This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/aB9NKMV29y8_T8JeS_breMWkMmo.roa File: aB9NKMV29y8_T8JeS_breMWkMmo.roa (raw, json) Hash identifier: qe+/vuMlZ2Ceb+GJWB8QR589Acnwys7CbVY0u0KNuOs= Subject key identifier: 68:1F:4D:28:C5:76:F7:2F:3F:4F:C2:5E:4B:F6:EB:78:C5:A4:32:6A Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447 Certificate serial: 019B7CED0099E6DCAD4AAB4411B4C7CCDB27 Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/aB9NKMV29y8_T8JeS_breMWkMmo.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50597 IP address blocks: 37.98.224.0/21 maxlen: 21 37.98.224.0/24 maxlen: 24 37.98.225.0/24 maxlen: 24 37.98.226.0/24 maxlen: 24 37.98.227.0/24 maxlen: 24 37.98.228.0/24 maxlen: 24 37.98.229.0/24 maxlen: 24 37.98.230.0/24 maxlen: 24 37.98.231.0/24 maxlen: 24 85.113.90.0/23 maxlen: 23 85.113.90.0/24 maxlen: 24 85.113.91.0/24 maxlen: 24 85.194.196.0/22 maxlen: 22 85.194.196.0/24 maxlen: 24 85.194.197.0/24 maxlen: 24 85.194.198.0/24 maxlen: 24 85.194.199.0/24 maxlen: 24 109.205.112.0/21 maxlen: 24 185.76.32.0/22 maxlen: 22 185.76.32.0/24 maxlen: 24 185.76.33.0/24 maxlen: 24 185.76.34.0/24 maxlen: 24 185.76.35.0/24 maxlen: 24 2a05:55c0::/29 maxlen: 29 2a05:55c1:1::/48 maxlen: 48 2a05:55c1:2::/48 maxlen: 48 2a05:55c1:3::/48 maxlen: 48 2a05:55c1:4::/48 maxlen: 48 2a05:55c1:5::/48 maxlen: 48 2a05:55c1:6::/48 maxlen: 48 2a05:55c1:7::/48 maxlen: 48 2a05:55c1:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:00:99:e6:dc:ad:4a:ab:44:11:b4:c7:cc:db:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf760c05773c15d73676450344668fefb723447 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=681f4d28c576f72f3f4fc25e4bf6eb78c5a4326a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:4b:75:52:45:0e:85:52:fb:14:8b:6b:94: 67:92:9a:3e:f2:70:fb:5c:59:52:cb:54:32:8a:4a: d5:6f:b2:6c:f9:6a:6f:f0:ad:45:90:1c:5a:42:66: 88:c7:3e:dc:1c:61:2a:c4:e8:60:62:3f:11:ce:31: a9:47:ea:8c:8c:43:e7:47:c7:2a:05:0c:98:67:e6: f7:5b:37:ca:a4:a3:72:d8:b0:81:ef:7d:07:dd:42: 3d:5a:01:1a:f2:63:40:55:c9:6b:92:62:2c:2c:81: d8:8b:20:8e:62:88:24:2f:44:2d:23:80:44:a6:5e: 9f:35:50:5e:ab:05:c8:8a:e0:10:6e:b0:96:41:25: c1:68:c2:17:ac:e1:0f:e5:83:3b:75:d9:4c:7f:b2: 24:b6:57:73:67:dd:a3:18:a6:9a:c1:70:1e:cd:47: 48:03:e1:58:d8:ad:69:d5:6a:d8:29:0a:dc:e5:32: 14:0f:09:db:78:42:46:93:ff:d5:65:bc:db:85:98: be:82:ce:c8:b3:48:30:e1:d4:f2:46:56:7e:da:59: cb:a5:ea:d5:5d:05:8f:e2:b2:4d:82:78:59:a9:9a: 5f:72:ee:3d:94:20:d3:50:17:31:39:af:b5:fb:d3: 14:df:ef:3e:ed:b1:a4:ca:ad:e8:9e:e5:09:e4:31: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1F:4D:28:C5:76:F7:2F:3F:4F:C2:5E:4B:F6:EB:78:C5:A4:32:6A X509v3 Authority