This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/zD32Xj3PcakiszsGIXBTPatK-9k.roa File: zD32Xj3PcakiszsGIXBTPatK-9k.roa (raw, json) Hash identifier: iQ8hQ52AgtodECYlHitEBw6MO3wK+GphXogbQ5umKAI= Subject key identifier: CC:3D:F6:5E:3D:CF:71:A9:22:B3:3B:06:21:70:53:3D:AB:4A:FB:D9 Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba Certificate serial: 019B7BA4E6DCA7EEC98AD734BAAC08A5877C Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/zD32Xj3PcakiszsGIXBTPatK-9k.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49126 IP address blocks: 94.102.90.0/24 maxlen: 24 94.102.91.0/24 maxlen: 24 94.138.192.0/24 maxlen: 24 94.138.193.0/24 maxlen: 24 94.138.194.0/24 maxlen: 24 94.138.195.0/24 maxlen: 24 94.138.196.0/24 maxlen: 24 94.138.197.0/24 maxlen: 24 94.138.198.0/24 maxlen: 24 94.138.199.0/24 maxlen: 24 94.138.200.0/24 maxlen: 24 94.138.201.0/24 maxlen: 24 94.138.202.0/24 maxlen: 24 94.138.203.0/24 maxlen: 24 94.138.204.0/22 maxlen: 22 94.138.208.0/22 maxlen: 22 94.138.212.0/22 maxlen: 22 94.138.216.0/22 maxlen: 22 94.138.220.0/22 maxlen: 22 185.48.180.0/24 maxlen: 24 185.48.181.0/24 maxlen: 24 185.48.182.0/24 maxlen: 24 185.48.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e6:dc:a7:ee:c9:8a:d7:34:ba:ac:08:a5:87:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc3df65e3dcf71a922b33b062170533dab4afbd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:94:c7:3c:71:f9:68:4f:45:5b:2e:0b:7a: ce:ce:ad:d3:8a:1d:b6:2e:05:73:cf:23:53:e5:51: 51:c6:25:d7:a3:32:6c:41:42:4b:ad:0c:49:55:aa: af:03:2f:e0:8f:ac:cc:db:41:b9:bb:84:61:d5:5d: d7:df:be:07:b8:9e:08:a7:a8:70:88:37:d1:86:7e: 71:7d:73:ac:7f:a0:82:59:37:c8:0c:fe:76:b8:20: 0c:3d:21:e9:b3:67:ca:ca:8f:3b:2e:dc:df:9c:20: 81:5c:af:5a:96:45:d6:a7:e6:42:b0:2b:0c:ba:b7: 2b:fc:12:0e:f8:8d:d2:a8:06:cb:c6:96:90:9d:22: 3b:b5:b6:b6:aa:e0:ec:ac:4e:b8:17:ed:fb:3f:5c: be:55:c3:29:e7:22:1e:37:42:03:f5:b0:e9:a7:a7: e6:58:cd:84:ad:b9:c3:d4:55:dd:27:72:0c:91:33: 66:d5:9f:df:08:83:73:74:8c:7f:73:70:62:37:08: 49:45:0d:94:26:d6:4c:a2:b4:da:62:c2:c3:7b:fc: 37:6b:d3:45:3a:fc:fb:a4:d6:51:b4:0c:58:3d:35: 96:ed:b1:da:d6:9d:2f:e3:90:14:f0:d5:05:73:29: bd:08:57:fa:7d:67:82:9f:7c:68:ef:fd:55:5d:34: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3D:F6:5E:3D:CF:71:A9:22:B3:3B:06:21:70:53:3D:AB:4A:FB:D9 X509v3 Authority Key Identifier: keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/zD32Xj3PcakiszsGIXBTPatK-9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.102.90.0/23 94.138.192.0/19 185.48.180.0/22 Signature Algorithm: sha256WithRSAEncryption 80:e2:17:25:56:67:ec:19:03:88:c3:07:e4:4b:10:70:40:b0: 73:6b:8e:93:25:1d:ad:81:a2:5a:e6:04:b0:87:ee:c1:37:c8: 3d:c0:1e:2a:32:f5:05:b7:15:f7:e8:8c:f3:b6:a1:9e:7b:e0: 6f:67:a5:56:a7:91:68:7a:8c:ae:e5:61:f0:46:02:af:01:76: d8:8c:24:ee:cd:55:69:71:73:33:10:29:5b:3b:b6:c1:a9:2f: 15:a6:c6:1e:01:93:fb:2a:8e:70:0a:82:58:81:9f:c3:e5:bc: db:02:44:3b:f9:79:d3:c6:95:c6:09:b8:01:88:46:87:e2:17: 62:fb:a3:7f:e3:05:1b:ab:15:e5:d1:2d:0b:81:27:68:34:1c: 50:10:24:b6:0e:86:aa:92:13:15:ef:6e:86:50:f3:10:75:89: e7:0e:18:76:b1:d0:11:5a:76:24:cf:a9:06:71:9a:a0:ea:08: 6b:36:8c:dc:99:0c:8b:99:a1:ab:4f:57:bb:ab:a8:27:fd:2d: d2:ca:6c:bc:d8:46:ca:ed:b2:7c:f1:a7:0b:7d:52:35:4d:cd: 86:22:4f:37:fe:3b:db:61:f2:07:9b:e7:7a:39:3e:8e:9a:ec: 30:1f:4b:84:97:ec:9e:04:9c:a5:c0:92:cd:97:ff:e2:02:c0: 90:9b:1e:e7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pObcp+7Jitc0uqwIpYd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0 YTgwYmEwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzNkZjY1ZTNkY2Y3MWE5MjJiMzNiMDYyMTcwNTMzZGFiNGFmYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0eUxzxx+WhPRVsuC3rOzq3Tih22 LgVzzyNT5VFRxiXXozJsQUJLrQxJVaqvAy/gj6zM20G5u4Rh1V3X374HuJ4Ip6hw iDfRhn5xfXOsf6CCWTfIDP52uCAMPSHps2fKyo87LtzfnCCBXK9alkXWp+ZCsCsM urcr/BIO+I3SqAbLxpaQnSI7tba2quDsrE64F+37P1y+VcMp5yIeN0ID9bDpp6fm WM2ErbnD1FXdJ3IMkTNm1Z/fCINzdIx/c3BiNwhJRQ2UJtZMorTaYsLDe/w3a9NF Ovz7pNZRtAxYPTWW7bHa1p0v45AU8NUFcym9CFf6fWeCn3xo7/1VXTRT4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMw99l49z3GpIrM7BiFwUz2rSvvZMB8GA1UdIwQY MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt YWUwZWE2NjQzYmJkLzEvekQzMlhqM1BjYWtpc3pzR0lYQlRQYXRLLTlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXmZaAwQF XorAAwQCuTC0MA0GCSqGSIb3DQEBCwUAA4IBAQCA4hclVmfsGQOIwwfkSxBwQLBz a46TJR2tgaJa5gSwh+7BN8g9wB4qMvUFtxX36IzztqGee+BvZ6VWp5Foeoyu5WHw RgKvAXbYjCTuzVVpcXMzEClbO7bBqS8VpsYeAZP7Ko5wCoJYgZ/D5bzbAkQ7+XnT xpXGCbgBiEaH4hdi+6N/4wUbqxXl0S0LgSdoNBxQECS2DoaqkhMV726GUPMQdYnn Dhh2sdARWnYkz6kGcZqg6ghrNozcmQyLmaGrT1e7q6gn/S3Symy82EbK7bJ88acL fVI1Tc2GIk83/jvbYfIHm+d6OT6OmuwwH0uEl+yeBJylwJLNl//iAsCQmx7n -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:22 2026 by rpki-client