This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa File: mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa (raw, json) Hash identifier: 64Bq4BjaquUNa/q+gUB1JEszW2wTR9StXwwTroa+sNw= Subject key identifier: 9B:3C:AB:7E:4D:3F:48:A5:C9:E2:39:B7:97:E8:3B:AE:D7:A6:F8:D8 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B7DC9D296257CBF3EBB2788295D01FF7C Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa Signing time: Fri 02 Jan 2026 08:18:57 +0000 ROA not before: Fri 02 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207333 IP address blocks: 31.14.27.0/24 maxlen: 24 86.107.44.0/24 maxlen: 24 86.107.45.0/24 maxlen: 24 86.107.198.0/24 maxlen: 24 86.107.199.0/24 maxlen: 24 89.33.41.0/24 maxlen: 24 89.35.124.0/24 maxlen: 24 89.35.125.0/24 maxlen: 24 89.46.33.0/24 maxlen: 24 89.46.34.0/24 maxlen: 24 92.114.7.0/24 maxlen: 24 109.235.112.0/24 maxlen: 24 109.235.113.0/24 maxlen: 24 109.235.114.0/24 maxlen: 24 109.235.115.0/24 maxlen: 24 109.235.116.0/24 maxlen: 24 109.235.117.0/24 maxlen: 24 109.235.118.0/24 maxlen: 24 109.235.119.0/24 maxlen: 24 185.98.5.0/24 maxlen: 24 185.98.6.0/24 maxlen: 24 185.98.7.0/24 maxlen: 24 185.100.64.0/24 maxlen: 24 185.100.65.0/24 maxlen: 24 185.100.67.0/24 maxlen: 24 185.111.104.0/24 maxlen: 24 185.111.105.0/24 maxlen: 24 185.111.106.0/24 maxlen: 24 185.111.107.0/24 maxlen: 24 185.113.132.0/24 maxlen: 24 185.113.134.0/24 maxlen: 24 185.113.135.0/24 maxlen: 24 185.121.80.0/24 maxlen: 24 185.121.81.0/24 maxlen: 24 185.121.82.0/24 maxlen: 24 185.121.83.0/24 maxlen: 24 185.125.89.0/24 maxlen: 24 185.129.48.0/24 maxlen: 24 185.129.49.0/24 maxlen: 24 185.129.50.0/24 maxlen: 24 185.129.51.0/24 maxlen: 24 188.241.216.0/24 maxlen: 24 188.241.217.0/24 maxlen: 24 2a06:940::/48 maxlen: 48 2a06:940:2::/48 maxlen: 48 2a06:942::/48 maxlen: 48 2a06:942:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d2:96:25:7c:bf:3e:bb:27:88:29:5d:01:ff:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jan 2 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b3cab7e4d3f48a5c9e239b797e83baed7a6f8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:37:33:e2:72:67:e5:40:64:18:dc:5b:63: 4c:92:20:e5:ee:ae:9d:2f:05:9f:3d:d6:b1:f2:1f: 4f:7e:b5:d1:0e:21:b9:76:5e:53:47:32:7d:08:a1: 53:49:90:12:da:b0:69:37:89:b2:49:74:64:f6:3d: 54:be:06:8f:b5:4d:46:f3:e2:86:f0:9d:e7:a2:7e: b6:26:b0:82:34:59:7a:79:7d:7a:e7:06:6c:dc:84: b3:4c:04:d0:85:04:12:5c:b5:24:56:26:6f:9b:44: 2b:58:f1:a2:3d:fc:51:e0:14:d7:43:cc:38:28:7a: 51:5f:eb:8e:ad:59:62:61:25:eb:3a:50:56:6e:27: f3:1a:cf:e6:29:4f:e7:9e:fe:8f:8b:65:be:ad:18: fc:de:47:dd:16:af:86:43:d4:d2:74:2b:2b:e0:3e: 91:a3:72:3d:3e:83:be:83:68:74:f8:4b:17:a1:c4: 50:eb:63:18:4d:2d:4d:5c:49:a6:4f:2e:a6:7c:7e: db:b5:be:ab:9a:cc:08:c5:b4:c2:05:6a:f2:9f:94: bb:1d:26:56:ea:2a:b0:6d:99:4c:13:72:f5:97:bc: a7:83:1d:ee:65:04:d3:e9:82:a1:1e:21:92:26:fb: 04:8f:a2:eb:17:da:c4:6a:70:84:bf:00:f3:d0:b0: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3C:AB:7E:4D:3F:48:A5:C9:E2:39:B7:97:E8:3B:AE:D7:A6:F8:D8 