This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/kuAZ8COOrRF7D7fGL9v85feX7sY.roa File: kuAZ8COOrRF7D7fGL9v85feX7sY.roa (raw, json) Hash identifier: MeqT2suPhasDZh73lRt2kV/r/fxAtR5VksxEngVFI8Q= Subject key identifier: 92:E0:19:F0:23:8E:AD:11:7B:0F:B7:C6:2F:DB:FC:E5:F7:97:EE:C6 Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Certificate serial: 019B7AC792F180BF766333B7975C519637FE Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/kuAZ8COOrRF7D7fGL9v85feX7sY.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 31.12.76.0/23 maxlen: 32 31.12.78.0/23 maxlen: 32 46.149.160.0/22 maxlen: 32 80.240.98.0/23 maxlen: 32 83.229.66.0/24 maxlen: 32 103.14.104.0/22 maxlen: 32 185.18.40.0/22 maxlen: 32 185.51.23.0/24 maxlen: 32 185.254.104.0/22 maxlen: 32 193.32.96.0/23 maxlen: 32 193.32.98.0/23 maxlen: 32 193.47.56.0/22 maxlen: 32 194.99.60.0/23 maxlen: 32 194.99.62.0/23 maxlen: 32 195.216.128.0/22 maxlen: 32 212.103.56.0/22 maxlen: 32 217.194.136.0/23 maxlen: 32 217.194.136.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:92:f1:80:bf:76:63:33:b7:97:5c:51:96:37:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92e019f0238ead117b0fb7c62fdbfce5f797eec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:c1:20:de:04:77:82:47:96:8c:a7:13:c0: a2:56:54:78:75:ab:b1:30:40:8f:3d:fa:00:6d:b0: 61:69:06:bd:f2:02:3f:35:02:e8:01:8b:22:43:8b: ba:cd:05:e7:9f:9e:30:c9:fa:e3:94:96:49:29:0c: 84:b6:9b:b7:12:08:1b:26:ac:a6:49:07:ed:4f:39: 21:8c:3b:d5:35:85:c3:e9:84:fc:16:6c:b0:ac:35: 25:35:52:90:92:98:0f:2f:f4:f3:27:81:77:65:f2: ee:aa:79:99:80:90:a0:52:71:87:b7:0b:38:9e:df: 7e:00:e4:42:12:e4:4d:b2:4e:04:b2:07:5b:9c:fd: 4e:17:9f:d8:ae:61:49:bb:92:3a:73:dd:dd:e7:83: 0b:0d:14:27:f5:47:92:b2:02:3e:4d:95:3e:77:ce: 2b:7f:2e:66:9b:64:b5:55:4e:bb:87:fd:2c:bd:1d: e7:4a:b7:62:65:5a:3f:30:24:f8:ce:9f:c0:63:05: 5a:26:25:43:3d:b3:a3:c6:c2:55:50:61:e9:69:b6: ba:1e:9b:34:09:4b:54:48:16:94:11:38:17:1c:1c: c4:ac:ef:3f:87:96:14:f2:ef:b7:9a:70:6f:f8:24: af:36:7b:55:96:44:59:e4:d7:88:2c:55:81:05:1a: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:19:F0:23:8E:AD:11:7B:0F:B7:C6:2F:DB:FC:E5:F7:97:EE:C6 X509v3 Authority Key Identifier: keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/kuAZ8COOrRF7D7fGL9v85feX7sY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.12.76.0/22 46.149.160.0/22 80.240.98.0/23 83.229.66.0/24 103.14.104.0/22 185.18.40.0/22 185.51.23.0/24 