This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1fb9CDkZzrVWpqYURt-GyXCNGQs.roa File: 1fb9CDkZzrVWpqYURt-GyXCNGQs.roa (raw, json) Hash identifier: Bwfpkj2M7jenrF7i16afJKl5QhL9sTNZVH0tBuZWKCk= Subject key identifier: D5:F6:FD:08:39:19:CE:B5:56:A6:A6:14:46:DF:86:C9:70:8D:19:0B Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA66F1BFE746FEC4E6C337ED6467D88 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1fb9CDkZzrVWpqYURt-GyXCNGQs.roa Signing time: Fri 02 Jan 2026 12:19:55 +0000 ROA not before: Fri 02 Jan 2026 12:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28769 IP address blocks: 31.216.160.0/22 maxlen: 24 31.216.164.0/23 maxlen: 23 31.216.166.0/24 maxlen: 24 31.216.167.0/24 maxlen: 24 31.216.168.0/23 maxlen: 23 31.216.171.0/24 maxlen: 24 31.216.172.0/22 maxlen: 22 46.166.65.0/24 maxlen: 24 46.166.66.0/24 maxlen: 24 46.166.67.0/24 maxlen: 24 46.166.78.0/24 maxlen: 24 46.166.79.0/24 maxlen: 24 46.166.84.0/23 maxlen: 23 46.166.86.0/24 maxlen: 24 46.166.87.0/24 maxlen: 24 46.166.88.0/23 maxlen: 24 46.166.91.0/24 maxlen: 24 46.166.92.0/24 maxlen: 24 46.166.93.0/24 maxlen: 24 46.166.94.0/24 maxlen: 24 46.166.98.0/24 maxlen: 24 46.166.99.0/24 maxlen: 24 46.166.104.0/22 maxlen: 22 46.166.112.0/23 maxlen: 23 46.166.114.0/24 maxlen: 24 46.166.116.0/22 maxlen: 22 46.166.120.0/21 maxlen: 21 46.182.128.0/22 maxlen: 22 46.182.131.0/24 maxlen: 24 46.182.132.0/22 maxlen: 22 80.240.32.0/24 maxlen: 24 80.240.33.0/24 maxlen: 24 80.240.34.0/24 maxlen: 24 80.240.35.0/24 maxlen: 24 80.240.36.0/23 maxlen: 23 80.240.44.0/24 maxlen: 24 80.240.47.0/24 maxlen: 24 93.188.208.0/23 maxlen: 23 93.188.210.0/24 maxlen: 24 93.188.215.0/24 maxlen: 24 2a06:e0c0::/32 maxlen: 32 2a06:e0c1::/32 maxlen: 32 2a06:e0c2::/32 maxlen: 32 2a06:e0c3::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6f:1b:fe:74:6f:ec:4e:6c:33:7e:d6:46:7d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f6fd083919ceb556a6a61446df86c9708d190b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:07:c5:99:02:2c:0e:1f:4e:d9:ff:f1:1b: 07:41:89:06:1f:dc:83:e0:f0:60:cb:ed:89:8e:14: 8b:33:97:12:e8:f6:25:39:84:0c:6b:ce:54:13:bc: d9:71:61:a8:da:17:8b:0e:7a:0f:58:b8:43:8a:50: f6:ef:ab:aa:ff:f4:49:95:b9:b5:e1:25:72:08:7d: dc:ee:30:13:73:19:0e:40:97:63:84:7f:20:a4:8b: 31:9f:c9:ef:82:54:3d:3d:bd:b3:75:18:79:cb:de: c9:fc:cc:cb:9b:31:bc:bd:ca:c0:26:21:06:52:80: 1a:24:a8:0b:c8:14:f2:f8:be:e3:83:72:d3:44:2e: e9:16:ce:99:cb:df:f4:0a:3a:0b:14:06:a9:ac:6e: 3b:db:56:4f:cd:7b:36:85:19:8a:33:1f:e3:d0:25: 5c:43:29:ac:87:e1:f0:9b:63:07:3f:a4:ce:18:2f: a1:8a:3b:67:49:20:57:75:87:32:94:84:8c:e2:8e: 1b:47:5f:c2:3d:cd:84:2e:18:7c:d2:b0:fa:99:97: 69:45:25:05:80:9a:69:fa:71:b0:a3:8e:f1:20:b8: 14:0c:df:88:05:59:ca:7b:c2:3d:98:94:cb:a1:32: ff:ad:30:12:8e:4d:62:36:30:47:79:9e:e8:bc:f7: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F6:FD:08:39:19:CE:B5:56:A6:A6:14:46:DF:86:C9:70:8D:19:0B