This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/32houEZJjYMHYgPuRqIg-2gVrRU.roa File: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (raw, json) Hash identifier: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM= Subject key identifier: DF:68:68:B8:46:49:8D:83:07:62:03:EE:46:A2:20:FB:68:15:AD:15 Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Certificate serial: 019B7DCB66E3A704B6052466E81DEA027327 Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/32houEZJjYMHYgPuRqIg-2gVrRU.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203684 IP address blocks: 91.199.9.0/24 maxlen: 24 91.199.18.0/24 maxlen: 24 91.199.27.0/24 maxlen: 24 91.199.30.0/24 maxlen: 24 109.95.60.0/24 maxlen: 24 109.95.61.0/24 maxlen: 24 109.95.62.0/24 maxlen: 24 185.186.240.0/24 maxlen: 24 185.187.86.0/23 maxlen: 23 185.187.86.0/24 maxlen: 24 185.187.87.0/24 maxlen: 24 2a11:7700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:66:e3:a7:04:b6:05:24:66:e8:1d:ea:02:73:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df6868b846498d83076203ee46a220fb6815ad15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:6c:cf:8a:c7:31:ff:c7:6e:1c:74:3d:64: 70:ad:e8:63:f2:1e:48:de:12:42:b6:71:a0:1f:65: a4:5d:a9:9d:7e:e1:52:33:ec:24:8b:75:25:a8:19: cf:ac:3c:16:8c:24:a5:23:19:0d:fc:a2:89:d4:7d: 9f:db:01:05:8b:76:b5:1a:4b:da:71:01:5d:c5:4b: 6a:7d:f2:ba:18:66:86:a3:62:46:15:df:98:f5:b3: ad:ed:d7:62:1d:7b:9a:66:c8:74:a9:30:c2:46:89: 94:6c:b2:f4:ea:e8:22:c5:dc:bb:b5:96:80:03:c4: ed:7d:ad:65:c5:5c:b3:9e:20:69:32:48:3c:de:05: fe:6f:6f:24:fe:d5:b5:47:32:3d:23:22:f5:fd:e5: 72:37:8f:25:0a:4d:5e:b1:02:7c:c6:7d:a0:40:1c: 9d:22:9a:39:33:79:a1:cb:fb:72:a8:93:6d:1e:f1: 14:87:ff:03:43:76:f7:19:2e:f0:31:a1:3e:4a:56: 94:18:01:9b:8f:76:6e:ab:f2:3f:f6:b0:86:39:8f: e6:19:56:7a:30:98:30:b9:8e:e9:02:03:a6:1a:0d: 84:84:05:77:9d:72:cb:62:92:14:66:7a:29:6f:57: 7f:7b:f4:79:62:7b:45:dc:e9:da:b9:ec:dd:d8:0a: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:68:68:B8:46:49:8D:83:07:62:03:EE:46:A2:20:FB:68:15:AD:15 X509v3 Authority Key Identifier: keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/32houEZJjYMHYgPuRqIg-2gVrRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.9.0/24 91.199.18.0/24 91.199.27.0/24 91.199.30.0/24 109.95.60.0-109.95.62.255 185.186.240.0/24 185.187.86.0/23 IPv6: 2a11:7700::/29 Signature Algorithm: sha256WithRSAEncryption b2:99:0e:c5:ec:cd:99:b0:3c:65:70:06:9f:4b:d1:04:05:69: e0:da:bb:7f:e3:23:dd:40:6d:8a:ba:d8:34:5d:5f:69:f9:b7: 11:bd:23:15:15:ef:d2:c2:fc:e5:77:45:d6:61:e4:29:42:c4: 86:fd:67:54:86:10:43:32:07:00:06:25:4a:ed:53:98:30:e6: 22:3a:7f:b5:a7:aa:67:87:33:cb:8e:ae:e0:fb:dd:61:73:7d: ad:89:fe:e8:fb:3f:b9:80:28:e1:5c:e2:49:b5:9f:58:cd:35: a8:53:9b:d4:92:a0:9f:d1:61:6d:c4:17:d1:c4:a5:8c:af:28: 8c:8d:26:86:8f:a2:83:2d:21:62:07:1a:3d:07:3c:a1:ff:81: 3e:c0:d5:8c:42:c7:79:08:0a:aa:1b:ef:66:77:96:6e:b7:c2: e3:46:d1:ae:42:3b:bb:87:aa:0b:13:5e:ad:8c:37:20:32:d1: d6:b8:35:5b:dd:13:cc:24:2d:66:14:fe:42:a7:1d:c9:42:f5: a9:43:b0:e3:03:4b:a9:72:0e:6c:a2:24:5a:23:63:25:1a:bb: a3:e6:fb:21:16:7e:fe:3f:00:f3:91:27:f3:ce:23:31:43:20: 98:31:56:d1:7d:fb:3d:42:ae:34:c9:08:82:dd:3b:0f:a5:61: a0:37:25:8f -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt9y2bjpwS2BSRm6B3qAnMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDFhNWI4MTYxNThmMDdhOGNhOGFjYjM3ZTk3ZTJmMjBi MDY5MTEwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjY4NjhiODQ2NDk4ZDgzMDc2MjAzZWU0NmEyMjBmYjY4MTVhZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0dsz4rHMf/Hbhx0PWRwrehj8h5I 3hJCtnGgH2WkXamdfuFSM+wki3UlqBnPrDwWjCSlIxkN/KKJ1H2f2wEFi3a1Gkva cQFdxUtqffK6GGaGo2JGFd+Y9bOt7ddiHXuaZsh0qTDCRomUbLL06ugixdy7tZaA A8Ttfa1lxVyzniBpMkg83gX+b28k/tW1RzI9IyL1/eVyN48lCk1esQJ8xn2gQByd Ipo5M3mhy/tyqJNtHvEUh/8DQ3b3GS7wMaE+SlaUGAGbj3Zuq/I/9rCGOY/mGVZ6 MJgwuY7pAgOmGg2EhAV3nXLLYpIUZnopb1d/e/R5YntF3Onauezd2AronQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFN9oaLhGSY2DB2ID7kaiIPtoFa0VMB8GA1UdIwQY MBaAFEgBpbgWFY8HqMqKyzfpfi8gsGkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTkt ZWU4MTBiODNhZGNkLzEvMzJob3VFWkpqWU1IWWdQdVJxSWctMmdWclJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTktZWU4MTBiODNhZGNk LzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA4BAIAATAyAwQAW8cJAwQA W8cSAwQAW8cbAwQAW8ceMAwDBAJtXzwDBABtXz4DBAC5uvADBAG5u1YwDQQCAAIw BwMFAyoRdwAwDQYJKoZIhvcNAQELBQADggEBALKZDsXszZmwPGVwBp9L0QQFaeDa u3/jI91AbYq62DRdX2n5txG9IxUV79LC/OV3RdZh5ClCxIb9Z1SGEEMyBwAGJUrt U5gw5iI6f7WnqmeHM8uOruD73WFzfa2J/uj7P7mAKOFc4km1n1jNNahTm9SSoJ/R YW3EF9HEpYyvKIyNJoaPooMtIWIHGj0HPKH/gT7A1YxCx3kICqob72Z3lm63wuNG 0a5CO7uHqgsTXq2MNyAy0da4NVvdE8wkLWYU/kKnHclC9alDsOMDS6lyDmyiJFoj YyUau6Pm+yEWfv4/APORJ/POIzFDIJgxVtF9+z1CrjTJCILdOw+lYaA3JY8= -----END CERTIFICATE-----Generated at Mon Jan 26 04:19:54 2026 by rpki-client