This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/kD6KbG2HjbabIdgR62fkFbl77WA.roa File: kD6KbG2HjbabIdgR62fkFbl77WA.roa (raw, json) Hash identifier: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q= Subject key identifier: 90:3E:8A:6C:6D:87:8D:B6:9B:21:D8:11:EB:67:E4:15:B9:7B:ED:60 Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b Certificate serial: 019B7C1152680C3902F4D0405BCB776D0835 Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/kD6KbG2HjbabIdgR62fkFbl77WA.roa Signing time: Fri 02 Jan 2026 00:17:48 +0000 ROA not before: Fri 02 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50187 IP address blocks: 37.139.82.0/23 maxlen: 23 91.240.102.0/23 maxlen: 23 91.240.102.0/24 maxlen: 24 91.240.103.0/24 maxlen: 24 185.234.228.0/22 maxlen: 22 185.234.228.0/24 maxlen: 24 185.234.229.0/24 maxlen: 24 185.234.230.0/24 maxlen: 24 185.234.231.0/24 maxlen: 24 195.93.148.0/23 maxlen: 23 195.93.148.0/24 maxlen: 24 195.93.149.0/24 maxlen: 24 212.67.28.0/22 maxlen: 22 212.67.28.0/24 maxlen: 24 212.67.29.0/24 maxlen: 24 212.67.30.0/24 maxlen: 24 212.67.31.0/24 maxlen: 24 2a0e:26c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:52:68:0c:39:02:f4:d0:40:5b:cb:77:6d:08:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b Validity Not Before: Jan 2 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=903e8a6c6d878db69b21d811eb67e415b97bed60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:6f:51:42:1e:18:1f:fe:89:04:4c:3f:a9: 96:9f:24:85:72:84:5c:15:34:c1:03:af:9f:19:43: 73:c3:84:6a:d4:77:c7:42:e6:f3:62:40:f5:1a:29: fb:94:8b:c4:df:3a:64:d1:c4:93:71:9b:02:c7:00: fb:dd:f7:55:af:9f:07:5e:60:50:9e:c5:09:a4:47: cc:30:93:2d:58:36:31:51:cc:23:5e:7b:d0:cc:80: c5:00:14:38:46:76:28:cd:6e:6e:03:29:b4:e2:d6: 4b:2f:64:5b:34:f8:95:78:63:8d:e6:f5:df:47:fb: 81:7a:28:0c:d5:a1:0d:e0:2b:01:cd:0b:a9:fc:17: 4a:92:df:d7:46:1d:f3:5f:95:a0:c7:44:7d:93:63: 0b:dd:0d:18:86:48:5f:de:a0:ae:2a:98:57:aa:61: 5f:3d:a1:6f:85:76:09:c5:78:33:f6:8a:f9:11:2e: cf:76:cd:d4:2c:29:98:80:74:04:c5:3d:33:01:ff: 0c:5f:db:bc:0b:f5:ab:2c:8d:4c:39:2d:c9:6a:cd: 76:dd:03:cd:a6:64:17:5d:16:99:4a:7e:2c:23:f6: cf:11:43:dd:9c:d6:74:9a:53:fb:6c:68:bf:59:e7: f5:02:6a:af:68:31:48:91:8d:ee:f0:a5:7a:2a:eb: 68:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:8A:6C:6D:87:8D:B6:9B:21:D8:11:EB:67:E4:15:B9:7B:ED:60 X509v3 Authority Key Identifier: keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/kD6KbG2HjbabIdgR62fkFbl77WA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.82.0/23 91.240.102.0/23 