This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/bMS32U4vXlqhazc4jpDC-ezD208.roa File: bMS32U4vXlqhazc4jpDC-ezD208.roa (raw, json) Hash identifier: pu2c1QE+HBJQViui9YhBLnoCsbwr6ehoKHquzyq9r2E= Subject key identifier: 6C:C4:B7:D9:4E:2F:5E:5A:A1:6B:37:38:8E:90:C2:F9:EC:C3:DB:4F Certificate issuer: /CN=993900f66e70b2fffd9c0ce92602f2f45c659961 Certificate serial: 019B7AC890937C2F6325CEC42AD1C9EF7967 Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/bMS32U4vXlqhazc4jpDC-ezD208.roa Signing time: Thu 01 Jan 2026 18:18:43 +0000 ROA not before: Thu 01 Jan 2026 18:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34718 IP address blocks: 62.209.128.0/19 maxlen: 19 80.80.208.0/20 maxlen: 20 80.80.208.0/23 maxlen: 23 80.80.210.0/24 maxlen: 24 80.80.211.0/24 maxlen: 24 80.80.212.0/22 maxlen: 22 80.80.216.0/21 maxlen: 21 89.236.192.0/18 maxlen: 18 94.141.64.0/19 maxlen: 19 94.141.64.0/24 maxlen: 24 94.141.70.0/24 maxlen: 24 94.141.80.0/24 maxlen: 24 94.141.82.0/24 maxlen: 24 94.141.83.0/24 maxlen: 24 94.141.84.0/24 maxlen: 24 94.141.85.0/24 maxlen: 24 94.141.89.0/24 maxlen: 24 94.141.95.0/24 maxlen: 24 185.6.40.0/22 maxlen: 22 185.248.44.0/22 maxlen: 22 194.55.92.0/22 maxlen: 22 217.30.164.0/22 maxlen: 22 217.30.168.0/24 maxlen: 24 217.30.174.0/24 maxlen: 24 2a02:f10::/29 maxlen: 29 2a03:540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:90:93:7c:2f:63:25:ce:c4:2a:d1:c9:ef:79:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961 Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc4b7d94e2f5e5aa16b37388e90c2f9ecc3db4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:d5:d9:d2:0a:8c:48:4d:4f:b5:1e:11:28: c9:eb:cd:2e:3b:45:5c:86:b3:7d:71:32:ce:1c:09: ed:0c:b2:b5:40:76:89:78:10:31:53:31:62:c1:07: 21:42:60:27:90:78:f0:1c:a5:44:9c:65:70:7c:31: 9f:83:37:c6:3b:d1:78:57:8c:9f:c8:b5:9b:ad:cb: e6:fa:d6:64:0e:e7:46:3e:3a:e9:70:87:29:f8:b1: ae:96:5b:ec:ee:f1:09:ab:c7:32:d0:c2:e2:8c:7a: 93:a8:67:15:c6:f6:52:17:54:f1:8f:cf:48:9a:b3: f6:57:32:57:ae:8a:bf:73:66:fa:fb:cb:f3:16:d7: 30:47:39:96:d3:9c:d8:ef:4f:80:5b:81:bd:2d:ac: f1:49:5b:b6:e9:9b:15:21:54:45:30:93:9d:5a:f6: 3b:71:41:7f:50:b5:02:ba:67:56:0a:43:67:c1:fa: 6e:bc:8d:f4:49:1c:43:9d:3d:bf:6f:7b:78:6f:87: 3c:00:29:cc:fd:2f:29:6c:7e:eb:47:31:e7:c4:a3: e7:32:6c:8e:9a:4b:81:c5:02:ce:d7:68:c9:7a:f4: d3:12:e7:12:1a:1e:fa:ac:f9:4e:5a:ef:d5:ab:78: ea:33:d9:64:26:78:92:a8:8f:0e:0e:1d:80:e0:b0: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:B7:D9:4E:2F:5E:5A:A1:6B:37:38:8E:90:C2:F9:EC:C3:DB:4F X509v3 Authority Key Identifier: keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/bMS32U4vXlqhazc4jpDC-ezD208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.209.128.0/19 