This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Rj9rY8c-WTz58dRjWStkxywCLns.roa File: Rj9rY8c-WTz58dRjWStkxywCLns.roa (raw, json) Hash identifier: 2qqmCIzo+/ipPZRDGptoSNuyqwN9eUc4eLGE8JL6fME= Subject key identifier: 46:3F:6B:63:C7:3E:59:3C:F9:F1:D4:63:59:2B:64:C7:2C:02:2E:7B Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b Certificate serial: 019B7BA35CC93EBB4E4084DBA57E4D14EFD4 Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Rj9rY8c-WTz58dRjWStkxywCLns.roa Signing time: Thu 01 Jan 2026 22:17:42 +0000 ROA not before: Thu 01 Jan 2026 22:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 129.69.0.0/16 maxlen: 16 129.143.0.0/16 maxlen: 16 141.58.0.0/16 maxlen: 16 141.70.0.0/16 maxlen: 16 141.70.128.0/17 maxlen: 17 192.67.189.0/24 maxlen: 24 192.67.208.0/24 maxlen: 24 192.108.35.0/24 maxlen: 24 192.108.36.0/22 maxlen: 22 192.108.40.0/22 maxlen: 22 192.108.44.0/24 maxlen: 24 193.196.0.0/15 maxlen: 15 193.196.0.0/21 maxlen: 21 193.196.9.0/24 maxlen: 24 193.196.13.0/24 maxlen: 24 193.196.16.0/20 maxlen: 20 193.196.64.0/18 maxlen: 18 193.196.129.0/24 maxlen: 24 193.196.130.0/23 maxlen: 23 193.196.132.0/22 maxlen: 22 193.196.136.0/21 maxlen: 21 193.196.144.0/21 maxlen: 21 193.196.152.0/24 maxlen: 24 193.196.154.0/23 maxlen: 23 193.196.156.0/22 maxlen: 22 193.196.160.0/22 maxlen: 22 193.196.165.0/24 maxlen: 24 193.196.166.0/23 maxlen: 23 193.196.168.0/21 maxlen: 21 193.196.176.0/20 maxlen: 20 193.196.192.0/18 maxlen: 18 193.197.0.0/24 maxlen: 24 193.197.4.0/23 maxlen: 23 193.197.8.0/22 maxlen: 22 193.197.20.0/23 maxlen: 23 193.197.28.0/22 maxlen: 22 193.197.32.0/19 maxlen: 19 193.197.64.0/22 maxlen: 22 193.197.68.0/23 maxlen: 23 193.197.70.0/24 maxlen: 24 193.197.80.0/22 maxlen: 22 193.197.85.0/24 maxlen: 24 193.197.86.0/23 maxlen: 23 193.197.94.0/24 maxlen: 24 193.197.112.0/22 maxlen: 22 193.197.120.0/21 maxlen: 21 193.197.130.0/24 maxlen: 24 193.197.132.0/22 maxlen: 22 193.197.136.0/21 maxlen: 21 193.197.149.0/24 maxlen: 24 193.197.152.0/22 maxlen: 22 193.197.157.0/24 maxlen: 24 193.197.160.0/22 maxlen: 22 193.197.168.0/21 maxlen: 21 193.197.180.0/22 maxlen: 22 193.197.200.0/21 maxlen: 21 193.197.212.0/24 maxlen: 24 193.197.224.0/19 maxlen: 19 2001:7c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5c:c9:3e:bb:4e:40:84:db:a5:7e:4d:14:ef:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=463f6b63c73e593cf9f1d463592b64c72c022e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:52:e8:df:e5:99:52:27:ca:e1:e9:3f:48: 0e:d0:f7:c5:4e:f8:37:c9:5d:43:fe:95:5e:4a:c5: db:84:7e:a0:6a:f6:d5:b4:4e:56:ed:3a:df:d9:0d: a7:8e:0e:05:10:c3:87:e0:66:fb:24:c1:03:51:23: 70:54:38:a1:38:33:33:f2:8f:7e:75:87:ba:37:fe: 0a:d6:bb:f4:1a:8e:43:a6:a0:8f:55:67:2b:9a:6a: ff:72:d6:b9:b3:45:4c:3b:08:8a:a5:fd:90:04:c3: d6:71:d0:9d:06:1b:d3:b3:06:5b:93:50:42:77:05: 15:7f:33:6e:e8:4c:b4:22:b8:54:87:91:c3:2d:78: 39:90:6c:4b:48:28:14:7b:f7:f8:54:80:59:ee:fd: d3:10:3d:0b:b2:53:2d:9c:48:93:01:fc:c5:89:0a: