This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/30JCy0OML-aej9HWtOYjdVh3Y58.roa File: 30JCy0OML-aej9HWtOYjdVh3Y58.roa (raw, json) Hash identifier: hP6Mk/u93EteMPnPTXhr0EjSwhq+2k3+uAkB+TauqHk= Subject key identifier: DF:42:42:CB:43:8C:2F:E6:9E:8F:D1:D6:B4:E6:23:75:58:77:63:9F Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Certificate serial: 019B7A5AC72709326311B167B569DE691829 Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/30JCy0OML-aej9HWtOYjdVh3Y58.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12611 IP address blocks: 5.149.224.0/20 maxlen: 24 46.227.96.0/21 maxlen: 24 80.209.192.0/19 maxlen: 24 81.27.160.0/20 maxlen: 24 88.133.176.0/20 maxlen: 24 88.133.232.0/21 maxlen: 24 91.106.120.0/21 maxlen: 24 95.130.160.0/21 maxlen: 24 130.185.0.0/18 maxlen: 24 185.119.92.0/22 maxlen: 24 212.77.160.0/19 maxlen: 24 217.74.0.0/21 maxlen: 24 2001:16e0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.mft rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c7:27:09:32:63:11:b1:67:b5:69:de:69:18:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939 Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df4242cb438c2fe69e8fd1d6b4e623755877639f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:06:de:26:57:a8:a6:fc:5c:41:16:c3:7c:f7: fb:29:aa:ef:5c:84:c7:29:cd:68:ef:6a:15:65:57: 42:48:5e:2e:d8:d4:69:38:49:3c:a9:1e:cf:86:a1: e8:ea:6e:20:86:0f:01:65:00:fa:8d:e7:fe:dc:fa: b3:d7:cc:a3:72:1f:c5:e3:e8:94:db:1c:d0:4f:6f: bc:71:d4:aa:f0:6d:56:1c:b2:b8:82:30:92:bb:83: 87:a6:a5:87:ce:9f:64:b1:b9:59:1e:09:45:22:25: f7:e8:66:f8:e2:d0:65:44:ad:7d:3c:02:47:fe:e7: a3:7b:31:15:8e:c4:d0:df:11:f4:44:58:08:dd:c7: 8b:b8:8e:c4:d6:60:d4:73:d2:c0:f2:d3:14:a4:95: 41:b8:b5:d8:65:48:44:26:e4:1f:9b:68:ed:73:39: 5b:88:3c:8e:38:7c:ed:e6:a6:aa:14:5a:34:c0:0b: 25:5e:17:bf:6f:3e:0f:a2:eb:e0:d6:89:7c:1f:1e: c8:64:4b:f7:54:9c:68:23:ab:1d:15:ee:6f:43:1d: a3:69:4d:91:5f:ba:0c:56:1e:6a:93:29:36:8f:c8: cd:05:86:ae:c2:f7:fd:99:4f:2f:05:68:ab:7c:79: 00:fb:6f:a3:fb:0f:c6:13:69:bb:35:a0:93:fa:b5: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:42:42:CB:43:8C:2F:E6:9E:8F:D1:D6:B4:E6:23:75:58:77:63:9F X509v3 Authority Key Identifier: keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/30JCy0OML-aej9HWtOYjdVh3Y58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.224.0/20 46.227.96.0/21 80.209.192.0/19 81.27.160.0/20 88.133.176.0/20 88.133.232.0/21 91.106.120.0/21 95.130.160.0/21 130.185.0.0/18 185.119.92.0/22 212.77.160.0/19 217.74.0.0/21 