This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/9iFdSaW-rEOH9BsaDgdEkFOe_l8.roa File: 9iFdSaW-rEOH9BsaDgdEkFOe_l8.roa (raw, json) Hash identifier: Sa6vsHQLj+q1saewkNEM/Z5+Wij0qrX7tBjQg8hQ5RU= Subject key identifier: F6:21:5D:49:A5:BE:AC:43:87:F4:1B:1A:0E:07:44:90:53:9E:FE:5F Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e Certificate serial: 019B7AC8FFC5A40353D8AC5E33EFCE0AF473 Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/9iFdSaW-rEOH9BsaDgdEkFOe_l8.roa Signing time: Thu 01 Jan 2026 18:19:11 +0000 ROA not before: Thu 01 Jan 2026 18:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31399 IP address blocks: 53.0.0.0/8 maxlen: 8 53.3.144.0/21 maxlen: 21 141.113.0.0/21 maxlen: 21 141.113.8.0/21 maxlen: 21 141.113.24.0/22 maxlen: 22 141.113.32.0/21 maxlen: 21 141.113.32.0/22 maxlen: 22 141.113.36.0/22 maxlen: 22 141.113.40.0/21 maxlen: 21 141.113.48.0/21 maxlen: 21 141.113.56.0/21 maxlen: 21 141.113.64.0/21 maxlen: 21 141.113.72.0/21 maxlen: 21 141.113.88.0/22 maxlen: 22 141.113.96.0/21 maxlen: 21 141.113.104.0/21 maxlen: 21 141.113.112.0/21 maxlen: 21 141.113.120.0/21 maxlen: 21 141.113.200.0/22 maxlen: 22 141.113.204.0/22 maxlen: 22 141.113.208.0/21 maxlen: 21 141.113.216.0/21 maxlen: 21 141.113.224.0/21 maxlen: 21 141.113.232.0/21 maxlen: 21 141.113.240.0/21 maxlen: 21 141.113.248.0/21 maxlen: 21 2a03:9e40::/29 maxlen: 29 2a03:9e42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ff:c5:a4:03:53:d8:ac:5e:33:ef:ce:0a:f4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e Validity Not Before: Jan 1 18:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6215d49a5beac4387f41b1a0e074490539efe5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:50:28:71:c2:f7:9a:75:26:56:ae:99:e0: dd:c0:89:f7:cd:a9:50:08:7f:c2:ac:3e:7f:f7:6c: 0e:1f:36:de:1a:fc:0a:6e:57:d1:2c:bb:ee:50:f2: 7a:1c:a3:79:e9:df:3e:20:b7:61:cd:be:c7:8a:93: 4c:eb:76:67:a6:6a:2e:de:3e:15:f5:46:ce:38:68: 8e:ac:e8:f3:a0:49:1c:b7:33:dc:08:9f:47:3a:2f: b5:83:42:4c:b9:9f:ca:ff:77:04:01:90:f0:00:b5: cd:4e:9c:e5:73:b2:cc:36:92:6e:7f:18:6e:6b:d8: b8:02:01:b7:d0:96:83:8c:45:30:bf:d4:be:4c:26: 34:97:b4:27:af:0d:bc:ac:92:11:7a:34:b4:79:d6: 2c:db:2a:cf:a6:e1:16:63:2c:54:60:dd:65:be:7e: 09:9f:1d:e3:77:8d:93:81:c3:f1:0f:b0:7c:0f:11: 88:63:b3:88:85:36:8f:59:4e:a9:c5:09:c1:0d:8e: 8d:be:82:20:e5:7f:fb:27:b9:84:b6:9f:c8:f5:ee: 87:9c:99:a4:2d:d1:12:a2:21:91:61:6c:b3:25:cb: 04:2f:32:fe:87:e8:04:49:a6:83:0f:e1:e7:6a:8e: 63:e4:27:cf:37:34:27:93:e3:a0:e0:2c:89:1d:98: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:21:5D:49:A5:BE:AC:43:87:F4:1B:1A:0E:07:44:90:53:9E:FE:5F X509v3 Authority Key Identifier: keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/9iFdSaW-rEOH9BsaDgdEkFOe_l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 53.0.0.0/8 141.113.0.0/20 141.113.24.0/22 141.113.32.0-141.113.79.255 141.113.88.0/22 141.113.96.0/19 141.113.200.0-141.113.255.255 IPv6: 2a03:9e40::/29 Signature Algorithm: sha256WithRSAEncryption 02:c8:ca:80:e1:df:e2:67:8b:8c:c3:4e:bb:db:79:23:f0:84: 40:20:72:e7:4b:07:70:27:ba:1e:cc:7f:84:3a:1c:ed:48:3c: 0c:34:b1:2d:8c:a4:64:61:2f:bb:b1:8c:3a:0a:09:e3:66:78: 2f:f9:08:51:c2:59:fd:1d:e7:4a:f1:21:63:cb:b4:e8:23:bf: 6d:fc:6a:2b:73:64:af:dc:a0:a7:b1:39:e2:77:56:30:c3:4b: 4d:56:a2:02:d6:27:e6:6b:90:e8:64:e8:9e:fb:f6:10:83:b8: 73:9c:91:73:0b:c7:00:92:41:e9:5f:e6:74:38:90:a8:96:f1: 66:91:e7:04:e6:f9:f8:87:ce:ce:3b:2c:a7:9e:94:e4:c8:ee: 53:b2:f6:36:1c:4b:6b:c6:ba:ec:b9:86:09:fe:39:1b:5d:06: 84:cd:77:6d:5b:3c:3a:35:d0:c4:e6:79:b0:67:5c:ab:eb:65: 0c:ba:08:29:eb:8c:87:dc:0b:93:e2:e9:08:93:22:94:f0:d0: 76:a6:3c:d5:fd:d9:e5:7d:74:72:3e:39:36:d2:e9:51:b9:a7: ce:51:75:ba:b1:56:15:ac:63:07:bd:89:79:14:72:28:7c:91: aa:ef:44:d8:5a:e1:42:6f:72:a5:d9:a9:60:ac:df:40:3f:10: 53:ff:e5:5d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt6yP/FpANT2KxeM+/OCvRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZjM2MmMwNzY1YWZiN2I5ODA0YjZkODE5NDcwMDA3YjAx ZjI2MmUwHhcNMjYwMTAxMTgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjIxNWQ0OWE1YmVhYzQzODdmNDFiMWEwZTA3NDQ5MDUzOWVmZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvplQKHHC95p1JlaumeDdwIn3zalQ CH/CrD5/92wOHzbeGvwKblfRLLvuUPJ6HKN56d8+ILdhzb7HipNM63Znpmou3j4V 9UbOOGiOrOjzoEkctzPcCJ9HOi+1g0JMuZ/K/3cEAZDwALXNTpzlc7LMNpJufxhu a9i4AgG30JaDjEUwv9S+TCY0l7Qnrw28rJIRejS0edYs2yrPpuEWYyxUYN1lvn4J nx3jd42TgcPxD7B8DxGIY7OIhTaPWU6pxQnBDY6NvoIg5X/7J7mEtp/I9e6HnJmk LdESoiGRYWyzJcsELzL+h+gESaaDD+Hnao5j5CfPNzQnk+Og4CyJHZiXCQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPYhXUmlvqxDh/QbGg4HRJBTnv5fMB8GA1UdIwQY MBaAFG/zYsB2Wvt7mAS22BlHAAewHyYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEt ZGFmZDc0NzYzZDIzLzEvOWlGZFNhVy1yRU9IOUJzYURnZEVrRk9lX2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEtZGFmZDc0NzYzZDIz LzEvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA9BAIAATA3AwIANQMEBI1x AAMEAo1xGDAMAwQFjXEgAwQEjXFAAwQCjXFYAwQFjXFgMAsDBAONccgDAwGNcDAN BAIAAjAHAwUDKgOeQDANBgkqhkiG9w0BAQsFAAOCAQEAAsjKgOHf4meLjMNOu9t5 I/CEQCBy50sHcCe6Hsx/hDoc7Ug8DDSxLYykZGEvu7GMOgoJ42Z4L/kIUcJZ/R3n SvEhY8u06CO/bfxqK3Nkr9ygp7E54ndWMMNLTVaiAtYn5muQ6GTonvv2EIO4c5yR cwvHAJJB6V/mdDiQqJbxZpHnBOb5+IfOzjssp56U5MjuU7L2NhxLa8a67LmGCf45 G10GhM13bVs8OjXQxOZ5sGdcq+tlDLoIKeuMh9wLk+LpCJMilPDQdqY81f3Z5X10 cj45NtLpUbmnzlF1urFWFaxjB72JeRRyKHyRqu9E2FrhQm9ypdmpYKzfQD8QU//l XQ== -----END CERTIFICATE-----Generated at Sat Jan 3 01:35:50 2026 by rpki-client