This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/roN-7lMrJBJshC3odG7CfsyJC9w.roa File: roN-7lMrJBJshC3odG7CfsyJC9w.roa (raw, json) Hash identifier: HgaVm7vJPKp3DvkA5zpgY89s+4B3e4bWrP23hUJHt/k= Subject key identifier: AE:83:7E:EE:53:2B:24:12:6C:84:2D:E8:74:6E:C2:7E:CC:89:0B:DC Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019C23AB46A1E71BFFFD8161C31BAC2DCD25 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/roN-7lMrJBJshC3odG7CfsyJC9w.roa Signing time: Tue 03 Feb 2026 13:22:32 +0000 ROA not before: Tue 03 Feb 2026 13:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198193 IP address blocks: 31.214.155.0/24 maxlen: 24 37.252.98.0/24 maxlen: 24 37.252.100.0/24 maxlen: 24 37.252.101.0/24 maxlen: 24 89.32.64.0/24 maxlen: 24 89.32.65.0/24 maxlen: 24 89.32.66.0/24 maxlen: 24 89.32.67.0/24 maxlen: 24 158.255.239.0/24 maxlen: 24 162.33.200.0/22 maxlen: 22 162.33.204.0/22 maxlen: 22 162.33.204.0/24 maxlen: 24 162.33.205.0/24 maxlen: 24 162.33.206.0/24 maxlen: 24 162.33.207.0/24 maxlen: 24 185.66.172.0/24 maxlen: 24 185.66.174.0/24 maxlen: 24 185.86.208.0/23 maxlen: 23 185.225.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:ab:46:a1:e7:1b:ff:fd:81:61:c3:1b:ac:2d:cd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Feb 3 13:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae837eee532b24126c842de8746ec27ecc890bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:17:52:63:d9:f3:73:f0:85:78:93:f3:94: dc:c1:45:69:35:e2:f5:87:35:a2:99:9b:92:95:f1: 1b:90:09:95:56:c4:50:15:c6:ff:60:86:ec:3b:f9: 93:f1:78:df:8a:24:b2:62:9f:94:91:c4:cc:de:a9: f7:c2:63:d6:56:9f:b6:50:18:5d:35:f6:df:05:c4: c2:19:c1:15:a3:36:ea:ba:82:6d:87:b8:c0:af:89: dc:82:b1:94:a2:2c:cd:f2:84:92:ff:24:ab:51:da: c6:c5:20:21:7a:bf:e9:7d:32:2e:7e:84:4d:50:4f: 7c:55:f6:8a:7d:69:6c:ea:0f:19:fa:48:27:49:27: 69:aa:48:64:fe:60:e5:8a:23:f4:9f:52:0d:c8:dd: 4a:0f:2b:63:eb:40:c9:e9:62:c6:7a:bd:93:ed:6f: 73:13:5c:da:ca:23:9d:4a:cb:c8:b3:a2:9e:fa:0b: 48:fe:fa:bd:a6:e2:5d:36:09:9a:ab:94:d4:3c:c2: de:95:c7:1a:05:d9:ef:67:52:d5:51:db:7a:b4:4c: ca:c2:2e:0d:68:97:a5:3f:8b:f8:8f:03:3c:b6:4d: d0:02:a4:8f:4c:82:5e:8a:51:94:80:5f:0d:7f:81: 60:f8:a8:45:56:f9:ef:89:a0:15:3f:96:85:aa:3a: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:7E:EE:53:2B:24:12:6C:84:2D:E8:74:6E:C2:7E:CC:89:0B:DC X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/roN-7lMrJBJshC3odG7CfsyJC9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.155.0/24 