IPv6: 2001:16e0::/29 Signature Algorithm: sha256WithRSAEncryption 06:75:7d:fc:61:11:52:b0:c0:01:40:90:1b:11:28:25:2f:9f: 00:62:a8:d6:37:21:1b:33:71:ad:69:6f:61:2d:61:14:90:76: 08:97:1e:49:dd:ff:85:5e:ef:9a:b9:b7:fe:09:40:8a:db:cc: c9:57:a8:10:1e:ee:33:03:76:75:37:39:3f:1c:2a:98:7f:d4: fb:a9:d4:19:7f:4b:96:df:ed:81:63:ca:b0:36:14:d2:58:13: e0:63:25:89:c5:b1:16:7c:bd:87:7c:a2:4b:79:c5:32:c3:ee: 3e:21:5b:99:02:78:2d:ec:b0:f3:fd:e3:c7:c3:e5:51:cc:ad: 79:31:12:84:a8:9a:1d:60:d4:eb:cc:f4:ee:80:aa:35:f6:f7: 7c:27:9c:28:a3:90:3a:e5:fa:46:5f:f2:0f:ee:13:72:4f:81: c8:47:25:b8:34:f8:6b:4f:f3:aa:10:93:83:83:96:1e:ec:b2: d2:43:c7:ec:c2:ea:64:82:9d:62:f6:f0:d6:83:d6:5f:f0:34: a7:6c:52:92:7e:a6:53:77:bf:c3:b2:fb:d6:2f:b4:07:30:90: 26:47:1b:09:2d:32:51:f0:ca:4b:35:43:f2:2c:31:ab:7c:51: 6f:38:3e:f9:f1:b9:65:dd:77:cf:92:2b:6d:24:0e:36:d7:55: e8:e4:5c:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt6WscnCTJjEbFntWneaRgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkYTZlNjllNjVkZDBhNTQwNTk5NzAzZWQwYzkyNDc0Y2Iy MGU5MzkwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjQyNDJjYjQzOGMyZmU2OWU4ZmQxZDZiNGU2MjM3NTU4Nzc2MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQbeJleopvxcQRbDfPf7KarvXITH Kc1o72oVZVdCSF4u2NRpOEk8qR7PhqHo6m4ghg8BZQD6jef+3Pqz18yjch/F4+iU 2xzQT2+8cdSq8G1WHLK4gjCSu4OHpqWHzp9ksblZHglFIiX36Gb44tBlRK19PAJH /uejezEVjsTQ3xH0RFgI3ceLuI7E1mDUc9LA8tMUpJVBuLXYZUhEJuQfm2jtczlb iDyOOHzt5qaqFFo0wAslXhe/bz4Pouvg1ol8Hx7IZEv3VJxoI6sdFe5vQx2jaU2R X7oMVh5qkyk2j8jNBYauwvf9mU8vBWirfHkA+2+j+w/GE2m7NaCT+rX0tQIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFN9CQstDjC/mno/R1rTmI3VYd2OfMB8GA1UdIwQY MBaAFD2m5p5l3QpUBZlwPtDJJHTLIOk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5Zjct ZmEzYzRlZjVlZGY2LzEvMzBKQ3kwT01MLWFlajlIV3RPWWpkVmgzWTU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5ZjctZmEzYzRlZjVlZGY2 LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQEBZXgAwQD LuNgAwQFUNHAAwQEURugAwQEWIWwAwQDWIXoAwQDW2p4AwQDX4KgAwQGgrkAAwQC uXdcAwQF1E2gAwQD2UoAMA0EAgACMAcDBQMgARbgMA0GCSqGSIb3DQEBCwUAA4IB AQAGdX38YRFSsMABQJAbESglL58AYqjWNyEbM3GtaW9hLWEUkHYIlx5J3f+FXu+a ubf+CUCK28zJV6gQHu4zA3Z1Nzk/HCqYf9T7qdQZf0uW3+2BY8qwNhTSWBPgYyWJ xbEWfL2HfKJLecUyw+4+IVuZAngt7LDz/ePHw+VRzK15MRKEqJodYNTrzPTugKo1 9vd8J5woo5A65fpGX/IP7hNyT4HIRyW4NPhrT/OqEJODg5Ye7LLSQ8fswupkgp1i 9vDWg9Zf8DSnbFKSfqZTd7/DsvvWL7QHMJAmRxsJLTJR8MpLNUPyLDGrfFFvOD75 8bll3XfPkittJA4211Xo5Fy3 -----END CERTIFICATE-----Generated at Mon Feb 9 21:18:48 2026 by rpki-client