This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/fSbObenQqMh0-me9W8aCUmvq5EI.roa File: fSbObenQqMh0-me9W8aCUmvq5EI.roa (raw, json) Hash identifier: zKguKMkuYjbS+U0PhiTMN3CNe4E1jQXYVJh/03csrHY= Subject key identifier: 7D:26:CE:6D:E9:D0:A8:C8:74:FA:67:BD:5B:C6:82:52:6B:EA:E4:42 Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502 Certificate serial: 019B797E512C4461E54252D049E9365C29DA Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/fSbObenQqMh0-me9W8aCUmvq5EI.roa Signing time: Thu 01 Jan 2026 12:18:00 +0000 ROA not before: Thu 01 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50629 IP address blocks: 31.209.80.0/20 maxlen: 21 37.72.144.0/21 maxlen: 22 46.19.88.0/21 maxlen: 22 185.55.116.0/22 maxlen: 23 185.76.188.0/22 maxlen: 23 185.146.228.0/22 maxlen: 23 2a00:c380::/32 maxlen: 33 2a02:2918::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:51:2c:44:61:e5:42:52:d0:49:e9:36:5c:29:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d26ce6de9d0a8c874fa67bd5bc682526beae442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:07:c2:7b:8a:3b:40:e1:b8:d3:e2:9f:71: 4a:dd:45:70:bb:79:0a:88:cd:3b:e5:4d:34:43:30: 54:be:8f:2d:7b:4b:3a:2d:49:fc:cb:18:b2:0a:67: 4f:d0:d0:36:04:7a:b1:16:36:e8:74:15:e0:62:df: d9:87:68:ce:5c:c4:61:81:8b:95:d3:1d:33:ef:61: d6:c2:f8:be:5e:51:d3:5f:a1:8e:25:a5:23:a6:05: f7:4c:d3:75:8b:9e:50:54:50:fd:40:8c:f4:68:96: 71:bf:0b:3a:c6:a6:93:62:01:84:e6:88:90:95:c2: d5:63:05:47:73:bd:67:c0:25:36:57:33:42:ae:8e: 91:ae:11:7a:19:9b:a5:e4:fd:3e:c1:cc:2a:fe:90: f2:ab:74:d3:bf:dc:9e:08:29:cf:a3:2a:cc:ef:db: da:9f:85:0c:47:87:6a:55:dd:0c:d0:00:b9:49:7d: 75:25:f8:25:0f:ce:b9:fa:5c:46:32:fe:18:5c:7f: 50:76:8d:7d:ea:03:a0:d0:88:ff:0e:06:23:7e:0b: af:4e:00:ca:fe:e7:f5:2c:63:a0:73:ca:ea:39:48: 54:e8:dd:35:b0:cd:48:7a:45:dc:17:db:dd:69:70: 22:54:5b:6f:b1:d4:db:ab:28:69:b2:11:8d:3b:62: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:CE:6D:E9:D0:A8:C8:74:FA:67:BD:5B:C6:82:52:6B:EA:E4:42 X509v3 Authority Key Identifier: keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/fSbObenQqMh0-me9W8aCUmvq5EI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.80.0/20 37.72.144.0/21 46.19.88.0/21 185.55.116.0/22 185.76.188.0/22 185.146.228.0/22 IPv6: 2a00:c380::/32 2a02:2918::/32 Signature Algorithm: sha256WithRSAEncryption 24:c7:45:4a:5d:7e:28:14:66:ad:5c:84:70:5d:13:5f:e1:2a: e0:3c:ca:e6:1f:23:c8:9a:97:38:86:0b:66:90:8d:55:6e:97: 33:f8:5a:d9:23:7a:c4:2a:f1:43:b7:d8:64:ca:24:e6:57:eb: 27:ed:e8:f4:74:e7:24:b1:cb:05:88:46:fc:4e:b8:a8:28:82: c4:3a:a5:3b:8f:cb:76:28:33:24:00:3c:03:82:2c:6a:84:be: ac:f1:8f:5a:d2:64:7c:5a:e7:8b:a8:17:fb:32:e5:dc:58:38: 4e:c5:25:f0:c1:10:c3:a4:32:4d:d8:e5:c1:46:20:39:e7:fc: 92:03:cb:e2:dc:56:de:71:c5:78:fa:76:f9:bd:b2:a2:4c:96: 37:af:7f:e3:65:39:3c:6c:ab:63:07:1a:b3:e5:79:06:44:06: 76:f2:d4:21:3b:78:48:2e:6c:4f:dd:fb:a8:85:92:b6:47:01: 33:b0:1b:9f:9e:b1:8b:4f:7f:08:39:20:0f:5f:b4:70:6f:42: f7:bf:f7:28:10:10:d3:00:ca:07:d3:30:da:2e:60:e3:b5:db: e4:23:fb:b1:3b:3d:93:71:b8:a2:89:24:c7:5d:dd:d9:2c:14: 72:3f:e7:80:0c:04:6a:2b:fe:10:c1:fb:8d:75:02:db:12:07: e0:e7:63:fc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt5flEsRGHlQlLQSek2XCnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmOTQ3YzRmZDIzOTZkOWVkYjhiYzQ1NDQwNWU1NzU1OGQ4 Yjk1MDIwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDI2Y2U2ZGU5ZDBhOGM4NzRmYTY3YmQ1YmM2ODI1MjZiZWFlNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbAHwnuKO0DhuNPin3FK3UVwu3kK iM075U00QzBUvo8te0s6LUn8yxiyCmdP0NA2BHqxFjbodBXgYt/Zh2jOXMRhgYuV 0x0z72HWwvi+XlHTX6GOJaUjpgX3TNN1i55QVFD9QIz0aJZxvws6xqaTYgGE5oiQ lcLVYwVHc71nwCU2VzNCro6RrhF6GZul5P0+wcwq/pDyq3TTv9yeCCnPoyrM79va n4UMR4dqVd0M0AC5SX11JfglD865+lxGMv4YXH9Qdo196gOg0Ij/DgYjfguvTgDK /uf1LGOgc8rqOUhU6N01sM1IekXcF9vdaXAiVFtvsdTbqyhpshGNO2JwJwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFH0mzm3p0KjIdPpnvVvGglJr6uRCMB8GA1UdIwQY MBaAFD+UfE/SOW2e24vEVEBeV1WNi5UCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYt Y2VjNDBlNDI1MjY0LzEvZlNiT2JlblFxTWgwLW1lOVc4YUNVbXZxNUVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYtY2VjNDBlNDI1MjY0 LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQEH9FQAwQD JUiQAwQDLhNYAwQCuTd0AwQCuUy8AwQCuZLkMBQEAgACMA4DBQAqAMOAAwUAKgIp GDANBgkqhkiG9w0BAQsFAAOCAQEAJMdFSl1+KBRmrVyEcF0TX+Eq4DzK5h8jyJqX OIYLZpCNVW6XM/ha2SN6xCrxQ7fYZMok5lfrJ+3o9HTnJLHLBYhG/E64qCiCxDql O4/LdigzJAA8A4IsaoS+rPGPWtJkfFrni6gX+zLl3Fg4TsUl8MEQw6QyTdjlwUYg Oef8kgPL4txW3nHFePp2+b2yokyWN69/42U5PGyrYwcas+V5BkQGdvLUITt4SC5s T937qIWStkcBM7Abn56xi09/CDkgD1+0cG9C97/3KBAQ0wDKB9Mw2i5g47Xb5CP7 sTs9k3G4ookkx13d2SwUcj/ngAwEaiv+EMH7jXUC2xIH4Odj/A== -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:39 2026 by rpki-client