This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/n05zwG4en5qxsV4GyAoEqt3PxQo.roa File: n05zwG4en5qxsV4GyAoEqt3PxQo.roa (raw, json) Hash identifier: DEEJbhVIGe6qAKBZrDnj7vjpDliiIkF68Xjg5C7PX58= Subject key identifier: 9F:4E:73:C0:6E:1E:9F:9A:B1:B1:5E:06:C8:0A:04:AA:DD:CF:C5:0A Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096 Certificate serial: 019B7A5B770E30B642285079648F9EA29672 Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/n05zwG4en5qxsV4GyAoEqt3PxQo.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202045 IP address blocks: 31.177.0.0/22 maxlen: 22 31.177.0.0/23 maxlen: 23 31.177.2.0/23 maxlen: 23 31.177.4.0/24 maxlen: 24 31.177.5.0/24 maxlen: 24 31.177.6.0/23 maxlen: 23 45.145.122.0/23 maxlen: 23 94.199.5.0/24 maxlen: 24 171.22.144.0/24 maxlen: 24 185.180.152.0/22 maxlen: 22 193.138.240.0/24 maxlen: 24 193.138.241.0/24 maxlen: 24 2a13:7500:1000::/36 maxlen: 36 2a13:7500:1000::/48 maxlen: 48 2a13:7500:1200::/44 maxlen: 44 2a13:7500:1241::/48 maxlen: 48 2a13:7500:1242::/48 maxlen: 48 2a13:7500:1248::/48 maxlen: 48 2a13:7500:1320::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:77:0e:30:b6:42:28:50:79:64:8f:9e:a2:96:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f4e73c06e1e9f9ab1b15e06c80a04aaddcfc50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:52:75:9f:9d:81:16:cd:7f:47:4c:d6:37:87: 65:9b:53:d5:ed:6b:06:bd:ae:85:2b:e1:13:49:1f: 1f:a2:10:bc:b0:8d:b8:ae:bf:85:30:7d:39:b5:5d: b8:d9:1e:81:97:20:ec:79:74:e1:13:d8:59:bb:47: 68:6b:c9:58:ac:44:7b:ba:9c:16:30:5b:12:54:fa: 08:da:5a:6a:60:fe:6c:61:34:1c:f9:61:ca:ab:45: 27:4c:8f:94:f2:e8:1a:9e:cd:90:ad:84:9e:29:ec: e7:9c:22:a8:a9:a3:39:60:43:47:bb:77:16:66:73: 94:cd:f5:29:61:fc:2e:7e:b9:7d:dc:4c:e0:75:42: 74:c2:e0:d7:29:eb:61:5e:1a:23:42:60:b2:34:9f: 4d:2c:3d:dc:0c:39:81:b7:2e:61:e7:e0:4a:65:5c: ae:d0:f2:5a:6b:9f:aa:f9:32:f9:6f:69:26:5f:7d: d8:0e:fe:99:22:39:10:be:b9:ff:b4:46:2e:7b:16: 94:57:5d:bc:6e:17:26:ad:b7:8b:f9:28:d2:4d:db: 55:5f:0c:5d:5c:90:c6:70:94:21:c6:62:fa:aa:84: f4:22:69:2c:1a:ed:b7:5f:64:d5:2d:b1:a6:4a:ac: c0:5f:e9:44:94:23:5e:9d:c1:0f:6e:eb:f4:61:05: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4E:73:C0:6E:1E:9F:9A:B1:B1:5E:06:C8:0A:04:AA:DD:CF:C5:0A X509v3 Authority Key Identifier: keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/n05zwG4en5qxsV4GyAoEqt3PxQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.0.0/21 45.145.122.0/23 