This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/iz9gbVygmSBHL3t3PdATnT2zJmk.roa File: iz9gbVygmSBHL3t3PdATnT2zJmk.roa (raw, json) Hash identifier: mrKo3a/hS44Co32MTqj4k1lL3E23S3iMQm9u18Qtexo= Subject key identifier: 8B:3F:60:6D:5C:A0:99:20:47:2F:7B:77:3D:D0:13:9D:3D:B3:26:69 Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326 Certificate serial: 019B7C7FD48A1BD381B0C96CADD5F21356D7 Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/iz9gbVygmSBHL3t3PdATnT2zJmk.roa Signing time: Fri 02 Jan 2026 02:18:30 +0000 ROA not before: Fri 02 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214707 IP address blocks: 109.224.208.0/21 maxlen: 21 109.224.208.0/24 maxlen: 24 109.224.209.0/24 maxlen: 24 109.224.210.0/24 maxlen: 24 109.224.211.0/24 maxlen: 24 109.224.212.0/24 maxlen: 24 109.224.213.0/24 maxlen: 24 109.224.214.0/24 maxlen: 24 109.224.215.0/24 maxlen: 24 205.209.64.0/19 maxlen: 24 205.209.64.0/21 maxlen: 21 205.209.72.0/21 maxlen: 21 205.209.80.0/21 maxlen: 21 205.209.88.0/21 maxlen: 21 213.177.185.0/24 maxlen: 24 2a14:6540::/29 maxlen: 29 2a14:6540::/31 maxlen: 31 2a14:6542::/31 maxlen: 31 2a14:6544::/31 maxlen: 31 2a14:6546::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d4:8a:1b:d3:81:b0:c9:6c:ad:d5:f2:13:56:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b3f606d5ca09920472f7b773dd0139d3db32669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:a8:b9:d0:94:65:f6:4b:7e:14:54:d3:70: 9e:cd:f3:13:31:15:8b:d4:ab:c1:f3:ff:8c:e9:a3: e0:ca:84:cd:9c:bf:63:63:20:b9:49:2e:b5:33:c7: ae:28:37:f4:30:f1:de:94:0a:28:6c:af:13:0b:2f: 24:64:6f:47:ec:af:33:87:e5:f3:f1:bc:ec:2e:86: 1a:06:6a:78:5e:82:e3:21:7e:ef:1b:fc:9b:06:ca: 27:b6:98:f6:e9:56:ab:6a:9f:7f:cb:4b:bd:64:06: c1:51:35:b1:bf:0f:24:6d:89:8b:d5:a6:0b:fb:78: 44:c3:b1:05:68:79:be:e5:62:f9:b2:29:22:aa:ff: 73:6e:80:d9:72:8c:2f:79:1a:2d:9e:54:72:bc:dc: 73:e8:c2:84:21:13:3a:11:bf:0b:01:26:5b:fc:26: db:03:b8:34:1f:6c:73:e9:e2:ce:7a:17:61:1a:f8: ec:2f:a5:72:06:a5:91:be:98:dc:30:c9:4c:50:42: ae:41:9c:3c:1f:85:f9:b6:43:28:a3:6f:1b:1f:7b: 06:70:f5:34:a3:6c:c6:59:b9:05:2a:2d:e4:f6:e4: c0:7d:8c:67:03:51:d9:13:90:c7:1d:4f:07:75:9b: 38:54:97:6b:89:1f:54:5e:9a:42:9e:83:e7:65:c1: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:60:6D:5C:A0:99:20:47:2F:7B:77:3D:D0:13:9D:3D:B3:26:69 X509v3 Authority Key Identifier: keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/iz9gbVygmSBHL3t3PdATnT2zJmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.208.0/21 205.209.64.0/19 