This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/S9aocZiWXKfHvZNPaf5WoEf7SnA.roa File: S9aocZiWXKfHvZNPaf5WoEf7SnA.roa (raw, json) Hash identifier: /8QyR50KJ5D46vkCWxohVgZ13WY9lfH7A6s3dBVjWko= Subject key identifier: 4B:D6:A8:71:98:96:5C:A7:C7:BD:93:4F:69:FE:56:A0:47:FB:4A:70 Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Certificate serial: 019B7B35DE7491E493DA98A50AF378457E30 Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/S9aocZiWXKfHvZNPaf5WoEf7SnA.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210083 IP address blocks: 121.127.33.0/24 maxlen: 24 185.130.44.0/24 maxlen: 24 185.130.45.0/24 maxlen: 24 185.130.46.0/24 maxlen: 24 185.130.47.0/24 maxlen: 24 199.231.235.0/24 maxlen: 24 202.181.177.0/24 maxlen: 24 2a07:e00::/48 maxlen: 48 2a07:e00:a::/48 maxlen: 48 2a07:e00:b::/48 maxlen: 48 2a07:e00:c::/48 maxlen: 48 2a07:e00:ac::/48 maxlen: 48 2a07:e00:ad::/48 maxlen: 48 2a07:e00:bb::/48 maxlen: 48 2a07:e00:bc::/48 maxlen: 48 2a07:e00:d0::/44 maxlen: 48 2a07:e00:ff::/48 maxlen: 48 2a07:e00:19f::/48 maxlen: 48 2a07:e00:f9f9::/48 maxlen: 48 2a07:e01::/32 maxlen: 32 2a07:e02:41::/48 maxlen: 48 2a07:e02:a00::/40 maxlen: 40 2a07:e02:b00::/40 maxlen: 56 2a07:e02:baf::/48 maxlen: 48 2a07:e02:bee::/48 maxlen: 48 2a07:e02:1000::/36 maxlen: 40 2a07:e02:1000::/40 maxlen: 40 2a07:e03::/32 maxlen: 48 2a07:e04::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:de:74:91:e4:93:da:98:a5:0a:f3:78:45:7e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bd6a87198965ca7c7bd934f69fe56a047fb4a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:a0:90:16:62:7c:3a:4b:31:08:5f:45:f9: f6:8e:99:46:09:ff:a0:aa:25:b2:76:3c:fb:dc:cd: d1:57:fa:04:1b:44:4b:50:05:ce:df:08:ff:8d:3a: 05:bb:6a:92:76:c6:ec:45:a5:6b:e7:59:a7:e9:ac: 78:ba:61:62:19:dd:1a:fc:25:6a:a7:c4:26:a3:55: 4d:9b:d2:67:ef:ff:1f:99:6d:82:2c:bc:6d:f2:eb: 55:39:d1:3e:00:b1:34:ca:e8:ca:36:fc:d3:fc:82: 63:a2:47:bb:03:6d:e9:6a:c8:fb:24:b3:61:7a:78: 85:2c:2d:e5:f4:6e:ed:96:32:5b:a3:64:38:97:9b: c3:99:ac:9b:eb:96:2d:3e:91:59:5c:56:7b:56:ad: 59:29:52:cb:f3:d5:34:e9:14:46:e0:87:0b:32:fd: a7:5c:08:c8:b0:b2:cb:8b:1e:ae:ce:90:5d:41:c3: 40:24:c5:af:eb:af:00:e8:8a:6c:1d:14:01:26:5c: 80:29:86:d1:ce:34:23:ef:a7:1f:9c:63:73:fc:d6: 9b:9c:27:bd:b4:6b:e6:32:03:37:9b:61:85:1b:0b: 0d:99:3b:3f:89:a0:4b:9a:3c:63:5d:76:71:12:d0: 0d:a7:a8:0c:71:82:95:cf:dd:f9:a6:34:0e:ef:02: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D6:A8:71:98:96:5C:A7:C7:BD:93:4F:69:FE:56:A0:47:FB:4A:70 X509v3 Authority Key Identifier: keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/S9aocZiWXKfHvZNPaf5WoEf7SnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.127.33.0/24 185.130.44.0/22 199.231.235.0/24 202.181.177.0/24 IPv6: 2a07:e00::/48 