This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/8NSywpR9nT-r8M6sQZn_Vy_1zuI.roa File: 8NSywpR9nT-r8M6sQZn_Vy_1zuI.roa (raw, json) Hash identifier: KK6AcEIe4doXNcpLx1+rexzaHvDjwQb/+2RxEu+/uhY= Subject key identifier: F0:D4:B2:C2:94:7D:9D:3F:AB:F0:CE:AC:41:99:FF:57:2F:F5:CE:E2 Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9 Certificate serial: 019B7DCB6571E826ADCA9F1122E54E92E1C6 Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/8NSywpR9nT-r8M6sQZn_Vy_1zuI.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199283 IP address blocks: 31.169.112.0/21 maxlen: 21 31.169.112.0/23 maxlen: 23 31.169.114.0/24 maxlen: 24 31.169.115.0/24 maxlen: 24 31.169.116.0/24 maxlen: 24 31.169.117.0/24 maxlen: 24 31.169.118.0/24 maxlen: 24 31.169.119.0/24 maxlen: 24 95.87.104.0/21 maxlen: 21 95.87.104.0/24 maxlen: 24 95.87.105.0/24 maxlen: 24 95.87.106.0/24 maxlen: 24 95.87.107.0/24 maxlen: 24 95.87.108.0/24 maxlen: 24 95.87.109.0/24 maxlen: 24 95.87.110.0/24 maxlen: 24 95.87.111.0/24 maxlen: 24 185.87.208.0/22 maxlen: 22 185.87.208.0/24 maxlen: 24 185.87.209.0/24 maxlen: 24 185.87.210.0/24 maxlen: 24 185.87.211.0/24 maxlen: 24 2a04:2140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:71:e8:26:ad:ca:9f:11:22:e5:4e:92:e1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0d4b2c2947d9d3fabf0ceac4199ff572ff5cee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d5:58:78:2c:54:12:ee:97:33:4b:db:9f:ab: 61:52:e1:9f:fb:4c:af:da:92:76:62:84:99:c3:9d: 7c:d1:2b:fc:6f:80:bf:7b:7a:2d:79:cc:77:91:8d: 44:92:0d:ff:72:ba:a2:1c:e7:a2:12:5c:2f:0c:42: e4:ac:fb:54:64:f8:28:9b:06:08:11:34:79:92:ca: 21:1f:d0:df:95:51:8d:ae:88:5f:ad:d2:6d:dd:72: 50:cc:47:44:4b:54:58:fe:50:3f:8d:a0:7d:97:65: f7:b9:41:e3:9b:6f:b2:a4:34:0b:81:af:62:b6:69: 34:06:46:1d:dd:d5:f2:cf:1c:f1:eb:4b:b5:1b:4a: 03:a6:cd:86:f8:1e:8f:aa:b5:26:f7:e2:8b:16:f0: 63:4a:ed:71:b1:f7:93:49:dd:43:a9:27:d9:9c:46: 2f:ea:8c:f1:66:4f:35:7c:69:19:b5:0f:8f:30:b3: 81:50:1c:71:6e:78:04:7e:39:dd:b3:82:a7:32:76: 78:9c:3c:d0:49:99:70:5e:e8:28:7f:89:4c:c9:f7: b7:40:1c:94:12:24:2c:6c:82:17:2b:d3:7c:6a:fb: d7:0b:28:eb:54:7e:6d:d5:65:c7:d8:73:56:3e:51: 06:08:b9:dc:39:24:81:c1:a9:f4:f7:db:6c:d7:f9: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D4:B2:C2:94:7D:9D:3F:AB:F0:CE:AC:41:99:FF:57:2F:F5:CE:E2 X509v3 Authority Key Identifier: keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/8NSywpR9nT-r8M6sQZn_Vy_1zuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.112.0/21 95.87.104.0/21 185.87.208.0/22 