This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/a3C7IbzkbaswXsbovboq2w9BwGQ.roa File: a3C7IbzkbaswXsbovboq2w9BwGQ.roa (raw, json) Hash identifier: ZSzg7SMIqSibkb5Y6lnFSEbHePc9+LOJ33oGgEo573Q= Subject key identifier: 6B:70:BB:21:BC:E4:6D:AB:30:5E:C6:E8:BD:BA:2A:DB:0F:41:C0:64 Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280 Certificate serial: 019B7910B32A9EF262C3BF9E7AA48E86F5D5 Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/a3C7IbzkbaswXsbovboq2w9BwGQ.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34594 IP address blocks: 5.39.128.0/19 maxlen: 19 5.43.160.0/19 maxlen: 19 37.60.128.0/21 maxlen: 21 37.205.96.0/20 maxlen: 20 80.80.48.0/20 maxlen: 24 85.114.32.0/19 maxlen: 19 85.114.32.0/20 maxlen: 20 85.114.33.0/24 maxlen: 24 89.17.0.0/19 maxlen: 19 89.201.128.0/17 maxlen: 17 89.201.175.0/24 maxlen: 24 95.178.128.0/17 maxlen: 17 151.252.208.0/21 maxlen: 21 151.252.224.0/19 maxlen: 19 151.252.224.0/20 maxlen: 20 176.222.32.0/20 maxlen: 20 185.10.40.0/23 maxlen: 23 185.10.42.0/24 maxlen: 24 185.18.60.0/22 maxlen: 22 2a02:ac8::/32 maxlen: 32 2a03:6100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b3:2a:9e:f2:62:c3:bf:9e:7a:a4:8e:86:f5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b70bb21bce46dab305ec6e8bdba2adb0f41c064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:31:c5:70:3b:c7:b5:85:5c:c5:46:db:75: d9:a3:04:8e:a9:0d:4f:db:ec:e8:9e:d9:00:05:64: cc:50:2e:b6:37:2b:af:ee:d5:1e:4d:9d:0d:76:56: 81:c9:4d:22:45:4d:db:a0:65:f3:68:a3:12:ee:ee: ee:f4:63:98:0a:ff:a1:ff:c6:50:fc:4b:c4:b2:ba: 82:37:a0:c5:b6:4f:8c:eb:7e:f5:16:f1:0d:4b:25: 44:26:24:b7:be:c8:6b:b9:d6:9b:72:0f:79:8a:7f: 40:b7:b0:03:86:6e:2d:79:6d:48:55:63:67:fc:6d: 24:63:34:03:6f:41:89:b1:cc:48:8b:7c:ee:d4:8d: 87:5e:1d:95:a9:f5:c3:47:2d:c0:e5:bb:51:23:82: 62:e9:24:fd:24:3a:b1:76:35:e6:55:7e:fa:dd:3d: 65:96:d1:51:92:d6:ce:d0:91:6c:c8:47:d1:ef:1f: 0d:11:b6:f1:e5:b8:ea:38:07:36:ef:24:94:6e:20: 39:b4:1c:bb:81:d3:f4:49:c8:82:3c:fc:ac:a3:91: 9b:f6:5b:c2:16:db:9b:62:6c:b5:0a:c6:e2:a9:cd: 61:ad:a0:5e:83:c8:a7:9c:da:2a:8f:0d:83:6e:d2: 6e:2b:80:3b:15:37:29:0f:67:2b:44:46:ed:0e:e5: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:70:BB:21:BC:E4:6D:AB:30:5E:C6:E8:BD:BA:2A:DB:0F:41:C0:64 X509v3 Authority Key Identifier: keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/a3C7IbzkbaswXsbovboq2w9BwGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.128.0/19 5.43.160.0/19 37.60.128.0/21 37.205.96.0/20 80.80.48.0/20 85.114.32.0/19 89.17.0.0/19 89.201.128.0/17 95.178.128.0/17 151.252.208.0/21 151.252.224.0/19 176.222.32.0/20 