This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/u0VefA4FNPAM3OaDOe1uGO8G7GM.roa File: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (raw, json) Hash identifier: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM= Subject key identifier: BB:45:5E:7C:0E:05:34:F0:0C:DC:E6:83:39:ED:6E:18:EF:06:EC:63 Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Certificate serial: 019B7C806F9135863405017D6130D4EFDE0C Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/u0VefA4FNPAM3OaDOe1uGO8G7GM.roa Signing time: Fri 02 Jan 2026 02:19:10 +0000 ROA not before: Fri 02 Jan 2026 02:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39869 IP address blocks: 31.6.64.0/21 maxlen: 21 89.107.152.0/21 maxlen: 21 91.188.96.0/19 maxlen: 19 178.19.96.0/20 maxlen: 20 185.24.216.0/22 maxlen: 22 185.230.108.0/22 maxlen: 22 212.59.224.0/19 maxlen: 19 2a02:2430::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6f:91:35:86:34:05:01:7d:61:30:d4:ef:de:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb455e7c0e0534f00cdce68339ed6e18ef06ec63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:7d:d6:df:32:7e:98:56:9a:33:f2:25:88: ea:18:2a:d9:00:86:f1:eb:3c:ba:3d:6c:b6:ba:36: 74:66:d3:ce:bb:e2:be:6f:90:20:3f:79:7b:eb:69: 32:0d:47:18:e3:42:7e:1e:d8:57:b0:55:af:e6:f2: 06:e7:b5:bf:9a:fb:a9:3d:02:6d:57:1c:31:1e:fb: 07:b2:4c:e6:c2:ec:29:ac:da:b9:36:97:d9:43:6f: 89:cb:66:3b:ca:82:e5:10:5d:f1:04:00:b1:af:d0: c1:84:cd:a1:35:3a:f9:3e:f3:13:86:9e:6a:64:5d: 71:af:e9:5d:a9:d3:48:4b:81:a8:d3:72:47:93:eb: 0d:20:84:46:48:ec:b7:36:1a:0b:60:6d:e5:30:68: d7:f5:20:0c:15:47:95:31:5c:ac:da:ec:c5:0b:dd: e3:a3:58:79:04:fe:f2:79:1e:95:aa:a3:35:db:93: 2a:fa:0c:7c:d6:a6:30:da:db:04:58:59:c2:83:ee: 77:90:75:1d:88:56:69:77:90:c2:76:91:86:20:26: 35:01:5d:a6:d4:6c:04:f7:25:17:24:dd:00:31:68: 0c:a0:d4:a7:39:b8:d9:33:06:4b:50:b3:b8:aa:d6: b5:0e:24:e4:ba:84:88:11:12:9d:d1:4c:0b:22:15: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:45:5E:7C:0E:05:34:F0:0C:DC:E6:83:39:ED:6E:18:EF:06:EC:63 X509v3 Authority Key Identifier: keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/u0VefA4FNPAM3OaDOe1uGO8G7GM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.64.0/21 89.107.152.0/21 91.188.96.0/19 178.19.96.0/20 185.24.216.0/22 185.230.108.0/22 212.59.224.0/19 IPv6: 2a02:2430::/32 Signature Algorithm: sha256WithRSAEncryption 5e:54:44:91:ab:ca:dc:87:85:1d:5a:d8:e8:97:33:52:a8:45: 3d:d9:eb:92:bf:e5:b0:bf:83:a6:84:3f:02:c7:1b:65:b4:31: e3:20:6f:43:f7:12:10:b1:a9:cc:05:2c:97:2c:2b:e3:48:69: b4:49:c0:26:6a:ba:f9:6e:09:c5:44:c7:61:7d:68:bb:26:b2: 25:07:cf:31:86:e8:35:67:ed:04:ef:7a:2c:c8:b2:07:7d:c4: c4:25:9d:38:e9:3c:bf:29:0e:1f:b3:1f:a6:be:03:23:dc:92: 56:3a:a1:b9:7e:fa:f0:da:a6:ed:08:9b:4b:08:51:5a:f5:0d: d8:cd:e1:3e:80:e1:3a:ea:22:9e:5c:5b:fb:c4:92:bb:77:fe: f3:c7:f6:cf:11:c4:45:ac:c1:1b:10:59:f0:64:a6:12:13:16: 34:16:d6:8d:c0:d0:31:33:7e:c2:94:ff:3e:21:02:7d:3a:74: 1f:03:45:72:02:08:2c:59:04:96:3e:62:a4:cd:23:28:df:e1: 61:68:41:cf:cd:5d:76:f9:4e:69:fe:58:ec:42:7c:96:38:a6: f2:a5:1b:63:c7:80:b0:8c:41:62:cd:2e:ab:ec:aa:66:d6:87: b8:68:95:60:64:86:55:3f:ae:3c:6e:df:df:e8:3c:7e:ea:56: 95:4f:85:e1 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt8gG+RNYY0BQF9YTDU794MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz NGUzZDgwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQ1NWU3YzBlMDUzNGYwMGNkY2U2ODMzOWVkNmUxOGVmMDZlYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRF91t8yfphWmjPyJYjqGCrZAIbx 6zy6PWy2ujZ0ZtPOu+K+b5AgP3l762kyDUcY40J+HthXsFWv5vIG57W/mvupPQJt VxwxHvsHskzmwuwprNq5NpfZQ2+Jy2Y7yoLlEF3xBACxr9DBhM2hNTr5PvMThp5q ZF1xr+ldqdNIS4Go03JHk+sNIIRGSOy3NhoLYG3lMGjX9SAMFUeVMVys2uzFC93j o1h5BP7yeR6VqqM125Mq+gx81qYw2tsEWFnCg+53kHUdiFZpd5DCdpGGICY1AV2m 1GwE9yUXJN0AMWgMoNSnObjZMwZLULO4qta1DiTkuoSIERKd0UwLIhXTgQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFLtFXnwOBTTwDNzmgzntbhjvBuxjMB8GA1UdIwQY MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt MTY3M2FkOGM0MDEyLzEvdTBWZWZBNEZOUEFNM09hRE9lMXVHTzhHN0dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDHwZAAwQD WWuYAwQFW7xgAwQEshNgAwQCuRjYAwQCueZsAwQF1DvgMA0EAgACMAcDBQAqAiQw MA0GCSqGSIb3DQEBCwUAA4IBAQBeVESRq8rch4UdWtjolzNSqEU92euSv+Wwv4Om hD8CxxtltDHjIG9D9xIQsanMBSyXLCvjSGm0ScAmarr5bgnFRMdhfWi7JrIlB88x hug1Z+0E73osyLIHfcTEJZ046Ty/KQ4fsx+mvgMj3JJWOqG5fvrw2qbtCJtLCFFa 9Q3YzeE+gOE66iKeXFv7xJK7d/7zx/bPEcRFrMEbEFnwZKYSExY0FtaNwNAxM37C lP8+IQJ9OnQfA0VyAggsWQSWPmKkzSMo3+FhaEHPzV12+U5p/ljsQnyWOKbypRtj x4CwjEFizS6r7Kpm1oe4aJVgZIZVP648bt/f6Dx+6laVT4Xh -----END CERTIFICATE-----Generated at Tue Feb 10 02:27:04 2026 by rpki-client