This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/P_Lt8AY8fM5LppruerzO34vRqLY.roa File: P_Lt8AY8fM5LppruerzO34vRqLY.roa (raw, json) Hash identifier: zp6zmtIN8JWsWA0pcCGjGihKqrwJVCtW0jabbQoyYms= Subject key identifier: 3F:F2:ED:F0:06:3C:7C:CE:4B:A6:9A:EE:7A:BC:CE:DF:8B:D1:A8:B6 Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8 Certificate serial: 019B7D5D0AB4D55C8C5BACE0FD5F5AB7E861 Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/P_Lt8AY8fM5LppruerzO34vRqLY.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56823 IP address blocks: 31.134.208.0/21 maxlen: 21 31.134.209.0/24 maxlen: 24 31.134.210.0/24 maxlen: 24 31.134.211.0/24 maxlen: 24 31.134.212.0/24 maxlen: 24 31.134.213.0/24 maxlen: 24 31.134.214.0/24 maxlen: 24 31.134.215.0/24 maxlen: 24 176.109.168.0/21 maxlen: 21 176.109.168.0/24 maxlen: 24 176.109.169.0/24 maxlen: 24 176.109.170.0/24 maxlen: 24 176.109.171.0/24 maxlen: 24 176.109.172.0/24 maxlen: 24 176.109.173.0/24 maxlen: 24 176.109.174.0/24 maxlen: 24 176.109.175.0/24 maxlen: 24 2001:67c:1378::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0a:b4:d5:5c:8c:5b:ac:e0:fd:5f:5a:b7:e8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ff2edf0063c7cce4ba69aee7abccedf8bd1a8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:0f:f6:e2:c2:21:2f:d5:87:71:e8:98:51: 7e:8f:de:d3:59:4b:67:b9:ff:28:7e:c8:78:f7:dc: 7b:9f:89:47:c7:4b:5b:8b:68:87:2f:7d:21:68:05: 2b:3b:5c:a3:6e:24:17:51:3c:26:d3:9a:db:06:d7: e6:ad:35:28:bf:20:2f:c7:87:d0:89:0a:d7:0e:6b: ab:ad:21:a0:09:29:e8:70:ae:f1:0a:c8:a3:c0:9b: 41:92:04:4f:b3:01:20:36:32:3a:bc:09:0e:50:1c: 36:a9:e9:6b:a8:8b:a3:ad:a4:85:ba:5b:04:8f:ad: cf:03:7f:bc:e8:23:87:57:08:80:b8:30:05:95:24: 38:b0:c9:7c:3e:9a:2f:8b:38:85:33:69:11:8f:a8: 9e:39:19:cc:a6:ee:89:4f:b9:48:65:c2:e9:bd:40: 2b:13:69:4a:a4:a4:94:0a:4b:a8:78:3a:65:b0:a8: 91:75:35:60:3f:c3:95:bb:04:5e:78:2d:06:eb:b0: 7c:22:0a:90:e9:f9:6e:a8:6f:4a:78:a9:ef:f2:99: 6f:7b:fe:94:3d:bd:7a:cf:61:c9:a2:ad:08:60:c8: 5c:e1:5d:53:7b:3a:7d:a5:13:a1:de:9b:81:a2:d5: 6b:26:1c:b7:3a:d5:e0:38:73:29:00:f5:3b:7a:f5: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F2:ED:F0:06:3C:7C:CE:4B:A6:9A:EE:7A:BC:CE:DF:8B:D1:A8:B6 X509v3 Authority Key Identifier: keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/P_Lt8AY8fM5LppruerzO34vRqLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.208.0/21 176.109.168.0/21 IPv6: 