjcyNjJiZmM2MWViYTY2MzVmOTQ0NzExZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZqBBU9eRUOKqu9j8hg7NeeiVPu6 F08094RDN9R2f+zVIBlGco9SGOMl0x5ML7Af3ADp0rCo+wn0NUWihc/xAiYJj46h 1XD/L3GLYeG+X2M3Bm5o0DxjwpWMyoIfA61AglqqcAIm61FOTNtfMN2Zgot6JbAY oGjS92Z2mOjQxYlNYfVKjJyIzt/btgRVgIS8//gnJHJp4zTkjwelt6bTmCimlIlB rj/QBt+bEM7KUeV+wO85+/zvwhKJcXha1GtnLV8ls0+Bm7U/Rq5IqqKMtAzOtABJ 5P6MFWrWJ/YMFsW1+VgJBL6ZaCxAaaOZQMqm8vo/D5FcA10cPI8+L3aJlQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFE95RrHUWDtyYr/GHrpmNflEcR/JMB8GA1UdIwQY MBaAFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTkt ZjlhMWJiYzM2ODQ1LzEvVDNsR3NkUllPM0ppdjhZZXVtWTEtVVJ4SDhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTktZjlhMWJiYzM2ODQ1 LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQFHy8AAwQC uQyoAwQCua0cAwQCudK0AwQD1VtAAwQE1VtwAwQA2UcwAwQD2Uc4MA0EAgACMAcD BQAqA5JAMA0GCSqGSIb3DQEBCwUAA4IBAQC7asJibf/aBnKgKRjhsZt5Ai0viwXi qbOd1XXotJ3EOqP1/Qs/SBGfMfh5HSbziI+0egzgNh1Sac7gAk3xwBGWP4FlapBM Xr35MEpJoF6g8mkKUAD1fPkK9PKZlSg4BqfVvOqlzfJZWb4hFUcHbawv1b2G7Vs5 iSq1/5MEk2Q3ExxxGgtaQRAUmatEyNT9drPeb61RAQ8otDDUvYyLQNT58yZ7cPwL CGoCfPhQ5aC8BH7P6j/EFuUuboThK3U7u+VAu34EfaellteavdRH2gs3vVs1xsD0 QlAaCTgBZjij/GEUKVPWN3FNB56+qO2SRXK1urb7R0lFJ68fsZ4bidAq -----END CERTIFICATE-----Generated at Mon Feb 2 14:23:29 2026 by rpki-client