Key Identifier: keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/aB9NKMV29y8_T8JeS_breMWkMmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.224.0/21 85.113.90.0/23 85.194.196.0/22 109.205.112.0/21 185.76.32.0/22 IPv6: 2a05:55c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:fa:97:b9:dc:92:f9:e4:bb:76:9b:0c:d8:79:6d:ac:9d:9f: 77:f1:47:26:64:e4:b6:bd:30:05:9f:26:43:ba:4d:64:ef:e7: 97:c6:2a:68:d5:9c:65:9a:2a:b9:bb:57:f8:52:7e:85:7d:9f: 08:44:ef:b5:28:c1:40:ea:3e:79:ba:7e:7d:22:de:9a:d8:7f: 7e:07:cb:40:57:41:7c:bf:10:d2:a5:6d:df:e7:62:a4:27:49: a9:fe:ec:fd:e6:19:62:1d:38:c0:54:05:c1:76:15:dd:c3:30: e9:a6:33:30:90:e0:98:9a:ba:76:f8:69:aa:36:90:7a:79:67: 42:e9:44:eb:2f:ae:02:e3:b1:da:bc:ce:a1:45:21:68:eb:4d: be:38:1d:fe:8c:16:2b:63:ae:54:17:15:e9:80:15:36:dd:af: 09:a3:e7:4b:95:6d:90:18:fd:d8:89:ce:1c:fc:58:4e:af:f3: 2c:7c:10:25:52:94:f5:70:a1:9f:a4:0e:d0:2e:42:c3:3d:0c: fd:c5:96:d8:12:06:c7:3c:15:16:ba:a7:23:dd:f5:14:9a:99: 38:26:02:54:78:98:fe:64:6f:05:4a:b2:3e:6f:c9:20:47:85: 97:eb:9a:2b:48:55:95:39:51:73:2d:eb:b3:3c:df:cb:f0:fb: 09:c3:c5:40 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt87QCZ5tytSqtEEbTHzNsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjc2MGMwNTc3M2MxNWQ3MzY3NjQ1MDM0NDY2OGZlZmI3 MjM0NDcwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODFmNGQyOGM1NzZmNzJmM2Y0ZmMyNWU0YmY2ZWI3OGM1YTQzMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotxLdVJFDoVS+xSLa5Rnkpo+8nD7 XFlSy1QyikrVb7Js+Wpv8K1FkBxaQmaIxz7cHGEqxOhgYj8RzjGpR+qMjEPnR8cq BQyYZ+b3WzfKpKNy2LCB730H3UI9WgEa8mNAVclrkmIsLIHYiyCOYogkL0QtI4BE pl6fNVBeqwXIiuAQbrCWQSXBaMIXrOEP5YM7ddlMf7IktldzZ92jGKaawXAezUdI A+FY2K1p1WrYKQrc5TIUDwnbeEJGk//VZbzbhZi+gs7Is0gw4dTyRlZ+2lnLperV XQWP4rJNgnhZqZpfcu49lCDTUBcxOa+1+9MU3+8+7bGkyq3onuUJ5DHMZwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFGgfTSjFdvcvP0/CXkv263jFpDJqMB8GA1UdIwQY MBaAFOv3YMBXc8Fdc2dkUDRGaP77cjRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYt NDkwOTg4OTdlZTRhLzEvYUI5TktNVjI5eThfVDhKZVNfYnJlTVdrTW1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYtNDkwOTg4OTdlZTRh LzEvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDJWLgAwQB VXFaAwQCVcLEAwQDbc1wAwQCuUwgMA0EAgACMAcDBQMqBVXAMA0GCSqGSIb3DQEB CwUAA4IBAQBS+pe53JL55Lt2mwzYeW2snZ938UcmZOS2vTAFnyZDuk1k7+eXxipo 1Zxlmiq5u1f4Un6FfZ8IRO+1KMFA6j55un59It6a2H9+B8tAV0F8vxDSpW3f52Kk J0mp/uz95hliHTjAVAXBdhXdwzDppjMwkOCYmrp2+GmqNpB6eWdC6UTrL64C47Ha vM6hRSFo602+OB3+jBYrY65UFxXpgBU23a8Jo+dLlW2QGP3Yic4c/FhOr/MsfBAl UpT1cKGfpA7QLkLDPQz9xZbYEgbHPBUWuqcj3fUUmpk4JgJUeJj+ZG8FSrI+b8kg R4WX65orSFWVOVFzLeuzPN/L8PsJw8VA -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:11 2026 by rpki-client