This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/2SnbqmjRC1mfOLhWvcx2MqiVnBQ.roa File: 2SnbqmjRC1mfOLhWvcx2MqiVnBQ.roa (raw, json) Hash identifier: 9wsvsp03KFtWIrs+dsNBw/+Vtj/EYC0hFE8Wh2C75jw= Subject key identifier: D9:29:DB:AA:68:D1:0B:59:9F:38:B8:56:BD:CC:76:32:A8:95:9C:14 Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f Certificate serial: 019B79ED488374DBD65D11777D9808D22D0E Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/2SnbqmjRC1mfOLhWvcx2MqiVnBQ.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34788 IP address blocks: 85.13.128.0/24 maxlen: 24 85.13.129.0/24 maxlen: 24 85.13.130.0/24 maxlen: 24 85.13.131.0/24 maxlen: 24 85.13.132.0/24 maxlen: 24 85.13.133.0/24 maxlen: 24 85.13.134.0/24 maxlen: 24 85.13.135.0/24 maxlen: 24 85.13.136.0/24 maxlen: 24 85.13.137.0/24 maxlen: 24 85.13.138.0/24 maxlen: 24 85.13.139.0/24 maxlen: 24 85.13.140.0/24 maxlen: 24 85.13.141.0/24 maxlen: 24 85.13.142.0/24 maxlen: 24 85.13.143.0/24 maxlen: 24 85.13.144.0/24 maxlen: 24 85.13.145.0/24 maxlen: 24 85.13.146.0/24 maxlen: 24 85.13.147.0/24 maxlen: 24 85.13.148.0/24 maxlen: 24 85.13.149.0/24 maxlen: 24 85.13.150.0/24 maxlen: 24 85.13.151.0/24 maxlen: 24 85.13.152.0/24 maxlen: 24 85.13.153.0/24 maxlen: 24 85.13.154.0/24 maxlen: 24 85.13.155.0/24 maxlen: 24 85.13.156.0/24 maxlen: 24 85.13.157.0/24 maxlen: 24 85.13.158.0/24 maxlen: 24 85.13.159.0/24 maxlen: 24 85.13.160.0/24 maxlen: 24 85.13.161.0/24 maxlen: 24 85.13.162.0/24 maxlen: 24 85.13.163.0/24 maxlen: 24 85.13.164.0/24 maxlen: 24 85.13.165.0/24 maxlen: 24 85.13.166.0/24 maxlen: 24 85.13.167.0/24 maxlen: 24 85.13.168.0/24 maxlen: 24 85.13.169.0/24 maxlen: 24 85.13.170.0/24 maxlen: 24 85.13.171.0/24 maxlen: 24 85.13.172.0/24 maxlen: 24 85.13.173.0/24 maxlen: 24 85.13.174.0/24 maxlen: 24 85.13.175.0/24 maxlen: 24 85.13.176.0/24 maxlen: 24 85.13.177.0/24 maxlen: 24 85.13.178.0/24 maxlen: 24 85.13.179.0/24 maxlen: 24 85.13.180.0/24 maxlen: 24 85.13.181.0/24 maxlen: 24 85.13.182.0/24 maxlen: 24 85.13.183.0/24 maxlen: 24 85.13.184.0/24 maxlen: 24 85.13.185.0/24 maxlen: 24 85.13.186.0/24 maxlen: 24 85.13.187.0/24 maxlen: 24 85.13.188.0/24 maxlen: 24 85.13.189.0/24 maxlen: 24 85.13.190.0/24 maxlen: 24 85.13.191.0/24 maxlen: 24 185.3.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:83:74:db:d6:5d:11:77:7d:98:08:d2:2d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d929dbaa68d10b599f38b856bdcc7632a8959c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:2d:14:8d:9b:8b:9e:10:b7:8a:fd:07:09: dd:b0:95:e1:25:37:2a:55:4a:03:a6:e5:59:77:53: 1d:c9:c5:87:43:5d:06:89:36:e5:9b:bd:98:73:7a: c4:a7:2a:aa:50:3f:bc:a4:02:01:82:90:4c:4f:c3: bd:8a:e4:1a:5e:a1:32:fd:08:04:2c:9f:0f:5c:f4: 16:e7:e5:1a:09:8c:20:b2:7a:66:04:5b:bc:eb:6e: ca:2a:87:4a:bb:8b:51:ca:fe:23:bd:e1:20:9c:ac: 41:59:b4:39:fa:b6:77:08:6d:40:59:b7:9c:82:4f: 7f:e3:80:77:0f:c6:4d:9b:37:ef:66:04:10:bb:f6: da:8e:97:f2:a4:b0:04:5c:1b:47:68:d9:80:79:35: 51:b1:11:12:75:e2:c9:be:48:a2:26:3a:9a:41:28: 