185.254.104.0/22 193.32.96.0/22 193.47.56.0/22 194.99.60.0/22 195.216.128.0/22 212.103.56.0/22 217.194.136.0/23 Signature Algorithm: sha256WithRSAEncryption 72:74:15:17:3a:95:de:b0:26:c9:6c:08:8a:a4:78:3c:d7:61: eb:a1:08:c1:1c:e1:80:b1:16:8f:93:5a:48:48:48:5c:1b:f1: 3c:32:90:8d:b1:0f:12:21:9a:e3:0b:5b:d8:62:77:a3:0f:7a: 7e:09:bf:be:31:8c:9d:6f:31:55:6d:bc:18:29:c4:07:23:d7: fe:4f:0d:50:ad:d4:8e:03:27:c7:93:87:e3:43:bd:2d:4c:d9: cf:07:99:80:eb:57:30:7a:97:16:11:5d:35:0b:ba:14:2a:13: 22:7e:e2:93:f7:c5:dd:12:cc:68:bb:30:9b:d4:e3:57:76:39: 2b:d1:31:4f:f3:9c:80:e8:5c:30:20:04:d0:05:84:a8:35:48: 96:56:40:67:e2:12:41:eb:eb:62:63:af:ae:10:cf:bf:5e:39: 9d:02:1f:6c:c8:24:36:cd:da:bb:91:40:41:9d:0b:7f:81:3f: 76:c0:2b:40:ce:af:ea:25:ec:bd:52:ba:d8:15:31:d3:aa:d4: 06:86:7d:6b:51:0d:2f:a4:e1:7c:c8:5e:59:f0:8e:f9:5d:1d: 30:c8:ce:da:74:cb:93:c7:c2:d9:eb:0b:08:4f:fb:91:7e:9f: 02:97:b9:02:87:46:42:33:f3:82:a7:13:5b:11:8e:fd:ca:0e: 3d:7c:26:8a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt6x5LxgL92YzO3l1xRljf+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz MmVhOWIwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmUwMTlmMDIzOGVhZDExN2IwZmI3YzYyZmRiZmNlNWY3OTdlZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBjBIN4Ed4JHloynE8CiVlR4daux MECPPfoAbbBhaQa98gI/NQLoAYsiQ4u6zQXnn54wyfrjlJZJKQyEtpu3EggbJqym SQftTzkhjDvVNYXD6YT8FmywrDUlNVKQkpgPL/TzJ4F3ZfLuqnmZgJCgUnGHtws4 nt9+AORCEuRNsk4EsgdbnP1OF5/YrmFJu5I6c93d54MLDRQn9UeSsgI+TZU+d84r fy5mm2S1VU67h/0svR3nSrdiZVo/MCT4zp/AYwVaJiVDPbOjxsJVUGHpaba6Hps0 CUtUSBaUETgXHBzErO8/h5YU8u+3mnBv+CSvNntVlkRZ5NeILFWBBRoRDwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFJLgGfAjjq0Rew+3xi/b/OX3l+7GMB8GA1UdIwQY MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt ZmRhMDExZTVjOTcyLzEva3VBWjhDT09yUkY3RDdmR0w5djg1ZmVYN3NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCHwxMAwQC LpWgAwQBUPBiAwQAU+VCAwQCZw5oAwQCuRIoAwQAuTMXAwQCuf5oAwQCwSBgAwQC wS84AwQCwmM8AwQCw9iAAwQC1Gc4AwQB2cKIMA0GCSqGSIb3DQEBCwUAA4IBAQBy dBUXOpXesCbJbAiKpHg812HroQjBHOGAsRaPk1pISEhcG/E8MpCNsQ8SIZrjC1vY YnejD3p+Cb++MYydbzFVbbwYKcQHI9f+Tw1QrdSOAyfHk4fjQ70tTNnPB5mA61cw epcWEV01C7oUKhMifuKT98XdEsxouzCb1ONXdjkr0TFP85yA6FwwIATQBYSoNUiW VkBn4hJB6+tiY6+uEM+/XjmdAh9syCQ2zdq7kUBBnQt/gT92wCtAzq/qJey9UrrY FTHTqtQGhn1rUQ0vpOF8yF5Z8I75XR0wyM7adMuTx8LZ6wsIT/uRfp8Cl7kCh0ZC M/OCpxNbEY79yg49fCaK -----END CERTIFICATE-----Generated at Sun Jan 18 10:46:45 2026 by rpki-client