This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/fNxI3dXScPmMR3z1E-3FYKWMeS8.roa File: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (raw, json) Hash identifier: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw= Subject key identifier: 7C:DC:48:DD:D5:D2:70:F9:8C:47:7C:F5:13:ED:C5:60:A5:8C:79:2F Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Certificate serial: 019B7758D91D07C3E0C9E1CF9A0312EE2E13 Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/fNxI3dXScPmMR3z1E-3FYKWMeS8.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29405 IP address blocks: 2.57.64.0/22 maxlen: 24 46.229.224.0/20 maxlen: 24 46.229.230.0/24 maxlen: 24 81.89.48.0/20 maxlen: 24 86.110.224.0/19 maxlen: 24 86.110.229.0/24 maxlen: 24 86.110.238.0/24 maxlen: 24 92.240.228.0/24 maxlen: 24 92.240.229.0/24 maxlen: 24 92.240.230.0/24 maxlen: 24 92.240.231.0/24 maxlen: 24 92.240.234.0/24 maxlen: 24 92.240.235.0/24 maxlen: 24 92.240.236.0/24 maxlen: 24 92.240.237.0/24 maxlen: 24 92.240.241.0/24 maxlen: 24 92.240.242.0/24 maxlen: 24 92.240.244.0/24 maxlen: 24 92.240.245.0/24 maxlen: 24 92.240.249.0/24 maxlen: 24 92.240.253.0/24 maxlen: 24 92.240.254.0/24 maxlen: 24 93.184.64.0/20 maxlen: 24 109.74.144.0/20 maxlen: 24 176.109.56.0/21 maxlen: 24 185.176.72.0/22 maxlen: 22 217.73.16.0/20 maxlen: 24 217.73.16.0/24 maxlen: 24 217.73.17.0/24 maxlen: 24 2a00:10d8::/32 maxlen: 64 2a00:10d8:10::/48 maxlen: 64 2a01:390::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d9:1d:07:c3:e0:c9:e1:cf:9a:03:12:ee:2e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cdc48ddd5d270f98c477cf513edc560a58c792f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:3e:a1:49:4b:6c:ae:81:75:ae:85:8c:33: 59:6e:8f:ab:f0:5b:96:67:d1:50:ed:d1:77:ca:06: f8:c6:ac:e8:07:3d:01:be:99:52:b3:79:ed:3d:cf: 52:c0:4f:6a:49:be:77:0a:be:59:d1:2d:73:b9:bb: 32:3c:2b:3c:6b:e6:c4:94:44:a3:cf:84:c2:9e:3b: 41:ea:7a:a0:d7:cc:fa:60:d6:a3:cf:9c:a7:b8:0a: cf:20:d1:1c:75:96:05:b4:ec:fb:bd:8d:e1:8d:64: 01:0e:53:42:fa:e9:16:58:b8:7b:6f:53:87:47:c5: ab:aa:24:42:b7:2c:63:a1:1e:f9:73:79:10:f5:40: ec:1b:e5:8a:64:04:b9:df:f6:4a:3f:aa:b9:ea:da: 4c:cd:80:f2:19:82:f3:6a:5f:60:1c:84:b5:b7:8d: df:a5:b8:b5:c5:54:ef:c9:5f:4c:c2:50:5c:eb:af: c1:24:5d:53:57:30:2a:dd:ec:1a:58:78:20:b6:9a: 39:e3:17:9d:fe:44:01:d7:25:9d:a2:47:0d:bb:ab: 87:66:eb:a4:5b:8d:4b:7c:3d:4c:7e:51:d0:21:40: 78:20:b9:51:c9:b3:1d:ef:65:72:89:16:b2:29:f6: 43:75:ab:09:7d:68:b7:a4:65:3b:53:b8:e1:57:ba: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:48:DD:D5:D2:70:F9:8C:47:7C:F5:13:ED:C5:60:A5:8C:79:2F X509v3 Authority Key Identifier: keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/fNxI3dXScPmMR3z1E-3FYKWMeS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.64.0/22 46.229.224.0/20 81.89.48.0/20 86.110.224.0/19 92.240.228.0/22 