This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa File: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (raw, json) Hash identifier: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c= Subject key identifier: 9F:13:FA:A1:5E:C5:16:EC:8A:4F:95:59:23:C2:EB:D1:2F:EF:DD:80 Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd Certificate serial: 019B7AC788A2C3523B51FA879D4EB55F233B Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25394 IP address blocks: 31.209.112.0/20 maxlen: 24 82.100.192.0/18 maxlen: 24 85.220.128.0/17 maxlen: 24 91.196.140.0/22 maxlen: 24 93.93.248.0/21 maxlen: 24 109.75.16.0/20 maxlen: 24 153.94.32.0/20 maxlen: 24 153.94.48.0/21 maxlen: 24 153.94.128.0/17 maxlen: 24 178.210.96.0/19 maxlen: 24 212.90.128.0/19 maxlen: 24 213.172.96.0/19 maxlen: 24 217.199.192.0/20 maxlen: 24 2001:1640::/32 maxlen: 48 2a00:4d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:88:a2:c3:52:3b:51:fa:87:9d:4e:b5:5f:23:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f13faa15ec516ec8a4f955923c2ebd12fefdd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f6:52:75:63:2c:97:58:c2:b3:eb:8e:3d:e6: 23:29:1e:87:4a:1e:e0:6d:fe:3f:35:e8:76:c8:be: c3:8a:bc:03:e1:88:af:bc:a0:bd:70:19:b8:d5:81: 4a:82:2a:be:f5:1a:83:ac:80:fe:27:58:37:8b:52: ef:c3:7b:cd:a4:8d:e2:21:d5:f4:a5:f7:03:0b:58: 5e:5b:45:72:74:56:54:8f:6a:e0:d6:5e:50:7b:d2: a5:75:60:bd:7b:4b:d1:ab:63:d9:c2:97:8a:04:d8: 00:d8:3f:74:98:fe:e8:7b:5b:69:d8:29:a2:ab:10: 10:ef:6b:b9:75:0c:a0:5e:5e:3f:25:2c:b3:33:42: e0:eb:14:62:4a:ac:16:18:d8:34:86:61:c0:31:e0: df:bf:41:6f:6a:a3:f7:b5:9c:a0:6d:27:fe:3f:95: e2:79:c2:a8:06:e3:b2:2f:22:32:da:d7:d8:21:0b: c3:c3:c8:74:bb:01:68:81:a6:97:4b:2e:6b:2e:8b: 60:66:6a:a9:42:60:8d:a8:5c:3e:eb:db:ab:ed:25: 11:14:32:90:9a:ce:68:a3:49:e0:60:4e:8c:9e:9b: 03:fa:a8:da:63:10:2d:89:de:a5:14:56:f9:21:6c: a5:dc:16:c0:74:fc:0b:46:fb:d8:67:c6:f8:0d:90: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:13:FA:A1:5E:C5:16:EC:8A:4F:95:59:23:C2:EB:D1:2F:EF:DD:80 X509v3 Authority Key Identifier: keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.112.0/20 82.100.192.0/18 85.220.128.0/17 91.196.140.0/22 93.93.248.0/21 109.75.16.0/20 153.94.32.0-153.94.55.255 153.94.128.0/17 178.210.96.0/19 212.90.128.0/19 213.172.96.0/19 217.199.192.0/20 IPv6: 2001:1640::/32 2a00:4d80::/32 Signature Algorithm: sha256WithRSAEncryption 7f:0c:b1:f7:cd:a1:18:79:37:ef:4c:2c:80:59:9a:5b:6d:09: 20:ad:3a:f8:e4:dd:d6:06:bf:5d:9b:0c:aa:31:b0:f2:f3:cb: e1:62:49:98:2b:40:db:da:f1:81:a0:9e:f5:b6:92:d8:8a:90: e5:7d:8e:b5:44:5d:c2:2e:57:b5:0a:a1:3b:ae:23:50:f5:84: af:60:46:7a:3f:9f:70:71:5a:e2:15:36:44:b0:b7:cb:f6:69: ee:65:95:18:f1:d2:96:fe:0d:1e:3f:50:0b:52:d3:e7:1f:c6: 82:2c:d3:ee:3f:6b:9c:48:71:5b:52:a9:b7:6b:31:f2:e3:cd: 78:e2:d4:c4:97:f6:93:47:02:62:e7:33:58:35:cd:2c:a5:88: e0:e1:bc:7a:cf:73:7f:61:fa:96:c2:15:ab:b3:79:b8:c3:63: 11:c6:6d:d7:e0:15:20:1e:30:20:d3:5b:47:ea:40:ff:07:0d: ec:3b:69:50:b5:ac:1b:18:ef:ca:1e:20:c5:88:14:f6:85:dc: fb:ec:05:2c:a2:53:48:20:44:7c:c8:d6:94:10:fe:e6:53:39: 2b:00:00:65:f5:49:96:3a:9d:2c:0a:f0:5d:23:2b:9d:9a:c4: 3d:2c:e6:6e:ba:d7:1a:d2:d5:85:be:63:f9:d4:c3:81:6d:7e: 45:47:51:21 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt6x4iiw1I7UfqHnU61XyM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi YWY1ZGQwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjEzZmFhMTVlYzUxNmVjOGE0Zjk1NTkyM2MyZWJkMTJmZWZkZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/ZSdWMsl1jCs+uOPeYjKR6HSh7g bf4/Neh2yL7DirwD4YivvKC9cBm41YFKgiq+9RqDrID+J1g3i1Lvw3vNpI3iIdX0 pfcDC1heW0VydFZUj2rg1l5Qe9KldWC9e0vRq2PZwpeKBNgA2D90mP7oe1tp2Cmi qxAQ72u5dQygXl4/JSyzM0Lg6xRiSqwWGNg0hmHAMeDfv0FvaqP3tZygbSf+P5Xi ecKoBuOyLyIy2tfYIQvDw8h0uwFogaaXSy5rLotgZmqpQmCNqFw+69ur7SURFDKQ ms5oo0ngYE6MnpsD+qjaYxAtid6lFFb5IWyl3BbAdPwLRvvYZ8b4DZAk3wIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFJ8T+qFexRbsik+VWSPC69Ev792AMB8GA1UdIwQY MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt YjBjMWUzMzA0ZTc0LzEvbnhQNm9WN0ZGdXlLVDVWWkk4THIwU192M1lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0 LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBWBAIAATBQAwQEH9FwAwQG UmTAAwQHVdyAAwQCW8SMAwQDXV34AwQEbUsQMAwDBAWZXiADBAOZXjADBAeZXoAD BAWy0mADBAXUWoADBAXVrGADBATZx8AwFAQCAAIwDgMFACABFkADBQAqAE2AMA0G CSqGSIb3DQEBCwUAA4IBAQB/DLH3zaEYeTfvTCyAWZpbbQkgrTr45N3WBr9dmwyq MbDy88vhYkmYK0Db2vGBoJ71tpLYipDlfY61RF3CLle1CqE7riNQ9YSvYEZ6P59w cVriFTZEsLfL9mnuZZUY8dKW/g0eP1ALUtPnH8aCLNPuP2ucSHFbUqm3azHy4814 4tTEl/aTRwJi5zNYNc0spYjg4bx6z3N/YfqWwhWrs3m4w2MRxm3X4BUgHjAg01tH 6kD/Bw3sO2lQtawbGO/KHiDFiBT2hdz77AUsolNIIER8yNaUEP7mUzkrAABl9UmW Op0sCvBdIyudmsQ9LOZuutca0tWFvmP51MOBbX5FR1Eh -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:13 2026 by rpki-client