This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/69NtXxeSLWDXdtXT_AfelypQXB8.roa File: 69NtXxeSLWDXdtXT_AfelypQXB8.roa (raw, json) Hash identifier: 9gKtg7KDzyNzZzLU7I/BaczkZvgxDpjrp3J+QzLnL1Q= Subject key identifier: EB:D3:6D:5F:17:92:2D:60:D7:76:D5:D3:FC:07:DE:97:2A:50:5C:1F Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d Certificate serial: 019B7F84486E61A15B992BD5029862B564B0 Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/69NtXxeSLWDXdtXT_AfelypQXB8.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8968 IP address blocks: 31.170.42.0/23 maxlen: 23 62.85.224.0/19 maxlen: 19 78.4.0.0/16 maxlen: 16 78.4.0.0/17 maxlen: 17 78.5.0.0/16 maxlen: 16 78.6.0.0/16 maxlen: 16 78.6.27.0/26 maxlen: 26 78.7.0.0/16 maxlen: 16 85.20.0.0/16 maxlen: 16 85.20.128.0/17 maxlen: 17 89.118.0.0/16 maxlen: 16 89.118.109.0/24 maxlen: 24 89.119.0.0/16 maxlen: 16 89.119.128.0/17 maxlen: 17 212.17.192.0/19 maxlen: 19 213.213.0.0/17 maxlen: 17 213.213.64.0/18 maxlen: 18 213.213.83.0/24 maxlen: 24 213.213.96.0/19 maxlen: 19 213.217.128.0/18 maxlen: 18 213.255.0.0/17 maxlen: 17 213.255.9.0/26 maxlen: 26 213.255.9.64/26 maxlen: 26 213.255.10.192/26 maxlen: 26 213.255.14.0/26 maxlen: 26 217.220.0.0/15 maxlen: 15 217.220.128.0/19 maxlen: 19 217.220.160.0/19 maxlen: 19 217.220.192.0/18 maxlen: 18 2a02:4d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:48:6e:61:a1:5b:99:2b:d5:02:98:62:b5:64:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebd36d5f17922d60d776d5d3fc07de972a505c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:85:a2:cd:99:0b:82:35:3e:5e:ef:85:0e:aa: f0:3d:ff:22:0c:78:dc:9d:c0:ae:38:95:24:51:37: 35:61:38:a2:4c:8e:90:16:97:1e:d6:58:e1:a6:a8: 3e:2a:8e:3f:94:ac:d7:72:54:34:e6:23:e0:b6:67: 7f:72:bd:03:9b:c8:9a:e0:1e:83:d7:af:e6:00:96: bc:4f:7f:7a:fe:02:72:07:88:1e:3d:62:02:0b:39: 65:5c:bd:5c:76:be:5a:c9:cd:e6:24:04:27:33:6f: 9a:32:cf:ff:62:ed:4e:ec:4a:98:e2:60:d0:82:87: 4d:08:2b:71:16:42:55:72:5c:43:67:ab:c5:d1:6a: 50:ef:e9:80:1a:0c:dc:a0:a9:b7:ca:84:07:ab:c8: e4:e9:ef:24:51:aa:a5:10:c7:89:1b:6c:2c:98:35: a6:43:bb:bc:08:b4:b3:49:33:40:6f:5a:71:f9:8a: b8:33:4d:5b:ec:f4:25:85:ea:3a:20:bc:ca:2d:97: 50:d1:e8:0f:da:90:26:f6:4b:e7:0e:24:5f:a9:e0: da:65:32:6f:34:47:fa:b6:9c:c1:ea:cb:cb:65:df: 8f:d1:d3:43:1e:98:84:1f:11:09:b9:93:eb:22:65: b6:60:34:a1:98:0a:f7:af:38:87:16:77:4b:4c:94: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D3:6D:5F:17:92:2D:60:D7:76:D5:D3:FC:07:DE:97:2A:50:5C:1F X509v3 Authority Key Identifier: keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/69NtXxeSLWDXdtXT_AfelypQXB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.42.0/23 