This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa File: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (raw, json) Hash identifier: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI= Subject key identifier: 16:CF:5A:03:22:BD:95:3B:1B:56:6D:0D:3A:ED:17:C6:64:6B:62:F3 Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2 Certificate serial: 019B7EA5267DE235A65E1ECC121B693730F0 Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa Signing time: Fri 02 Jan 2026 12:18:31 +0000 ROA not before: Fri 02 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60976 IP address blocks: 31.214.248.0/21 maxlen: 21 31.214.248.0/24 maxlen: 24 31.214.249.0/24 maxlen: 24 31.214.250.0/24 maxlen: 24 31.214.251.0/24 maxlen: 24 31.214.252.0/24 maxlen: 24 31.214.253.0/24 maxlen: 24 31.214.254.0/24 maxlen: 24 31.214.255.0/24 maxlen: 24 37.10.64.0/24 maxlen: 24 37.10.65.0/24 maxlen: 24 37.10.66.0/24 maxlen: 24 37.10.67.0/24 maxlen: 24 37.10.109.0/24 maxlen: 24 37.228.136.0/22 maxlen: 22 37.228.136.0/24 maxlen: 24 37.228.137.0/24 maxlen: 24 37.228.138.0/24 maxlen: 24 37.228.139.0/24 maxlen: 24 82.99.215.0/24 maxlen: 24 82.99.216.0/22 maxlen: 22 82.99.216.0/24 maxlen: 24 82.99.217.0/24 maxlen: 24 82.99.218.0/24 maxlen: 24 82.99.219.0/24 maxlen: 24 82.99.238.0/24 maxlen: 24 82.99.242.0/24 maxlen: 24 82.99.243.0/24 maxlen: 24 82.99.244.0/24 maxlen: 24 95.156.236.0/24 maxlen: 24 95.156.237.0/24 maxlen: 24 95.156.252.0/22 maxlen: 22 95.156.252.0/24 maxlen: 24 95.156.253.0/24 maxlen: 24 95.156.254.0/24 maxlen: 24 95.156.255.0/24 maxlen: 24 109.230.200.0/24 maxlen: 24 109.230.204.0/22 maxlen: 22 109.230.204.0/24 maxlen: 24 109.230.205.0/24 maxlen: 24 109.230.206.0/24 maxlen: 24 109.230.207.0/24 maxlen: 24 109.230.221.0/24 maxlen: 24 109.230.223.0/24 maxlen: 24 109.230.242.0/24 maxlen: 24 109.230.251.0/24 maxlen: 24 185.10.71.0/24 maxlen: 24 185.13.228.0/22 maxlen: 22 185.13.228.0/24 maxlen: 24 185.13.229.0/24 maxlen: 24 185.13.230.0/24 maxlen: 24 185.13.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:26:7d:e2:35:a6:5e:1e:cc:12:1b:69:37:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2 Validity Not Before: Jan 2 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16cf5a0322bd953b1b566d0d3aed17c6646b62f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:36:9d:cc:08:2b:10:e9:9d:cd:10:99:05:05: 3d:5e:8f:1b:df:b5:6d:24:3f:e7:07:54:8f:1c:d7: 90:0d:2a:b2:fe:a5:3f:2a:98:a0:85:de:10:8d:72: fa:86:ac:90:46:6c:9f:a7:b4:86:52:a6:4f:05:bc: e8:6a:6e:1e:d6:b8:0e:ff:c2:87:66:0f:93:4c:e4: e5:cc:d5:5b:d7:ec:cc:d6:a4:39:21:0a:05:d1:3d: 84:5a:5e:7e:d5:5e:5f:78:bb:3b:75:e5:88:2c:16: 4c:95:c0:61:e8:c4:eb:c7:a9:b3:90:47:52:29:96: c6:98:56:97:8f:73:a6:19:88:7a:8c:35:29:1f:48: e2:d5:c1:83:65:1f:12:37:7a:64:71:14:74:cf:8a: 6c:a0:5a:36:54:13:59:ae:b0:2b:c0:1c:05:c4:6e: f5:88:a1:d4:91:4e:21:b0:67:ec:8f:54:63:8d:43: 7f:b9:2f:67:d4:2a:c3:d1:82:9f:89:15:a9:cf:30: bc:d4:9e:f8:bd:43:38:9a:14:4b:10:83:7e:f7:18: 