This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/mp8bIcHoCdCr9KIE5uCaKz-YI54.roa File: mp8bIcHoCdCr9KIE5uCaKz-YI54.roa (raw, json) Hash identifier: hJQqwqIcQYGfD3jN71QYWSwBchQXCnDKCq3dJyUyXfQ= Subject key identifier: 9A:9F:1B:21:C1:E8:09:D0:AB:F4:A2:04:E6:E0:9A:2B:3F:98:23:9E Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009 Certificate serial: 019BE634FC6ECF96C31AC3C324071CEA9062 Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/mp8bIcHoCdCr9KIE5uCaKz-YI54.roa Signing time: Thu 22 Jan 2026 14:56:30 +0000 ROA not before: Thu 22 Jan 2026 14:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30860 IP address blocks: 31.42.184.0/23 maxlen: 23 31.42.186.0/24 maxlen: 24 31.42.187.0/24 maxlen: 24 45.11.56.0/24 maxlen: 24 45.11.57.0/24 maxlen: 24 45.11.58.0/24 maxlen: 24 45.11.59.0/24 maxlen: 24 45.12.0.0/22 maxlen: 24 45.12.1.0/24 maxlen: 24 45.12.2.0/24 maxlen: 24 45.12.3.0/24 maxlen: 24 45.134.172.0/22 maxlen: 24 45.134.173.0/24 maxlen: 24 62.182.80.0/23 maxlen: 23 62.182.82.0/23 maxlen: 23 62.182.84.0/24 maxlen: 24 62.182.85.0/24 maxlen: 24 62.182.86.0/24 maxlen: 24 62.182.87.0/24 maxlen: 24 91.208.115.0/24 maxlen: 24 95.214.232.0/24 maxlen: 24 95.214.233.0/24 maxlen: 24 95.214.234.0/23 maxlen: 23 152.89.60.0/24 maxlen: 24 152.89.61.0/24 maxlen: 24 152.89.62.0/24 maxlen: 24 152.89.63.0/24 maxlen: 24 176.97.112.0/20 maxlen: 24 176.97.114.0/24 maxlen: 24 176.97.124.0/24 maxlen: 24 176.119.24.0/24 maxlen: 24 176.119.25.0/24 maxlen: 24 176.119.26.0/23 maxlen: 23 176.119.26.0/24 maxlen: 24 176.119.27.0/24 maxlen: 24 176.119.28.0/24 maxlen: 24 176.119.29.0/24 maxlen: 24 176.119.30.0/24 maxlen: 24 176.119.31.0/24 maxlen: 24 185.66.88.0/23 maxlen: 23 185.66.90.0/24 maxlen: 24 185.66.91.0/24 maxlen: 24 185.254.196.0/23 maxlen: 23 185.254.198.0/24 maxlen: 24 185.254.199.0/24 maxlen: 24 193.23.181.0/24 maxlen: 24 194.42.204.0/22 maxlen: 24 195.66.210.0/24 maxlen: 24 195.66.214.0/23 maxlen: 24 2a09:2dc0::/29 maxlen: 29 2a09:2dc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:34:fc:6e:cf:96:c3:1a:c3:c3:24:07:1c:ea:90:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009 Validity Not Before: Jan 22 14:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a9f1b21c1e809d0abf4a204e6e09a2b3f98239e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:97:3f:b0:e7:20:a9:74:77:4d:0f:12:8e:8e: 2d:ae:2a:59:1b:7d:1d:e1:df:b3:7b:91:03:ef:7d: bc:d4:e0:ed:99:35:9c:08:d9:12:53:3b:07:58:90: 05:a2:8b:af:8b:c0:60:34:3c:88:03:39:d5:6f:d9: fe:d9:ea:1c:79:aa:51:5d:c2:1e:3a:1e:d5:06:20: 82:2d:01:9f:ba:2f:5a:9f:b9:93:82:78:5b:bd:c3: 86:6c:44:fe:36:94:33:c5:34:18:cd:98:94:bc:e2: 34:3a:f7:80:46:fb:2f:f9:fd:82:eb:86:2a:8d:fa: b2:1b:b6:57:4d:e8:91:63:c7:ca:53:a0:45:9c:b9: f4:04:b5:b3:30:d1:98:e0:30:b9:10:9c:19:8f:c5: b9:7b:60:d0:ca:c4:28:e7:e1:6e:a6:ed:00:a8:a3: ce:8b:d4:84:81:6f:09:a3:ad:42:e6:9c:aa:7d:7a: ee:bf:f7:6f:e2:f8:fc:f5:54:6b:99:95:d3:79:ff: 23:8a:3d:0c:6b:6f:83:9a:ad:29:86:f2:10:15:6d: 1f:3d:61:f5:12:a1:30:1c:78:e1:2d:ea:3c:55:8b: 