92.240.234.0-92.240.237.255 92.240.241.0-92.240.242.255 92.240.244.0/23 92.240.249.0/24 92.240.253.0-92.240.254.255 93.184.64.0/20 109.74.144.0/20 176.109.56.0/21 185.176.72.0/22 217.73.16.0/20 IPv6: 2a00:10d8::/32 2a01:390::/32 Signature Algorithm: sha256WithRSAEncryption 67:53:7b:96:a0:50:30:db:02:95:d8:39:1d:48:c6:ee:44:36: a6:cc:97:70:aa:43:ba:d5:8b:18:84:e5:55:86:58:bf:74:42: 3f:55:15:1d:f6:38:e6:9e:62:59:c1:da:77:72:0e:4d:e1:cd: 76:e5:bb:e4:0d:6f:55:42:1f:c5:e0:f1:16:e6:b1:5f:10:70: 4d:1a:66:a6:73:dd:7d:a6:06:dd:f6:99:d1:f0:2f:f6:f1:ed: 93:00:ea:20:1f:bb:23:c7:12:cb:3a:58:64:20:1d:43:7f:16: c7:f4:f8:7f:89:11:b0:c1:80:e0:19:4f:a2:79:7a:df:4b:da: fe:7f:cc:f4:7b:8c:b8:9e:08:3c:a4:11:ed:9f:81:01:ef:b7: 86:a3:21:e4:28:d9:7a:49:51:c6:38:58:69:c7:66:bf:9d:b8: b4:eb:df:ed:54:9d:47:40:ac:d2:7f:6d:18:08:53:1d:ad:15: 6f:f3:80:9b:d0:82:89:72:3c:67:81:e1:26:d6:68:5c:ee:61: 81:68:0c:ac:06:36:6f:fe:b2:eb:ec:43:05:5e:09:a0:f0:dc: 51:22:3f:cc:2f:b7:b7:d6:1a:3d:9c:38:d6:df:c2:54:f6:f2: 8f:05:7b:36:4a:00:d0:cf:34:6e:24:9a:d3:ec:7f:7e:37:31: 86:49:9b:f0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgISAZt3WNkdB8PgyeHPmgMS7i4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZDlkMWQ5NWMxZWI3MTZlZTgxOTUwNDVhNzdjYmEyMTgx ZDc5ZWMwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2RjNDhkZGQ1ZDI3MGY5OGM0NzdjZjUxM2VkYzU2MGE1OGM3OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCQ+oUlLbK6Bda6FjDNZbo+r8FuW Z9FQ7dF3ygb4xqzoBz0BvplSs3ntPc9SwE9qSb53Cr5Z0S1zubsyPCs8a+bElESj z4TCnjtB6nqg18z6YNajz5ynuArPINEcdZYFtOz7vY3hjWQBDlNC+ukWWLh7b1OH R8WrqiRCtyxjoR75c3kQ9UDsG+WKZAS53/ZKP6q56tpMzYDyGYLzal9gHIS1t43f pbi1xVTvyV9MwlBc66/BJF1TVzAq3ewaWHggtpo54xed/kQB1yWdokcNu6uHZuuk W41LfD1MflHQIUB4ILlRybMd72VyiRayKfZDdasJfWi3pGU7U7jhV7q+/wIDAQAB o4ICjjCCAoowHQYDVR0OBBYEFHzcSN3V0nD5jEd89RPtxWCljHkvMB8GA1UdIwQY MBaAFGPZ0dlcHrcW7oGVBFp3y6IYHXnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDIt ZDgwYzZiODVjZGE0LzEvZk54STNkWFNjUG1NUjN6MUUtM0ZZS1dNZVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zZWQ4ZGQtZDM2ZS00NDBjLTgxNDItZDgwYzZiODVjZGE0 LzEvWTluUjJWd2V0eGJ1Z1pVRVduZkxvaGdkZWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDB4BAIAATByAwQCAjlA AwQELuXgAwQEUVkwAwQFVm7gAwQCXPDkMAwDBAFc8OoDBAFc8OwwDAMEAFzw8QME AFzw8gMEAVzw9AMEAFzw+TAMAwQAXPD9AwQAXPD+AwQEXbhAAwQEbUqQAwQDsG04 AwQCubBIAwQE2UkQMBQEAgACMA4DBQAqABDYAwUAKgEDkDANBgkqhkiG9w0BAQsF AAOCAQEAZ1N7lqBQMNsCldg5HUjG7kQ2psyXcKpDutWLGITlVYZYv3RCP1UVHfY4 5p5iWcHad3IOTeHNduW75A1vVUIfxeDxFuaxXxBwTRpmpnPdfaYG3faZ0fAv9vHt kwDqIB+7I8cSyzpYZCAdQ38Wx/T4f4kRsMGA4BlPonl630va/n/M9HuMuJ4IPKQR 7Z+BAe+3hqMh5CjZeklRxjhYacdmv524tOvf7VSdR0Cs0n9tGAhTHa0Vb/OAm9CC iXI8Z4HhJtZoXO5hgWgMrAY2b/6y6+xDBV4JoPDcUSI/zC+3t9YaPZw41t/CVPby jwV7NkoA0M80biSa0+x/fjcxhkmb8A== -----END CERTIFICATE-----Generated at Mon Jan 26 14:59:26 2026 by rpki-client