This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/aTwucs9Pwvr6YSYXdadFRJo6hLs.roa File: aTwucs9Pwvr6YSYXdadFRJo6hLs.roa (raw, json) Hash identifier: ilcm0/S70CqecxpFPp/FDen+jHt9VTiUtWGnp7lMb1Q= Subject key identifier: 69:3C:2E:72:CF:4F:C2:FA:FA:61:26:17:75:A7:45:44:9A:3A:84:BB Certificate issuer: /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Certificate serial: 019B7C7FEF412156CC9967E946772191322F Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/aTwucs9Pwvr6YSYXdadFRJo6hLs.roa Signing time: Fri 02 Jan 2026 02:18:37 +0000 ROA not before: Fri 02 Jan 2026 02:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39257 IP address blocks: 78.31.200.0/22 maxlen: 22 87.238.184.0/21 maxlen: 21 87.238.187.0/24 maxlen: 24 87.238.190.0/24 maxlen: 24 91.212.106.0/24 maxlen: 24 91.214.127.0/24 maxlen: 24 185.26.200.0/22 maxlen: 22 2a02:8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ef:41:21:56:cc:99:67:e9:46:77:21:91:32:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9 Validity Not Before: Jan 2 02:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=693c2e72cf4fc2fafa61261775a745449a3a84bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:00:da:6b:ad:5f:44:4b:cd:72:bb:7e:88: 63:c3:67:40:d8:89:f2:ab:06:9f:5b:69:31:93:25: 28:81:61:a1:b3:2f:b2:a4:17:ca:74:24:24:76:48: 82:fa:33:5a:0b:13:de:b4:77:09:75:5e:6d:3d:27: 3b:65:dc:fc:8b:72:2f:d2:83:b4:1b:1d:4c:f3:37: db:35:c8:fa:26:c6:19:b2:75:74:02:c6:e1:50:5e: 6e:cb:1f:97:48:e3:05:a1:7a:38:5e:8e:6d:bc:40: ed:21:ba:2c:9e:d6:0b:06:87:6f:0f:20:90:64:91: d7:a4:98:6d:c5:aa:8c:e8:61:22:b0:4e:69:96:46: 6f:6c:b6:dc:3a:e1:d7:36:1e:5b:08:92:4c:b4:ec: bb:d5:17:22:c7:1c:92:fc:66:b4:f1:06:f4:2f:fc: 82:c2:e5:81:2e:80:97:70:ec:32:ef:a8:46:d5:c5: 97:23:b8:d3:8d:a7:3d:81:b5:8a:0e:3b:50:c5:7d: 72:f9:0b:24:9c:b9:15:10:0f:73:d0:e7:d4:cf:22: b4:45:73:8f:2d:3e:57:d4:0b:16:aa:05:44:11:02: 5c:28:d9:74:5f:47:3e:ac:16:9b:72:c8:74:33:26: 4b:19:9f:7e:a7:d9:4a:64:7d:a6:23:e3:61:73:3f: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3C:2E:72:CF:4F:C2:FA:FA:61:26:17:75:A7:45:44:9A:3A:84:BB X509v3 Authority Key Identifier: keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/aTwucs9Pwvr6YSYXdadFRJo6hLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.200.0/22 87.238.184.0/21 91.212.106.0/24 91.214.127.0/24 185.26.200.0/22 IPv6: 2a02:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:79:00:39:e4:a6:67:95:48:d4:0a:b4:d8:06:e0:cd:e3:f3: 