This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/G9U4X93rXqstWDjqCmr74O0MOOc.roa File: G9U4X93rXqstWDjqCmr74O0MOOc.roa (raw, json) Hash identifier: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk= Subject key identifier: 1B:D5:38:5F:DD:EB:5E:AB:2D:58:38:EA:0A:6A:FB:E0:ED:0C:38:E7 Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Certificate serial: 019B7C806FF0437A5878234D9AE03E929CE8 Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/G9U4X93rXqstWDjqCmr74O0MOOc.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59491 IP address blocks: 31.6.68.0/23 maxlen: 23 31.6.70.0/23 maxlen: 23 91.188.125.0/24 maxlen: 24 91.238.134.0/23 maxlen: 23 178.19.96.0/24 maxlen: 24 178.19.99.0/24 maxlen: 24 178.19.104.0/21 maxlen: 21 185.24.216.0/24 maxlen: 24 185.24.218.0/23 maxlen: 23 212.59.229.0/24 maxlen: 24 212.59.240.0/23 maxlen: 23 212.59.243.0/24 maxlen: 24 212.59.244.0/22 maxlen: 22 2a02:2430:3::/48 maxlen: 48 2a02:2430:5::/48 maxlen: 48 2a02:2430:6::/48 maxlen: 48 2a02:2430:7::/48 maxlen: 48 2a02:2430:40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6f:f0:43:7a:58:78:23:4d:9a:e0:3e:92:9c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bd5385fddeb5eab2d5838ea0a6afbe0ed0c38e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:f9:8c:a3:30:f6:0a:8a:d1:b8:0e:68:9a: 1c:bd:54:35:55:35:60:17:c2:0c:90:19:15:4e:e2: 28:ed:a8:62:bc:55:76:26:ed:9c:fd:cc:83:76:54: e4:74:82:1a:96:19:b3:a6:93:25:97:c3:92:cc:12: 88:9e:c4:d9:97:01:3d:1b:85:e9:97:09:69:07:4d: 47:35:09:ce:90:59:04:2d:bc:cd:bd:62:8d:05:af: 4c:19:36:ab:a5:82:b6:d6:72:40:7e:6c:12:e6:44: 7c:7c:c9:05:e7:c4:02:d9:96:a9:12:a9:21:49:a5: 91:6d:1a:2c:82:42:74:15:ad:3a:5b:67:d1:b3:de: 67:88:20:1c:ec:7c:58:2e:f3:89:6b:03:2c:b7:1b: 20:6c:c4:bb:e8:47:84:8a:e9:d1:bd:0e:86:e2:85: 89:e7:0c:01:6c:b9:3e:8f:a6:25:14:57:d6:7b:25: 07:b1:21:4c:aa:ac:f5:90:3d:57:cd:0a:ee:d5:8b: 8b:2e:c7:40:d7:d8:7c:2b:26:4a:b6:bc:46:61:51: 94:96:c4:b4:d2:f5:2d:fe:08:bf:fe:45:ef:fb:f8: 57:a5:9c:62:b6:9b:ac:d3:13:14:b7:2e:7a:22:94: 51:59:d3:e3:a9:ed:f5:77:d8:c1:06:b6:f8:80:29: 79:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D5:38:5F:DD:EB:5E:AB:2D:58:38:EA:0A:6A:FB:E0:ED:0C:38:E7 X509v3 Authority Key Identifier: keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/G9U4X93rXqstWDjqCmr74O0MOOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.68.0/22 91.188.125.0/24 91.238.134.0/23 178.19.96.0/24 178.19.99.0/24 178.19.104.0/21 185.24.216.0/24 185.24.218.0/23 212.59.229.0/24 212.59.240.0/23 