This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/9gEEDquNA3SkP49w2wBKJ5KETvI.roa File: 9gEEDquNA3SkP49w2wBKJ5KETvI.roa (raw, json) Hash identifier: mLPER7G8TzQqH3xHX1yC1D6W6cDqpxCPKNuOFfWJgII= Subject key identifier: F6:01:04:0E:AB:8D:03:74:A4:3F:8F:70:DB:00:4A:27:92:84:4E:F2 Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Certificate serial: 019B4825687BF51B7763C09B241337394BFD Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/9gEEDquNA3SkP49w2wBKJ5KETvI.roa Signing time: Mon 22 Dec 2025 22:19:29 +0000 ROA not before: Mon 22 Dec 2025 22:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210083 IP address blocks: 121.127.33.0/24 maxlen: 24 185.130.44.0/24 maxlen: 24 185.130.45.0/24 maxlen: 24 185.130.46.0/24 maxlen: 24 185.130.47.0/24 maxlen: 24 199.231.235.0/24 maxlen: 24 202.181.177.0/24 maxlen: 24 2a07:e00::/48 maxlen: 48 2a07:e00:a::/48 maxlen: 48 2a07:e00:b::/48 maxlen: 48 2a07:e00:c::/48 maxlen: 48 2a07:e00:ac::/48 maxlen: 48 2a07:e00:ad::/48 maxlen: 48 2a07:e00:bb::/48 maxlen: 48 2a07:e00:bc::/48 maxlen: 48 2a07:e00:d0::/44 maxlen: 48 2a07:e00:ff::/48 maxlen: 48 2a07:e00:19f::/48 maxlen: 48 2a07:e00:f9f9::/48 maxlen: 48 2a07:e01::/32 maxlen: 32 2a07:e02:41::/48 maxlen: 48 2a07:e02:a00::/40 maxlen: 40 2a07:e02:b00::/40 maxlen: 56 2a07:e02:baf::/48 maxlen: 48 2a07:e02:bee::/48 maxlen: 48 2a07:e02:1000::/36 maxlen: 40 2a07:e02:1000::/40 maxlen: 40 2a07:e03::/32 maxlen: 48 2a07:e04::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:25:68:7b:f5:1b:77:63:c0:9b:24:13:37:39:4b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Validity Not Before: Dec 22 22:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f601040eab8d0374a43f8f70db004a2792844ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:95:22:c0:64:5b:31:04:61:28:1f:3d:5e: c5:11:7e:5e:35:c1:d1:bb:e0:ea:c5:7f:d5:b7:68: 77:f2:bd:93:a3:16:6d:6f:09:20:f5:63:d5:b6:59: 3c:6d:61:d9:05:0f:f3:12:84:02:e6:c6:f9:6d:e3: 48:20:61:06:50:13:d4:46:93:22:a3:5a:a3:6b:63: 6a:5e:a1:85:1f:94:70:cb:96:4a:af:31:12:75:f6: 99:96:a7:a2:f2:45:9b:c0:32:d5:9e:98:69:01:b4: c7:23:ff:57:0c:42:c8:8e:55:85:94:e1:9a:ae:bc: 4d:e0:98:ed:3f:22:e5:26:08:88:bf:ef:d0:77:cb: 9b:13:54:18:fd:12:d9:86:bd:e2:fe:e9:13:79:bc: 3f:7b:9b:ee:86:73:e7:ec:4a:5c:4c:1c:22:7a:76: 8d:69:ac:61:c9:3b:a7:d4:da:e4:b5:fe:62:da:ce: df:04:ef:03:ee:2b:0d:e8:65:be:9b:b3:29:43:15: e5:33:dd:61:a0:b2:53:c1:4d:30:7e:ee:20:74:28: b3:23:79:fb:8e:ad:1d:db:c2:58:76:07:c3:21:ae: e4:86:e1:bf:a0:d7:2f:e1:ca:db:ea:3e:71:cb:9d: d4:bb:fb:6f:0e:55:e5:52:77:ad:d6:a4:76:16:76: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:01:04:0E:AB:8D:03:74:A4:3F:8F:70:DB:00:4A:27:92:84:4E:F2 X509v3 Authority Key Identifier: keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/9gEEDquNA3SkP49w2wBKJ5KETvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.127.33.0/24 