185.10.40.0-185.10.42.255 185.18.60.0/22 IPv6: 2a02:ac8::/32 2a03:6100::/32 Signature Algorithm: sha256WithRSAEncryption 13:5c:0d:e6:41:21:e8:bf:6c:71:aa:3f:ef:3b:07:f5:a3:70: fa:45:ab:37:48:3f:62:25:7c:b8:45:c8:9e:4b:8c:34:ed:b6: 9b:ad:38:37:6d:43:b9:b0:89:35:08:42:88:60:6d:86:fd:81: e0:eb:bc:4f:41:03:b7:1b:f5:66:83:05:db:9f:5e:ab:36:74: be:35:15:47:b2:09:81:95:1c:3b:7c:9d:90:97:6d:a0:bb:68: b4:a0:22:0d:53:b4:fd:b0:ff:4d:29:c1:05:6b:af:f9:4d:7d: e8:d0:99:cf:a2:b8:1e:d1:61:8b:ca:85:0d:5a:12:14:54:9b: fb:21:ac:19:bc:df:96:fc:a3:3e:3c:f6:ff:14:5c:3d:71:d2: 32:0a:81:9c:d6:bf:3e:dc:35:40:bf:45:f3:cb:b1:63:ec:76: f3:73:0f:c9:f9:c4:69:81:4a:e9:9a:96:20:56:c7:17:ec:83: fb:7e:23:c9:3b:b4:fd:40:9b:28:10:f5:cc:a2:1b:aa:fd:75: 00:1d:fb:3c:5b:38:08:fa:85:c8:80:38:63:13:60:b5:f8:6c: 92:b1:09:68:23:02:58:68:25:6e:59:a6:ef:14:d7:df:ba:05: d7:ce:05:6a:b9:fd:25:21:97:9d:cb:1e:7d:b2:8d:34:9f:54: 10:09:cc:ca -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt5ELMqnvJiw7+eeqSOhvXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNGQ1YmQzY2VlYWFiMDc4NmNlMTUxYTMxNzhkYWRjMTA3 YmYyODAwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjcwYmIyMWJjZTQ2ZGFiMzA1ZWM2ZThiZGJhMmFkYjBmNDFjMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJQxxXA7x7WFXMVG23XZowSOqQ1P 2+zontkABWTMUC62Nyuv7tUeTZ0NdlaByU0iRU3boGXzaKMS7u7u9GOYCv+h/8ZQ /EvEsrqCN6DFtk+M6371FvENSyVEJiS3vshrudabcg95in9At7ADhm4teW1IVWNn /G0kYzQDb0GJscxIi3zu1I2HXh2VqfXDRy3A5btRI4Ji6ST9JDqxdjXmVX763T1l ltFRktbO0JFsyEfR7x8NEbbx5bjqOAc27ySUbiA5tBy7gdP0SciCPPyso5Gb9lvC FtubYmy1Csbiqc1hraBeg8innNoqjw2DbtJuK4A7FTcpD2crREbtDuX/gwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFGtwuyG85G2rMF7G6L26KtsPQcBkMB8GA1UdIwQY MBaAFMJNW9PO6qsHhs4VGjF42twQe/KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEt NDFkODIzMjlmMjZkLzEvYTNDN0liemtiYXN3WHNib3Zib3EydzlCd0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEtNDFkODIzMjlmMjZk LzEvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHowYgQCAAEwXAMEBQUngAME BQUroAMEAyU8gAMEBCXNYAMEBFBQMAMEBVVyIAMEBVkRAAMEB1nJgAMEB1+ygAME A5f80AMEBZf84AMEBLDeIDAMAwQDuQooAwQAuQoqAwQCuRI8MBQEAgACMA4DBQAq AgrIAwUAKgNhADANBgkqhkiG9w0BAQsFAAOCAQEAE1wN5kEh6L9scao/7zsH9aNw +kWrN0g/YiV8uEXInkuMNO22m604N21DubCJNQhCiGBthv2B4Ou8T0EDtxv1ZoMF 259eqzZ0vjUVR7IJgZUcO3ydkJdtoLtotKAiDVO0/bD/TSnBBWuv+U196NCZz6K4 HtFhi8qFDVoSFFSb+yGsGbzflvyjPjz2/xRcPXHSMgqBnNa/Ptw1QL9F88uxY+x2 83MPyfnEaYFK6ZqWIFbHF+yD+34jyTu0/UCbKBD1zKIbqv11AB37PFs4CPqFyIA4 YxNgtfhskrEJaCMCWGglblmm7xTX37oF184Farn9JSGXncsefbKNNJ9UEAnMyg== -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:27 2026 by rpki-client