c3:da:0b:34:56:8f:6e:4f:59:90:0d:ff:6f:5f:fe: f2:63:68:2f:c4:04:a1:6c:36:35:96:25:05:8b:79: df:bb:62:e8:7f:ae:de:cc:e7:9f:24:fe:a3:d3:99: 86:45:2b:e7:6f:eb:a9:9c:57:8e:20:93:11:05:dc: 03:ad:75:c2:74:18:79:12:5b:af:d8:02:d0:ba:d8: f8:04:be:d9:b9:cd:a4:b2:20:7b:76:8c:b0:6e:cc: 84:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:6B:63:C7:3E:59:3C:F9:F1:D4:63:59:2B:64:C7:2C:02:2E:7B X509v3 Authority Key Identifier: keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Rj9rY8c-WTz58dRjWStkxywCLns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.69.0.0/16 129.143.0.0/16 141.58.0.0/16 141.70.0.0/16 192.67.189.0/24 192.67.208.0/24 192.108.35.0-192.108.44.255 193.196.0.0/15 IPv6: 2001:7c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:43:fd:67:41:e8:33:99:29:06:cd:02:6a:51:b2:b8:b4:eb: 36:77:91:5d:f4:ec:0b:d7:0b:fe:bc:c0:a6:47:75:7d:df:33: e4:f0:d2:41:43:da:e8:85:94:f4:b6:4a:a6:59:5d:ff:87:ee: b6:74:0c:31:97:d4:67:09:34:f8:22:9f:0c:97:f7:f7:81:87: 3b:be:39:4e:06:5a:9b:f9:75:69:d9:d0:5a:1d:ab:83:67:19: 37:81:5a:81:6a:0a:7d:a5:db:d7:11:0a:e8:15:a8:53:18:1a: ea:aa:75:3a:da:ee:78:2d:aa:81:56:16:63:14:db:cf:ef:89: 01:cc:6a:60:bd:dd:89:50:30:72:1f:2a:7d:b4:a0:05:5c:41: a5:7b:97:f7:0c:60:a2:85:fc:cc:71:de:09:01:4e:e0:bf:89: 73:59:0e:2f:ef:2d:e4:f6:0c:ba:69:7b:c5:87:d6:de:3e:5d: 90:b5:b4:5b:1a:f7:cd:40:05:52:f4:2c:1b:3d:d0:1b:5c:4f: a9:02:89:fb:d9:57:b4:2f:92:cf:d0:b4:07:07:11:37:d9:87: c5:5f:01:74:3c:d1:3f:44:34:c7:14:d3:89:eb:7a:2e:44:a3: 60:07:f9:f1:c7:ef:ef:1a:51:c5:e2:60:3e:03:34:a8:41:0c: 15:69:35:32 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt7o1zJPrtOQITbpX5NFO/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz NzY5NGIwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjNmNmI2M2M3M2U1OTNjZjlmMWQ0NjM1OTJiNjRjNzJjMDIyZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/lS6N/lmVInyuHpP0gO0PfFTvg3 yV1D/pVeSsXbhH6gavbVtE5W7Trf2Q2njg4FEMOH4Gb7JMEDUSNwVDihODMz8o9+ dYe6N/4K1rv0Go5DpqCPVWcrmmr/cta5s0VMOwiKpf2QBMPWcdCdBhvTswZbk1BC dwUVfzNu6Ey0IrhUh5HDLXg5kGxLSCgUe/f4VIBZ7v3TED0LslMtnEiTAfzFiQrD 2gs0Vo9uT1mQDf9vX/7yY2gvxAShbDY1liUFi3nfu2Lof67ezOefJP6j05mGRSvn b+upnFeOIJMRBdwDrXXCdBh5Eluv2ALQutj4BL7Zuc2ksiB7doywbsyEeQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFEY/a2PHPlk8+fHUY1krZMcsAi57MB8GA1UdIwQY MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt YzMyMDRiZGU3NzczLzEvUmo5clk4Yy1XVHo1OGRSaldTdGt4eXdDTG5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjA5BAIAATAzAwMAgUUDAwCB jwMDAI06AwMAjUYDBADAQ70DBADAQ9AwDAMEAMBsIwMEAMBsLAMDAcHEMA0EAgAC MAcDBQMgAQfAMA0GCSqGSIb3DQEBCwUAA4IBAQBSQ/1nQegzmSkGzQJqUbK4tOs2 d5Fd9OwL1wv+vMCmR3V93zPk8NJBQ9rohZT0tkqmWV3/h+62dAwxl9RnCTT4Ip8M l/f3gYc7vjlOBlqb+XVp2dBaHauDZxk3gVqBagp9pdvXEQroFahTGBrqqnU62u54 LaqBVhZjFNvP74kBzGpgvd2JUDByHyp9tKAFXEGle5f3DGCihfzMcd4JAU7gv4lz WQ4v7y3k9gy6aXvFh9bePl2QtbRbGvfNQAVS9CwbPdAbXE+pAon72Ve0L5LP0LQH BxE32YfFXwF0PNE/RDTHFNOJ63ouRKNgB/nxx+/vGlHF4mA+AzSoQQwVaTUy -----END CERTIFICATE-----Generated at Mon Jan 26 04:19:54 2026 by rpki-client