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/mzyrfk0_SKXJ4jm3l-g7rtem-Ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.27.0/24 86.107.44.0/23 86.107.198.0/23 89.33.41.0/24 89.35.124.0/23 89.46.33.0-89.46.34.255 92.114.7.0/24 109.235.112.0/21 185.98.5.0-185.98.7.255 185.100.64.0/23 185.100.67.0/24 185.111.104.0/22 185.113.132.0/24 185.113.134.0/23 185.121.80.0/22 185.125.89.0/24 185.129.48.0/22 188.241.216.0/23 IPv6: 2a06:940::/48 2a06:940:2::/48 2a06:942::/48 2a06:942:2::/48 Signature Algorithm: sha256WithRSAEncryption 10:9d:72:5e:8f:4c:65:87:05:e9:08:ea:d4:e9:11:5f:ee:b6: 84:13:46:8f:0a:40:c5:0e:f7:73:89:57:f5:1d:79:9a:3d:7f: c4:e5:f3:97:52:e5:dd:c5:ab:32:57:69:c7:53:ee:b2:a8:d7: 7c:59:98:66:47:75:cd:f1:3e:08:e7:c4:3e:2f:3e:3f:fa:7e: df:84:0c:e2:ab:ed:db:dc:d7:86:38:9a:6a:89:31:01:48:4a: 13:a4:d2:0c:9e:c2:97:20:1f:20:77:1a:f5:0c:f4:92:23:f6: c2:8d:06:a3:04:24:13:c2:95:d9:37:f5:d4:10:6f:c6:df:73: e6:89:68:cc:17:9b:ab:72:62:4a:be:01:53:ac:18:ad:ec:d2: c4:92:2e:48:9b:43:4d:a5:82:a1:6e:3f:14:66:a8:45:fb:7b: 84:19:da:9c:19:d2:b2:8d:d5:c5:27:9d:64:ec:5b:92:a8:84: da:ef:0e:70:32:9d:38:03:2f:5a:91:d7:a9:32:31:0a:cb:97: c8:0a:7b:33:d0:d3:76:94:33:1e:f3:93:38:6c:bd:28:46:75: 8d:62:87:68:3f:06:84:64:0a:f8:df:5a:79:c2:b8:9a:ab:25: de:19:d4:da:7c:f5:5c:c9:5d:e4:94:f9:6a:47:6c:a5:ce:c6: 2a:03:25:f9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9ydKWJXy/PrsniCldAf98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMTAyMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjNjYWI3ZTRkM2Y0OGE1YzllMjM5Yjc5N2U4M2JhZWQ3YTZmOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokc3M+JyZ+VAZBjcW2NMkiDl7q6d LwWfPdax8h9PfrXRDiG5dl5TRzJ9CKFTSZAS2rBpN4mySXRk9j1UvgaPtU1G8+KG 8J3non62JrCCNFl6eX165wZs3ISzTATQhQQSXLUkViZvm0QrWPGiPfxR4BTXQ8w4 KHpRX+uOrVliYSXrOlBWbifzGs/mKU/nnv6Pi2W+rRj83kfdFq+GQ9TSdCsr4D6R o3I9PoO+g2h0+EsXocRQ62MYTS1NXEmmTy6mfH7btb6rmswIxbTCBWryn5S7HSZW 6iqwbZlME3L1l7yngx3uZQTT6YKhHiGSJvsEj6LrF9rEanCEvwDz0LCEfwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFJs8q35NP0ilyeI5t5foO67XpvjYMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvbXp5cmZrMF9TS1hKNGptM2wtZzdydGVtLU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTCBggQCAAEwfAMEAB8O GwMEAVZrLAMEAVZrxgMEAFkhKQMEAVkjfDAMAwQAWS4hAwQAWS4iAwQAXHIHAwQD betwMAwDBAC5YgUDBAO5YgADBAG5ZEADBAC5ZEMDBAK5b2gDBAC5cYQDBAG5cYYD BAK5eVADBAC5fVkDBAK5gTADBAG88dgwKgQCAAIwJAMHACoGCUAAAAMHACoGCUAA AgMHACoGCUIAAAMHACoGCUIAAjANBgkqhkiG9w0BAQsFAAOCAQEAEJ1yXo9MZYcF 6Qjq1OkRX+62hBNGjwpAxQ73c4lX9R15mj1/xOXzl1Ll3cWrMldpx1PusqjXfFmY Zkd1zfE+COfEPi8+P/p+34QM4qvt29zXhjiaaokxAUhKE6TSDJ7ClyAfIHca9Qz0 kiP2wo0GowQkE8KV2Tf11BBvxt9z5olozBebq3JiSr4BU6wYrezSxJIuSJtDTaWC oW4/FGaoRft7hBnanBnSso3VxSedZOxbkqiE2u8OcDKdOAMvWpHXqTIxCsuXyAp7 M9DTdpQzHvOTOGy9KEZ1jWKHaD8GhGQK+N9aecK4mqsl3hnU2nz1XMld5JT5akds pc7GKgMl+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:42 2026 by rpki-client