This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa File: 1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa (raw, json) Hash identifier: 99X69fNFzFuCPq29Xhv4yLun4KnsOh44dtaBCjapBbQ= Subject key identifier: D7:0B:0C:54:27:8B:F7:75:33:37:96:F4:62:FB:24:DB:26:2E:58:B0 Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F835E1A188D0DC04562373A3950EB26 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa Signing time: Fri 02 Jan 2026 16:21:14 +0000 ROA not before: Fri 02 Jan 2026 16:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42846 IP address blocks: 31.192.212.0/24 maxlen: 24 31.192.214.0/24 maxlen: 24 89.252.134.0/24 maxlen: 24 89.252.137.0/24 maxlen: 24 89.252.138.0/24 maxlen: 24 89.252.151.0/24 maxlen: 24 89.252.152.0/24 maxlen: 24 89.252.159.0/24 maxlen: 24 159.253.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:5e:1a:18:8d:0d:c0:45:62:37:3a:39:50:eb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d70b0c54278bf775333796f462fb24db262e58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0b:9e:0e:44:d2:d9:db:e4:4c:43:ca:8e:9f: bb:cf:bd:14:56:8a:c1:e9:b4:be:05:b6:11:54:51: ba:04:3f:bc:7e:29:3a:c5:d6:c5:7c:78:5d:fe:24: d8:b0:b5:03:ec:fa:35:6a:d7:d5:2b:7b:de:d8:d8: e7:e9:21:b5:19:c1:d2:0f:6b:bc:b8:91:0e:40:30: 13:7c:09:03:83:97:3d:e4:93:e2:63:8e:ea:e2:ca: e6:00:56:e3:6d:b5:14:11:d5:e2:d8:08:4b:6d:bf: 4a:1f:f6:ce:da:ad:ae:9b:52:bd:05:d3:77:f3:dd: 67:1c:0e:f6:85:bf:7e:76:cc:45:77:bc:71:24:0c: a6:04:71:f4:cd:b8:1a:27:41:b3:7f:99:8c:ff:07: fb:f6:cf:c1:87:2e:62:79:bb:ae:0c:ee:2d:05:c3: d6:1c:f1:db:cf:3c:1d:6a:48:3e:60:de:32:75:23: fb:a9:41:06:07:e0:93:e8:80:b6:b1:04:d0:de:99: 67:e7:37:f2:05:bc:18:ad:5e:9c:8c:9d:5d:6a:72: 30:b3:82:d9:c9:25:3c:90:e3:ba:c5:ba:f2:9d:0c: a4:8e:fb:b2:4a:40:a5:61:82:4f:69:5d:0c:d3:02: 11:f4:7c:81:69:45:2b:44:4a:10:3c:19:c6:42:b0: 9e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0B:0C:54:27:8B:F7:75:33:37:96:F4:62:FB:24:DB:26:2E:58:B0 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/1wsMVCeL93UzN5b0Yvsk2yYuWLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.212.0/24 31.192.214.0/24 89.252.134.0/24 89.252.137.0-89.252.138.255 89.252.151.0-89.252.152.255 89.252.159.0/24 159.253.37.0/24 Signature Algorithm: sha256WithRSAEncryption 35:bd:55:b4:42:be:0a:b2:a6:50:16:5f:69:d8:da:b5:04:71: d9:ff:f2:94:69:fa:6b:94:bd:5f:22:f9:5e:d5:cc:5e:af:59: 19:2b:e6:2d:cf:87:ab:59:8a:1e:04:3c:2c:10:2d:fd:07:f2: 36:5c:b0:6a:fe:9f:66:ab:2a:f6:aa:78:03:bd:2f:33:0e:9f: 7d:da:83:e6:a7:5c:63:ee:1d:8e:c1:e9:36:ba:77:77:7e:ec: d6:8b:02:2e:49:02:c3:f9:46:e5:5f:6c:2e:f4:5d:ec:50:71: fd:b8:dc:4d:b6:62:03:9c:c2:01:c9:89:f3:59:8f:47:08:aa: 9a:a3:37:0a:99:1b:9f:fa:0c:6a:e2:5d:9b:d8:c7:0e:9c:c3: 92:55:83:5b:cf:d5:a3:54:90:b6:f8:55:75:2d:47:27:83:ce: ca:5a:e1:a3:46:94:9c:76:3a:c7:0f:07:8c:34:d3:c0:54:1e: f5:78:f7:16:3e:c5:2a:e9:f0:c9:f1:95:59:55:71:4d:78:08: 3c:7c:f4:03:9c:cf:e6:1f:0f:6c:a0:2f:1b:07:e5:7d:eb:33: 9c:61:d4:56:e0:f0:99:43:a8:1f:e4:31:44:ff:31:37:d4:2c: 76:86:4e:de:85:f5:d8:df:62:97:01:42:78:77:12:63:e9:00: fa:95:da:33 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt/g14aGI0NwEViNzo5UOsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzBiMGM1NDI3OGJmNzc1MzMzNzk2ZjQ2MmZiMjRkYjI2MmU1OGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQueDkTS2dvkTEPKjp+7z70UVorB 6bS+BbYRVFG6BD+8fik6xdbFfHhd/iTYsLUD7Po1atfVK3ve2Njn6SG1GcHSD2u8 uJEOQDATfAkDg5c95JPiY47q4srmAFbjbbUUEdXi2AhLbb9KH/bO2q2um1K9BdN3 891nHA72hb9+dsxFd7xxJAymBHH0zbgaJ0Gzf5mM/wf79s/Bhy5iebuuDO4tBcPW HPHbzzwdakg+YN4ydSP7qUEGB+CT6IC2sQTQ3pln5zfyBbwYrV6cjJ1danIws4LZ ySU8kOO6xbrynQykjvuySkClYYJPaV0M0wIR9HyBaUUrREoQPBnGQrCeVwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFNcLDFQni/d1MzeW9GL7JNsmLliwMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvMXdzTVZDZUw5M1V6TjViMFl2c2syeVl1V0xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAH8DUAwQA H8DWAwQAWfyGMAwDBABZ/IkDBABZ/IowDAMEAFn8lwMEAFn8mAMEAFn8nwMEAJ/9 JTANBgkqhkiG9w0BAQsFAAOCAQEANb1VtEK+CrKmUBZfadjatQRx2f/ylGn6a5S9 XyL5XtXMXq9ZGSvmLc+Hq1mKHgQ8LBAt/QfyNlywav6fZqsq9qp4A70vMw6ffdqD 5qdcY+4djsHpNrp3d37s1osCLkkCw/lG5V9sLvRd7FBx/bjcTbZiA5zCAcmJ81mP RwiqmqM3Cpkbn/oMauJdm9jHDpzDklWDW8/Vo1SQtvhVdS1HJ4POylrho0aUnHY6 xw8HjDTTwFQe9Xj3Fj7FKunwyfGVWVVxTXgIPHz0A5zP5h8PbKAvGwflfesznGHU VuDwmUOoH+QxRP8xN9QsdoZO3oX12N9ilwFCeHcSY+kA+pXaMw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:41 2026 by rpki-client