This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/9jeDYK_knLWdWNHtP5D0cVO31qY.roa File: 9jeDYK_knLWdWNHtP5D0cVO31qY.roa (raw, json) Hash identifier: 6Wo1Gq7cJQHP7npXhJpTMr2r87iqorsL+3UpSfgjQL8= Subject key identifier: F6:37:83:60:AF:E4:9C:B5:9D:58:D1:ED:3F:90:F4:71:53:B7:D6:A6 Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Certificate serial: 019BB23CE6B0E0A75492EAFB41C97396CB9E Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/9jeDYK_knLWdWNHtP5D0cVO31qY.roa Signing time: Mon 12 Jan 2026 12:44:54 +0000 ROA not before: Mon 12 Jan 2026 12:44:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198187 IP address blocks: 85.155.80.0/21 maxlen: 21 85.155.80.0/22 maxlen: 22 85.155.80.0/23 maxlen: 23 85.155.82.0/23 maxlen: 23 85.155.84.0/22 maxlen: 22 85.155.84.0/23 maxlen: 23 85.155.86.0/23 maxlen: 23 91.231.23.0/24 maxlen: 24 91.232.62.0/23 maxlen: 23 91.232.62.0/24 maxlen: 24 91.232.63.0/24 maxlen: 24 176.100.192.0/21 maxlen: 21 176.100.192.0/22 maxlen: 22 176.100.192.0/23 maxlen: 23 176.100.194.0/23 maxlen: 23 176.100.196.0/22 maxlen: 22 176.100.196.0/23 maxlen: 23 176.100.198.0/23 maxlen: 23 185.174.112.0/22 maxlen: 22 185.174.112.0/23 maxlen: 23 185.174.112.0/24 maxlen: 24 185.174.113.0/24 maxlen: 24 185.174.114.0/23 maxlen: 23 185.174.114.0/24 maxlen: 24 185.174.115.0/24 maxlen: 24 193.42.240.0/22 maxlen: 22 193.42.240.0/23 maxlen: 23 193.42.240.0/24 maxlen: 24 193.42.241.0/24 maxlen: 24 193.42.242.0/23 maxlen: 23 193.42.242.0/24 maxlen: 24 193.42.243.0/24 maxlen: 24 195.170.190.0/24 maxlen: 24 195.182.10.0/24 maxlen: 24 195.182.15.0/24 maxlen: 24 195.182.19.0/24 maxlen: 24 2a0b:9d00::/32 maxlen: 32 2a0b:9d00::/33 maxlen: 33 2a0b:9d00::/34 maxlen: 34 2a0b:9d00:4000::/34 maxlen: 34 2a0b:9d00:8000::/33 maxlen: 33 2a0b:9d00:8000::/34 maxlen: 34 2a0b:9d00:c000::/34 maxlen: 34 2a0b:9d01::/32 maxlen: 32 2a0b:9d01::/33 maxlen: 33 2a0b:9d01::/34 maxlen: 34 2a0b:9d01:4000::/34 maxlen: 34 2a0b:9d01:8000::/33 maxlen: 33 2a0b:9d01:8000::/34 maxlen: 34 2a0b:9d01:c000::/34 maxlen: 34 2a0b:9d02::/32 maxlen: 32 2a0b:9d02::/33 maxlen: 33 2a0b:9d02::/34 maxlen: 34 2a0b:9d02:4000::/34 maxlen: 34 2a0b:9d02:8000::/33 maxlen: 33 2a0b:9d02:8000::/34 maxlen: 34 2a0b:9d02:c000::/34 maxlen: 34 2a0b:9d03::/32 maxlen: 32 2a0b:9d03::/33 maxlen: 33 2a0b:9d03::/34 maxlen: 34 2a0b:9d03:4000::/34 maxlen: 34 2a0b:9d03:8000::/33 maxlen: 33 2a0b:9d03:8000::/34 maxlen: 34 2a0b:9d03:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:3c:e6:b0:e0:a7:54:92:ea:fb:41:c9:73:96:cb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Validity Not Before: Jan 12 12:44:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6378360afe49cb59d58d1ed3f90f47153b7d6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ef:56:98:99:40:57:29:a8:53:d3:b9:c9:e6: a6:a8:51:55:05:5b:6a:de:45:98:f4:ab:6d:ff:55: 9f:10:96:39:98:5c:68:8e:0c:d9:74:0e:3b:48:30: 62:83:3c:72:ee:21:ba:df:69:9f:9f:98:6e:08:50: 31:d8:79:44:c8:3e:5d:05:8d:50:45:bb:75:d1:07: a2:70:dc:b4:ec:91:16:97:1f:49:dd:fa:dc:af:14: 74:76:59:51:34:44:ce:bc:e7:89:31:af:b8:77:87: d6:b4:c8:a4:48:f7:19:b7:68:60:7b:dc:91:db:70: 48:1c:a0:e9:89:4a:8f:a3:e9:1c:32:0f:a7:ff:d2: 