This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa File: kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa (raw, json) Hash identifier: mvEwpNjSn9laD0umPfeJKdrVVRs0C7vZvrh9w/RHPQY= Subject key identifier: 90:24:76:35:A5:34:6A:AF:D3:A9:87:7F:CB:19:1F:34:F3:BE:76:57 Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712 Certificate serial: 019B7F134A8ABCEBE9894DC2A93290A639FA Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa Signing time: Fri 02 Jan 2026 14:18:49 +0000 ROA not before: Fri 02 Jan 2026 14:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12837 IP address blocks: 31.24.208.0/21 maxlen: 24 31.24.214.0/24 maxlen: 24 31.24.215.0/24 maxlen: 24 91.196.196.0/22 maxlen: 24 91.196.196.0/24 maxlen: 24 91.196.197.0/24 maxlen: 24 91.196.198.0/24 maxlen: 24 91.196.199.0/24 maxlen: 24 2a03:6306::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:4a:8a:bc:eb:e9:89:4d:c2:a9:32:90:a6:39:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712 Validity Not Before: Jan 2 14:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90247635a5346aafd3a9877fcb191f34f3be7657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:3e:d4:f4:a5:df:3e:1b:15:9e:66:b6:8b: 92:dd:88:dc:63:ef:36:ae:bc:af:be:73:55:e0:0c: a4:04:fc:c9:5a:22:9f:cb:49:25:b6:f8:7c:3c:21: 75:b9:fb:59:01:84:3e:1b:c4:e2:f7:8a:14:c7:ce: 25:23:f4:b7:52:61:8e:25:5d:43:be:6c:65:5b:14: 69:71:02:9c:8b:72:47:b6:e2:63:3d:19:d2:93:18: 59:6a:a0:c0:73:f4:65:3d:e9:87:de:3b:55:37:f5: e3:58:20:a2:07:5d:57:4d:88:2a:86:89:01:9c:7c: 4e:8a:d2:81:a2:52:7e:5e:d3:ac:68:81:f9:ce:65: 69:58:a9:fb:54:86:63:d1:1c:be:a0:81:12:19:05: ed:48:3a:40:76:65:94:9b:ba:87:01:e9:cc:29:06: 54:53:ad:23:95:20:a4:6a:8b:2e:78:50:a6:c2:18: 7e:a9:93:f4:ef:1c:ef:9a:ee:46:3b:06:c9:40:60: dc:3c:9a:58:6e:62:d5:ed:01:07:5b:d9:c2:bb:6d: ae:08:6a:3f:b5:af:16:b6:41:46:e2:91:80:18:b8: 4b:ef:83:95:fd:d3:02:e1:ae:40:d5:de:51:40:82: e9:03:ae:40:a6:03:1a:64:c4:af:42:5c:8e:ef:bf: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:24:76:35:A5:34:6A:AF:D3:A9:87:7F:CB:19:1F:34:F3:BE:76:57 X509v3 Authority Key Identifier: keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/kCR2NaU0aq_TqYd_yxkfNPO-dlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.208.0/21 91.196.196.0/22 IPv6: 2a03:6306::/32 Signature Algorithm: sha256WithRSAEncryption 3b:f3:68:c5:3c:d5:62:0b:a4:79:be:48:13:5a:06:d8:c0:40: d4:58:4e:f7:dc:3e:df:06:ab:af:40:e9:40:b4:71:87:e8:c2: 48:50:43:61:f0:38:43:20:7d:cf:9b:01:4f:26:fe:27:20:91: 83:fa:a1:57:44:f2:22:23:eb:2a:ab:1b:22:ae:49:d6:1b:b6: 59:ca:ea:da:34:9d:a2:b3:8d:53:bf:85:5c:de:ee:d1:de:2f: f1:96:e9:15:0d:09:8c:44:85:1e:20:70:8a:2e:6a:e3:fc:da: 39:43:ab:66:8e:d2:f1:fe:9e:09:1b:a9:e1:e1:82:e3:33:c2: c9:49:4b:c9:5d:5f:7a:1b:34:d0:35:d0:de:10:9a:a0:12:94: 97:a0:a7:8e:37:b5:56:e8:72:39:0d:22:8b:0b:bc:0e:67:6b: 2a:9d:37:27:d2:fa:8c:3f:7b:17:3c:a5:b8:5a:53:be:1d:99: 18:d1:e5:a9:a6:d4:53:86:27:5f:ec:b0:74:2b:9f:9e:eb:f0: bb:ff:91:dc:89:71:0e:70:e4:1a:43:7c:24:c1:b3:5f:1b:b4: f3:4c:43:e0:b1:ce:a3:33:4b:d8:26:76:c4:6e:3d:73:a3:e8: 7a:d3:96:7c:ad:b5:9c:53:62:e3:f7:11:6b:05:0b:00:c9:77: b8:71:82:b3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/E0qKvOvpiU3CqTKQpjn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZTRiYmRhYjg5NmU2NjExM2YzNTFiNGQ5YzgyZGY1MGU2 NmE3MTIwHhcNMjYwMTAyMTQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDI0NzYzNWE1MzQ2YWFmZDNhOTg3N2ZjYjE5MWYzNGYzYmU3NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b4+1PSl3z4bFZ5mtouS3YjcY+82 rryvvnNV4AykBPzJWiKfy0kltvh8PCF1uftZAYQ+G8Ti94oUx84lI/S3UmGOJV1D vmxlWxRpcQKci3JHtuJjPRnSkxhZaqDAc/RlPemH3jtVN/XjWCCiB11XTYgqhokB nHxOitKBolJ+XtOsaIH5zmVpWKn7VIZj0Ry+oIESGQXtSDpAdmWUm7qHAenMKQZU U60jlSCkaosueFCmwhh+qZP07xzvmu5GOwbJQGDcPJpYbmLV7QEHW9nCu22uCGo/ ta8WtkFG4pGAGLhL74OV/dMC4a5A1d5RQILpA65ApgMaZMSvQlyO77+sDQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJAkdjWlNGqv06mHf8sZHzTzvnZXMB8GA1UdIwQY MBaAFAbku9q4luZhE/NRtNnILfUOZqcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAt ZmUwZDI4YjY4Y2Q1LzEva0NSMk5hVTBhcV9UcVlkX3l4a2ZOUE8tZGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAtZmUwZDI4YjY4Y2Q1 LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHxjQAwQC W8TEMA0EAgACMAcDBQAqA2MGMA0GCSqGSIb3DQEBCwUAA4IBAQA782jFPNViC6R5 vkgTWgbYwEDUWE733D7fBquvQOlAtHGH6MJIUENh8DhDIH3PmwFPJv4nIJGD+qFX RPIiI+sqqxsirknWG7ZZyuraNJ2is41Tv4Vc3u7R3i/xlukVDQmMRIUeIHCKLmrj /No5Q6tmjtLx/p4JG6nh4YLjM8LJSUvJXV96GzTQNdDeEJqgEpSXoKeON7VW6HI5 DSKLC7wOZ2sqnTcn0vqMP3sXPKW4WlO+HZkY0eWpptRThidf7LB0K5+e6/C7/5Hc iXEOcOQaQ3wkwbNfG7TzTEPgsc6jM0vYJnbEbj1zo+h605Z8rbWcU2Lj9xFrBQsA yXe4cYKz -----END CERTIFICATE-----Generated at Wed Jan 7 22:48:34 2026 by rpki-client