185.130.44.0/22 199.231.235.0/24 202.181.177.0/24 IPv6: 2a07:e00::/48 2a07:e00:a::-2a07:e00:c:ffff:ffff:ffff:ffff:ffff 2a07:e00:ac::/47 2a07:e00:bb::-2a07:e00:bc:ffff:ffff:ffff:ffff:ffff 2a07:e00:d0::/44 2a07:e00:ff::/48 2a07:e00:19f::/48 2a07:e00:f9f9::/48 2a07:e01::/32 2a07:e02:41::/48 2a07:e02:a00::/39 2a07:e02:1000::/36 2a07:e03::-2a07:e04:fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ac:be:dc:91:41:f9:71:cc:d5:83:c4:27:c8:db:82:59:57:8d: 08:60:f1:5f:da:b4:37:98:90:be:69:c9:c7:1a:c3:b5:5d:2d: d3:f6:11:28:ff:5c:71:8c:bc:ef:3b:7a:e4:a9:50:5c:33:f4: 58:41:12:39:76:8c:4f:a5:af:a5:f2:ba:61:28:94:7b:d3:c1: 83:79:06:de:5a:26:00:81:ae:46:6b:bc:7c:86:8c:f1:00:6f: 3b:f0:e6:62:69:5d:77:44:88:e7:37:77:82:ed:30:be:f7:f5: 65:d4:39:cb:f3:fc:22:20:93:08:ee:5f:4a:72:c9:3d:9e:dc: 63:8e:7e:cf:e5:34:38:f5:ab:c5:d6:40:af:fa:2a:b1:eb:d3: 5f:72:65:90:6f:cc:ce:de:d5:8a:9e:60:40:d8:b9:29:5e:d7: 7e:78:17:f1:d3:14:e4:fb:ab:0c:63:d0:99:8e:5c:5a:91:cf: e7:9c:a9:a4:ed:b9:6d:44:c6:9b:55:b1:09:24:c5:a5:3a:92: 80:df:ae:61:34:92:c1:f8:79:28:03:94:00:bf:34:fb:ad:23: 80:12:cb:cf:91:1f:cc:85:c5:1e:07:ea:93:2d:7c:f3:d1:5b: b6:5e:48:3b:9f:01:57:58:96:f0:80:c0:75:a9:4a:1d:48:2e: b2:9a:f6:a7 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZtIJWh79Rt3Y8CbJBM3OUv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx ODA1MTYwHhcNMjUxMjIyMjIxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjAxMDQwZWFiOGQwMzc0YTQzZjhmNzBkYjAwNGEyNzkyODQ0ZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjqVIsBkWzEEYSgfPV7FEX5eNcHR u+DqxX/Vt2h38r2ToxZtbwkg9WPVtlk8bWHZBQ/zEoQC5sb5beNIIGEGUBPURpMi o1qja2NqXqGFH5Rwy5ZKrzESdfaZlqei8kWbwDLVnphpAbTHI/9XDELIjlWFlOGa rrxN4JjtPyLlJgiIv+/Qd8ubE1QY/RLZhr3i/ukTebw/e5vuhnPn7EpcTBwienaN aaxhyTun1Nrktf5i2s7fBO8D7isN6GW+m7MpQxXlM91hoLJTwU0wfu4gdCizI3n7 jq0d28JYdgfDIa7khuG/oNcv4crb6j5xy53Uu/tvDlXlUnet1qR2Fnby8QIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFPYBBA6rjQN0pD+PcNsASieShE7yMB8GA1UdIwQY MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt ZjFmODAyZTY2MTNiLzEvOWdFRURxdU5BM1NrUDQ5dzJ3QktKNUtFVHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTAeBAIAATAYAwQAeX8h AwQCuYIsAwQAx+frAwQAyrWxMIGWBAIAAjCBjwMHACoHDgAAADASAwcBKgcOAAAK AwcAKgcOAAAMAwcBKgcOAACsMBIDBwAqBw4AALsDBwAqBw4AALwDBwQqBw4AANAD BwAqBw4AAP8DBwAqBw4AAZ8DBwAqBw4A+fkDBQAqBw4BAwcAKgcOAgBBAwYBKgcO AgoDBgQqBw4CEDAPAwUAKgcOAwMGBCoHDgQAMA0GCSqGSIb3DQEBCwUAA4IBAQCs vtyRQflxzNWDxCfI24JZV40IYPFf2rQ3mJC+acnHGsO1XS3T9hEo/1xxjLzvO3rk qVBcM/RYQRI5doxPpa+l8rphKJR708GDeQbeWiYAga5Ga7x8hozxAG878OZiaV13 RIjnN3eC7TC+9/Vl1DnL8/wiIJMI7l9Kcsk9ntxjjn7P5TQ49avF1kCv+iqx69Nf cmWQb8zO3tWKnmBA2LkpXtd+eBfx0xTk+6sMY9CZjlxakc/nnKmk7bltRMabVbEJ JMWlOpKA365hNJLB+HkoA5QAvzT7rSOAEsvPkR/MhcUeB+qTLXzz0Vu2Xkg7nwFX WJbwgMB1qUodSC6ymvan -----END CERTIFICATE-----Generated at Fri Dec 26 21:06:19 2025 by rpki-client