1e:3e:40:94:41:5d:ba:28:43:3a:19:9a:0d:10:4d: 9f:ad:aa:97:ed:08:3d:6b:7f:bc:3f:c0:16:00:9d: 1d:6f:c0:3e:36:31:f9:17:62:8b:22:30:63:eb:3c: 72:05:28:91:14:82:6a:4c:15:a3:b4:d6:ba:f0:f6: 1a:5f:7b:e6:26:31:cd:59:34:75:65:59:d8:27:42: 3c:36:47:61:81:fd:96:53:f9:23:b3:fd:54:eb:05: a5:25:86:2f:f7:f0:48:e1:60:ce:83:9c:3e:4f:2b: 70:5f:4d:e9:66:8a:2d:95:9a:2e:5b:3d:1b:f4:fb: 99:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:37:83:60:AF:E4:9C:B5:9D:58:D1:ED:3F:90:F4:71:53:B7:D6:A6 X509v3 Authority Key Identifier: keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/9jeDYK_knLWdWNHtP5D0cVO31qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.80.0/21 91.231.23.0/24 91.232.62.0/23 176.100.192.0/21 185.174.112.0/22 193.42.240.0/22 195.170.190.0/24 195.182.10.0/24 195.182.15.0/24 195.182.19.0/24 IPv6: 2a0b:9d00::/30 Signature Algorithm: sha256WithRSAEncryption 2f:f3:86:cb:1a:38:0d:10:07:5f:7e:70:1f:28:9f:73:a2:d4: f1:a1:6e:85:f0:ff:2d:07:8c:3f:2f:f5:c9:e2:f9:62:4a:02: 0c:af:90:cf:99:1e:d1:b7:02:4b:c7:e3:be:0b:0e:70:02:56: 6e:e2:82:25:6d:c3:8d:51:3c:a6:f6:70:10:54:77:c0:0f:bb: 7a:17:c3:a3:ea:2f:d9:7f:7d:5b:21:74:8b:e2:63:12:8e:3b: 58:53:77:95:46:15:f1:38:9c:60:5f:02:d3:9a:03:12:91:8f: 1d:93:ce:11:ff:5a:69:dc:b1:72:04:99:c6:ba:96:da:a2:a8: b6:ef:02:43:9b:23:66:b1:7a:1f:f6:f3:87:77:91:17:79:d1: 73:77:e8:e0:f3:09:4b:88:fc:e3:a0:1b:5d:3f:02:e9:6a:48: f9:36:a2:64:64:2a:63:78:e9:7a:ed:6a:fe:d5:91:4e:74:70: 44:60:71:a8:68:c0:d6:be:5b:d4:db:48:9f:c7:2d:d9:fc:d6: b5:17:ab:5a:81:b0:cb:02:2d:6f:83:e1:bb:a0:40:b1:2b:4f: a1:27:0e:37:53:32:48:34:e6:42:58:76:11:15:b9:cb:67:f8: 32:5e:14:13:94:f3:d3:33:c3:09:16:1e:77:cd:9d:47:f8:45: 37:f5:3b:3a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZuyPOaw4KdUkur7QclzlsueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj OWVlNWMwHhcNMjYwMTEyMTI0NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjM3ODM2MGFmZTQ5Y2I1OWQ1OGQxZWQzZjkwZjQ3MTUzYjdkNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u9WmJlAVymoU9O5yeamqFFVBVtq 3kWY9Ktt/1WfEJY5mFxojgzZdA47SDBigzxy7iG632mfn5huCFAx2HlEyD5dBY1Q Rbt10QeicNy07JEWlx9J3frcrxR0dllRNETOvOeJMa+4d4fWtMikSPcZt2hge9yR 23BIHKDpiUqPo+kcMg+n/9IePkCUQV26KEM6GZoNEE2fraqX7Qg9a3+8P8AWAJ0d b8A+NjH5F2KLIjBj6zxyBSiRFIJqTBWjtNa68PYaX3vmJjHNWTR1ZVnYJ0I8Nkdh gf2WU/kjs/1U6wWlJYYv9/BI4WDOg5w+TytwX03pZootlZouWz0b9PuZ2QIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFPY3g2Cv5Jy1nVjR7T+Q9HFTt9amMB8GA1UdIwQY MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt MjNhMjc2YTQyOGFiLzEvOWplRFlLX2tuTFdkV05IdFA1RDBjVk8zMXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDVZtQAwQA W+cXAwQBW+g+AwQDsGTAAwQCua5wAwQCwSrwAwQAw6q+AwQAw7YKAwQAw7YPAwQA w7YTMA0EAgACMAcDBQIqC50AMA0GCSqGSIb3DQEBCwUAA4IBAQAv84bLGjgNEAdf fnAfKJ9zotTxoW6F8P8tB4w/L/XJ4vliSgIMr5DPmR7RtwJLx+O+Cw5wAlZu4oIl bcONUTym9nAQVHfAD7t6F8Oj6i/Zf31bIXSL4mMSjjtYU3eVRhXxOJxgXwLTmgMS kY8dk84R/1pp3LFyBJnGupbaoqi27wJDmyNmsXof9vOHd5EXedFzd+jg8wlLiPzj oBtdPwLpakj5NqJkZCpjeOl67Wr+1ZFOdHBEYHGoaMDWvlvU20ifxy3Z/Na1F6ta gbDLAi1vg+G7oECxK0+hJw43UzJINOZCWHYRFbnLZ/gyXhQTlPPTM8MJFh53zZ1H +EU39Ts6 -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:26 2026 by rpki-client