80.80.208.0/20 89.236.192.0/18 94.141.64.0/19 185.6.40.0/22 185.248.44.0/22 194.55.92.0/22 217.30.164.0-217.30.168.255 217.30.174.0/24 IPv6: 2a02:f10::/29 2a03:540::/32 Signature Algorithm: sha256WithRSAEncryption 91:82:5a:f0:79:3e:57:0d:82:a9:84:82:ed:db:84:c3:5a:45: 40:79:b0:12:f5:61:45:b2:74:36:d4:1b:a3:63:00:44:7f:c9: ac:42:6b:73:5a:0d:4e:cf:07:db:d2:7b:6e:27:ee:ef:fb:24: 23:90:17:7a:1e:9f:57:5e:db:d9:d6:5c:55:0d:14:e6:f6:39: d1:c2:8f:57:c5:7c:81:6e:b4:cd:65:f4:20:cd:e8:05:70:cf: 87:88:a6:5d:9c:4f:11:82:06:8a:51:40:71:1e:87:ee:bd:06: 17:58:66:01:ce:ea:f6:52:51:4f:18:92:99:dc:a9:23:a2:4f: 92:53:22:eb:80:32:08:b9:e6:21:9d:5d:41:b0:2c:cf:40:24: a5:3a:e3:04:32:f6:53:04:77:8a:82:03:ee:36:11:d7:f8:9d: f7:59:fc:0f:99:cc:b3:27:e1:8f:45:5f:4e:bf:23:27:f3:c6: e4:7e:47:70:6d:41:ba:36:d8:4c:19:97:cb:d5:89:e1:b1:f2: f6:54:19:56:fc:35:91:d9:90:fb:55:ec:08:85:a2:3d:59:10: 10:4a:1f:c6:8e:f2:0f:75:16:dd:81:76:b7:92:15:16:d7:1f: c1:f0:21:12:80:ce:26:7b:97:84:37:3e:fa:75:ff:3b:e9:4e: 32:e6:b4:d2 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt6yJCTfC9jJc7EKtHJ73lnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MzkwMGY2NmU3MGIyZmZmZDljMGNlOTI2MDJmMmY0NWM2 NTk5NjEwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2M0YjdkOTRlMmY1ZTVhYTE2YjM3Mzg4ZTkwYzJmOWVjYzNkYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4/V2dIKjEhNT7UeESjJ680uO0Vc hrN9cTLOHAntDLK1QHaJeBAxUzFiwQchQmAnkHjwHKVEnGVwfDGfgzfGO9F4V4yf yLWbrcvm+tZkDudGPjrpcIcp+LGullvs7vEJq8cy0MLijHqTqGcVxvZSF1Txj89I mrP2VzJXroq/c2b6+8vzFtcwRzmW05zY70+AW4G9LazxSVu26ZsVIVRFMJOdWvY7 cUF/ULUCumdWCkNnwfpuvI30SRxDnT2/b3t4b4c8ACnM/S8pbH7rRzHnxKPnMmyO mkuBxQLO12jJevTTEucSGh76rPlOWu/Vq3jqM9lkJniSqI8ODh2A4LDI1QIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFGzEt9lOL15aoWs3OI6Qwvnsw9tPMB8GA1UdIwQY MBaAFJk5APZucLL//ZwM6SYC8vRcZZlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2Qt ZGVmNmVmYjQ0MzE5LzEvYk1TMzJVNHZYbHFoYXpjNGpwREMtZXpEMjA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jMWNmNmYtNTRjZC00MzRhLTgzN2QtZGVmNmVmYjQ0MzE5 LzEvbVRrQTltNXdzdl85bkF6cEpnTHk5RnhsbVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBEBAIAATA+AwQFPtGAAwQE UFDQAwQGWezAAwQFXo1AAwQCuQYoAwQCufgsAwQCwjdcMAwDBALZHqQDBADZHqgD BADZHq4wFAQCAAIwDgMFAyoCDxADBQAqAwVAMA0GCSqGSIb3DQEBCwUAA4IBAQCR glrweT5XDYKphILt24TDWkVAebAS9WFFsnQ21BujYwBEf8msQmtzWg1Ozwfb0ntu J+7v+yQjkBd6Hp9XXtvZ1lxVDRTm9jnRwo9XxXyBbrTNZfQgzegFcM+HiKZdnE8R ggaKUUBxHofuvQYXWGYBzur2UlFPGJKZ3Kkjok+SUyLrgDIIueYhnV1BsCzPQCSl OuMEMvZTBHeKggPuNhHX+J33WfwPmcyzJ+GPRV9OvyMn88bkfkdwbUG6NthMGZfL 1YnhsfL2VBlW/DWR2ZD7VewIhaI9WRAQSh/GjvIPdRbdgXa3khUW1x/B8CESgM4m e5eENz76df876U4y5rTS -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:18 2026 by rpki-client