This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/msnnLQdoKjqNvOHMJs9IN5ceZuY.roa File: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (raw, json) Hash identifier: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0= Subject key identifier: 9A:C9:E7:2D:07:68:2A:3A:8D:BC:E1:CC:26:CF:48:37:97:1E:66:E6 Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B7F15FE9A622BC7E209EB464320ADC11A Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/msnnLQdoKjqNvOHMJs9IN5ceZuY.roa Signing time: Fri 02 Jan 2026 14:21:46 +0000 ROA not before: Fri 02 Jan 2026 14:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44043 IP address blocks: 31.14.12.0/24 maxlen: 24 31.14.13.0/24 maxlen: 24 31.14.14.0/24 maxlen: 24 31.14.15.0/24 maxlen: 24 31.14.22.0/24 maxlen: 24 31.14.23.0/24 maxlen: 24 46.102.249.0/24 maxlen: 24 89.36.131.0/24 maxlen: 24 89.44.47.0/24 maxlen: 24 89.44.120.0/24 maxlen: 24 89.44.138.0/24 maxlen: 24 89.44.139.0/24 maxlen: 24 89.46.7.0/24 maxlen: 24 91.195.28.0/24 maxlen: 24 91.195.29.0/24 maxlen: 24 91.200.120.0/22 maxlen: 22 92.114.94.0/24 maxlen: 24 92.114.95.0/24 maxlen: 24 94.176.104.0/24 maxlen: 24 94.176.105.0/24 maxlen: 24 176.126.200.0/24 maxlen: 24 176.126.201.0/24 maxlen: 24 176.126.202.0/24 maxlen: 24 176.126.203.0/24 maxlen: 24 176.223.120.0/23 maxlen: 23 176.223.122.0/23 maxlen: 23 176.223.124.0/23 maxlen: 23 176.223.126.0/23 maxlen: 23 185.92.192.0/24 maxlen: 24 185.92.193.0/24 maxlen: 24 185.92.194.0/24 maxlen: 24 185.92.195.0/24 maxlen: 24 188.212.156.0/24 maxlen: 24 188.213.20.0/23 maxlen: 23 188.215.244.0/23 maxlen: 23 188.215.250.0/23 maxlen: 23 188.240.2.0/23 maxlen: 23 188.240.235.0/24 maxlen: 24 188.241.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fe:9a:62:2b:c7:e2:09:eb:46:43:20:ad:c1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Jan 2 14:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ac9e72d07682a3a8dbce1cc26cf4837971e66e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:e9:f4:fd:e7:f5:9d:f6:cd:05:cd:d7:4d: 3c:49:a8:f1:09:14:d3:b8:21:e0:d2:a8:20:8b:5d: d5:8c:6a:d2:8e:14:97:d5:75:a5:ed:ae:a8:8a:e3: e7:4a:f2:8c:d1:f2:81:2a:76:27:2b:3f:8b:1c:90: e6:4b:fe:1b:c0:ec:b1:b0:e3:33:0e:57:52:30:97: 45:96:18:b9:6a:21:62:b1:4a:3e:58:40:81:96:13: fc:0a:7a:64:1d:d7:28:fd:34:5c:76:53:aa:f6:48: d6:fc:7c:3d:bc:5f:4e:f8:69:d3:bd:6f:28:0c:89: 1f:ca:f0:4d:c7:da:5d:8c:91:a1:53:63:2d:65:f1: 5a:47:e9:e4:e7:39:b8:b6:40:a6:13:65:95:7b:4c: cf:c5:89:e8:4c:f4:73:ff:b3:12:98:6c:88:3c:d5: 93:7e:0f:58:bb:63:a0:64:24:f4:fd:f4:2b:c2:49: d2:c5:85:83:88:b1:53:e3:2f:58:6f:09:ec:b5:8b: 60:1f:e7:91:ca:7d:f8:61:95:01:f7:45:d3:a0:64: e8:50:29:e8:bf:31:96:5f:ec:8a:b4:fc:c8:04:da: 38:e6:a6:c8:b7:25:8c:e5:4b:e4:0b:45:63:9d:13: 97:bc:1e:11:b0:f2:9e:09:86:e4:47:1e:46:81:29: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C9:E7:2D:07:68:2A:3A:8D:BC:E1:CC:26:CF:48:37:97:1E:66:E6 