This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa File: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (raw, json) Hash identifier: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg= Subject key identifier: D2:6D:90:DF:D0:15:CC:CB:E6:25:B5:EF:65:57:80:A7:90:54:A8:73 Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681 Certificate serial: 019B79112F89FC57989EF1E9A620BD7EE876 Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12963 IP address blocks: 94.232.208.0/21 maxlen: 21 94.232.208.0/24 maxlen: 24 94.232.209.0/24 maxlen: 24 94.232.210.0/24 maxlen: 24 94.232.211.0/24 maxlen: 24 94.232.212.0/24 maxlen: 24 94.232.213.0/24 maxlen: 24 94.232.214.0/24 maxlen: 24 94.232.215.0/24 maxlen: 24 176.100.0.0/19 maxlen: 19 176.100.0.0/24 maxlen: 24 176.100.1.0/24 maxlen: 24 176.100.2.0/23 maxlen: 24 176.100.2.0/24 maxlen: 24 176.100.3.0/24 maxlen: 24 176.100.4.0/24 maxlen: 24 176.100.5.0/24 maxlen: 24 176.100.6.0/24 maxlen: 24 176.100.8.0/24 maxlen: 24 176.100.9.0/24 maxlen: 24 176.100.10.0/23 maxlen: 24 176.100.10.0/24 maxlen: 24 176.100.11.0/24 maxlen: 24 176.100.12.0/24 maxlen: 24 176.100.13.0/24 maxlen: 24 176.100.14.0/24 maxlen: 24 176.100.15.0/24 maxlen: 24 176.100.16.0/20 maxlen: 20 176.100.16.0/24 maxlen: 24 176.100.17.0/24 maxlen: 24 176.100.18.0/24 maxlen: 24 176.100.19.0/24 maxlen: 24 176.100.20.0/24 maxlen: 24 176.100.21.0/24 maxlen: 24 176.100.22.0/24 maxlen: 24 176.100.23.0/24 maxlen: 24 176.100.24.0/24 maxlen: 24 176.100.25.0/24 maxlen: 24 176.100.26.0/24 maxlen: 24 176.100.27.0/24 maxlen: 24 176.100.28.0/24 maxlen: 24 176.100.29.0/24 maxlen: 24 176.100.30.0/24 maxlen: 24 176.100.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2f:89:fc:57:98:9e:f1:e9:a6:20:bd:7e:e8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d26d90dfd015cccbe625b5ef655780a79054a873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:9e:b0:8e:19:fb:f2:2e:dc:a7:1f:cf:91: 96:f2:8d:9a:a1:6d:02:70:1f:6b:02:dc:e0:d1:92: e3:85:3f:d6:53:0d:b5:f6:17:5e:56:f9:34:92:62: 08:63:83:b8:2d:05:76:17:17:d2:91:b8:65:bb:67: 85:20:ff:28:25:1b:21:82:78:56:c7:c5:0a:82:ca: f8:28:28:73:9f:d0:e8:ec:cd:b5:22:fd:59:76:04: 84:7c:ae:87:49:71:76:7e:11:2c:22:55:70:01:ea: cc:94:2e:28:9b:10:bd:25:ba:96:b8:d1:d6:ca:ce: 2c:cd:2d:45:09:7b:d4:2d:96:29:f2:49:9f:78:a9: 92:a4:bc:42:3a:58:0d:88:fe:e9:de:ad:e3:7d:68: 8b:0f:68:d2:9b:33:04:d5:05:13:b9:93:00:6b:e2: 7e:7c:18:75:2f:3a:d6:43:f5:12:37:45:ef:f2:93: 02:a6:02:96:21:0c:ad:c3:6c:18:47:fb:a9:0c:a8: 17:49:b0:c5:d5:77:08:97:60:00:46:23:27:76:95: 0b:ef:0b:26:6a:55:fd:b0:81:07:12:95:18:8a:31: 