212.59.243.0-212.59.247.255 IPv6: 2a02:2430:3::/48 2a02:2430:5::-2a02:2430:7:ffff:ffff:ffff:ffff:ffff 2a02:2430:40::/42 Signature Algorithm: sha256WithRSAEncryption 8b:7d:07:bf:fc:52:f4:1d:9f:49:2e:62:9a:9d:82:c0:5b:c6: a6:af:ea:db:5b:1d:fb:67:72:48:21:1a:c4:aa:c7:20:fc:43: 74:84:ca:fe:87:c0:ea:b1:5c:f3:10:20:73:f0:ab:bd:cf:cd: 35:af:cc:97:25:a6:af:b2:c2:1f:ff:f1:cd:53:58:75:c9:c4: 60:4c:83:ba:80:85:73:30:87:8c:5d:30:12:90:ae:89:fb:58: 1b:9a:66:72:85:b3:28:9e:5d:40:64:60:d2:44:87:21:b3:82: fb:bc:a0:1c:a4:d8:1a:5f:20:fb:10:e2:0e:61:de:62:80:d3: 27:95:9e:d6:23:c5:8f:de:bb:11:29:d9:ce:47:66:54:c5:90: 44:f3:b9:c9:2b:b5:f0:d3:26:0b:98:11:e6:54:25:57:f2:9e: 47:ec:84:15:13:2a:40:b0:70:cf:60:53:54:d0:a9:3a:f7:42: e4:db:ce:9d:88:2f:7c:16:23:08:0a:ac:cc:ca:24:78:91:eb: ba:67:84:10:95:19:41:63:15:fe:5e:cb:e4:0a:a7:9e:83:71: 73:78:7a:58:3f:fb:ef:37:a0:17:1a:9f:7f:b8:6e:d6:3b:63: e3:5a:d3:e4:df:0d:d0:b7:a7:58:28:bf:72:31:45:93:eb:21: 57:33:80:20 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt8gG/wQ3pYeCNNmuA+kpzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz NGUzZDgwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmQ1Mzg1ZmRkZWI1ZWFiMmQ1ODM4ZWEwYTZhZmJlMGVkMGMzOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fb5jKMw9gqK0bgOaJocvVQ1VTVg F8IMkBkVTuIo7ahivFV2Ju2c/cyDdlTkdIIalhmzppMll8OSzBKInsTZlwE9G4Xp lwlpB01HNQnOkFkELbzNvWKNBa9MGTarpYK21nJAfmwS5kR8fMkF58QC2ZapEqkh SaWRbRosgkJ0Fa06W2fRs95niCAc7HxYLvOJawMstxsgbMS76EeEiunRvQ6G4oWJ 5wwBbLk+j6YlFFfWeyUHsSFMqqz1kD1XzQru1YuLLsdA19h8KyZKtrxGYVGUlsS0 0vUt/gi//kXv+/hXpZxitpus0xMUty56IpRRWdPjqe31d9jBBrb4gCl5awIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFBvVOF/d616rLVg46gpq++DtDDjnMB8GA1UdIwQY MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt MTY3M2FkOGM0MDEyLzEvRzlVNFg5M3JYcXN0V0RqcUNtcjc0TzBNT09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDBQBAIAATBKAwQCHwZE AwQAW7x9AwQBW+6GAwQAshNgAwQAshNjAwQDshNoAwQAuRjYAwQBuRjaAwQA1Dvl AwQB1DvwMAwDBADUO/MDBAPUO/AwLAQCAAIwJgMHACoCJDAAAzASAwcAKgIkMAAF AwcDKgIkMAAAAwcGKgIkMABAMA0GCSqGSIb3DQEBCwUAA4IBAQCLfQe//FL0HZ9J LmKanYLAW8amr+rbWx37Z3JIIRrEqscg/EN0hMr+h8DqsVzzECBz8Ku9z801r8yX JaavssIf//HNU1h1ycRgTIO6gIVzMIeMXTASkK6J+1gbmmZyhbMonl1AZGDSRIch s4L7vKAcpNgaXyD7EOIOYd5igNMnlZ7WI8WP3rsRKdnOR2ZUxZBE87nJK7Xw0yYL mBHmVCVX8p5H7IQVEypAsHDPYFNU0Kk690Lk286diC98FiMICqzMyiR4keu6Z4QQ lRlBYxX+XsvkCqeeg3FzeHpYP/vvN6AXGp9/uG7WO2PjWtPk3w3Qt6dYKL9yMUWT 6yFXM4Ag -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:10 2026 by rpki-client