X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1fb9CDkZzrVWpqYURt-GyXCNGQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.160.0-31.216.169.255 31.216.171.0-31.216.175.255 46.166.65.0-46.166.67.255 46.166.78.0/23 46.166.84.0-46.166.89.255 46.166.91.0-46.166.94.255 46.166.98.0/23 46.166.104.0/22 46.166.112.0-46.166.114.255 46.166.116.0-46.166.127.255 46.182.128.0/21 80.240.32.0-80.240.37.255 80.240.44.0/24 80.240.47.0/24 93.188.208.0-93.188.210.255 93.188.215.0/24 IPv6: 2a06:e0c0::/30 Signature Algorithm: sha256WithRSAEncryption 95:8e:8d:ba:9b:3b:b7:f0:55:79:f8:73:24:e5:ab:c7:e2:67: d9:09:f8:01:9e:d9:94:2b:9c:24:4e:20:05:a3:db:ef:df:07: c8:1d:64:b5:bf:d1:5d:47:fc:c4:3c:86:a0:7d:29:cb:e6:25: 8e:87:c3:78:d7:7e:d2:3d:b6:c5:8c:89:01:ab:55:eb:82:38: 2a:34:c3:3c:96:e7:58:64:4b:02:bd:21:80:5b:ce:c2:13:9c: cd:fa:17:22:51:99:9a:79:38:fd:a2:10:e6:49:95:56:d4:58: 35:fa:7e:a7:72:b2:41:c4:fc:8e:19:92:c6:3a:6b:25:f7:41: 26:4e:d5:bc:fb:75:b7:0e:3d:12:8e:6b:52:85:3e:07:eb:24: fe:89:7e:50:e2:80:8c:c9:3e:e2:e7:78:2b:f7:d2:3b:2f:51: 62:c2:b9:38:62:42:bf:b5:e3:30:55:f5:e5:36:7c:1b:06:18: 78:46:6e:07:97:63:cd:e5:90:c8:7d:40:e2:8b:dd:ad:ce:3f: e6:62:63:66:51:aa:b6:b1:e6:68:58:20:de:0d:e5:ae:19:1e: 2a:dd:8d:4b:19:e0:85:a1:6d:15:a7:84:a4:d0:d1:f8:dc:ac: 0f:bd:b7:31:46:f7:ee:87:64:95:50:cb:8d:e0:a4:d4:67:41: 3a:f9:16:5e -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt+pm8b/nRv7E5sM37WRn2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWY2ZmQwODM5MTljZWI1NTZhNmE2MTQ0NmRmODZjOTcwOGQxOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryoHxZkCLA4fTtn/8RsHQYkGH9yD 4PBgy+2JjhSLM5cS6PYlOYQMa85UE7zZcWGo2heLDnoPWLhDilD276uq//RJlbm1 4SVyCH3c7jATcxkOQJdjhH8gpIsxn8nvglQ9Pb2zdRh5y97J/MzLmzG8vcrAJiEG UoAaJKgLyBTy+L7jg3LTRC7pFs6Zy9/0CjoLFAaprG4721ZPzXs2hRmKMx/j0CVc Qymsh+Hwm2MHP6TOGC+hijtnSSBXdYcylISM4o4bR1/CPc2ELhh80rD6mZdpRSUF gJpp+nGwo47xILgUDN+IBVnKe8I9mJTLoTL/rTASjk1iNjBHeZ7ovPfpnwIDAQAB o4ICvzCCArswHQYDVR0OBBYEFNX2/Qg5Gc61VqamFEbfhslwjRkLMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvMWZiOUNEa1p6clZXcHFZVVJ0LUd5WENOR1FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBrwQCAAEwgagwDAME BR/YoAMEAR/YqDAMAwQAH9irAwQEH9igMAwDBAAupkEDBAIupkADBAEupk4wDAME Ai6mVAMEAS6mWDAMAwQALqZbAwQALqZeAwQBLqZiAwQCLqZoMAwDBAQupnADBAAu pnIwDAMEAi6mdAMEBy6mAAMEAy62gDAMAwQFUPAgAwQBUPAkAwQAUPAsAwQAUPAv MAwDBARdvNADBABdvNIDBABdvNcwDQQCAAIwBwMFAioG4MAwDQYJKoZIhvcNAQEL BQADggEBAJWOjbqbO7fwVXn4cyTlq8fiZ9kJ+AGe2ZQrnCROIAWj2+/fB8gdZLW/ 0V1H/MQ8hqB9KcvmJY6Hw3jXftI9tsWMiQGrVeuCOCo0wzyW51hkSwK9IYBbzsIT nM36FyJRmZp5OP2iEOZJlVbUWDX6fqdyskHE/I4ZksY6ayX3QSZO1bz7dbcOPRKO a1KFPgfrJP6JflDigIzJPuLneCv30jsvUWLCuThiQr+14zBV9eU2fBsGGHhGbgeX Y83lkMh9QOKL3a3OP+ZiY2ZRqrax5mhYIN4N5a4ZHirdjUsZ4IWhbRWnhKTQ0fjc rA+9tzFG9+6HZJVQy43gpNRnQTr5Fl4= -----END CERTIFICATE-----Generated at Sat Jan 31 05:37:33 2026 by rpki-client