63:90:bd:66:84:25:3a:ff:6e:3c:d0:5f:0c:0a:b9: 3f:ea:df:9d:07:62:53:6e:2d:e1:d0:38:e2:07:7d: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:90:DF:D0:15:CC:CB:E6:25:B5:EF:65:57:80:A7:90:54:A8:73 X509v3 Authority Key Identifier: keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.208.0/21 176.100.0.0/19 Signature Algorithm: sha256WithRSAEncryption aa:05:06:97:62:96:66:72:51:f5:c1:af:13:79:80:0b:12:f4: 8b:7c:78:c5:23:07:f8:93:d4:7a:69:11:8c:7f:f9:5d:ad:81: 40:18:b8:8d:a8:9a:9b:f9:c9:c6:18:13:67:cc:b6:bd:de:3c: b0:df:eb:02:5d:6a:b8:fc:ab:3a:1b:72:43:18:ec:c6:f7:2c: 1e:89:0e:fe:43:90:d5:34:99:a9:1b:2b:01:cd:e6:36:54:de: 23:a7:bc:f0:70:67:c7:f7:23:6d:77:dd:0c:33:c4:32:5c:f8: 1c:e8:79:8a:16:f7:19:a0:43:54:f1:46:fb:b5:22:55:a0:bc: 9a:d5:36:72:5e:53:1c:4d:37:eb:55:5b:6f:c8:5d:84:4b:0c: 07:71:60:32:4d:65:9d:84:45:f6:20:b4:c8:8a:16:b1:f3:f3: 7e:38:61:64:3f:77:3c:ff:2c:c8:92:a1:61:86:ba:dc:05:74: a1:0f:ae:bf:e9:3e:af:06:de:aa:02:4d:eb:d4:e6:91:49:d4: dd:4b:5f:00:fa:93:53:e2:7c:a2:f8:e9:6b:49:d8:2b:eb:d9: 48:ea:00:8a:02:3c:1b:25:ca:d5:bc:84:c0:2a:dc:69:13:0d: 28:14:ad:56:71:23:83:6c:c1:b5:86:41:bc:3d:66:b1:e7:60: 3b:2b:75:c9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ES+J/FeYnvHppiC9fuh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy NDg2ODEwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjZkOTBkZmQwMTVjY2NiZTYyNWI1ZWY2NTU3ODBhNzkwNTRhODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZmesI4Z+/Iu3Kcfz5GW8o2aoW0C cB9rAtzg0ZLjhT/WUw219hdeVvk0kmIIY4O4LQV2FxfSkbhlu2eFIP8oJRshgnhW x8UKgsr4KChzn9Do7M21Iv1ZdgSEfK6HSXF2fhEsIlVwAerMlC4omxC9JbqWuNHW ys4szS1FCXvULZYp8kmfeKmSpLxCOlgNiP7p3q3jfWiLD2jSmzME1QUTuZMAa+J+ fBh1LzrWQ/USN0Xv8pMCpgKWIQytw2wYR/upDKgXSbDF1XcIl2AARiMndpUL7wsm alX9sIEHEpUYijFjkL1mhCU6/2480F8MCrk/6t+dB2JTbi3h0DjiB33cMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNJtkN/QFczL5iW172VXgKeQVKhzMB8GA1UdIwQY MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt M2VhMmViZmU4NzA3LzEvMG0yUTM5QVZ6TXZtSmJYdlpWZUFwNUJVcUhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3 LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXujQAwQF sGQAMA0GCSqGSIb3DQEBCwUAA4IBAQCqBQaXYpZmclH1wa8TeYALEvSLfHjFIwf4 k9R6aRGMf/ldrYFAGLiNqJqb+cnGGBNnzLa93jyw3+sCXWq4/Ks6G3JDGOzG9ywe iQ7+Q5DVNJmpGysBzeY2VN4jp7zwcGfH9yNtd90MM8QyXPgc6HmKFvcZoENU8Ub7 tSJVoLya1TZyXlMcTTfrVVtvyF2ESwwHcWAyTWWdhEX2ILTIihax8/N+OGFkP3c8 /yzIkqFhhrrcBXShD66/6T6vBt6qAk3r1OaRSdTdS18A+pNT4nyi+OlrSdgr69lI 6gCKAjwbJcrVvITAKtxpEw0oFK1WcSODbMG1hkG8PWax52A7K3XJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:57 2026 by rpki-client