00:5d:b8:0f:5f:dc:40:86:6e:58:05:59:6e:9a:eb: ef:2a:33:2d:68:2f:2a:57:88:02:2c:af:07:88:f6: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:1B:21:C1:E8:09:D0:AB:F4:A2:04:E6:E0:9A:2B:3F:98:23:9E X509v3 Authority Key Identifier: keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/mp8bIcHoCdCr9KIE5uCaKz-YI54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.184.0/22 45.11.56.0/22 45.12.0.0/22 45.134.172.0/22 62.182.80.0/21 91.208.115.0/24 95.214.232.0/22 152.89.60.0/22 176.97.112.0/20 176.119.24.0/21 185.66.88.0/22 185.254.196.0/22 193.23.181.0/24 194.42.204.0/22 195.66.210.0/24 195.66.214.0/23 IPv6: 2a09:2dc0::/29 Signature Algorithm: sha256WithRSAEncryption 02:b3:bc:ed:b7:e0:63:91:88:e5:17:2c:ef:12:f3:99:ca:47: 5c:97:3b:8a:87:a9:d0:9e:5e:67:c0:95:29:e2:cd:f4:6b:76: 4d:a7:2f:ca:8f:81:57:fa:fe:54:90:8b:15:04:6e:e6:f4:d3: 1b:b8:fa:73:d5:15:d8:d8:3d:9b:3b:c3:5f:e7:87:1e:2b:ea: 6a:7c:a8:1e:d3:57:f9:70:f2:e5:1c:d4:1a:b2:3a:73:95:1b: 64:cf:b2:e5:ea:71:f8:c6:c0:2c:40:de:71:ad:59:bf:52:cc: b7:e8:b6:17:fa:d1:0f:e4:6d:7f:df:ce:cb:be:f9:7b:59:e1: 8b:30:a1:11:f4:b3:3f:3b:df:4e:b8:cd:b9:f4:a0:e6:65:f4: 6b:9e:aa:16:87:4e:49:e6:10:cb:44:57:f6:61:48:39:32:52: f1:a1:19:ba:cf:b3:83:14:d1:45:5a:19:8f:df:5a:32:7d:8d: 30:31:0a:31:f4:db:2b:f7:b9:1b:d5:45:9b:d1:49:a7:31:87: fe:f5:63:ff:93:fc:38:eb:3a:89:16:55:e5:dd:f7:3b:fb:e2: 3e:66:c4:f1:3e:f3:fc:cd:2b:97:5b:50:5d:51:13:2c:3a:d6: ee:e6:44:80:cf:82:b4:c3:bb:0a:69:90:86:4a:c0:e1:0d:23: 3e:e8:4a:6c -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZvmNPxuz5bDGsPDJAcc6pBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi MWUwMDkwHhcNMjYwMTIyMTQ1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTlmMWIyMWMxZTgwOWQwYWJmNGEyMDRlNmUwOWEyYjNmOTgyMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pc/sOcgqXR3TQ8Sjo4tripZG30d 4d+ze5ED73281ODtmTWcCNkSUzsHWJAFoouvi8BgNDyIAznVb9n+2eoceapRXcIe Oh7VBiCCLQGfui9an7mTgnhbvcOGbET+NpQzxTQYzZiUvOI0OveARvsv+f2C64Yq jfqyG7ZXTeiRY8fKU6BFnLn0BLWzMNGY4DC5EJwZj8W5e2DQysQo5+Fupu0AqKPO i9SEgW8Jo61C5pyqfXruv/dv4vj89VRrmZXTef8jij0Ma2+Dmq0phvIQFW0fPWH1 EqEwHHjhLeo8VYsAXbgPX9xAhm5YBVlumuvvKjMtaC8qV4gCLK8HiPaHpwIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFJqfGyHB6AnQq/SiBObgmis/mCOeMB8GA1UdIwQY MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt Y2IxMWJjNWIyZjFiLzEvbXA4YkljSG9DZENyOUtJRTV1Q2FLei1ZSTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAh8quAME Ai0LOAMEAi0MAAMEAi2GrAMEAz62UAMEAFvQcwMEAl/W6AMEAphZPAMEBLBhcAME A7B3GAMEArlCWAMEArn+xAMEAMEXtQMEAsIqzAMEAMNC0gMEAcNC1jANBAIAAjAH AwUDKgktwDANBgkqhkiG9w0BAQsFAAOCAQEAArO87bfgY5GI5Rcs7xLzmcpHXJc7 ioep0J5eZ8CVKeLN9Gt2Tacvyo+BV/r+VJCLFQRu5vTTG7j6c9UV2Ng9mzvDX+eH HivqanyoHtNX+XDy5RzUGrI6c5UbZM+y5epx+MbALEDeca1Zv1LMt+i2F/rRD+Rt f9/Oy775e1nhizChEfSzPzvfTrjNufSg5mX0a56qFodOSeYQy0RX9mFIOTJS8aEZ us+zgxTRRVoZj99aMn2NMDEKMfTbK/e5G9VFm9FJpzGH/vVj/5P8OOs6iRZV5d33 O/viPmbE8T7z/M0rl1tQXVETLDrW7uZEgM+CtMO7CmmQhkrA4Q0jPuhKbA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:52 2026 by rpki-client