This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa File: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (raw, json) Hash identifier: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ= Subject key identifier: B1:4C:DC:E2:2F:AA:17:E4:30:E9:CE:44:0D:A6:9A:D2:5F:9F:9D:02 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E45E2FEC0B597A9BF084EC1BB2E0C Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa Signing time: Thu 01 Jan 2026 12:17:57 +0000 ROA not before: Thu 01 Jan 2026 12:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204666 IP address blocks: 37.221.240.0/20 maxlen: 24 45.153.192.0/22 maxlen: 24 45.153.194.0/24 maxlen: 24 45.153.195.0/24 maxlen: 24 85.255.88.0/22 maxlen: 24 185.19.0.0/22 maxlen: 24 185.52.172.0/23 maxlen: 24 185.64.220.0/22 maxlen: 24 185.74.60.0/23 maxlen: 24 185.97.24.0/22 maxlen: 24 185.97.24.0/24 maxlen: 24 185.97.25.0/24 maxlen: 24 185.97.26.0/24 maxlen: 24 185.188.100.0/22 maxlen: 24 185.188.101.0/24 maxlen: 24 185.188.103.0/24 maxlen: 24 195.12.39.0/24 maxlen: 24 213.108.162.0/23 maxlen: 24 213.108.162.0/24 maxlen: 24 2a03:d840::/32 maxlen: 32 2a03:d840:fe02::/48 maxlen: 48 2a04:c740::/29 maxlen: 29 2a04:f940::/29 maxlen: 29 2a0a:10c0::/29 maxlen: 29 2a0d:3140::/29 maxlen: 29 2a0f:9300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:45:e2:fe:c0:b5:97:a9:bf:08:4e:c1:bb:2e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b14cdce22faa17e430e9ce440da69ad25f9f9d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:c5:4d:e2:8e:83:55:0c:a4:2f:f5:45:b9: cc:ad:b5:f2:b7:55:2c:30:0b:78:a3:e4:0c:27:a9: 8e:06:aa:62:75:c5:ff:e8:ff:32:c3:8e:c5:57:3e: e6:e2:e6:9f:f6:b1:6d:9f:56:54:a4:6c:47:54:f7: 05:ab:2a:10:c9:ae:60:cb:88:e3:78:b9:22:04:fb: c3:40:9e:a6:91:a6:8b:bc:fb:f2:37:8c:c0:ac:6d: b4:c0:2e:05:21:85:cb:86:cf:de:6e:4d:02:28:95: 2e:3f:8b:d3:0c:1c:50:78:48:27:f2:74:e6:04:02: df:37:0b:75:fa:9a:68:dd:b1:89:9f:14:37:ae:77: 42:f3:d3:86:25:74:0c:23:7e:16:b0:d5:a3:68:c3: ea:b7:19:93:54:be:62:a3:97:5b:7f:94:23:c2:82: 2c:7d:85:5f:6b:ec:92:a1:fc:f9:35:20:d0:32:eb: 3b:8d:56:b9:53:70:e9:8c:80:27:02:e0:0b:10:18: be:43:ac:60:3e:f5:1e:97:e2:b5:c9:22:04:55:ad: 90:1f:86:ff:d3:a4:d6:b3:b2:93:f6:54:8f:6d:49: ae:a2:33:a0:5b:28:bd:27:0f:33:97:50:ad:f1:a6: 75:d0:50:91:84:af:e5:92:55:b0:46:68:7b:57:bf: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4C:DC:E2:2F:AA:17:E4:30:E9:CE:44:0D:A6:9A:D2:5F:9F:9D:02 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.240.0/20 45.153.192.0/22 85.255.88.0/22 