This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9QOoNpd76OPVl49TOCbIH5K-Xuc.roa File: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (raw, json) Hash identifier: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU= Subject key identifier: F5:03:A8:36:97:7B:E8:E3:D5:97:8F:53:38:26:C8:1F:92:BE:5E:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019BB1AA6A63BAA3B763B288674FAA550F8F Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9QOoNpd76OPVl49TOCbIH5K-Xuc.roa Signing time: Mon 12 Jan 2026 10:04:54 +0000 ROA not before: Mon 12 Jan 2026 10:04:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31586 IP address blocks: 80.84.224.0/19 maxlen: 24 81.4.64.0/20 maxlen: 24 81.4.80.0/22 maxlen: 24 81.4.88.0/21 maxlen: 24 81.4.96.0/22 maxlen: 24 81.4.112.0/21 maxlen: 24 81.21.136.0/24 maxlen: 24 83.96.128.0/18 maxlen: 24 83.96.192.0/21 maxlen: 24 83.96.208.0/22 maxlen: 24 83.96.224.0/21 maxlen: 24 83.96.232.0/22 maxlen: 24 83.96.248.0/22 maxlen: 24 85.158.248.0/22 maxlen: 24 85.158.252.0/23 maxlen: 23 91.142.252.0/23 maxlen: 24 91.205.32.0/22 maxlen: 24 141.255.180.0/22 maxlen: 24 185.69.232.0/22 maxlen: 24 185.84.72.0/22 maxlen: 24 185.95.68.0/22 maxlen: 24 185.105.204.0/22 maxlen: 24 185.105.216.0/22 maxlen: 24 193.93.172.0/22 maxlen: 24 217.21.241.0/24 maxlen: 24 2001:828::/32 maxlen: 48 2a05:2500::/32 maxlen: 48 2a05:a282::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:aa:6a:63:ba:a3:b7:63:b2:88:67:4f:aa:55:0f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Jan 12 10:04:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f503a836977be8e3d5978f533826c81f92be5ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:86:9a:9e:9e:89:1b:56:7c:15:d9:5d:ef: 47:2c:11:e2:c5:35:0a:43:97:9f:2b:d6:e0:21:ca: be:86:45:ee:0b:9d:9c:02:4a:4c:f9:09:7b:16:79: 6c:78:7f:7a:f1:64:46:d3:16:bc:01:78:58:6c:39: 84:4b:25:6f:23:fc:9b:a7:17:da:bc:e2:73:0c:0a: 18:b3:68:3f:44:19:c3:05:1c:14:d3:0d:f2:f3:cf: 60:d7:bc:21:ba:48:12:60:a5:c4:69:f1:74:f2:c4: af:f5:bb:7e:a2:88:b8:37:6c:72:8b:b2:06:86:8f: df:97:14:f9:1a:b9:51:36:aa:4f:ec:e7:bd:da:66: d7:91:27:bf:ec:ab:b7:2f:b2:b7:63:35:48:a2:00: 0f:75:f9:c2:84:74:d5:79:50:e0:dd:ab:d2:c9:ec: c9:94:ff:48:f9:2d:73:82:0a:91:35:90:7a:39:f3: ee:75:ec:33:e4:14:f8:32:8a:09:95:90:f3:51:33: ae:c3:92:53:9f:a8:92:cc:69:35:4f:47:e6:57:de: d3:94:18:76:1b:b0:09:09:e9:5b:db:c9:bc:35:1b: ae:31:32:4b:34:2a:5a:dc:96:db:e4:7d:72:4b:48: cd:0a:a4:9a:b0:6a:7e:1a:f7:47:99:86:9a:4e:94: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:03:A8:36:97:7B:E8:E3:D5:97:8F:53:38:26:C8:1F:92:BE:5E:E7 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9QOoNpd76OPVl49TOCbIH5K-Xuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.224.0/19 81.4.64.0-81.4.83.255 81.4.88.0-81.4.99.255 81.4.112.0/21 