This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa File: a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa (raw, json) Hash identifier: uHevbCCqsNL4Z3mLZg7vrx9rkzYsimXYtM+5KXA7MHE= Subject key identifier: 6B:E0:CD:56:75:F3:29:CC:93:06:94:6F:EE:B0:85:0E:11:00:D8:AB Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c Certificate serial: 019B7F15D8950E8856B68C65D38C387CC84C Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 83.101.128.0/19 maxlen: 19 83.101.128.0/24 maxlen: 24 83.101.129.0/24 maxlen: 24 83.101.137.0/24 maxlen: 24 83.101.138.0/24 maxlen: 24 83.101.139.0/24 maxlen: 24 83.101.140.0/24 maxlen: 24 83.101.141.0/24 maxlen: 24 83.101.143.0/24 maxlen: 24 83.101.149.0/24 maxlen: 24 83.101.150.0/24 maxlen: 24 83.101.151.0/24 maxlen: 24 83.101.154.0/24 maxlen: 24 83.101.155.0/24 maxlen: 24 83.101.156.0/24 maxlen: 24 212.70.32.0/19 maxlen: 19 212.70.32.0/24 maxlen: 24 212.70.34.0/24 maxlen: 24 212.70.36.0/24 maxlen: 24 212.70.40.0/24 maxlen: 24 212.70.45.0/24 maxlen: 24 212.70.47.0/24 maxlen: 24 212.70.48.0/24 maxlen: 24 212.70.49.0/24 maxlen: 24 212.70.50.0/24 maxlen: 24 212.70.51.0/24 maxlen: 24 212.70.52.0/24 maxlen: 24 212.70.53.0/24 maxlen: 24 212.70.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d8:95:0e:88:56:b6:8c:65:d3:8c:38:7c:c8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6be0cd5675f329cc9306946feeb0850e1100d8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:05:36:c3:9a:2b:ea:68:d4:3b:45:e7:cb: 10:45:f8:bc:15:91:1f:fa:a1:30:ee:55:54:ea:d8: 33:85:c9:b5:f5:b8:59:29:2f:4a:11:17:a8:b1:5f: 81:85:00:18:33:4d:ed:52:8e:a0:44:4f:22:65:5a: b0:fc:61:6b:18:46:89:6b:f5:54:e6:b7:fa:83:00: a8:e5:5e:eb:9b:09:8b:8b:5d:1a:d7:24:00:ea:6d: 6c:76:71:54:dc:26:c7:2d:78:98:f7:b5:2b:d9:f2: b8:28:f3:09:87:60:e1:6d:32:79:4b:29:72:0c:10: cd:d8:63:b9:8c:f5:44:d6:37:09:73:86:65:a9:3a: 4e:a6:02:67:31:12:4b:a9:9a:d2:94:ba:5f:c6:e6: ae:7f:3e:95:c4:f3:52:ce:10:ae:20:d1:af:85:55: 61:58:d8:12:f7:ae:72:95:84:b5:89:2c:17:70:9a: af:a1:e5:ac:35:a4:cd:9a:5b:2b:bd:73:95:06:f7: 3c:85:4a:9d:8c:e3:36:98:52:99:cb:21:32:b1:5f: 8b:b3:ec:7d:12:db:ff:e5:f0:58:b2:9c:56:f3:61: 66:e3:14:a0:43:e3:7d:8b:12:e6:a5:4c:7b:14:ef: 02:e9:16:37:5c:4d:73:72:c6:ea:84:12:68:3d:4f: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E0:CD:56:75:F3:29:CC:93:06:94:6F:EE:B0:85:0E:11:00:D8:AB X509v3 Authority Key Identifier: keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/a-DNVnXzKcyTBpRv7rCFDhEA2Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.101.128.0/19 212.70.32.0/19 Signature Algorithm: sha256WithRSAEncryption ba:9f:75:57:2f:9e:76:b8:8c:7f:a4:96:89:b0:59:dc:29:33: b6:7f:ff:aa:0a:c3:86:65:73:95:86:0c:78:ba:fd:f9:35:01: 81:b3:70:0a:10:d9:3c:2a:f7:76:41:b8:56:7c:6a:ed:9b:41: 21:0e:1e:c2:00:c8:49:a4:02:95:f9:4a:25:c2:9f:65:3b:eb: bb:e7:01:df:0c:fd:97:b8:c7:b0:6d:ad:a3:cb:91:fb:88:ba: f6:e8:00:6b:dc:42:fa:db:01:75:0a:45:58:a9:dd:2d:ab:80: 4b:51:27:f5:e7:dc:44:5a:1b:30:53:68:82:fe:6a:ad:ab:5f: 15:ef:eb:c5:83:c6:3f:ef:7f:e8:2d:25:a4:f9:ae:93:2b:f5: e8:d2:b1:6a:e9:78:52:1a:53:7f:81:67:44:73:a7:11:10:96: 62:d7:21:3f:1a:83:88:73:22:ea:68:49:f7:d1:23:a9:38:01: 28:b5:43:2a:ca:b7:cf:da:39:f0:6b:dd:69:de:36:bc:c3:cb: 20:4c:9b:65:f0:c7:15:e7:b1:ef:dd:67:76:56:84:3c:b4:ee: b6:9d:44:f5:b6:15:6b:f0:ae:4d:d2:c0:f0:5e:ea:2d:84:d1: d0:ac:3c:7c:bb:18:a7:17:5d:16:e9:a8:84:72:0b:2c:d1:60: ba:aa:5d:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FdiVDohWtoxl04w4fMhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OWQ0NjM2MWI2YWY3MjBmYjk4MzZhY2VjOTY1YjBmNTJm NGIwOWMwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmUwY2Q1Njc1ZjMyOWNjOTMwNjk0NmZlZWIwODUwZTExMDBkOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdAFNsOaK+po1DtF58sQRfi8FZEf +qEw7lVU6tgzhcm19bhZKS9KEReosV+BhQAYM03tUo6gRE8iZVqw/GFrGEaJa/VU 5rf6gwCo5V7rmwmLi10a1yQA6m1sdnFU3CbHLXiY97Ur2fK4KPMJh2DhbTJ5Syly DBDN2GO5jPVE1jcJc4ZlqTpOpgJnMRJLqZrSlLpfxuaufz6VxPNSzhCuINGvhVVh WNgS965ylYS1iSwXcJqvoeWsNaTNmlsrvXOVBvc8hUqdjOM2mFKZyyEysV+Ls+x9 Etv/5fBYspxW82Fm4xSgQ+N9ixLmpUx7FO8C6RY3XE1zcsbqhBJoPU/M7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGvgzVZ18ynMkwaUb+6whQ4RANirMB8GA1UdIwQY MBaAFJadRjYbavcg+5g2rOyWWw9S9LCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEt NDM2MDAxNzFiOGJkLzEvYS1ETlZuWHpLY3lUQnBSdjdyQ0ZEaEVBMktzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEtNDM2MDAxNzFiOGJk LzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFU2WAAwQF 1EYgMA0GCSqGSIb3DQEBCwUAA4IBAQC6n3VXL552uIx/pJaJsFncKTO2f/+qCsOG ZXOVhgx4uv35NQGBs3AKENk8Kvd2QbhWfGrtm0EhDh7CAMhJpAKV+Uolwp9lO+u7 5wHfDP2XuMewba2jy5H7iLr26ABr3EL62wF1CkVYqd0tq4BLUSf159xEWhswU2iC /mqtq18V7+vFg8Y/73/oLSWk+a6TK/Xo0rFq6XhSGlN/gWdEc6cREJZi1yE/GoOI cyLqaEn30SOpOAEotUMqyrfP2jnwa91p3ja8w8sgTJtl8McV57Hv3Wd2VoQ8tO62 nUT1thVr8K5N0sDwXuothNHQrDx8uxinF10W6aiEcgss0WC6ql0t -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:05 2026 by rpki-client