This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/92kon1ZbPqRU1ojElvwcbSZFCJg.roa File: 92kon1ZbPqRU1ojElvwcbSZFCJg.roa (raw, json) Hash identifier: JDix+gTyhf3eCiMPRUDwwuH51sP+i0fI6zPIxZOfd6g= Subject key identifier: F7:69:28:9F:56:5B:3E:A4:54:D6:88:C4:96:FC:1C:6D:26:45:08:98 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED37270147BBA9C8394BE6156BF462 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/92kon1ZbPqRU1ojElvwcbSZFCJg.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 43.230.56.0/22 maxlen: 22 45.251.60.0/22 maxlen: 22 86.104.215.0/24 maxlen: 24 86.104.227.0/24 maxlen: 24 89.32.204.0/24 maxlen: 24 89.33.83.0/24 maxlen: 24 103.49.84.0/22 maxlen: 22 162.218.157.0/24 maxlen: 24 162.218.158.0/24 maxlen: 24 194.26.149.0/24 maxlen: 24 194.29.70.0/24 maxlen: 24 194.29.80.0/24 maxlen: 24 212.102.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:37:27:01:47:bb:a9:c8:39:4b:e6:15:6b:f4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f769289f565b3ea454d688c496fc1c6d26450898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:8a:ac:c2:c7:4d:6b:de:42:6c:12:c7:94: 56:aa:29:60:47:93:97:0a:25:7f:52:ce:18:c7:f6: d9:4d:90:37:61:44:36:7e:52:3a:16:ae:47:3e:a7: c7:ba:0d:a8:c2:cc:2d:74:ba:34:b3:09:a6:ba:f8: c0:fa:92:27:f9:7b:ff:a5:a4:83:c5:bc:0d:ff:32: f2:9d:ae:32:7c:e2:92:02:18:d1:f9:a6:5e:b9:a1: c5:87:b0:85:b2:6d:41:10:55:50:c1:60:45:61:08: 91:56:65:2e:49:cc:78:5a:d9:0b:12:0b:a6:94:aa: c0:2b:4c:c7:0d:41:b5:3a:1f:32:12:8a:68:66:04: 6e:9d:a3:9b:60:f1:54:51:3c:18:5d:d6:11:c7:ce: 1f:80:d5:70:50:20:ad:d7:8b:f6:ee:d5:4e:58:f5: 90:e5:7c:cd:2d:a8:b5:56:6d:51:3b:12:73:f4:2e: 6f:7e:5e:97:3e:96:fa:78:e7:16:73:51:20:fb:72: 9a:4d:1b:ee:9e:a6:9c:7c:da:14:63:bc:14:e2:db: ae:05:49:b8:da:08:2a:b3:6c:3a:77:8a:08:d3:3a: c7:8f:f7:17:45:00:b4:05:62:55:46:31:fc:9b:10: a9:ad:4d:71:4d:cd:13:b0:42:49:35:76:5d:ae:03: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:28:9F:56:5B:3E:A4:54:D6:88:C4:96:FC:1C:6D:26:45:08:98 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/92kon1ZbPqRU1ojElvwcbSZFCJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.56.0/22 45.251.60.0/22 86.104.215.0/24 86.104.227.0/24 89.32.204.0/24 89.33.83.0/24 103.49.84.0/22 162.218.157.0-162.218.158.255 194.26.149.0/24 194.29.70.0/24 194.29.80.0/24 212.102.116.0/24 Signature Algorithm: sha256WithRSAEncryption 76:c6:dc:97:da:2f:ea:ea:6b:6e:7d:ce:4b:23:1b:66:b3:fc: c6:5e:50:40:67:95:f2:f9:5b:96:a6:cf:07:aa:9a:4c:46:6c: f8:0e:ae:61:e0:9a:20:b0:21:13:b3:92:84:e3:69:74:f3:bd: 91:1d:5a:90:b6:a6:54:3d:f7:e2:88:9b:c2:56:05:1a:f5:92: f0:4a:78:5f:96:cd:33:e7:cf:46:5a:7c:ef:86:93:ce:d4:ff: 86:31:4f:c8:b2:75:36:fb:d6:a7:ef:79:2c:65:36:5a:83:8e: 3e:3c:5b:f3:fb:f3:c8:e5:57:b4:87:58:63:c2:1d:d0:73:51: eb:c6:39:c8:46:dc:d2:a7:b0:07:a8:1b:7a:a1:1b:53:3a:09: 29:75:14:10:d0:45:22:19:b4:bb:78:e9:df:9d:25:a6:62:40: 7f:84:d4:67:3f:0d:0d:2f:87:5b:28:08:9c:45:57:ac:cd:5d: cd:b9:e5:dd:a3:da:68:e6:44:19:fb:46:17:f1:df:b1:50:73: 0e:6c:41:dc:a8:09:5d:b5:ae:27:8e:c7:66:1c:98:e0:46:ed: 68:0d:81:d3:cd:46:fe:1c:fd:00:9c:d1:73:9b:fd:5f:be:8b: c4:61:d0:fc:ef:10:dc:87:4b:65:1f:0d:44:b3:1b:1b:8b:c6: 49:c1:ac:cf -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt57TcnAUe7qcg5S+YVa/RiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzY5Mjg5ZjU2NWIzZWE0NTRkNjg4YzQ5NmZjMWM2ZDI2NDUwODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTGKrMLHTWveQmwSx5RWqilgR5OX CiV/Us4Yx/bZTZA3YUQ2flI6Fq5HPqfHug2owswtdLo0swmmuvjA+pIn+Xv/paSD xbwN/zLyna4yfOKSAhjR+aZeuaHFh7CFsm1BEFVQwWBFYQiRVmUuScx4WtkLEgum lKrAK0zHDUG1Oh8yEopoZgRunaObYPFUUTwYXdYRx84fgNVwUCCt14v27tVOWPWQ 5XzNLai1Vm1ROxJz9C5vfl6XPpb6eOcWc1Eg+3KaTRvunqacfNoUY7wU4tuuBUm4 2ggqs2w6d4oI0zrHj/cXRQC0BWJVRjH8mxCprU1xTc0TsEJJNXZdrgOnvQIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFPdpKJ9WWz6kVNaIxJb8HG0mRQiYMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOTJrb24xWmJQcVJVMW9qRWx2d2NiU1pGQ0pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQCK+Y4AwQC Lfs8AwQAVmjXAwQAVmjjAwQAWSDMAwQAWSFTAwQCZzFUMAwDBACi2p0DBACi2p4D BADCGpUDBADCHUYDBADCHVADBADUZnQwDQYJKoZIhvcNAQELBQADggEBAHbG3Jfa L+rqa259zksjG2az/MZeUEBnlfL5W5amzweqmkxGbPgOrmHgmiCwIROzkoTjaXTz vZEdWpC2plQ99+KIm8JWBRr1kvBKeF+WzTPnz0ZafO+Gk87U/4YxT8iydTb71qfv eSxlNlqDjj48W/P788jlV7SHWGPCHdBzUevGOchG3NKnsAeoG3qhG1M6CSl1FBDQ RSIZtLt46d+dJaZiQH+E1Gc/DQ0vh1soCJxFV6zNXc255d2j2mjmRBn7Rhfx37FQ cw5sQdyoCV21rieOx2YcmOBG7WgNgdPNRv4c/QCc0XOb/V++i8Rh0PzvENyHS2Uf DUSzGxuLxknBrM8= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:31 2026 by rpki-client