IPv6: 2a04:2140::/29 Signature Algorithm: sha256WithRSAEncryption c4:d0:a5:73:18:67:a6:c2:2d:51:d7:cc:32:9b:71:3f:f0:a5: 6a:fe:0f:18:1b:25:c3:e4:bf:bc:bb:12:77:ba:52:ad:e7:0d: 0d:bf:1e:b5:9b:7d:44:e0:7c:c2:06:d1:b8:ee:0e:9f:f9:fc: f3:f7:e6:3f:3c:f9:13:e6:93:b5:cc:67:e3:53:0d:ea:1a:7f: f3:3d:49:81:b9:ee:bd:16:64:38:b8:f1:0c:99:93:9b:da:64: c2:25:d1:fc:62:d2:bd:55:0a:cd:b1:82:03:07:56:de:e1:d5: d9:e0:78:f8:b9:89:5a:e3:ec:f4:63:e7:85:ea:03:d9:60:1a: 87:52:c5:0f:9f:4a:72:55:10:6a:e6:45:fd:da:0f:4f:e6:39: f9:69:ca:7d:9d:39:1c:d4:22:9b:46:7d:97:31:e7:99:63:57: 82:22:d6:e9:cf:87:44:bd:be:2a:fb:64:bb:f0:0d:19:95:b0: 93:98:a7:ca:c9:64:cc:f0:3f:8e:ac:92:e8:71:84:d8:87:a6: b7:6b:70:3f:1d:92:6d:50:ef:b4:dd:cf:8e:e9:77:00:1d:01: 28:ba:2c:52:7b:a2:46:c9:69:d0:34:49:14:55:a6:4a:b9:68: 6f:e7:22:be:bf:b1:5d:a5:15:a9:a3:d2:c4:bf:e6:01:07:74: 4d:31:fc:34 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9y2Vx6Catyp8RIuVOkuHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTdhZDQwNmRmOTkzNGI1MDQ4YjVmYTIxZGUzMTQ1MGI5 MzZmYTkwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGQ0YjJjMjk0N2Q5ZDNmYWJmMGNlYWM0MTk5ZmY1NzJmZjVjZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dVYeCxUEu6XM0vbn6thUuGf+0yv 2pJ2YoSZw5180Sv8b4C/e3otecx3kY1Ekg3/crqiHOeiElwvDELkrPtUZPgomwYI ETR5ksohH9DflVGNrohfrdJt3XJQzEdES1RY/lA/jaB9l2X3uUHjm2+ypDQLga9i tmk0BkYd3dXyzxzx60u1G0oDps2G+B6PqrUm9+KLFvBjSu1xsfeTSd1DqSfZnEYv 6ozxZk81fGkZtQ+PMLOBUBxxbngEfjnds4KnMnZ4nDzQSZlwXugof4lMyfe3QByU EiQsbIIXK9N8avvXCyjrVH5t1WXH2HNWPlEGCLncOSSBwan099ts1/kH/wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPDUssKUfZ0/q/DOrEGZ/1cv9c7iMB8GA1UdIwQY MBaAFDNXrUBt+ZNLUEi1+iHeMUULk2+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmQ0ZWMtYTA3Mi00ZjNlLWFjZGEt MGNmNjM4NGE1NjEwLzEvOE5TeXdwUjluVC1yOE02c1Fabl9WeV8xenVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNmQ0ZWMtYTA3Mi00ZjNlLWFjZGEtMGNmNjM4NGE1NjEw LzEvTTFldFFHMzVrMHRRU0xYNklkNHhSUXVUYjZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDH6lwAwQD X1doAwQCuVfQMA0EAgACMAcDBQMqBCFAMA0GCSqGSIb3DQEBCwUAA4IBAQDE0KVz GGemwi1R18wym3E/8KVq/g8YGyXD5L+8uxJ3ulKt5w0Nvx61m31E4HzCBtG47g6f +fzz9+Y/PPkT5pO1zGfjUw3qGn/zPUmBue69FmQ4uPEMmZOb2mTCJdH8YtK9VQrN sYIDB1be4dXZ4Hj4uYla4+z0Y+eF6gPZYBqHUsUPn0pyVRBq5kX92g9P5jn5acp9 nTkc1CKbRn2XMeeZY1eCItbpz4dEvb4q+2S78A0ZlbCTmKfKyWTM8D+OrJLocYTY h6a3a3A/HZJtUO+03c+O6XcAHQEouixSe6JGyWnQNEkUVaZKuWhv5yK+v7FdpRWp o9LEv+YBB3RNMfw0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:08 2026 by rpki-client