2001:67c:1378::/48 Signature Algorithm: sha256WithRSAEncryption 67:59:be:b9:89:de:b0:7b:fc:4e:09:e4:86:05:1b:a3:63:2c: cc:86:42:a4:60:28:76:87:6d:b7:6a:aa:5e:36:0f:c8:68:57: 09:59:b1:95:1e:46:1e:32:f6:bb:5c:50:a9:c3:47:b3:0a:6b: 01:83:57:a2:c5:33:12:e5:0e:b7:07:a1:20:ec:a5:ac:bd:94: 19:02:e0:37:42:30:59:6b:9f:82:f9:b6:6d:a0:59:23:3b:0d: e0:cc:39:2a:06:81:c4:41:f9:bb:5d:0e:b1:7b:5d:8f:66:fa: ab:85:6c:ac:09:9e:3f:4a:0d:0f:02:c7:47:62:7a:8b:33:bf: bd:dc:ca:e8:a3:f5:a8:33:17:70:d8:01:8c:4f:96:00:86:6f: f2:69:df:df:84:e2:8a:21:28:fc:10:74:e4:f9:94:f3:e6:40: de:17:56:60:61:e0:ee:41:f8:99:84:d0:6e:b2:e5:9d:b2:ba: 00:bb:4f:65:cc:3f:4b:7d:6b:e3:41:4f:b5:40:8c:3a:4c:d1: 46:93:4d:a7:4c:38:5d:ab:36:ae:fd:24:49:0e:9d:e7:94:29: 1b:a0:3f:de:19:d1:c6:b2:e3:59:31:95:29:32:49:14:42:07: 31:1a:59:8f:09:a0:1f:20:ca:11:02:ba:fb:ec:85:a3:b1:f8: c4:a8:42:cf -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XQq01VyMW6zg/V9at+hhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTAxMDBmM2NjNzg3ZDYzMTUzMDNjYjdmYzg4ZDllMjVl NTZlYTgwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmYyZWRmMDA2M2M3Y2NlNGJhNjlhZWU3YWJjY2VkZjhiZDFhOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAgP9uLCIS/Vh3HomFF+j97TWUtn uf8ofsh499x7n4lHx0tbi2iHL30haAUrO1yjbiQXUTwm05rbBtfmrTUovyAvx4fQ iQrXDmurrSGgCSnocK7xCsijwJtBkgRPswEgNjI6vAkOUBw2qelrqIujraSFulsE j63PA3+86COHVwiAuDAFlSQ4sMl8PpoviziFM2kRj6ieORnMpu6JT7lIZcLpvUAr E2lKpKSUCkuoeDplsKiRdTVgP8OVuwReeC0G67B8IgqQ6fluqG9KeKnv8plve/6U Pb16z2HJoq0IYMhc4V1Tezp9pROh3puBotVrJhy3OtXgOHMpAPU7evWUowIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFD/y7fAGPHzOS6aa7nq8zt+L0ai2MB8GA1UdIwQY MBaAFJEQEA88x4fWMVMDy3/IjZ4l5W6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAt MGUwMzc3ZDRlNmQ2LzEvUF9MdDhBWThmTTVMcHBydWVyek8zNHZScUxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAtMGUwMzc3ZDRlNmQ2 LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDH4bQAwQD sG2oMA8EAgACMAkDBwAgAQZ8E3gwDQYJKoZIhvcNAQELBQADggEBAGdZvrmJ3rB7 /E4J5IYFG6NjLMyGQqRgKHaHbbdqql42D8hoVwlZsZUeRh4y9rtcUKnDR7MKawGD V6LFMxLlDrcHoSDspay9lBkC4DdCMFlrn4L5tm2gWSM7DeDMOSoGgcRB+btdDrF7 XY9m+quFbKwJnj9KDQ8Cx0dieoszv73cyuij9agzF3DYAYxPlgCGb/Jp39+E4ooh KPwQdOT5lPPmQN4XVmBh4O5B+JmE0G6y5Z2yugC7T2XMP0t9a+NBT7VAjDpM0UaT TadMOF2rNq79JEkOneeUKRugP94Z0cay41kxlSkySRRCBzEaWY8JoB8gyhECuvvs haOx+MSoQs8= -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:59 2026 by rpki-client