X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/msnnLQdoKjqNvOHMJs9IN5ceZuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.12.0/22 31.14.22.0/23 46.102.249.0/24 89.36.131.0/24 89.44.47.0/24 89.44.120.0/24 89.44.138.0/23 89.46.7.0/24 91.195.28.0/23 91.200.120.0/22 92.114.94.0/23 94.176.104.0/23 176.126.200.0/22 176.223.120.0/21 185.92.192.0/22 188.212.156.0/24 188.213.20.0/23 188.215.244.0/23 188.215.250.0/23 188.240.2.0/23 188.240.235.0/24 188.241.183.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:00:a1:12:35:16:e2:e8:42:58:f5:32:6a:c9:e8:d7:6f:24: 7d:8d:8d:20:79:ca:0a:b4:d9:af:f1:1d:b5:52:3f:af:53:d0: ba:9f:b0:8c:88:47:dc:66:df:3f:57:58:c2:fa:f7:4f:01:56: fa:f0:40:11:76:10:a0:7e:41:9f:ce:f8:1b:f3:e1:ee:c7:c3: 0c:4b:21:ca:b6:d7:07:3b:9b:95:a3:9a:a3:8b:63:ad:ea:36: ae:82:c5:25:43:80:5a:79:3e:ff:ee:24:db:06:46:0b:c4:de: b7:40:69:7a:a9:ef:e1:b4:57:df:ae:56:69:6e:a1:2d:28:90: 23:ff:b2:8b:fa:ea:8b:dc:04:ff:75:d3:4f:53:33:d2:35:ed: ff:d1:d5:c9:a5:31:39:30:3a:92:cd:bc:4c:12:d4:1c:22:35: 01:df:96:5a:d6:df:9a:64:41:b0:12:17:0a:44:ba:5c:13:26: 35:4f:09:72:1a:6a:15:8a:db:ff:db:b1:6b:71:c4:a8:34:24: 51:2d:75:97:9e:d7:23:6e:fc:df:8e:08:29:98:b0:57:6d:79: 35:7a:6a:38:a2:6c:ea:c8:42:2f:4c:37:c0:08:6f:97:ef:89: 15:ad:e2:80:43:42:f9:f6:06:ca:31:9e:c2:b6:f4:92:2f:fb: 64:9c:22:42 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt/Ff6aYivH4gnrRkMgrcEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjYwMTAyMTQyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWM5ZTcyZDA3NjgyYTNhOGRiY2UxY2MyNmNmNDgzNzk3MWU2NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Abp9P3n9Z32zQXN1008SajxCRTT uCHg0qggi13VjGrSjhSX1XWl7a6oiuPnSvKM0fKBKnYnKz+LHJDmS/4bwOyxsOMz DldSMJdFlhi5aiFisUo+WECBlhP8CnpkHdco/TRcdlOq9kjW/Hw9vF9O+GnTvW8o DIkfyvBNx9pdjJGhU2MtZfFaR+nk5zm4tkCmE2WVe0zPxYnoTPRz/7MSmGyIPNWT fg9Yu2OgZCT0/fQrwknSxYWDiLFT4y9YbwnstYtgH+eRyn34YZUB90XToGToUCno vzGWX+yKtPzIBNo45qbItyWM5UvkC0VjnROXvB4RsPKeCYbkRx5GgSl6PQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFJrJ5y0HaCo6jbzhzCbPSDeXHmbmMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvbXNubkxRZG9LanFOdk9ITUpzOUlONWNlWnVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAIf DgwDBAEfDhYDBAAuZvkDBABZJIMDBABZLC8DBABZLHgDBAFZLIoDBABZLgcDBAFb wxwDBAJbyHgDBAFccl4DBAFesGgDBAKwfsgDBAOw33gDBAK5XMADBAC81JwDBAG8 1RQDBAG81/QDBAG81/oDBAG88AIDBAC88OsDBAC88bcwDQYJKoZIhvcNAQELBQAD ggEBABoAoRI1FuLoQlj1MmrJ6NdvJH2NjSB5ygq02a/xHbVSP69T0LqfsIyIR9xm 3z9XWML6908BVvrwQBF2EKB+QZ/O+Bvz4e7HwwxLIcq21wc7m5WjmqOLY63qNq6C xSVDgFp5Pv/uJNsGRgvE3rdAaXqp7+G0V9+uVmluoS0okCP/sov66ovcBP91009T M9I17f/R1cmlMTkwOpLNvEwS1BwiNQHfllrW35pkQbASFwpEulwTJjVPCXIaahWK 2//bsWtxxKg0JFEtdZee1yNu/N+OCCmYsFdteTV6ajiibOrIQi9MN8AIb5fviRWt 4oBDQvn2BsoxnsK29JIv+2ScIkI= -----END CERTIFICATE-----Generated at Sun Jan 25 16:14:14 2026 by rpki-client