This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/8jBgewF9bG4rx4OZwkPHx2m4kTs.roa File: 8jBgewF9bG4rx4OZwkPHx2m4kTs.roa (raw, json) Hash identifier: Od2z5tTIpMkpZLtkO7W1HFI/TkyfSSLYP3bY+zri2x4= Subject key identifier: F2:30:60:7B:01:7D:6C:6E:2B:C7:83:99:C2:43:C7:C7:69:B8:91:3B Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Certificate serial: 019B7BA3D8A294749040FF4E230F35607C7A Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/8jBgewF9bG4rx4OZwkPHx2m4kTs.roa Signing time: Thu 01 Jan 2026 22:18:13 +0000 ROA not before: Thu 01 Jan 2026 22:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39246 IP address blocks: 31.193.189.0/24 maxlen: 24 62.192.132.0/24 maxlen: 24 62.192.133.0/24 maxlen: 24 77.78.128.0/24 maxlen: 24 77.78.129.0/24 maxlen: 24 77.78.130.0/24 maxlen: 24 77.78.131.0/24 maxlen: 24 77.78.132.0/24 maxlen: 24 77.78.133.0/24 maxlen: 24 77.78.134.0/24 maxlen: 24 77.78.135.0/24 maxlen: 24 77.78.136.0/24 maxlen: 24 77.78.137.0/24 maxlen: 24 77.78.138.0/24 maxlen: 24 77.78.139.0/24 maxlen: 24 77.78.140.0/24 maxlen: 24 77.78.141.0/24 maxlen: 24 77.78.142.0/24 maxlen: 24 77.78.143.0/24 maxlen: 24 77.78.144.0/24 maxlen: 24 109.121.129.0/24 maxlen: 24 109.121.130.0/24 maxlen: 24 109.121.131.0/24 maxlen: 24 109.121.132.0/24 maxlen: 24 109.121.148.0/24 maxlen: 24 109.121.149.0/24 maxlen: 24 109.121.150.0/24 maxlen: 24 109.121.151.0/24 maxlen: 24 109.121.154.0/24 maxlen: 24 109.121.155.0/24 maxlen: 24 109.121.156.0/24 maxlen: 24 109.121.157.0/24 maxlen: 24 109.121.158.0/24 maxlen: 24 109.121.164.0/24 maxlen: 24 109.121.165.0/24 maxlen: 24 109.121.167.0/24 maxlen: 24 109.121.168.0/24 maxlen: 24 109.121.169.0/24 maxlen: 24 109.121.170.0/24 maxlen: 24 109.121.171.0/24 maxlen: 24 109.121.176.0/24 maxlen: 24 109.121.177.0/24 maxlen: 24 109.121.178.0/24 maxlen: 24 109.121.179.0/24 maxlen: 24 109.121.184.0/24 maxlen: 24 109.121.185.0/24 maxlen: 24 109.121.186.0/24 maxlen: 24 109.121.187.0/24 maxlen: 24 109.121.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d8:a2:94:74:90:40:ff:4e:23:0f:35:60:7c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5 Validity Not Before: Jan 1 22:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f230607b017d6c6e2bc78399c243c7c769b8913b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:19:06:0a:89:12:d7:9c:e9:b5:19:73:53: 6b:df:59:26:a4:8e:87:23:09:bb:ac:cd:f9:46:1e: f7:e1:2c:f2:93:3f:fa:32:69:e1:c2:9c:9d:6d:28: e9:93:8a:74:ba:03:06:c4:77:a5:09:4e:7a:29:22: c6:2b:6c:07:7f:2c:18:89:e6:1e:c3:da:31:0e:15: fb:53:83:2c:da:4d:d8:c8:fa:05:0d:93:15:65:50: 0b:d3:77:69:37:d6:5d:e2:41:63:96:b1:08:9e:af: 46:99:f5:8e:ed:08:08:bc:4a:c9:f8:93:d6:d3:7a: 78:cf:78:be:1a:55:cd:af:cb:78:f4:3b:46:29:10: 7d:1f:e5:f7:b7:99:fd:84:70:b7:c3:3b:18:18:66: 6c:e7:ac:fb:04:4d:a6:6a:57:0c:c4:32:c1:53:9a: 8f:cc:ab:32:df:c4:e8:87:44:1d:b0:5e:68:fe:64: 93:32:49:31:ce:c7:c3:e1:8a:62:f9:83:6a:d9:d3: fb:57:1e:41:21:82:20:db:07:ef:a5:c9:27:37:73: fb:7a:9b:b6:ec:b5:74:ad:16:e9:f6:2a:37:33:d1: 