1d:e3:2a:bd:13:29:90:57:56:0b:a6:1c:0a:9b:d8: 13:ee:36:b1:91:45:59:c3:32:d1:00:09:4c:3c:19: 3c:27:d9:16:97:f1:14:fa:be:6f:3a:ea:10:71:c2: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:5A:03:22:BD:95:3B:1B:56:6D:0D:3A:ED:17:C6:64:6B:62:F3 X509v3 Authority Key Identifier: keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.248.0/21 37.10.64.0/22 37.10.109.0/24 37.228.136.0/22 82.99.215.0-82.99.219.255 82.99.238.0/24 82.99.242.0-82.99.244.255 95.156.236.0/23 95.156.252.0/22 109.230.200.0/24 109.230.204.0/22 109.230.221.0/24 109.230.223.0/24 109.230.242.0/24 109.230.251.0/24 185.10.71.0/24 185.13.228.0/22 Signature Algorithm: sha256WithRSAEncryption 30:fe:d7:e2:85:fe:b7:97:ba:2a:4e:ee:9d:ae:17:fb:27:c4: be:b5:5c:25:c7:17:c0:b6:12:54:f6:ec:62:71:47:aa:f4:ce: 68:8a:7f:f0:cd:a1:fa:84:a9:4a:37:84:e4:02:8d:41:12:79: 12:3c:59:ce:88:d0:b6:08:30:28:90:1a:fa:e4:23:6e:02:a8: c2:55:9c:c6:ec:83:73:cd:65:70:08:c6:91:89:4b:b1:09:64: f3:1d:85:9a:01:62:cf:63:46:8c:6e:a3:f2:c1:fb:f7:c8:6e: 37:d6:dc:98:d7:1a:51:8b:70:d7:85:5c:dd:aa:3e:f5:39:58: 7f:64:fc:44:42:18:81:60:ab:27:4f:80:dd:da:e1:a7:f5:ee: d8:79:8e:0c:2d:d1:ef:b1:af:91:6f:14:54:85:5e:d7:72:08: ee:2b:2d:56:13:6b:97:7d:c9:49:16:c7:7d:c8:1e:e0:38:d9: 9c:09:e6:62:78:6d:a9:26:a0:5a:ac:84:6c:79:5c:fe:09:76: fd:c7:21:20:9c:b3:c0:5d:45:21:4b:ea:16:2b:a1:58:84:9f: a3:5a:62:d2:23:50:7d:e8:ab:07:1f:07:b6:54:ec:80:a2:c6: 1f:db:df:5f:fc:dc:5f:f4:33:82:4e:16:c2:1b:33:71:2d:0e: 87:98:bc:b2 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt+pSZ94jWmXh7MEhtpNzDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi NzQ5YzIwHhcNMjYwMTAyMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmNmNWEwMzIyYmQ5NTNiMWI1NjZkMGQzYWVkMTdjNjY0NmI2MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jadzAgrEOmdzRCZBQU9Xo8b37Vt JD/nB1SPHNeQDSqy/qU/Kpighd4QjXL6hqyQRmyfp7SGUqZPBbzoam4e1rgO/8KH Zg+TTOTlzNVb1+zM1qQ5IQoF0T2EWl5+1V5feLs7deWILBZMlcBh6MTrx6mzkEdS KZbGmFaXj3OmGYh6jDUpH0ji1cGDZR8SN3pkcRR0z4psoFo2VBNZrrArwBwFxG71 iKHUkU4hsGfsj1RjjUN/uS9n1CrD0YKfiRWpzzC81J74vUM4mhRLEIN+9xgd4yq9 EymQV1YLphwKm9gT7jaxkUVZwzLRAAlMPBk8J9kWl/EU+r5vOuoQccJz9wIDAQAB o4ICezCCAncwHQYDVR0OBBYEFBbPWgMivZU7G1ZtDTrtF8Zka2LzMB8GA1UdIwQY MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt ZGY4NmI2ZGQ5OTdjLzEvRnM5YUF5SzlsVHNiVm0wTk91MFh4bVJyWXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAMf1vgD BAIlCkADBAAlCm0DBAIl5IgwDAMEAFJj1wMEAlJj2AMEAFJj7jAMAwQBUmPyAwQA UmP0AwQBX5zsAwQCX5z8AwQAbebIAwQCbebMAwQAbebdAwQAbebfAwQAbebyAwQA beb7AwQAuQpHAwQCuQ3kMA0GCSqGSIb3DQEBCwUAA4IBAQAw/tfihf63l7oqTu6d rhf7J8S+tVwlxxfAthJU9uxicUeq9M5oin/wzaH6hKlKN4TkAo1BEnkSPFnOiNC2 CDAokBr65CNuAqjCVZzG7INzzWVwCMaRiUuxCWTzHYWaAWLPY0aMbqPywfv3yG43 1tyY1xpRi3DXhVzdqj71OVh/ZPxEQhiBYKsnT4Dd2uGn9e7YeY4MLdHvsa+RbxRU hV7XcgjuKy1WE2uXfclJFsd9yB7gONmcCeZieG2pJqBarIRseVz+CXb9xyEgnLPA XUUhS+oWK6FYhJ+jWmLSI1B96KsHHwe2VOyAosYf299f/Nxf9DOCThbCGzNxLQ6H mLyy -----END CERTIFICATE-----Generated at Mon Jan 26 09:41:11 2026 by rpki-client