This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/9TBMQolrynkT7tDiDQfMSK2fy8k.roa File: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (raw, json) Hash identifier: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM= Subject key identifier: F5:30:4C:42:89:6B:CA:79:13:EE:D0:E2:0D:07:CC:48:AD:9F:CB:C9 Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14 Certificate serial: 019B7C7F26E0FE2F11CAA7CE4E8FF070666D Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/9TBMQolrynkT7tDiDQfMSK2fy8k.roa Signing time: Fri 02 Jan 2026 02:17:46 +0000 ROA not before: Fri 02 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33885 IP address blocks: 31.211.192.0/18 maxlen: 18 37.46.160.0/19 maxlen: 19 37.247.0.0/19 maxlen: 19 84.55.64.0/18 maxlen: 18 84.246.88.0/21 maxlen: 21 89.253.64.0/18 maxlen: 18 92.244.0.0/19 maxlen: 19 94.137.96.0/19 maxlen: 19 109.104.0.0/19 maxlen: 19 178.78.192.0/18 maxlen: 18 185.86.100.0/22 maxlen: 22 212.107.128.0/19 maxlen: 19 2a01:3b8::/32 maxlen: 32 2a01:3b8:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:26:e0:fe:2f:11:ca:a7:ce:4e:8f:f0:70:66:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2347aaab2206c08128f543730064a145a3effa14 Validity Not Before: Jan 2 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5304c42896bca7913eed0e20d07cc48ad9fcbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:5c:b1:ce:b2:0c:2b:0f:7b:44:f0:05:c2: 11:d3:75:a9:1c:f5:50:08:98:c1:13:62:83:5c:4c: 99:a0:1a:a1:36:28:ab:59:1e:85:d3:9b:3f:49:e2: 64:21:97:25:d9:6a:91:6e:6b:d6:ed:67:52:37:9c: 4c:6e:81:26:06:38:f3:27:68:10:de:c5:22:cb:04: 81:01:e1:2a:05:49:ab:0f:79:4d:3a:91:10:c1:ed: 57:c8:fd:5c:df:66:b8:9b:d1:34:ae:5d:fc:96:82: ac:06:98:35:ab:5f:af:ad:61:6f:97:b8:2f:19:77: fc:da:52:cd:37:79:61:d1:42:c1:b0:4f:14:b1:01: 71:20:76:64:5f:30:49:96:00:bb:7d:2f:39:d2:03: 46:64:2c:5a:6f:b5:f6:66:fe:25:7b:0d:8a:af:27: b3:05:7f:5b:fd:06:5e:db:ee:eb:04:25:f6:21:82: 00:36:51:b0:1c:78:5c:27:b0:27:60:3d:f0:bc:10: 28:94:9c:1f:15:43:6e:4d:25:fc:11:92:70:d5:5a: 33:51:ac:90:e5:06:ff:00:18:d8:a4:50:dd:fa:0f: cd:58:8a:e7:2e:a8:12:0b:8c:fe:fc:42:91:9c:93: 41:f8:d5:b2:a0:4b:be:df:06:c1:76:b4:fe:56:70: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:30:4C:42:89:6B:CA:79:13:EE:D0:E2:0D:07:CC:48:AD:9F:CB:C9 X509v3 Authority Key Identifier: keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/9TBMQolrynkT7tDiDQfMSK2fy8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.211.192.0/18 37.46.160.0/19 37.247.0.0/19 84.55.64.0/18 84.246.88.0/21 89.253.64.0/18 92.244.0.0/19 94.137.96.0/19 