185.234.228.0/22 195.93.148.0/23 212.67.28.0/22 IPv6: 2a0e:26c0::/32 Signature Algorithm: sha256WithRSAEncryption 73:c9:14:91:12:12:e6:af:f1:0b:3e:45:bd:89:18:3e:ea:2f: 6c:29:7e:54:48:8e:83:eb:21:29:31:2d:30:6b:ac:16:8a:85: e6:f3:e2:f3:fc:45:c5:28:0b:38:a0:9c:8b:66:e4:cb:3d:13: bf:31:5d:87:23:58:dd:bc:6f:81:30:3d:8f:8c:fe:66:12:c7: 2e:ea:6c:83:9a:81:bb:af:a5:6f:9c:18:19:6f:ec:36:ad:84: bb:cb:ce:8b:8e:b2:7f:16:5c:33:16:ad:ab:f4:09:a5:0b:c4: fa:cf:be:9c:cc:14:58:e9:13:57:cf:b2:db:53:46:7d:6a:db: cd:8e:80:49:11:9a:06:e2:0f:6d:52:e6:97:3e:46:5b:28:3b: 01:7a:48:09:7b:54:10:4d:5d:b1:60:b2:ea:dc:e2:dd:01:16: 89:e9:4c:26:68:9a:72:2c:49:af:6a:e5:a3:9a:21:4c:ff:4a: 63:fe:74:69:75:24:d8:46:fb:61:43:41:01:51:0c:6d:89:17: 3d:6f:b3:09:f1:dc:26:ac:42:fd:f6:75:23:3b:7a:fe:4b:0e: 75:77:43:4a:8e:80:04:ac:18:9e:6a:54:6f:32:47:00:65:85: 4b:f7:7a:06:06:d4:37:40:da:19:d3:69:7e:30:d3:66:63:48: 6a:ed:fb:22 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8EVJoDDkC9NBAW8t3bQg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWJiZDU0MjkxMmE2NmZlZTZhMzQxMjhhM2E4Y2Y3MDk3 ZGM2OWIwHhcNMjYwMTAyMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDNlOGE2YzZkODc4ZGI2OWIyMWQ4MTFlYjY3ZTQxNWI5N2JlZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSJvUUIeGB/+iQRMP6mWnySFcoRc FTTBA6+fGUNzw4Rq1HfHQubzYkD1Gin7lIvE3zpk0cSTcZsCxwD73fdVr58HXmBQ nsUJpEfMMJMtWDYxUcwjXnvQzIDFABQ4RnYozW5uAym04tZLL2RbNPiVeGON5vXf R/uBeigM1aEN4CsBzQup/BdKkt/XRh3zX5Wgx0R9k2ML3Q0Yhkhf3qCuKphXqmFf PaFvhXYJxXgz9or5ES7Pds3ULCmYgHQExT0zAf8MX9u8C/WrLI1MOS3Jas123QPN pmQXXRaZSn4sI/bPEUPdnNZ0mlP7bGi/Wef1AmqvaDFIkY3u8KV6KutoUQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFJA+imxth422myHYEetn5BW5e+1gMB8GA1UdIwQY MBaAFGlbvVQpEqZv7mo0Eoo6jPcJfcabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgt OTgxNmM2N2E5MjYyLzEva0Q2S2JHMkhqYmFiSWRnUjYyZmtGYmw3N1dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jZDlmZDQtY2NjNS00M2Q2LTlkNTgtOTgxNmM2N2E5MjYy LzEvYVZ1OVZDa1NwbV91YWpRU2lqcU05d2w5eHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBJYtSAwQB W/BmAwQCuerkAwQBw12UAwQC1EMcMA0EAgACMAcDBQAqDibAMA0GCSqGSIb3DQEB CwUAA4IBAQBzyRSREhLmr/ELPkW9iRg+6i9sKX5USI6D6yEpMS0wa6wWioXm8+Lz /EXFKAs4oJyLZuTLPRO/MV2HI1jdvG+BMD2PjP5mEscu6myDmoG7r6VvnBgZb+w2 rYS7y86LjrJ/FlwzFq2r9AmlC8T6z76czBRY6RNXz7LbU0Z9atvNjoBJEZoG4g9t UuaXPkZbKDsBekgJe1QQTV2xYLLq3OLdARaJ6UwmaJpyLEmvauWjmiFM/0pj/nRp dSTYRvthQ0EBUQxtiRc9b7MJ8dwmrEL99nUjO3r+Sw51d0NKjoAErBiealRvMkcA ZYVL93oGBtQ3QNoZ02l+MNNmY0hq7fsi -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:32 2026 by rpki-client