This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9Kz5q63dKFUnAF1wMTr-Z290llk.roa File: 9Kz5q63dKFUnAF1wMTr-Z290llk.roa (raw, json) Hash identifier: iWOGwKn2UXubdMmIS3zPYzzM7O/5RV8JicklkYYwMRA= Subject key identifier: F4:AC:F9:AB:AD:DD:28:55:27:00:5D:70:31:3A:FE:67:6F:74:96:59 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B0A8F1D029C0301327DF6EE63F38B0CFE Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9Kz5q63dKFUnAF1wMTr-Z290llk.roa Signing time: Wed 10 Dec 2025 23:18:29 +0000 ROA not before: Wed 10 Dec 2025 23:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213541 IP address blocks: 31.40.194.0/24 maxlen: 24 45.154.120.0/22 maxlen: 24 77.83.48.0/24 maxlen: 24 77.83.49.0/24 maxlen: 24 86.62.53.0/24 maxlen: 24 86.62.54.0/24 maxlen: 24 88.218.81.0/24 maxlen: 24 88.218.82.0/23 maxlen: 24 91.132.126.0/24 maxlen: 24 91.132.127.0/24 maxlen: 24 91.245.238.0/24 maxlen: 24 93.177.92.0/24 maxlen: 24 93.177.93.0/24 maxlen: 24 95.214.244.0/22 maxlen: 24 185.155.100.0/24 maxlen: 24 193.9.56.0/24 maxlen: 24 193.31.124.0/23 maxlen: 24 193.47.36.0/22 maxlen: 24 193.160.74.0/24 maxlen: 24 193.160.75.0/24 maxlen: 24 194.53.188.0/22 maxlen: 24 194.124.41.0/24 maxlen: 24 213.109.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:8f:1d:02:9c:03:01:32:7d:f6:ee:63:f3:8b:0c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Dec 10 23:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f4acf9abaddd285527005d70313afe676f749659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:b9:94:6f:93:8b:e4:2c:68:e5:84:1f:1c: 7d:11:42:5c:20:99:fd:59:74:d0:27:36:3f:f4:97: 1f:a5:a7:65:1c:32:02:7c:94:61:58:f8:33:75:d0: 8c:f9:32:ca:42:cc:89:cb:9c:c6:ce:ec:bf:39:1a: 7c:13:24:1a:f8:1b:36:ac:87:be:9f:fd:07:69:d4: cc:3e:cf:f5:00:41:3a:0e:87:67:8a:44:7a:e4:22: ce:51:24:ee:7e:e1:3e:e8:77:2f:fd:2c:dd:98:2a: a4:e0:d8:6c:22:4c:1a:2b:40:b2:55:b1:18:48:f6: 77:94:34:0f:2e:6e:2b:04:53:4d:af:15:77:44:70: 4b:eb:46:2a:04:ea:dc:55:c3:f0:49:a3:12:3a:fb: a5:b8:74:32:d4:c5:d6:31:4e:3f:a9:4a:6f:5b:96: 93:2f:66:88:68:54:2c:39:3f:4a:f5:fc:4c:8c:25: 49:ed:d5:13:dc:a3:57:ae:1a:6a:62:ab:f0:de:ff: e3:7c:c1:6c:89:44:40:46:0b:81:1b:89:ac:c1:25: 9b:5a:3f:27:15:a9:44:7f:81:fc:35:69:5a:a2:5a: f6:6b:3f:63:d1:76:02:3c:e2:d5:79:30:ef:c7:bc: b8:8d:cd:90:40:d0:7e:01:0e:b9:d1:c9:bd:3b:7d: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AC:F9:AB:AD:DD:28:55:27:00:5D:70:31:3A:FE:67:6F:74:96:59 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/9Kz5q63dKFUnAF1wMTr-Z290llk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.194.0/24 