62.85.224.0/19 78.4.0.0/14 85.20.0.0/16 89.118.0.0/15 212.17.192.0/19 213.213.0.0/17 213.217.128.0/18 213.255.0.0/17 217.220.0.0/15 IPv6: 2a02:4d80::/32 Signature Algorithm: sha256WithRSAEncryption 6c:fb:df:3a:57:88:3f:a1:44:f7:16:04:5e:1d:00:db:5b:15: 64:64:d3:6b:d9:c2:51:b2:fe:5c:db:20:2b:4c:38:8b:0d:92: a7:46:ef:66:4f:7b:65:e9:30:70:8b:49:fc:5e:8b:e2:15:03: 71:21:ef:40:18:0f:6c:44:7e:ac:59:d8:62:11:75:57:ff:98: 57:1e:24:70:97:31:3f:fe:3e:e2:f8:e2:07:60:bf:d2:b4:17: ed:88:ce:9e:9d:75:43:c6:b4:c4:e4:22:72:71:a8:68:d4:91: d0:90:b2:41:b8:ed:81:92:87:1f:ab:2d:b2:cb:3e:1a:ea:6e: 86:4a:7a:2b:36:5c:c9:5b:e4:fe:48:45:de:d7:fa:d7:c8:66: ef:90:c0:e5:64:9f:d5:f3:f4:30:8d:fb:68:4e:fc:e5:e9:59: 29:70:a9:a5:f1:78:f4:da:75:9d:a0:91:92:c1:5a:d4:ce:42: fb:70:ad:0c:42:5c:05:05:85:5d:c4:3a:1b:ef:09:13:8d:78: b7:7f:90:65:5f:10:64:95:67:a2:c7:b0:cf:06:55:01:78:d6: db:e8:fd:e9:c7:fe:1a:59:1b:90:3a:a8:57:22:0f:d8:1e:76: 8b:b1:6f:f1:0b:e5:e2:83:2e:ea:d1:52:5a:9f:0b:de:80:d6: 3b:79:f2:63 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt/hEhuYaFbmSvVAphitWSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYjJmNTgzZjg4OWRkNGIxMzRkYTU2ZGI0NWEzZTI1NTgw YjFiMWQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmQzNmQ1ZjE3OTIyZDYwZDc3NmQ1ZDNmYzA3ZGU5NzJhNTA1YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oWizZkLgjU+Xu+FDqrwPf8iDHjc ncCuOJUkUTc1YTiiTI6QFpce1ljhpqg+Ko4/lKzXclQ05iPgtmd/cr0Dm8ia4B6D 16/mAJa8T396/gJyB4gePWICCzllXL1cdr5ayc3mJAQnM2+aMs//Yu1O7EqY4mDQ godNCCtxFkJVclxDZ6vF0WpQ7+mAGgzcoKm3yoQHq8jk6e8kUaqlEMeJG2wsmDWm Q7u8CLSzSTNAb1px+Yq4M01b7PQlheo6ILzKLZdQ0egP2pAm9kvnDiRfqeDaZTJv NEf6tpzB6svLZd+P0dNDHpiEHxEJuZPrImW2YDShmAr3rziHFndLTJRJEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOvTbV8Xki1g13bV0/wH3pcqUFwfMB8GA1UdIwQY MBaAFK2y9YP4id1LE02lbbRaPiVYCxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEt YWRkMTUxNjY2ZTJhLzEvNjlOdFh4ZVNMV0RYZHRYVF9BZmVseXBRWEI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEtYWRkMTUxNjY2ZTJh LzEvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQBH6oqAwQF PlXgAwMCTgQDAwBVFAMDAVl2AwQF1BHAAwQH1dUAAwQG1dmAAwQH1f8AAwMB2dww DQQCAAIwBwMFACoCTYAwDQYJKoZIhvcNAQELBQADggEBAGz73zpXiD+hRPcWBF4d ANtbFWRk02vZwlGy/lzbICtMOIsNkqdG72ZPe2XpMHCLSfxei+IVA3Eh70AYD2xE fqxZ2GIRdVf/mFceJHCXMT/+PuL44gdgv9K0F+2Izp6ddUPGtMTkInJxqGjUkdCQ skG47YGShx+rLbLLPhrqboZKeis2XMlb5P5IRd7X+tfIZu+QwOVkn9Xz9DCN+2hO /OXpWSlwqaXxePTadZ2gkZLBWtTOQvtwrQxCXAUFhV3EOhvvCRONeLd/kGVfEGSV Z6LHsM8GVQF41tvo/enH/hpZG5A6qFciD9gedouxb/EL5eKDLurRUlqfC96A1jt5 8mM= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:33 2026 by rpki-client