This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/rFMfSzn-n7nZRas5UlWT_V3b0wE.roa File: rFMfSzn-n7nZRas5UlWT_V3b0wE.roa (raw, json) Hash identifier: BT3wbqOQUe0s9zLkAX65/Pmrb3QAkF3u9va25+8RZ8s= Subject key identifier: AC:53:1F:4B:39:FE:9F:B9:D9:45:AB:39:52:55:93:FD:5D:DB:D3:01 Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Certificate serial: 019B7C12CE48C7AFBB77AEC9B140ADD8F2FD Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/rFMfSzn-n7nZRas5UlWT_V3b0wE.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41421 IP address blocks: 31.214.137.0/24 maxlen: 24 31.214.138.0/24 maxlen: 24 31.214.140.0/24 maxlen: 24 31.214.145.0/24 maxlen: 24 37.157.200.0/21 maxlen: 21 86.106.22.0/24 maxlen: 24 89.33.167.0/24 maxlen: 24 89.35.60.0/23 maxlen: 23 89.250.192.0/20 maxlen: 20 91.132.112.0/23 maxlen: 23 93.115.39.0/24 maxlen: 24 103.248.24.0/24 maxlen: 24 159.253.240.0/21 maxlen: 21 185.53.132.0/22 maxlen: 24 185.104.155.0/24 maxlen: 24 185.128.156.0/22 maxlen: 22 185.170.65.0/24 maxlen: 24 185.194.212.0/22 maxlen: 24 188.65.40.0/21 maxlen: 21 193.91.4.0/24 maxlen: 24 193.91.12.0/23 maxlen: 23 194.5.180.0/24 maxlen: 24 2a01:b8e0::/32 maxlen: 32 2a02:4c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ce:48:c7:af:bb:77:ae:c9:b1:40:ad:d8:f2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac531f4b39fe9fb9d945ab39525593fd5ddbd301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:be:bf:59:61:3d:9b:da:b6:22:94:35:fd:53: 05:a9:85:b7:e4:42:f6:8d:9d:79:38:e4:66:fa:bb: 3a:bf:5e:26:cd:43:06:c6:67:73:04:cf:04:6f:fc: 9f:a1:1a:1a:cc:5a:9c:e6:3c:c7:88:74:ec:e2:7b: d7:7b:52:e4:cc:d7:97:ab:ed:b4:ba:6d:50:2a:64: 57:71:5f:b3:e2:3d:14:2f:91:e6:f9:9d:4a:2b:b1: b1:40:2d:28:c9:42:fc:db:52:10:ee:80:0f:a0:ba: 9f:a2:f0:1c:a6:01:bc:97:96:e7:f0:cd:cd:b8:d5: 6a:4c:84:be:21:64:e8:c0:af:16:cd:59:e5:b2:c5: 69:99:e6:38:fe:16:38:4d:c7:73:09:bf:73:90:c5: 0d:e4:47:78:ac:52:04:09:94:1a:8c:da:d1:df:f8: 0f:9b:ef:11:60:40:f6:ff:6a:ef:e6:7f:1d:4a:98: d5:c0:fe:32:e2:e8:90:ed:df:bd:1e:c1:5a:83:b8: d1:01:86:f8:c6:54:6d:52:e8:82:ac:11:ad:0a:b4: b4:50:66:f9:2b:8c:8f:0d:59:73:d2:2b:8b:c2:45: 27:9e:2e:24:39:1b:52:01:db:a4:38:4f:e4:d9:a4: 6c:da:13:45:1a:f7:5a:c0:4c:59:d4:68:3c:9d:e5: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:53:1F:4B:39:FE:9F:B9:D9:45:AB:39:52:55:93:FD:5D:DB:D3:01 X509v3 Authority Key Identifier: keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/rFMfSzn-n7nZRas5UlWT_V3b0wE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.137.0-31.214.138.255 31.214.140.0/24 31.214.145.0/24 37.157.200.0/21 86.106.22.0/24 89.33.167.0/24 89.35.60.0/23 89.250.192.0/20 91.132.112.0/23 93.115.39.0/24 103.248.24.0/24 