81.21.136.0/24 83.96.128.0-83.96.199.255 83.96.208.0/22 83.96.224.0-83.96.235.255 83.96.248.0/22 85.158.248.0-85.158.253.255 91.142.252.0/23 91.205.32.0/22 141.255.180.0/22 185.69.232.0/22 185.84.72.0/22 185.95.68.0/22 185.105.204.0/22 185.105.216.0/22 193.93.172.0/22 217.21.241.0/24 IPv6: 2001:828::/32 2a05:2500::/32 2a05:a282::/32 Signature Algorithm: sha256WithRSAEncryption 35:d3:b8:52:e7:d4:d9:03:59:f0:5b:50:79:83:33:5f:e3:b6: 2e:84:8f:62:f4:17:80:b5:28:44:d8:c1:fb:fa:fa:66:94:08: 58:d6:90:a2:33:68:7f:5f:a5:ef:9f:11:07:f0:52:20:d4:61: 9e:b9:04:7b:94:89:05:29:47:54:7b:28:27:7c:5f:ab:a9:f2: 35:bc:ed:27:69:b9:ec:8d:92:ee:14:7b:5b:95:87:60:d7:ab: 92:89:88:b8:54:f9:9a:ef:1a:51:60:97:fa:45:0a:b8:88:82: d0:7e:c5:49:6a:08:19:02:f8:cb:46:54:a7:cc:e2:0b:20:8c: e2:3a:d4:7d:e3:0f:5c:3e:a2:b6:db:31:2b:04:6f:c6:14:a1: 27:f0:ae:60:c8:85:73:29:61:51:b3:d4:9e:25:bf:03:13:f5: 1b:ca:22:cb:78:da:d2:df:9a:fe:06:5d:3f:c9:1a:cd:7d:72: dc:5a:34:d5:b1:f9:c1:4b:ee:fb:04:9f:dc:cb:1c:fc:30:9e: f3:71:7a:09:2a:3d:df:b8:70:3b:dd:6a:d9:8d:d4:bd:3c:a8: 8f:ce:ae:1a:8e:37:70:05:e0:37:fc:40:a3:65:49:a6:75:f3: 1c:76:9a:7e:c4:1d:6b:01:df:7c:7f:45:e0:9d:e2:43:d5:7f: 51:2e:12:d7 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZuxqmpjuqO3Y7KIZ0+qVQ+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjYwMTEyMTAwNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTAzYTgzNjk3N2JlOGUzZDU5NzhmNTMzODI2YzgxZjkyYmU1ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+eGmp6eiRtWfBXZXe9HLBHixTUK Q5efK9bgIcq+hkXuC52cAkpM+Ql7FnlseH968WRG0xa8AXhYbDmESyVvI/ybpxfa vOJzDAoYs2g/RBnDBRwU0w3y889g17whukgSYKXEafF08sSv9bt+ooi4N2xyi7IG ho/flxT5GrlRNqpP7Oe92mbXkSe/7Ku3L7K3YzVIogAPdfnChHTVeVDg3avSyezJ lP9I+S1zggqRNZB6OfPudewz5BT4MooJlZDzUTOuw5JTn6iSzGk1T0fmV97TlBh2 G7AJCelb28m8NRuuMTJLNCpa3Jbb5H1yS0jNCqSasGp+GvdHmYaaTpSgyQIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFPUDqDaXe+jj1ZePUzgmyB+Svl7nMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVFPb05wZDc2T1BWbDQ5VE9DYklINUstWHVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBpwQCAAEwgaADBAVQ VOAwDAMEBlEEQAMEAlEEUDAMAwQDUQRYAwQCUQRgAwQDUQRwAwQAURWIMAwDBAdT YIADBANTYMADBAJTYNAwDAMEBVNg4AMEAlNg6AMEAlNg+DAMAwQDVZ74AwQBVZ78 AwQBW478AwQCW80gAwQCjf+0AwQCuUXoAwQCuVRIAwQCuV9EAwQCuWnMAwQCuWnY AwQCwV2sAwQA2RXxMBsEAgACMBUDBQAgAQgoAwUAKgUlAAMFACoFooIwDQYJKoZI hvcNAQELBQADggEBADXTuFLn1NkDWfBbUHmDM1/jti6Ej2L0F4C1KETYwfv6+maU CFjWkKIzaH9fpe+fEQfwUiDUYZ65BHuUiQUpR1R7KCd8X6up8jW87SdpueyNku4U e1uVh2DXq5KJiLhU+ZrvGlFgl/pFCriIgtB+xUlqCBkC+MtGVKfM4gsgjOI61H3j D1w+orbbMSsEb8YUoSfwrmDIhXMpYVGz1J4lvwMT9RvKIst42tLfmv4GXT/JGs19 ctxaNNWx+cFL7vsEn9zLHPwwnvNxegkqPd+4cDvdatmN1L08qI/OrhqON3AF4Df8 QKNlSaZ18xx2mn7EHWsB33x/ReCd4kPVf1EuEtc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:45 2026 by rpki-client