109.104.0.0/19 178.78.192.0/18 185.86.100.0/22 212.107.128.0/19 IPv6: 2a01:3b8::/32 Signature Algorithm: sha256WithRSAEncryption 23:51:e6:80:6c:b7:68:50:31:82:83:4a:89:ca:74:24:1b:cf: af:a4:83:f9:51:4d:97:e5:3a:28:ae:a4:5a:3b:04:52:ab:82: 19:74:c6:e5:e7:c4:19:d0:9f:5c:68:54:c5:28:21:fe:96:bf: 3e:2b:7e:e6:b9:1f:36:f6:9c:d6:83:49:aa:bf:a5:88:c3:19: 4e:e0:62:aa:22:eb:f3:6e:69:47:00:47:5d:14:87:e3:97:47: d2:9c:98:c5:47:0d:66:fb:02:a2:1a:29:12:48:31:0c:43:66: 09:7e:a6:ce:82:10:51:93:de:ad:17:db:df:88:1d:5e:89:67: 56:fb:a7:c5:44:a6:70:af:f2:d0:81:cc:f6:41:a7:f8:c9:d6: be:f7:77:11:ce:03:da:4c:d7:2a:de:6e:dc:40:82:7d:a5:6e: ba:44:f1:1b:73:6a:ba:93:51:61:c2:c7:ae:f9:a3:9f:48:93: 3c:af:a2:98:68:be:58:fa:c0:f0:68:e3:8a:10:ed:46:de:35: b3:c5:a6:c9:bc:84:a0:d4:7b:3a:a8:6d:a4:6a:99:88:8b:88: db:dd:8c:f3:8e:5e:8b:81:d3:0f:25:67:94:2a:2a:f3:59:89: b3:66:75:dd:d7:15:cd:37:f3:8f:a5:c4:55:0a:36:df:f7:62: af:e8:94:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt8fybg/i8RyqfOTo/wcGZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDdhYWFiMjIwNmMwODEyOGY1NDM3MzAwNjRhMTQ1YTNl ZmZhMTQwHhcNMjYwMTAyMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTMwNGM0Mjg5NmJjYTc5MTNlZWQwZTIwZDA3Y2M0OGFkOWZjYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWhcsc6yDCsPe0TwBcIR03WpHPVQ CJjBE2KDXEyZoBqhNiirWR6F05s/SeJkIZcl2WqRbmvW7WdSN5xMboEmBjjzJ2gQ 3sUiywSBAeEqBUmrD3lNOpEQwe1XyP1c32a4m9E0rl38loKsBpg1q1+vrWFvl7gv GXf82lLNN3lh0ULBsE8UsQFxIHZkXzBJlgC7fS850gNGZCxab7X2Zv4lew2Kryez BX9b/QZe2+7rBCX2IYIANlGwHHhcJ7AnYD3wvBAolJwfFUNuTSX8EZJw1VozUayQ 5Qb/ABjYpFDd+g/NWIrnLqgSC4z+/EKRnJNB+NWyoEu+3wbBdrT+VnC/NwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFPUwTEKJa8p5E+7Q4g0HzEitn8vJMB8GA1UdIwQY MBaAFCNHqqsiBsCBKPVDcwBkoUWj7/oUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQt NzU4NDA2NjFlYWY1LzEvOVRCTVFvbHJ5bmtUN3REaURRZk1TSzJmeThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQtNzU4NDA2NjFlYWY1 LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQGH9PAAwQF JS6gAwQFJfcAAwQGVDdAAwQDVPZYAwQGWf1AAwQFXPQAAwQFXolgAwQFbWgAAwQG sk7AAwQCuVZkAwQF1GuAMA0EAgACMAcDBQAqAQO4MA0GCSqGSIb3DQEBCwUAA4IB AQAjUeaAbLdoUDGCg0qJynQkG8+vpIP5UU2X5ToorqRaOwRSq4IZdMbl58QZ0J9c aFTFKCH+lr8+K37muR829pzWg0mqv6WIwxlO4GKqIuvzbmlHAEddFIfjl0fSnJjF Rw1m+wKiGikSSDEMQ2YJfqbOghBRk96tF9vfiB1eiWdW+6fFRKZwr/LQgcz2Qaf4 yda+93cRzgPaTNcq3m7cQIJ9pW66RPEbc2q6k1Fhwseu+aOfSJM8r6KYaL5Y+sDw aOOKEO1G3jWzxabJvISg1Hs6qG2kapmIi4jb3Yzzjl6LgdMPJWeUKirzWYmzZnXd 1xXNN/OPpcRVCjbf92Kv6JQ/ -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:04 2026 by rpki-client