8e:3d:4a:c0:77:29:4a:5d:4b:f7:1d:a2:a2:52:a4: ad:be:bf:39:fb:63:25:7e:e5:0e:35:b9:47:23:b0: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:30:60:7B:01:7D:6C:6E:2B:C7:83:99:C2:43:C7:C7:69:B8:91:3B X509v3 Authority Key Identifier: keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/8jBgewF9bG4rx4OZwkPHx2m4kTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.189.0/24 62.192.132.0/23 77.78.128.0-77.78.144.255 109.121.129.0-109.121.132.255 109.121.148.0/22 109.121.154.0-109.121.158.255 109.121.164.0/23 109.121.167.0-109.121.171.255 109.121.176.0/22 109.121.184.0-109.121.188.255 Signature Algorithm: sha256WithRSAEncryption 9f:02:73:a1:53:11:c9:a1:23:05:22:e2:1e:9a:38:3c:35:8c: a7:54:99:cf:45:e1:84:c5:b6:73:c5:19:99:d7:7e:52:1b:51: 34:19:8c:ef:b7:b2:c8:80:bf:56:16:54:cf:52:4f:1b:a6:5e: 1b:b6:9f:79:b6:b8:69:d6:72:35:6b:90:08:b4:72:cc:a3:33: 8b:f1:f6:5f:2c:2e:2e:8b:49:1c:a0:87:6b:00:be:cb:39:a5: 43:ca:d1:c0:ee:10:d7:31:cc:43:9b:96:01:0b:21:b8:a3:39: 8d:b0:ee:3e:21:73:e2:90:86:0c:c1:91:8d:b2:27:1f:ed:51: e0:91:ca:e0:6e:8a:70:ef:1a:bb:1f:ba:63:bd:f3:82:47:e1: e0:34:27:50:06:ef:14:6d:b7:c5:02:14:98:cd:df:0c:2b:03: 5b:2a:65:f4:3f:17:4e:30:88:60:34:da:7e:e5:8f:56:e2:8e: 29:68:90:15:f6:2c:6d:c4:a1:6e:11:23:9b:23:eb:ec:10:ad: 0d:1f:66:df:a7:44:08:e1:50:7e:12:73:b1:4f:67:22:4b:82: 45:c4:76:ad:e2:db:ee:c0:75:0a:cf:19:b8:78:41:b6:a4:6d: 07:0a:a5:cd:97:40:77:57:0a:8d:4e:72:0c:43:bd:f5:de:db: 78:e4:50:d5 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt7o9iilHSQQP9OIw81YHx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz YjcxYzUwHhcNMjYwMTAxMjIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjMwNjA3YjAxN2Q2YzZlMmJjNzgzOTljMjQzYzdjNzY5Yjg5MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+MZBgqJEtec6bUZc1Nr31kmpI6H Iwm7rM35Rh734Szykz/6MmnhwpydbSjpk4p0ugMGxHelCU56KSLGK2wHfywYieYe w9oxDhX7U4Ms2k3YyPoFDZMVZVAL03dpN9Zd4kFjlrEInq9GmfWO7QgIvErJ+JPW 03p4z3i+GlXNr8t49DtGKRB9H+X3t5n9hHC3wzsYGGZs56z7BE2malcMxDLBU5qP zKsy38Toh0QdsF5o/mSTMkkxzsfD4Ypi+YNq2dP7Vx5BIYIg2wfvpcknN3P7epu2 7LV0rRbp9io3M9GOPUrAdylKXUv3HaKiUqStvr85+2MlfuUONblHI7CLcwIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFPIwYHsBfWxuK8eDmcJDx8dpuJE7MB8GA1UdIwQY MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt MWQ1ZDk0NWEwNWEzLzEvOGpCZ2V3RjliRzRyeDRPWndrUEh4Mm00a1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQAH8G9AwQB PsCEMAwDBAdNToADBABNTpAwDAMEAG15gQMEAG15hAMEAm15lDAMAwQBbXmaAwQA bXmeAwQBbXmkMAwDBABteacDBAJteagDBAJtebAwDAMEA215uAMEAG15vDANBgkq hkiG9w0BAQsFAAOCAQEAnwJzoVMRyaEjBSLiHpo4PDWMp1SZz0XhhMW2c8UZmdd+ UhtRNBmM77eyyIC/VhZUz1JPG6ZeG7afeba4adZyNWuQCLRyzKMzi/H2XywuLotJ HKCHawC+yzmlQ8rRwO4Q1zHMQ5uWAQshuKM5jbDuPiFz4pCGDMGRjbInH+1R4JHK 4G6KcO8aux+6Y73zgkfh4DQnUAbvFG23xQIUmM3fDCsDWypl9D8XTjCIYDTafuWP VuKOKWiQFfYsbcShbhEjmyPr7BCtDR9m36dECOFQfhJzsU9nIkuCRcR2reLb7sB1 Cs8ZuHhBtqRtBwqlzZdAd1cKjU5yDEO99d7beORQ1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:31 2026 by rpki-client