2a07:e00:a::-2a07:e00:c:ffff:ffff:ffff:ffff:ffff 2a07:e00:ac::/47 2a07:e00:bb::-2a07:e00:bc:ffff:ffff:ffff:ffff:ffff 2a07:e00:d0::/44 2a07:e00:ff::/48 2a07:e00:19f::/48 2a07:e00:f9f9::/48 2a07:e01::/32 2a07:e02:41::/48 2a07:e02:a00::/39 2a07:e02:1000::/36 2a07:e03::-2a07:e04:fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b8:88:f5:59:7b:be:d4:1c:c3:69:60:e5:55:6b:61:18:bb:2b: 2c:25:7e:75:cb:60:3f:f3:68:67:3e:3e:0b:b6:85:17:97:16: 9e:42:ce:fb:58:cc:ea:6d:40:77:cd:38:e9:03:c0:03:1a:2d: b7:e7:d2:69:36:41:f8:70:5f:b1:ef:e0:de:24:a5:39:bd:47: 21:ee:f1:d1:64:98:c1:ab:71:62:09:1c:6e:f4:9d:59:77:7b: 19:5b:35:3d:b8:a4:56:e0:ea:9f:be:a2:c0:b0:4e:96:4b:86: 54:88:89:b6:01:61:88:32:f9:a4:62:f1:72:10:c1:b9:fc:f5: 43:a9:d8:7e:91:15:df:fb:64:d4:25:da:40:af:99:7e:6e:5d: aa:43:5b:9e:cb:6d:79:e6:47:a1:cb:bd:b6:a4:c8:ad:cc:87: 9b:32:35:a7:f9:ee:1a:2d:85:03:6a:a8:ac:a1:a8:95:66:ca: 89:af:a8:d3:95:cd:74:4a:1d:87:b6:6d:fb:22:22:bf:9a:f5: 81:38:c3:c1:a9:67:0a:79:54:36:00:69:55:51:2b:69:ac:71: c4:12:07:3c:12:e0:76:55:73:12:45:a5:ca:f0:4c:76:b7:c1: 1c:48:54:64:78:99:11:e2:ac:a2:1a:fc:b3:e5:6d:cc:76:e2: 66:7d:6c:6f -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt7Nd50keST2pilCvN4RX4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx ODA1MTYwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQ2YTg3MTk4OTY1Y2E3YzdiZDkzNGY2OWZlNTZhMDQ3ZmI0YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqCgkBZifDpLMQhfRfn2jplGCf+g qiWydjz73M3RV/oEG0RLUAXO3wj/jToFu2qSdsbsRaVr51mn6ax4umFiGd0a/CVq p8Qmo1VNm9Jn7/8fmW2CLLxt8utVOdE+ALE0yujKNvzT/IJjoke7A23pasj7JLNh eniFLC3l9G7tljJbo2Q4l5vDmayb65YtPpFZXFZ7Vq1ZKVLL89U06RRG4IcLMv2n XAjIsLLLix6uzpBdQcNAJMWv668A6IpsHRQBJlyAKYbRzjQj76cfnGNz/NabnCe9 tGvmMgM3m2GFGwsNmTs/iaBLmjxjXXZxEtANp6gMcYKVz935pjQO7wL90wIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFEvWqHGYllynx72TT2n+VqBH+0pwMB8GA1UdIwQY MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt ZjFmODAyZTY2MTNiLzEvUzlhb2NaaVdYS2ZIdlpOUGFmNVdvRWY3U25BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTAeBAIAATAYAwQAeX8h AwQCuYIsAwQAx+frAwQAyrWxMIGWBAIAAjCBjwMHACoHDgAAADASAwcBKgcOAAAK AwcAKgcOAAAMAwcBKgcOAACsMBIDBwAqBw4AALsDBwAqBw4AALwDBwQqBw4AANAD BwAqBw4AAP8DBwAqBw4AAZ8DBwAqBw4A+fkDBQAqBw4BAwcAKgcOAgBBAwYBKgcO AgoDBgQqBw4CEDAPAwUAKgcOAwMGBCoHDgQAMA0GCSqGSIb3DQEBCwUAA4IBAQC4 iPVZe77UHMNpYOVVa2EYuyssJX51y2A/82hnPj4LtoUXlxaeQs77WMzqbUB3zTjp A8ADGi2359JpNkH4cF+x7+DeJKU5vUch7vHRZJjBq3FiCRxu9J1Zd3sZWzU9uKRW 4OqfvqLAsE6WS4ZUiIm2AWGIMvmkYvFyEMG5/PVDqdh+kRXf+2TUJdpAr5l+bl2q Q1uey2155kehy722pMitzIebMjWn+e4aLYUDaqisoaiVZsqJr6jTlc10Sh2Htm37 IiK/mvWBOMPBqWcKeVQ2AGlVUStprHHEEgc8EuB2VXMSRaXK8Ex2t8EcSFRkeJkR 4qyiGvyz5W3MduJmfWxv -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:00 2026 by rpki-client