This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/3psKaSY7CT6URaeruLUFwZkMcnU.roa File: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (raw, json) Hash identifier: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg= Subject key identifier: DE:9B:0A:69:26:3B:09:3E:94:45:A7:AB:B8:B5:05:C1:99:0C:72:75 Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912 Certificate serial: 019B7CEDDB9CBB5B0FC7E22A5877E6A93E13 Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/3psKaSY7CT6URaeruLUFwZkMcnU.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49033 IP address blocks: 94.46.216.0/22 maxlen: 24 94.46.216.0/23 maxlen: 24 94.46.218.0/23 maxlen: 23 103.104.60.0/22 maxlen: 24 113.212.72.0/22 maxlen: 24 185.91.92.0/22 maxlen: 24 185.91.92.0/23 maxlen: 23 185.91.94.0/23 maxlen: 23 185.116.144.0/22 maxlen: 24 185.116.144.0/24 maxlen: 24 185.166.88.0/22 maxlen: 22 185.166.88.0/24 maxlen: 24 185.166.89.0/24 maxlen: 24 185.166.90.0/23 maxlen: 24 185.166.90.0/24 maxlen: 24 185.166.91.0/24 maxlen: 24 185.171.48.0/22 maxlen: 24 185.171.48.0/23 maxlen: 23 185.171.50.0/23 maxlen: 23 185.232.160.0/22 maxlen: 24 185.232.163.0/24 maxlen: 24 185.238.108.0/22 maxlen: 24 185.238.108.0/23 maxlen: 23 185.238.110.0/23 maxlen: 23 204.8.80.0/22 maxlen: 24 204.8.80.0/23 maxlen: 23 204.8.82.0/23 maxlen: 23 2a0f:dcc0::/29 maxlen: 48 2a0f:ddc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:db:9c:bb:5b:0f:c7:e2:2a:58:77:e6:a9:3e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de9b0a69263b093e9445a7abb8b505c1990c7275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:81:f7:7c:fe:50:5c:f3:0f:9d:c1:d6:af: 49:a7:e5:32:6a:e5:89:26:f3:05:5d:98:b3:28:a2: cd:a6:e0:8d:f3:4d:0c:03:62:4b:2e:82:da:b9:cc: 85:37:14:6f:fd:7e:a6:ac:d0:e5:6b:cb:8e:70:8d: 85:a9:14:eb:31:bf:78:a1:1b:b8:eb:e9:3f:73:78: a4:ed:0b:7a:c4:17:b8:7d:b1:fe:ff:72:9e:36:87: 01:41:10:53:fc:c0:6f:4d:6f:cf:23:05:29:24:f1: 1a:ca:57:3a:4d:3e:b5:87:fe:d4:85:93:b2:2c:8d: ea:fb:f1:82:34:51:21:f8:1d:76:e8:68:7f:03:a0: 4f:af:19:c7:b0:be:d8:4c:65:b8:30:00:aa:8e:ef: 0b:4d:2b:cb:f8:e3:79:8f:12:64:98:da:24:a4:00: d8:f4:b6:a1:8e:a2:cd:19:a9:82:97:6d:26:3a:8c: db:1e:70:ca:43:98:8f:4b:6d:f3:bf:1a:b8:ba:e5: 94:fb:9a:87:d7:63:e3:50:11:2c:f4:eb:0c:b5:fe: 32:81:24:6f:35:09:47:55:92:d3:17:d6:0f:45:fb: 3a:62:b0:16:69:db:81:e6:aa:f9:60:95:4e:5f:66: 94:ce:95:88:34:ac:d7:da:8b:e6:72:60:71:23:28: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9B:0A:69:26:3B:09:3E:94:45:A7:AB:B8:B5:05:C1:99:0C:72:75 X509v3 Authority Key Identifier: keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/3psKaSY7CT6URaeruLUFwZkMcnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.46.216.0/22 