213.177.185.0/24 IPv6: 2a14:6540::/29 Signature Algorithm: sha256WithRSAEncryption 40:9f:ae:52:dc:92:e1:5a:07:24:99:06:6f:3d:9d:4e:4c:f2: 8a:05:ef:b5:60:df:50:29:08:79:86:a8:c9:b9:11:e6:3e:ee: b7:4c:b6:ba:40:83:dd:6e:c4:1b:f3:56:e4:37:93:7e:38:ed: b9:eb:84:a9:f9:94:21:32:e7:98:a4:ef:3a:d0:a0:df:b8:96: d7:db:42:79:b3:00:ec:3d:64:49:c8:8b:eb:cc:cc:ed:23:0c: 32:61:5a:6f:0f:e0:77:bc:b9:94:7c:55:79:e7:5b:45:74:c8: fb:0b:2d:cc:3a:1d:37:ca:89:a6:0f:15:66:6f:3a:ea:43:24: 44:bf:bc:b8:c2:9f:69:54:6a:f4:52:24:76:c3:8e:86:49:54: 1c:a8:13:ea:03:35:08:60:d9:8a:56:43:74:b5:8b:f2:71:99: 86:f4:f7:b4:5a:43:96:75:b3:96:50:d2:5c:ed:6c:49:c7:4d: 2c:56:b9:8c:a0:fc:f8:e4:38:d7:bd:65:10:4c:c4:13:5e:ae: 53:8a:9a:d6:58:8d:06:74:64:b4:31:80:34:3b:28:7f:4c:07: 8b:18:b5:bc:73:36:2a:8a:45:6c:5c:78:94:7f:f1:8e:be:9e: ae:4d:76:ec:8b:59:9b:9c:95:74:77:9a:a3:e2:52:44:dd:80: 8c:59:0f:8c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8f9SKG9OBsMlsrdXyE1bXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjlkOTdiOTdmZDRjYmFjZWRhODFjNDQwNmU3NGFkNmQ1 MzkzMjYwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjNmNjA2ZDVjYTA5OTIwNDcyZjdiNzczZGQwMTM5ZDNkYjMyNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDKoudCUZfZLfhRU03CezfMTMRWL 1KvB8/+M6aPgyoTNnL9jYyC5SS61M8euKDf0MPHelAoobK8TCy8kZG9H7K8zh+Xz 8bzsLoYaBmp4XoLjIX7vG/ybBsontpj26Varap9/y0u9ZAbBUTWxvw8kbYmL1aYL +3hEw7EFaHm+5WL5sikiqv9zboDZcowveRotnlRyvNxz6MKEIRM6Eb8LASZb/Cbb A7g0H2xz6eLOehdhGvjsL6VyBqWRvpjcMMlMUEKuQZw8H4X5tkMoo28bH3sGcPU0 o2zGWbkFKi3k9uTAfYxnA1HZE5DHHU8HdZs4VJdriR9UXppCnoPnZcGf9wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIs/YG1coJkgRy97dz3QE509syZpMB8GA1UdIwQY MBaAFPe52XuX/Uy6ztqBxEBudK1tU5MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMt YTMwZDgyYmQ2MjE5LzEvaXo5Z2JWeWdtU0JITDN0M1BkQVRuVDJ6Sm1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80NjlkNDctMDFlMi00ZmNiLWE2OGMtYTMwZDgyYmQ2MjE5 LzEvOTduWmU1ZjlUTHJPMm9IRVFHNTByVzFUa3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDbeDQAwQF zdFAAwQA1bG5MA0EAgACMAcDBQMqFGVAMA0GCSqGSIb3DQEBCwUAA4IBAQBAn65S 3JLhWgckmQZvPZ1OTPKKBe+1YN9QKQh5hqjJuRHmPu63TLa6QIPdbsQb81bkN5N+ OO2564Sp+ZQhMueYpO860KDfuJbX20J5swDsPWRJyIvrzMztIwwyYVpvD+B3vLmU fFV551tFdMj7Cy3MOh03yommDxVmbzrqQyREv7y4wp9pVGr0UiR2w46GSVQcqBPq AzUIYNmKVkN0tYvycZmG9Pe0WkOWdbOWUNJc7WxJx00sVrmMoPz45DjXvWUQTMQT Xq5TiprWWI0GdGS0MYA0Oyh/TAeLGLW8czYqikVsXHiUf/GOvp6uTXbsi1mbnJV0 d5qj4lJE3YCMWQ+M -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:31 2026 by rpki-client