This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/6c9spiMI22fbQ_S_riFTxN6JTnQ.roa File: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (raw, json) Hash identifier: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck= Subject key identifier: E9:CF:6C:A6:23:08:DB:67:DB:43:F4:BF:AE:21:53:C4:DE:89:4E:74 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019B7F157E285CB3882576A2A5C809094416 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/6c9spiMI22fbQ_S_riFTxN6JTnQ.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35470 IP address blocks: 31.3.100.0/24 maxlen: 24 79.170.89.0/24 maxlen: 24 79.170.92.0/24 maxlen: 24 81.4.84.0/22 maxlen: 24 83.96.200.0/22 maxlen: 24 83.96.204.0/22 maxlen: 24 83.96.212.0/22 maxlen: 24 83.96.216.0/22 maxlen: 24 83.96.220.0/22 maxlen: 24 83.96.236.0/22 maxlen: 24 83.96.240.0/22 maxlen: 24 83.96.241.0/24 maxlen: 24 83.96.244.0/22 maxlen: 24 83.96.245.0/24 maxlen: 24 83.96.252.0/22 maxlen: 24 85.10.176.0/22 maxlen: 24 85.10.184.0/22 maxlen: 22 85.10.184.0/24 maxlen: 24 85.10.185.0/24 maxlen: 24 85.10.186.0/24 maxlen: 24 85.10.187.0/24 maxlen: 24 85.10.188.0/22 maxlen: 22 85.222.224.0/22 maxlen: 24 89.31.98.0/23 maxlen: 24 89.31.101.0/24 maxlen: 24 93.191.134.0/24 maxlen: 24 93.191.135.0/24 maxlen: 24 141.138.207.0/24 maxlen: 24 185.3.208.0/22 maxlen: 24 185.110.172.0/22 maxlen: 24 185.110.200.0/22 maxlen: 24 185.110.202.0/23 maxlen: 24 193.138.205.0/24 maxlen: 24 193.138.206.0/23 maxlen: 24 194.60.207.0/24 maxlen: 24 213.187.240.0/21 maxlen: 24 2a02:348:10::/44 maxlen: 48 2a02:348:20::/44 maxlen: 48 2a02:348:a8::/45 maxlen: 48 2a02:348:c0::/44 maxlen: 48 2a02:348:500::/40 maxlen: 48 2a02:348:5e6::/48 maxlen: 48 2a02:348:600::/39 maxlen: 48 2a02:348:1200::/40 maxlen: 48 2a02:348:1700::/40 maxlen: 48 2a02:348:1800::/40 maxlen: 48 2a02:348:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7e:28:5c:b3:88:25:76:a2:a5:c8:09:09:44:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9cf6ca62308db67db43f4bfae2153c4de894e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:3e:aa:95:33:28:fd:95:8e:b5:d1:cb:37: 62:9b:d8:6e:d1:0c:5e:6e:0a:d2:42:22:34:a2:3e: 73:71:ae:75:ae:a1:59:7b:b1:a7:62:e1:9a:0a:63: 6b:d2:19:98:94:3f:3d:19:e7:98:7c:48:0e:66:d1: c6:14:f1:3f:94:22:b1:55:2b:17:f4:1c:ef:01:46: 3b:89:d9:04:33:02:71:e9:02:78:28:51:7a:44:c4: 0c:7b:e4:36:91:56:60:14:b4:ed:9f:1f:bb:ea:45: 4b:fe:c1:0a:8a:eb:63:63:36:91:ca:51:12:77:c7: 5a:e0:96:36:e4:ae:02:c9:80:76:04:8d:85:c0:1c: 38:82:8f:73:7a:96:98:53:b9:2a:fb:7d:26:d0:e1: 3d:84:e1:fd:b1:62:e4:05:96:e3:c8:5e:9f:e6:01: 4b:3e:a3:33:0f:50:53:7e:df:85:c1:d0:bd:1a:b2: e9:93:a0:ce:2f:78:d7:16:16:ac:1d:a0:6d:57:95: 39:1f:2e:03:df:a5:d5:48:79:bc:c9:a7:60:15:23: 78:fa:63:cd:5c:e9:ac:3c:d2:ad:20:fb:5a:93:91: 88:63:e9:75:2f:da:8f:a6:87:30:a9:04:4f:b6:ab: c0:0d:7d:6e:56:08:3c:d2:06:8b:61:79:af:31:67: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CF:6C:A6:23:08:DB:67:DB:43:F4:BF:AE:21:53:C4:DE:89:4E:74 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/6c9spiMI22fbQ_S_riFTxN6JTnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.100.0/24 