37.252.98.0/24 37.252.100.0/23 89.32.64.0/22 158.255.239.0/24 162.33.200.0/21 185.66.172.0/24 185.66.174.0/24 185.86.208.0/23 185.225.8.0/24 Signature Algorithm: sha256WithRSAEncryption 13:52:a4:1c:1c:b1:15:95:b5:15:30:b6:4e:64:c6:b5:53:86: a8:7e:4b:91:b6:a6:5d:7c:cf:c2:1e:3f:d5:11:32:07:6f:96: b7:ce:00:13:90:9c:ef:41:ab:40:7d:ac:c1:bc:1a:e6:7d:30: 2a:de:3d:51:da:32:2a:b7:e8:09:ea:27:f6:6e:c4:f1:88:2e: d8:41:ca:6c:54:77:a7:ba:b9:39:11:c8:bb:ad:1d:f3:84:25: 9d:b7:d7:c3:e7:73:61:79:8c:bc:23:f0:40:75:97:a5:e9:f0: 7c:23:a6:76:03:0f:ab:62:4a:a3:ed:eb:54:a3:c0:cc:06:88: 85:10:3f:9a:52:00:80:8c:68:8d:c9:d7:fd:69:f7:d1:ed:3f: e3:8c:1c:d0:de:9f:ec:46:43:c1:4c:58:56:04:8b:9b:0e:33: c7:ac:8b:06:f4:ee:02:7f:f6:af:5a:7a:dd:d3:af:f1:32:f0: da:1d:2e:e8:2b:2e:d3:56:72:77:5f:68:6a:50:de:12:40:3f: 06:b5:22:e8:8d:77:91:42:0a:ae:ef:21:c0:f1:6a:fb:c5:57: e3:da:21:50:01:2e:b2:3f:e8:8c:0b:08:ae:05:62:ab:b5:b7: 43:db:5a:25:51:63:95:12:93:e4:73:e2:df:d7:7f:15:43:ec: 1f:07:98:2b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZwjq0ah5xv//YFhwxusLc0lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMjAzMTMyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTgzN2VlZTUzMmIyNDEyNmM4NDJkZTg3NDZlYzI3ZWNjODkwYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0cXUmPZ83PwhXiT85TcwUVpNeL1 hzWimZuSlfEbkAmVVsRQFcb/YIbsO/mT8XjfiiSyYp+UkcTM3qn3wmPWVp+2UBhd NfbfBcTCGcEVozbquoJth7jAr4ncgrGUoizN8oSS/ySrUdrGxSAher/pfTIufoRN UE98VfaKfWls6g8Z+kgnSSdpqkhk/mDliiP0n1INyN1KDytj60DJ6WLGer2T7W9z E1zayiOdSsvIs6Ke+gtI/vq9puJdNgmaq5TUPMLelccaBdnvZ1LVUdt6tEzKwi4N aJelP4v4jwM8tk3QAqSPTIJeilGUgF8Nf4Fg+KhFVvnviaAVP5aFqjqxzQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFK6Dfu5TKyQSbIQt6HRuwn7MiQvcMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvcm9OLTdsTXJKQkpzaEMzb2RHN0Nmc3lKQzl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAH9abAwQA JfxiAwQBJfxkAwQCWSBAAwQAnv/vAwQDoiHIAwQAuUKsAwQAuUKuAwQBuVbQAwQA ueEIMA0GCSqGSIb3DQEBCwUAA4IBAQATUqQcHLEVlbUVMLZOZMa1U4aofkuRtqZd fM/CHj/VETIHb5a3zgATkJzvQatAfazBvBrmfTAq3j1R2jIqt+gJ6if2bsTxiC7Y QcpsVHenurk5Eci7rR3zhCWdt9fD53NheYy8I/BAdZel6fB8I6Z2Aw+rYkqj7etU o8DMBoiFED+aUgCAjGiNydf9affR7T/jjBzQ3p/sRkPBTFhWBIubDjPHrIsG9O4C f/avWnrd06/xMvDaHS7oKy7TVnJ3X2hqUN4SQD8GtSLojXeRQgqu7yHA8Wr7xVfj 2iFQAS6yP+iMCwiuBWKrtbdD21olUWOVEpPkc+Lf138VQ+wfB5gr -----END CERTIFICATE-----Generated at Mon Feb 9 17:12:12 2026 by rpki-client