94.199.5.0/24 171.22.144.0/24 185.180.152.0/22 193.138.240.0/23 IPv6: 2a13:7500:1000::/36 Signature Algorithm: sha256WithRSAEncryption 0d:50:c8:16:06:79:d0:8b:d3:6a:9a:87:b7:fd:d7:fb:aa:a9: 16:fd:eb:7b:43:88:d5:92:b5:e2:1a:e1:37:6b:f1:cf:ea:89: 34:db:60:b7:a0:24:1c:59:34:ee:cf:2a:2f:68:3b:3b:49:68: 23:0b:37:e3:b1:00:b8:87:bb:78:66:d7:c3:8b:11:60:3f:e8: a2:a9:b1:81:db:ae:78:b7:46:d8:95:a8:f0:b5:ea:98:74:3f: dc:2d:d3:a8:c7:69:e4:00:34:8e:0f:7b:1a:8b:ed:c5:5d:41: e9:19:95:52:b6:35:fe:9b:fd:fd:ae:97:5d:34:e6:bd:22:3f: 00:56:aa:df:89:ef:db:76:da:c3:95:1b:9c:15:60:2a:bd:57: b1:c2:a2:a5:cc:e9:aa:34:49:c1:0c:4d:60:1c:3e:e0:c9:a1: aa:fc:80:50:81:00:36:f9:64:71:e3:2c:17:bf:69:3f:c8:47: cc:5b:ba:3e:90:8d:82:99:97:c0:d9:f6:eb:a0:cc:03:22:5e: 65:42:9d:50:89:b0:b1:d1:80:42:5a:a8:91:99:9f:2e:4a:2d: 44:0a:f0:69:bd:ca:4d:2c:12:10:d7:36:1d:fe:23:4c:3d:c3: ac:7f:61:f7:95:b9:94:5e:c2:c0:eb:ad:cd:d5:3d:72:55:20: 2c:79:6b:66 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt6W3cOMLZCKFB5ZI+eopZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3 NDAwOTYwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjRlNzNjMDZlMWU5ZjlhYjFiMTVlMDZjODBhMDRhYWRkY2ZjNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VJ1n52BFs1/R0zWN4dlm1PV7WsG va6FK+ETSR8fohC8sI24rr+FMH05tV242R6BlyDseXThE9hZu0doa8lYrER7upwW MFsSVPoI2lpqYP5sYTQc+WHKq0UnTI+U8ugans2QrYSeKeznnCKoqaM5YENHu3cW ZnOUzfUpYfwufrl93EzgdUJ0wuDXKethXhojQmCyNJ9NLD3cDDmBty5h5+BKZVyu 0PJaa5+q+TL5b2kmX33YDv6ZIjkQvrn/tEYuexaUV128bhcmrbeL+SjSTdtVXwxd XJDGcJQhxmL6qoT0ImksGu23X2TVLbGmSqzAX+lElCNencEPbuv0YQUZ7QIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFJ9Oc8BuHp+asbFeBsgKBKrdz8UKMB8GA1UdIwQY MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt MTRlM2MyMDE3OTY5LzEvbjA1endHNGVuNXF4c1Y0R3lBb0VxdDNQeFFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5 LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAqBAIAATAkAwQDH7EAAwQB LZF6AwQAXscFAwQAqxaQAwQCubSYAwQBwYrwMA4EAgACMAgDBgQqE3UAEDANBgkq hkiG9w0BAQsFAAOCAQEADVDIFgZ50IvTapqHt/3X+6qpFv3re0OI1ZK14hrhN2vx z+qJNNtgt6AkHFk07s8qL2g7O0loIws347EAuIe7eGbXw4sRYD/ooqmxgduueLdG 2JWo8LXqmHQ/3C3TqMdp5AA0jg97GovtxV1B6RmVUrY1/pv9/a6XXTTmvSI/AFaq 34nv23baw5UbnBVgKr1XscKipczpqjRJwQxNYBw+4MmhqvyAUIEANvlkceMsF79p P8hHzFu6PpCNgpmXwNn266DMAyJeZUKdUImwsdGAQlqokZmfLkotRArwab3KTSwS ENc2Hf4jTD3DrH9h95W5lF7CwOutzdU9clUgLHlrZg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:40:12 2026 by rpki-client