26:99:72:df:08:6e:bf:f7:25:b0:2c:fb:47:bc:19: 15:b5:50:e2:00:c7:33:fd:f9:8a:50:a3:9c:a2:9b: 6d:7d:19:95:f2:be:03:0a:f6:8f:3d:86:0c:9b:0d: d0:3e:7d:75:e4:e6:48:cd:5d:2c:b6:7a:a2:27:0c: 22:c2:0e:7a:23:3a:74:53:93:0d:c7:2d:16:16:a8: 8a:15:c0:cf:f1:b9:0d:ca:61:04:ae:9f:d6:a8:e0: fa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:29:DB:AA:68:D1:0B:59:9F:38:B8:56:BD:CC:76:32:A8:95:9C:14 X509v3 Authority Key Identifier: keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/2SnbqmjRC1mfOLhWvcx2MqiVnBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.13.128.0/18 185.3.40.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:1e:b2:2b:91:e1:da:65:98:ef:dc:ce:5e:68:93:a9:a8:e9: 58:c8:29:6f:e8:16:74:f5:44:23:dd:04:eb:5e:63:8e:f6:59: e0:9c:a5:90:64:6a:90:a4:22:bb:d3:8b:aa:62:80:2e:e8:54: 5c:80:02:53:d9:4f:79:fc:8f:71:55:61:ad:71:26:a0:23:a5: 28:0f:97:63:25:c4:c6:b8:04:42:db:aa:3f:94:02:79:f0:b4: 04:f4:b7:ea:99:77:5b:41:84:20:d2:0f:4a:86:3e:49:04:86: 0c:e8:6d:38:a9:30:52:5d:2b:d6:4c:eb:50:5c:9a:cc:03:ab: 9e:7b:73:81:da:81:02:71:c4:2d:2d:5a:e4:3c:3a:bd:a0:db: e1:b6:1c:86:64:9f:e5:32:7e:5b:ca:d8:6e:38:b5:bb:5e:34: 95:9b:50:7e:06:85:fd:79:c4:2c:ea:c6:9c:e8:e8:02:5b:38: 5e:52:3f:37:44:d2:a7:99:c4:c8:34:71:39:7a:e1:a3:07:72: fe:a6:2e:68:fc:89:d8:59:72:df:ed:1a:7d:25:59:34:7c:dc: 54:11:2c:ee:9f:9c:1f:e8:a1:9e:d8:12:81:ee:d4:1e:0d:a1: 6a:a7:b8:91:54:79:5e:1d:71:fe:50:d4:33:b9:6a:a1:76:c6: a3:43:e4:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57UiDdNvWXRF3fZgI0i0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzRhMTdkMjA2NjZiN2Q4ZDJiMWZmZTE4YTQ2ODdhZjky NjIxOGYwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTI5ZGJhYTY4ZDEwYjU5OWYzOGI4NTZiZGNjNzYzMmE4OTU5YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KctFI2bi54Qt4r9BwndsJXhJTcq VUoDpuVZd1MdycWHQ10GiTblm72Yc3rEpyqqUD+8pAIBgpBMT8O9iuQaXqEy/QgE LJ8PXPQW5+UaCYwgsnpmBFu8627KKodKu4tRyv4jveEgnKxBWbQ5+rZ3CG1AWbec gk9/44B3D8ZNmzfvZgQQu/bajpfypLAEXBtHaNmAeTVRsRESdeLJvkiiJjqaQSgm mXLfCG6/9yWwLPtHvBkVtVDiAMcz/fmKUKOcopttfRmV8r4DCvaPPYYMmw3QPn11 5OZIzV0stnqiJwwiwg56Izp0U5MNxy0WFqiKFcDP8bkNymEErp/WqOD67QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNkp26po0QtZnzi4Vr3MdjKolZwUMB8GA1UdIwQY MBaAFBLEoX0gZmt9jSsf/hikaHr5JiGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MzExODEtYjBiMy00YjJlLTg4ZGMt NDlhOTZhODIyMTRlLzEvMlNuYnFtalJDMW1mT0xoV3ZjeDJNcWlWbkJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MzExODEtYjBiMy00YjJlLTg4ZGMtNDlhOTZhODIyMTRl LzEvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGVQ2AAwQC uQMoMA0GCSqGSIb3DQEBCwUAA4IBAQAMHrIrkeHaZZjv3M5eaJOpqOlYyClv6BZ0 9UQj3QTrXmOO9lngnKWQZGqQpCK704uqYoAu6FRcgAJT2U95/I9xVWGtcSagI6Uo D5djJcTGuARC26o/lAJ58LQE9LfqmXdbQYQg0g9Khj5JBIYM6G04qTBSXSvWTOtQ XJrMA6uee3OB2oECccQtLVrkPDq9oNvhthyGZJ/lMn5bythuOLW7XjSVm1B+BoX9 ecQs6sac6OgCWzheUj83RNKnmcTINHE5euGjB3L+pi5o/InYWXLf7Rp9JVk0fNxU ESzun5wf6KGe2BKB7tQeDaFqp7iRVHleHXH+UNQzuWqhdsajQ+Rg -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:02 2026 by rpki-client