103.104.60.0/22 113.212.72.0/22 185.91.92.0/22 185.116.144.0/22 185.166.88.0/22 185.171.48.0/22 185.232.160.0/22 185.238.108.0/22 204.8.80.0/22 IPv6: 2a0f:dcc0::/29 2a0f:ddc0::/29 Signature Algorithm: sha256WithRSAEncryption aa:da:56:05:01:a3:9c:19:f8:3e:cc:f0:15:70:d8:b8:d8:a7: 7e:dd:ef:84:80:25:23:5a:09:64:f4:16:2d:97:a1:af:18:8f: d0:f0:6f:00:50:7f:9e:cb:a5:6a:e3:51:92:3d:fd:fa:a7:21: 59:b9:be:73:ba:c6:18:9a:1b:98:95:af:85:61:c6:14:ae:70: 76:26:5d:09:59:b4:7c:c6:da:0a:57:cc:87:02:5a:0f:3f:80: fc:dc:f8:34:0d:80:35:fa:b1:cb:e6:bc:78:22:5f:67:6b:b1: 8b:8a:68:bb:b4:c2:85:24:cd:e7:70:d8:74:db:ed:03:e2:6b: f0:6d:0e:cb:6e:35:89:6a:1e:27:19:82:fd:84:bc:37:35:90: dc:95:ae:a5:bd:cb:10:ba:00:17:2a:21:46:51:b5:1f:a0:4e: cb:95:15:f0:63:4b:28:0d:35:a5:7e:93:b9:03:06:58:83:53: 77:51:a2:3a:e6:80:59:d1:9f:84:0d:e7:ac:74:00:32:d5:10: f0:77:1f:31:45:60:79:64:ea:08:9d:a7:9c:ab:f3:ec:9b:7a: c5:13:79:be:1b:57:9a:f9:8d:a3:5d:07:60:d1:a3:19:e7:92: 3d:5d:1a:8d:54:09:c0:15:8e:b2:1b:ce:7d:ae:f8:24:b9:31: 92:eb:31:6b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt87ducu1sPx+IqWHfmqT4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi NDM5MTIwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTliMGE2OTI2M2IwOTNlOTQ0NWE3YWJiOGI1MDVjMTk5MGM3Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/CB93z+UFzzD53B1q9Jp+UyauWJ JvMFXZizKKLNpuCN800MA2JLLoLaucyFNxRv/X6mrNDla8uOcI2FqRTrMb94oRu4 6+k/c3ik7Qt6xBe4fbH+/3KeNocBQRBT/MBvTW/PIwUpJPEaylc6TT61h/7UhZOy LI3q+/GCNFEh+B126Gh/A6BPrxnHsL7YTGW4MACqju8LTSvL+ON5jxJkmNokpADY 9LahjqLNGamCl20mOozbHnDKQ5iPS23zvxq4uuWU+5qH12PjUBEs9OsMtf4ygSRv NQlHVZLTF9YPRfs6YrAWaduB5qr5YJVOX2aUzpWINKzX2ovmcmBxIyiC3wIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFN6bCmkmOwk+lEWnq7i1BcGZDHJ1MB8GA1UdIwQY MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt MmQ5MWNmZDdhYWY0LzEvM3BzS2FTWTdDVDZVUmFlcnVMVUZ3WmtNY25VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0 LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQCXi7YAwQC Z2g8AwQCcdRIAwQCuVtcAwQCuXSQAwQCuaZYAwQCuaswAwQCueigAwQCue5sAwQC zAhQMBQEAgACMA4DBQMqD9zAAwUDKg/dwDANBgkqhkiG9w0BAQsFAAOCAQEAqtpW BQGjnBn4PszwFXDYuNinft3vhIAlI1oJZPQWLZehrxiP0PBvAFB/nsulauNRkj39 +qchWbm+c7rGGJobmJWvhWHGFK5wdiZdCVm0fMbaClfMhwJaDz+A/Nz4NA2ANfqx y+a8eCJfZ2uxi4pou7TChSTN53DYdNvtA+Jr8G0Oy241iWoeJxmC/YS8NzWQ3JWu pb3LELoAFyohRlG1H6BOy5UV8GNLKA01pX6TuQMGWINTd1GiOuaAWdGfhA3nrHQA MtUQ8HcfMUVgeWTqCJ2nnKvz7Jt6xRN5vhtXmvmNo10HYNGjGeeSPV0ajVQJwBWO shvOfa74JLkxkusxaw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:23:15 2026 by rpki-client