45.154.120.0/22 77.83.48.0/23 86.62.53.0-86.62.54.255 88.218.81.0-88.218.83.255 91.132.126.0/23 91.245.238.0/24 93.177.92.0/23 95.214.244.0/22 185.155.100.0/24 193.9.56.0/24 193.31.124.0/23 193.47.36.0/22 193.160.74.0/23 194.53.188.0/22 194.124.41.0/24 213.109.188.0/22 Signature Algorithm: sha256WithRSAEncryption ad:75:85:78:e9:45:4a:c3:9b:ff:ac:69:9d:1b:c8:8f:24:72: f6:ba:da:46:98:4f:c4:0f:ff:da:f2:4b:39:e2:57:72:8d:0d: d8:4b:b1:74:63:58:8d:ac:8a:98:a7:39:9f:de:9f:35:89:e1: 35:42:15:d6:1e:a5:c6:b7:e8:29:30:9f:5b:32:e5:3b:d0:93: bb:7a:05:35:61:a7:26:0c:04:38:d5:e5:1c:da:e9:51:be:ff: 96:2c:d0:f6:9b:2d:ec:90:e1:e0:75:4f:0b:bc:d5:2c:76:bf: 4a:d1:9c:a7:d3:ec:07:b3:dd:5c:73:36:76:fc:22:19:46:8a: 56:3d:c8:76:61:80:f9:ea:69:52:67:0e:23:2d:47:91:38:55: 6a:f0:38:af:25:ca:97:51:8c:d0:33:25:99:c5:75:a5:2a:fb: ab:b5:57:ec:41:60:da:04:d8:de:12:61:b3:0d:91:d9:4a:dc: 99:de:bb:15:5a:e0:f3:4e:28:fe:3b:b5:4b:28:5b:fa:8f:ac: 1d:d2:83:68:4f:a7:ee:25:73:92:b9:8a:5a:4f:2e:4b:70:fc: f2:58:c7:ac:7d:41:af:9d:88:05:89:ae:7b:f1:86:5a:96:ef: e5:90:31:7c:c0:c5:aa:ed:ee:81:29:a5:dc:d9:2d:d8:6d:97: 69:ce:eb:04 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZsKjx0CnAMBMn327mPziwz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjUxMjEwMjMxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGFjZjlhYmFkZGQyODU1MjcwMDVkNzAzMTNhZmU2NzZmNzQ5NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmi5lG+Ti+QsaOWEHxx9EUJcIJn9 WXTQJzY/9JcfpadlHDICfJRhWPgzddCM+TLKQsyJy5zGzuy/ORp8EyQa+Bs2rIe+ n/0HadTMPs/1AEE6DodnikR65CLOUSTufuE+6Hcv/SzdmCqk4NhsIkwaK0CyVbEY SPZ3lDQPLm4rBFNNrxV3RHBL60YqBOrcVcPwSaMSOvuluHQy1MXWMU4/qUpvW5aT L2aIaFQsOT9K9fxMjCVJ7dUT3KNXrhpqYqvw3v/jfMFsiURARguBG4mswSWbWj8n FalEf4H8NWlaolr2az9j0XYCPOLVeTDvx7y4jc2QQNB+AQ650cm9O32MkwIDAQAB o4ICezCCAncwHQYDVR0OBBYEFPSs+aut3ShVJwBdcDE6/mdvdJZZMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvOUt6NXE2M2RLRlVuQUYxd01Uci1aMjkwbGxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAAfKMID BAItmngDBAFNUzAwDAMEAFY+NQMEAFY+NjAMAwQAWNpRAwQCWNpQAwQBW4R+AwQA W/XuAwQBXbFcAwQCX9b0AwQAuZtkAwQAwQk4AwQBwR98AwQCwS8kAwQBwaBKAwQC wjW8AwQAwnwpAwQC1W28MA0GCSqGSIb3DQEBCwUAA4IBAQCtdYV46UVKw5v/rGmd G8iPJHL2utpGmE/ED//a8ks54ldyjQ3YS7F0Y1iNrIqYpzmf3p81ieE1QhXWHqXG t+gpMJ9bMuU70JO7egU1YacmDAQ41eUc2ulRvv+WLND2my3skOHgdU8LvNUsdr9K 0Zyn0+wHs91cczZ2/CIZRopWPch2YYD56mlSZw4jLUeROFVq8DivJcqXUYzQMyWZ xXWlKvurtVfsQWDaBNjeEmGzDZHZStyZ3rsVWuDzTij+O7VLKFv6j6wd0oNoT6fu JXOSuYpaTy5LcPzyWMesfUGvnYgFia578YZalu/lkDF8wMWq7e6BKaXc2S3YbZdp zusE -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:20 2025 by rpki-client