This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/k6B1HK3NKe6NDCRPO-ofLOtSI58.roa File: k6B1HK3NKe6NDCRPO-ofLOtSI58.roa (raw, json) Hash identifier: VsAnfAmolqSFo3sK403a26HeoQZ7z5c7wu+L4SUd2zE= Subject key identifier: 93:A0:75:1C:AD:CD:29:EE:8D:0C:24:4F:3B:EA:1F:2C:EB:52:23:9F Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Certificate serial: 019B79104D10719507F2E7975D36045337C9 Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/k6B1HK3NKe6NDCRPO-ofLOtSI58.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38176 IP address blocks: 31.47.88.0/21 maxlen: 21 31.47.88.0/24 maxlen: 24 31.47.89.0/24 maxlen: 24 31.47.90.0/24 maxlen: 24 31.47.91.0/24 maxlen: 24 31.47.92.0/24 maxlen: 24 31.47.93.0/24 maxlen: 24 31.47.94.0/24 maxlen: 24 31.47.95.0/24 maxlen: 24 185.198.104.0/24 maxlen: 24 185.198.105.0/24 maxlen: 24 185.198.106.0/23 maxlen: 23 185.198.106.0/24 maxlen: 24 185.198.107.0/24 maxlen: 24 2a0a:1a40::/34 maxlen: 34 2a0a:1a40:4000::/34 maxlen: 34 2a0a:1a40:8000::/34 maxlen: 34 2a0a:1a40:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4d:10:71:95:07:f2:e7:97:5d:36:04:53:37:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93a0751cadcd29ee8d0c244f3bea1f2ceb52239f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:d9:89:d0:48:e7:ae:a5:69:15:1f:ec:92: 77:49:ae:92:5d:37:73:ad:82:9f:b9:30:87:12:66: ce:a8:36:6a:8d:51:4e:3d:4f:77:22:ff:2c:37:2b: b9:da:80:24:22:90:e8:17:b4:73:42:32:ad:09:8c: 1c:c8:de:63:c0:bc:9e:21:58:dd:04:31:8e:31:bb: d0:3a:ac:4e:11:a5:c3:47:08:97:63:18:04:67:58: c5:ea:12:c3:8d:88:8b:c6:c4:d9:36:b9:f3:1b:62: 5b:ba:20:3a:5e:81:30:2c:6c:80:c0:6e:83:cd:a3: 5b:95:80:13:fd:93:0d:b7:c6:3b:3f:2e:41:0b:70: bb:82:4d:b4:a4:cc:dd:66:1b:48:5e:65:d3:ea:7d: f7:dd:00:55:77:73:89:0f:89:ac:68:ad:04:72:a5: 64:6f:60:30:a2:08:a3:69:5f:d4:57:f1:81:03:a2: b2:4b:58:86:b7:ee:9f:3f:98:d3:0f:b7:d8:df:e5: 3f:ef:ba:ef:f8:6b:ea:3f:d5:70:1b:3e:ab:b0:30: 0b:00:66:f1:c1:57:35:97:54:7a:f2:60:5c:0c:ec: 00:8d:51:ba:4e:92:b6:a0:84:b3:2a:7d:9a:4d:69: 9d:c5:ea:d2:53:96:e5:d4:75:56:a1:38:d2:9b:43: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:75:1C:AD:CD:29:EE:8D:0C:24:4F:3B:EA:1F:2C:EB:52:23:9F X509v3 Authority Key Identifier: keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/k6B1HK3NKe6NDCRPO-ofLOtSI58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.88.0/21 185.198.104.0/22 IPv6: 2a0a:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 