159.253.240.0/21 185.53.132.0/22 185.104.155.0/24 185.128.156.0/22 185.170.65.0/24 185.194.212.0/22 188.65.40.0/21 193.91.4.0/24 193.91.12.0/23 194.5.180.0/24 IPv6: 2a01:b8e0::/32 2a02:4c80::/32 Signature Algorithm: sha256WithRSAEncryption 5c:f2:fc:83:66:0e:4c:79:ea:c3:2a:bf:04:72:5b:38:15:8f: 2c:8f:b5:ac:c2:ae:22:03:d1:15:60:4e:39:4a:9b:28:3d:3f: 35:50:20:5f:95:c8:05:7b:62:8f:fb:8d:79:4a:5e:15:45:34: 37:4c:ce:e0:d8:9b:3d:30:d7:62:ee:36:c1:c5:f8:25:b7:b7: 88:2c:71:ef:94:5a:8c:08:05:31:5c:2d:44:0d:0a:c1:a3:ef: c1:29:f1:37:97:f3:65:c6:76:a5:a2:b2:ff:6d:a1:7c:f4:ff: 95:f9:9a:28:62:0a:50:01:11:13:c8:18:2e:cb:86:28:86:b2: 76:00:af:9d:9a:91:04:53:06:49:5e:64:fc:b6:cd:9f:39:93: 04:11:5b:b3:b1:b4:c9:9c:6f:4e:42:48:d5:fd:5c:6a:01:a3: e6:d1:34:e9:f0:3e:df:9e:6f:66:55:38:8c:7d:3f:da:a6:22: 92:b5:2e:8f:91:ca:da:65:09:3b:71:63:bb:0b:2c:aa:bf:b2: 17:42:4e:c0:4b:21:f3:08:38:12:76:e2:36:82:95:85:8f:78: 00:53:03:fc:55:34:d3:2a:0c:a6:10:69:ac:1b:c1:1d:52:53: 99:98:90:4f:2a:82:c5:5c:e5:54:c6:09:18:87:54:41:26:27: 8a:75:c8:f9 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZt8Es5Ix6+7d67JsUCt2PL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj M2Y5YWYwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzUzMWY0YjM5ZmU5ZmI5ZDk0NWFiMzk1MjU1OTNmZDVkZGJkMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6r6/WWE9m9q2IpQ1/VMFqYW35EL2 jZ15OORm+rs6v14mzUMGxmdzBM8Eb/yfoRoazFqc5jzHiHTs4nvXe1LkzNeXq+20 um1QKmRXcV+z4j0UL5Hm+Z1KK7GxQC0oyUL821IQ7oAPoLqfovAcpgG8l5bn8M3N uNVqTIS+IWTowK8WzVnlssVpmeY4/hY4TcdzCb9zkMUN5Ed4rFIECZQajNrR3/gP m+8RYED2/2rv5n8dSpjVwP4y4uiQ7d+9HsFag7jRAYb4xlRtUuiCrBGtCrS0UGb5 K4yPDVlz0iuLwkUnni4kORtSAdukOE/k2aRs2hNFGvdawExZ1Gg8neWkgQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFKxTH0s5/p+52UWrOVJVk/1d29MBMB8GA1UdIwQY MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt ZmE3MThhYzlkNzU4LzEvckZNZlN6bi1uN25aUmFzNVVsV1RfVjNiMHdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4 LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBjQQCAAEwgYYwDAME AB/WiQMEAB/WigMEAB/WjAMEAB/WkQMEAyWdyAMEAFZqFgMEAFkhpwMEAVkjPAME BFn6wAMEAVuEcAMEAF1zJwMEAGf4GAMEA5/98AMEArk1hAMEALlomwMEArmAnAME ALmqQQMEArnC1AMEA7xBKAMEAMFbBAMEAcFbDAMEAMIFtDAUBAIAAjAOAwUAKgG4 4AMFACoCTIAwDQYJKoZIhvcNAQELBQADggEBAFzy/INmDkx56sMqvwRyWzgVjyyP tazCriID0RVgTjlKmyg9PzVQIF+VyAV7Yo/7jXlKXhVFNDdMzuDYmz0w12LuNsHF +CW3t4gsce+UWowIBTFcLUQNCsGj78Ep8TeX82XGdqWisv9toXz0/5X5mihiClAB ERPIGC7LhiiGsnYAr52akQRTBkleZPy2zZ85kwQRW7OxtMmcb05CSNX9XGoBo+bR NOnwPt+eb2ZVOIx9P9qmIpK1Lo+RytplCTtxY7sLLKq/shdCTsBLIfMIOBJ24jaC lYWPeABTA/xVNNMqDKYQaawbwR1SU5mYkE8qgsVc5VTGCRiHVEEmJ4p1yPk= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:45 2026 by rpki-client