This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/AS9Za1kFDaou8dLVHWYOSs0PUAk.roa File: AS9Za1kFDaou8dLVHWYOSs0PUAk.roa (raw, json) Hash identifier: i9IWomO605ahTAcdlufWG87qx+nyPfJqpjbZSq8UmPw= Subject key identifier: 01:2F:59:6B:59:05:0D:AA:2E:F1:D2:D5:1D:66:0E:4A:CD:0F:50:09 Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019B7B366A990A119B7C4C8C0CD700F10D0A Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/AS9Za1kFDaou8dLVHWYOSs0PUAk.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 31.223.185.0/24 maxlen: 24 45.113.239.0/24 maxlen: 24 79.132.194.0/24 maxlen: 24 93.115.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6a:99:0a:11:9b:7c:4c:8c:0c:d7:00:f1:0d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=012f596b59050daa2ef1d2d51d660e4acd0f5009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:93:a7:00:cc:db:f7:a3:3a:31:82:e9:3b: 2e:d1:98:e4:a8:13:cb:2d:77:cf:b6:a6:2a:19:f3: 65:98:85:30:ae:66:e4:08:00:74:d8:c1:4a:d0:fc: 6f:72:8c:ca:b5:a3:24:6d:32:f0:fd:ed:60:fe:41: 5d:51:27:1d:31:02:53:30:e0:18:aa:42:df:b7:e6: b0:54:1a:c3:3f:4c:39:89:a5:d1:85:05:7e:77:bb: aa:a9:c5:16:ce:33:ad:58:06:c7:4e:31:a8:b2:98: ad:6f:b9:fe:34:6b:df:e5:8f:e6:e0:e9:d0:86:e4: 70:e6:c4:19:69:5e:d4:97:07:21:03:99:00:12:6a: cb:54:45:de:00:aa:ed:69:aa:3c:c5:22:fe:dc:61: 11:4b:9a:bc:ce:91:df:4f:4e:8a:63:af:4d:45:83: 87:94:55:e1:5a:11:2d:a7:5a:c2:62:f6:8e:52:a8: 79:8c:26:01:f1:1d:85:45:cc:c0:df:7c:13:c4:6b: b2:42:07:44:5a:a2:f2:aa:49:39:04:c6:ce:aa:64: 09:1e:2b:31:5a:e8:d4:20:78:29:1f:15:51:ff:84: 8f:06:71:56:d8:96:8d:f2:5b:e0:dc:82:14:df:c0: 96:50:d3:dc:53:36:aa:6a:55:05:2a:26:ef:09:22: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:59:6B:59:05:0D:AA:2E:F1:D2:D5:1D:66:0E:4A:CD:0F:50:09 X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/AS9Za1kFDaou8dLVHWYOSs0PUAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.185.0/24 45.113.239.0/24 79.132.194.0/24 93.115.252.0/24 Signature Algorithm: sha256WithRSAEncryption 38:31:22:ff:97:99:ea:8c:6f:6b:37:24:f7:8f:6f:e3:0a:39: 36:76:aa:17:89:db:04:ad:78:f3:b8:87:7f:e5:ef:65:5e:99: ce:f5:41:f0:24:29:c6:c2:25:6f:96:1f:ce:51:28:69:3d:14: f1:92:17:02:b5:f8:54:b7:4b:68:8f:13:20:4b:5d:8a:69:1a: 60:06:3e:62:99:71:93:6b:49:8f:63:02:21:66:48:a7:05:96: b2:36:f4:22:58:15:cd:8a:bb:53:73:11:bf:b2:fe:34:83:d0: b9:15:3d:bc:49:e5:16:98:95:37:6d:05:d9:f8:96:28:ee:db: b8:fe:b2:a7:84:3e:cf:13:a9:fc:30:49:9b:7e:18:64:48:4e: 19:64:24:89:58:5b:be:52:b2:4d:ba:91:00:11:2c:32:4c:60: 32:a9:ad:cb:c2:4a:51:5a:c7:0c:76:4d:22:c3:3f:23:8d:a8: c1:07:6c:0b:2f:26:d9:b4:f0:b6:89:18:51:de:d0:17:d2:a9: a5:2c:3c:44:84:98:b2:38:4f:30:6a:f9:81:dd:1d:21:43:98: 12:31:9c:89:fc:c0:e1:7c:77:ad:b3:79:bc:af:2f:6f:d2:52: 6f:fc:81:05:49:64:e4:1e:18:79:e7:38:e9:4c:1b:10:83:3a: 5a:70:92:34 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NmqZChGbfEyMDNcA8Q0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTJmNTk2YjU5MDUwZGFhMmVmMWQyZDUxZDY2MGU0YWNkMGY1MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVWTpwDM2/ejOjGC6Tsu0ZjkqBPL LXfPtqYqGfNlmIUwrmbkCAB02MFK0PxvcozKtaMkbTLw/e1g/kFdUScdMQJTMOAY qkLft+awVBrDP0w5iaXRhQV+d7uqqcUWzjOtWAbHTjGospitb7n+NGvf5Y/m4OnQ huRw5sQZaV7UlwchA5kAEmrLVEXeAKrtaao8xSL+3GERS5q8zpHfT06KY69NRYOH lFXhWhEtp1rCYvaOUqh5jCYB8R2FRczA33wTxGuyQgdEWqLyqkk5BMbOqmQJHisx WujUIHgpHxVR/4SPBnFW2JaN8lvg3IIU38CWUNPcUzaqalUFKibvCSIqhQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAEvWWtZBQ2qLvHS1R1mDkrND1AJMB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvQVM5WmExa0ZEYW91OGRMVkhXWU9TczBQVUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH9+5AwQA LXHvAwQAT4TCAwQAXXP8MA0GCSqGSIb3DQEBCwUAA4IBAQA4MSL/l5nqjG9rNyT3 j2/jCjk2dqoXidsErXjzuId/5e9lXpnO9UHwJCnGwiVvlh/OUShpPRTxkhcCtfhU t0tojxMgS12KaRpgBj5imXGTa0mPYwIhZkinBZayNvQiWBXNirtTcxG/sv40g9C5 FT28SeUWmJU3bQXZ+JYo7tu4/rKnhD7PE6n8MEmbfhhkSE4ZZCSJWFu+UrJNupEA ESwyTGAyqa3LwkpRWscMdk0iwz8jjajBB2wLLybZtPC2iRhR3tAX0qmlLDxEhJiy OE8wavmB3R0hQ5gSMZyJ/MDhfHets3m8ry9v0lJv/IEFSWTkHhh55zjpTBsQgzpa cJI0 -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:52 2026 by rpki-client