79.170.89.0/24 79.170.92.0/24 81.4.84.0/22 83.96.200.0/21 83.96.212.0-83.96.223.255 83.96.236.0-83.96.247.255 83.96.252.0/22 85.10.176.0/22 85.10.184.0/21 85.222.224.0/22 89.31.98.0/23 89.31.101.0/24 93.191.134.0/23 141.138.207.0/24 185.3.208.0/22 185.110.172.0/22 185.110.200.0/22 193.138.205.0-193.138.207.255 194.60.207.0/24 213.187.240.0/21 IPv6: 2a02:348:10::-2a02:348:2f:ffff:ffff:ffff:ffff:ffff 2a02:348:a8::/45 2a02:348:c0::/44 2a02:348:500::-2a02:348:7ff:ffff:ffff:ffff:ffff:ffff 2a02:348:1200::/40 2a02:348:1700::-2a02:348:18ff:ffff:ffff:ffff:ffff:ffff 2a02:348:f000::/36 Signature Algorithm: sha256WithRSAEncryption d4:16:f0:75:76:bc:1d:f9:c2:30:39:a5:b6:f3:9c:18:c1:1a: 79:51:a4:a1:19:75:99:d9:ed:44:ec:b0:12:e3:8d:8e:7b:27: cb:50:f9:c2:59:99:35:3b:f9:5b:86:b4:75:66:ac:f7:9b:60: 23:f6:4a:02:6e:3b:1b:59:55:56:c5:19:55:ee:10:17:5e:0d: 1a:46:c0:f9:dc:80:4e:fc:f5:2b:94:6a:f6:01:67:7c:bf:4c: a9:f8:fa:1d:80:a3:ab:63:88:57:8c:0c:8b:27:ab:34:e3:67: e8:99:3e:ed:8c:fa:3a:b7:02:28:22:37:47:84:61:69:06:50: 03:60:01:f0:f9:2d:fa:44:4c:5b:6d:5c:a4:75:82:ec:d0:46: 2e:b5:17:fa:a4:3b:86:2e:fe:a8:78:ea:26:01:42:38:7f:13: af:57:73:9d:3f:a1:de:07:51:8e:18:43:22:95:f5:b7:5f:60: b8:61:9e:80:dc:e8:42:d1:00:ac:a3:2e:c9:15:1b:cd:fb:01: ba:16:28:e6:9b:09:2c:f7:41:9a:11:5c:73:66:8b:df:d5:4f: 4e:23:41:60:67:72:2a:85:e0:e2:b0:69:29:62:69:b5:6b:43: 01:d1:13:e0:46:1f:ba:65:19:2d:71:7d:32:5b:22:56:a6:35: 18:f6:58:c9 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZt/FX4oXLOIJXaipcgJCUQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWNmNmNhNjIzMDhkYjY3ZGI0M2Y0YmZhZTIxNTNjNGRlODk0ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkA+qpUzKP2VjrXRyzdim9hu0Qxe bgrSQiI0oj5zca51rqFZe7GnYuGaCmNr0hmYlD89GeeYfEgOZtHGFPE/lCKxVSsX 9BzvAUY7idkEMwJx6QJ4KFF6RMQMe+Q2kVZgFLTtnx+76kVL/sEKiutjYzaRylES d8da4JY25K4CyYB2BI2FwBw4go9zepaYU7kq+30m0OE9hOH9sWLkBZbjyF6f5gFL PqMzD1BTft+FwdC9GrLpk6DOL3jXFhasHaBtV5U5Hy4D36XVSHm8yadgFSN4+mPN XOmsPNKtIPtak5GIY+l1L9qPpocwqQRPtqvADX1uVgg80gaLYXmvMWdPzQIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFOnPbKYjCNtn20P0v64hU8TeiU50MB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvNmM5c3BpTUkyMmZiUV9TX3JpRlR4TjZKVG5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCBnQQCAAEwgZYD BAAfA2QDBABPqlkDBABPqlwDBAJRBFQDBANTYMgwDAMEAlNg1AMEBVNgwDAMAwQC U2DsAwQDU2DwAwQCU2D8AwQCVQqwAwQDVQq4AwQCVd7gAwQBWR9iAwQAWR9lAwQB Xb+GAwQAjYrPAwQCuQPQAwQCuW6sAwQCuW7IMAwDBADBis0DBATBisADBADCPM8D BAPVu/AwYAQCAAIwWjASAwcEKgIDSAAQAwcEKgIDSAAgAwcDKgIDSACoAwcEKgID SADAMBADBgAqAgNIBQMGAyoCA0gAAwYAKgIDSBIwEAMGACoCA0gXAwYAKgIDSBgD BgQqAgNI8DANBgkqhkiG9w0BAQsFAAOCAQEA1BbwdXa8HfnCMDmltvOcGMEaeVGk oRl1mdntROywEuONjnsny1D5wlmZNTv5W4a0dWas95tgI/ZKAm47G1lVVsUZVe4Q F14NGkbA+dyATvz1K5Rq9gFnfL9Mqfj6HYCjq2OIV4wMiyerNONn6Jk+7Yz6OrcC KCI3R4RhaQZQA2AB8Pkt+kRMW21cpHWC7NBGLrUX+qQ7hi7+qHjqJgFCOH8Tr1dz nT+h3gdRjhhDIpX1t19guGGegNzoQtEArKMuyRUbzfsBuhYo5psJLPdBmhFcc2aL 39VPTiNBYGdyKoXg4rBpKWJptWtDAdET4EYfumUZLXF9MlsiVqY1GPZYyQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:49 2026 by rpki-client