35:15:89:42:6b:0f:3b:0b:bd:ca:0c:5e:34:74:08:53:ca:1e: 7b:c0:a0:c4:92:0d:eb:06:62:3e:16:81:79:9e:23:27:60:33: cc:e6:b2:90:94:05:8b:8f:3d:cf:c6:15:b8:e1:86:8d:73:ca: 06:ed:94:b7:29:ac:41:b6:14:be:73:36:98:e3:e7:f7:bd:20: 41:1b:27:52:88:3a:b0:22:2c:cd:e6:e9:c4:36:3a:50:51:07: ea:2b:4c:b0:5a:6f:d6:37:e4:52:8d:1a:f9:a1:8b:e0:59:31: b4:b9:09:4c:69:25:96:7c:59:e3:61:e1:ea:cd:85:44:9b:cb: a6:87:19:03:5b:55:89:01:98:05:37:20:00:87:05:2b:e0:aa: cb:87:01:2c:84:e6:62:2a:9f:fa:fa:77:31:00:cb:e0:d5:1c: ea:f0:e1:d3:a3:f8:29:79:55:e1:f2:0d:37:bf:ed:46:ca:c4: bd:aa:1f:da:d2:97:bd:86:56:f1:64:bb:43:49:c1:54:c1:5f: 68:11:1b:67:60:e9:86:ec:75:4e:70:ec:f4:a4:cb:cb:1a:10: ea:32:2f:a3:4f:3a:4f:4b:4b:34:30:55:6c:b7:9d:b3:78:12: 59:f0:18:92 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8f+9BIVbMmWfpRnchkTIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYjlmOTE4MTZkZDRkODIyNmE0MWUzYjRjM2IwOWM3YmRj YzY0YTkwHhcNMjYwMTAyMDIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTNjMmU3MmNmNGZjMmZhZmE2MTI2MTc3NWE3NDU0NDlhM2E4NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq0A2mutX0RLzXK7fohjw2dA2Iny qwafW2kxkyUogWGhsy+ypBfKdCQkdkiC+jNaCxPetHcJdV5tPSc7Zdz8i3Iv0oO0 Gx1M8zfbNcj6JsYZsnV0AsbhUF5uyx+XSOMFoXo4Xo5tvEDtIbosntYLBodvDyCQ ZJHXpJhtxaqM6GEisE5plkZvbLbcOuHXNh5bCJJMtOy71RcixxyS/Ga08Qb0L/yC wuWBLoCXcOwy76hG1cWXI7jTjac9gbWKDjtQxX1y+QsknLkVEA9z0OfUzyK0RXOP LT5X1AsWqgVEEQJcKNl0X0c+rBabcsh0MyZLGZ9+p9lKZH2mI+Nhcz/O6QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGk8LnLPT8L6+mEmF3WnRUSaOoS7MB8GA1UdIwQY MBaAFDO5+RgW3U2CJqQeO0w7Cce9zGSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYt Y2E4Y2Y2YWNmYWViLzEvYVR3dWNzOVB3dnI2WVNZWGRhZEZSSm82aExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MTMyZjAtNzAyZS00MDQ0LWI2ZDYtY2E4Y2Y2YWNmYWVi LzEvTTduNUdCYmRUWUltcEI0N1REc0p4NzNNWktrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCTh/IAwQD V+64AwQAW9RqAwQAW9Z/AwQCuRrIMA0EAgACMAcDBQAqAgjAMA0GCSqGSIb3DQEB CwUAA4IBAQCKeQA55KZnlUjUCrTYBuDN4/M1FYlCaw87C73KDF40dAhTyh57wKDE kg3rBmI+FoF5niMnYDPM5rKQlAWLjz3PxhW44YaNc8oG7ZS3KaxBthS+czaY4+f3 vSBBGydSiDqwIizN5unENjpQUQfqK0ywWm/WN+RSjRr5oYvgWTG0uQlMaSWWfFnj YeHqzYVEm8umhxkDW1WJAZgFNyAAhwUr4KrLhwEshOZiKp/6+ncxAMvg1Rzq8OHT o/gpeVXh8g03v+1GysS9qh/a0pe9hlbxZLtDScFUwV9oERtnYOmG7HVOcOz0pMvL GhDqMi+jTzpPS0s0MFVst52zeBJZ8BiS -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:26 2026 by rpki-client