2a:5d:32:13:41:0b:5e:42:97:63:78:ea:ad:93:f1:0b:87:df: 4d:b3:a9:42:94:7c:e9:5e:b5:a7:6e:70:f2:13:9a:29:ff:f4: fd:5d:63:81:75:fc:51:9d:f4:a3:6f:32:13:ce:c3:07:1a:0c: 1e:d0:02:95:5b:9f:5a:ad:cb:d0:ff:b5:56:2f:48:7b:88:b8: e9:69:4c:20:00:24:0f:71:07:00:6d:69:41:5f:17:65:ea:36: 5d:15:d0:61:79:68:b8:0d:69:83:0e:5a:c3:2c:56:2e:20:99: 12:ce:1b:02:c1:db:a9:d6:84:90:77:a2:3b:ca:60:f3:2c:13: 39:68:52:94:d5:12:b7:84:8d:0f:c0:88:41:30:d9:f9:65:e6: ec:e5:90:37:f7:ec:5a:88:f0:28:4e:4c:a4:6b:48:76:24:67: e8:7c:1f:d9:d6:35:27:f8:75:34:06:f3:26:3d:1e:1f:d3:59: 55:4d:d2:ac:0e:68:a3:4d:d4:cf:c0:05:08:19:81:57:59:fa: 51:a9:06:e5:b0:32:b5:e8:99:81:18:4e:01:66:27:f3:1e:16: 27:57:ec:bc:e9:4e:90:63:75:04:84:ad:d8:6f:34:12:18:68: 3e:34:1e:3d:5c:c3:6e:5b:9f:3f:b5:3e:a1:8b:5a:cd:ef:d0: 45:b2:ab:15 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EE0QcZUH8ueXXTYEUzfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNWYyY2QxYTlmMGRhNDM1ZjJlM2IzZWU3MGU2NGZkYWY0 YjYxMjEwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2EwNzUxY2FkY2QyOWVlOGQwYzI0NGYzYmVhMWYyY2ViNTIyMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l3ZidBI566laRUf7JJ3Sa6SXTdz rYKfuTCHEmbOqDZqjVFOPU93Iv8sNyu52oAkIpDoF7RzQjKtCYwcyN5jwLyeIVjd BDGOMbvQOqxOEaXDRwiXYxgEZ1jF6hLDjYiLxsTZNrnzG2JbuiA6XoEwLGyAwG6D zaNblYAT/ZMNt8Y7Py5BC3C7gk20pMzdZhtIXmXT6n333QBVd3OJD4msaK0EcqVk b2AwogijaV/UV/GBA6KyS1iGt+6fP5jTD7fY3+U/77rv+GvqP9VwGz6rsDALAGbx wVc1l1R68mBcDOwAjVG6TpK2oISzKn2aTWmdxerSU5bl1HVWoTjSm0PyZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJOgdRytzSnujQwkTzvqHyzrUiOfMB8GA1UdIwQY MBaAFNJfLNGp8NpDXy47PucOZP2vS2EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2Et YzViNmFlY2I2YzljLzEvazZCMUhLM05LZTZORENSUE8tb2ZMT3RTSTU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yZDEyNWYtMWE2MC00NjhkLWE5M2EtYzViNmFlY2I2Yzlj LzEvMGw4czBhbncya05mTGpzLTV3NWtfYTlMWVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHy9YAwQC ucZoMA0EAgACMAcDBQAqChpAMA0GCSqGSIb3DQEBCwUAA4IBAQAqXTITQQteQpdj eOqtk/ELh99Ns6lClHzpXrWnbnDyE5op//T9XWOBdfxRnfSjbzITzsMHGgwe0AKV W59arcvQ/7VWL0h7iLjpaUwgACQPcQcAbWlBXxdl6jZdFdBheWi4DWmDDlrDLFYu IJkSzhsCwdup1oSQd6I7ymDzLBM5aFKU1RK3hI0PwIhBMNn5Zebs5ZA39+xaiPAo Tkyka0h2JGfofB/Z1jUn+HU0BvMmPR4f01lVTdKsDmijTdTPwAUIGYFXWfpRqQbl sDK16JmBGE4BZifzHhYnV+y86U6QY3UEhK3YbzQSGGg+NB49XMNuW58/tT6hi1rN 79BFsqsV -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:09 2026 by rpki-client