185.19.0.0/22 185.52.172.0/23 185.64.220.0/22 185.74.60.0/23 185.97.24.0/22 185.188.100.0/22 195.12.39.0/24 213.108.162.0/23 IPv6: 2a03:d840::/32 2a04:c740::/29 2a04:f940::/29 2a0a:10c0::/29 2a0d:3140::/29 2a0f:9300::/29 Signature Algorithm: sha256WithRSAEncryption 9e:d8:30:19:f3:19:c7:b2:9a:5c:6b:d3:83:c7:00:01:a9:1f: 46:99:03:45:1e:43:ae:6c:ac:06:ad:cc:8c:01:ba:67:95:fb: df:5f:a6:8b:3c:72:fe:c5:65:7c:2a:f3:14:31:58:88:1e:82: 0e:2f:96:75:99:a0:9d:11:db:54:05:08:08:f1:03:5c:74:9a: 34:47:da:d5:53:7b:4b:bf:10:5a:e5:81:58:43:be:42:90:f5: 61:8e:22:0f:01:4b:fe:2b:50:3c:a5:27:d0:7b:23:27:e6:9b: 42:3e:35:7a:27:0d:f0:29:81:54:df:2b:fb:99:72:14:b4:a1: 5b:04:8d:7c:fe:41:4a:2e:4f:b8:2a:48:b9:1d:60:ce:d4:5f: 25:2f:1a:ff:33:09:a6:c4:99:9a:a7:7a:b2:69:a9:4a:3e:13: 08:31:ff:61:24:02:de:44:56:46:38:92:39:ba:da:29:c1:dc: 5c:36:6e:c2:40:c4:3a:b8:bf:d0:c0:75:55:67:6a:ca:e0:02: 7f:a4:72:75:cd:ce:58:a5:f3:22:cb:fb:6d:2d:39:1c:94:80: 3b:76:c6:c0:7d:4c:2b:53:f5:86:67:b2:38:59:60:77:39:0d: ef:3c:18:5a:c7:98:ab:7f:2c:62:b9:f8:28:65:48:da:6d:2a: e5:db:72:a3 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt5fkXi/sC1l6m/CE7Buy4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTRjZGNlMjJmYWExN2U0MzBlOWNlNDQwZGE2OWFkMjVmOWY5ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNXFTeKOg1UMpC/1RbnMrbXyt1Us MAt4o+QMJ6mOBqpidcX/6P8yw47FVz7m4uaf9rFtn1ZUpGxHVPcFqyoQya5gy4jj eLkiBPvDQJ6mkaaLvPvyN4zArG20wC4FIYXLhs/ebk0CKJUuP4vTDBxQeEgn8nTm BALfNwt1+ppo3bGJnxQ3rndC89OGJXQMI34WsNWjaMPqtxmTVL5io5dbf5QjwoIs fYVfa+ySofz5NSDQMus7jVa5U3DpjIAnAuALEBi+Q6xgPvUel+K1ySIEVa2QH4b/ 06TWs7KT9lSPbUmuojOgWyi9Jw8zl1Ct8aZ10FCRhK/lklWwRmh7V7/mRQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFLFM3OIvqhfkMOnORA2mmtJfn50CMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvc1V6YzRpLXFGLVF3NmM1RURhYWEwbC1mblFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwSAQCAAEwQgMEBCXd8AME Ai2ZwAMEAlX/WAMEArkTAAMEAbk0rAMEArlA3AMEAblKPAMEArlhGAMEArm8ZAME AMMMJwMEAdVsojAwBAIAAjAqAwUAKgPYQAMFAyoEx0ADBQMqBPlAAwUDKgoQwAMF AyoNMUADBQMqD5MAMA0GCSqGSIb3DQEBCwUAA4IBAQCe2DAZ8xnHsppca9ODxwAB qR9GmQNFHkOubKwGrcyMAbpnlfvfX6aLPHL+xWV8KvMUMViIHoIOL5Z1maCdEdtU BQgI8QNcdJo0R9rVU3tLvxBa5YFYQ75CkPVhjiIPAUv+K1A8pSfQeyMn5ptCPjV6 Jw3wKYFU3yv7mXIUtKFbBI18/kFKLk+4Kki5HWDO1F8lLxr/MwmmxJmap3qyaalK PhMIMf9hJALeRFZGOJI5utopwdxcNm7CQMQ6uL/QwHVVZ2rK4AJ/pHJ1zc5YpfMi y/ttLTkclIA7dsbAfUwrU/WGZ7I4WWB3OQ3vPBhax5irfyxiufgoZUjabSrl23Kj -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:57 2026 by rpki-client