This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa File: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (raw, json) Hash identifier: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg= Subject key identifier: A8:1F:59:FB:31:DD:9A:31:05:48:81:B6:BD:F2:46:7C:83:1D:A4:0D Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Certificate serial: 019B797E7D78772917AA4EEA5C006BDB19F0 Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa Signing time: Thu 01 Jan 2026 12:18:11 +0000 ROA not before: Thu 01 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3223 IP address blocks: 37.221.160.0/21 maxlen: 24 37.221.164.0/24 maxlen: 24 37.221.167.0/24 maxlen: 24 37.221.168.0/23 maxlen: 24 37.221.170.0/23 maxlen: 23 37.221.172.0/23 maxlen: 23 37.221.174.0/23 maxlen: 23 109.163.224.0/24 maxlen: 24 109.163.225.0/24 maxlen: 24 109.163.226.0/23 maxlen: 23 109.163.228.0/24 maxlen: 24 109.163.229.0/24 maxlen: 24 109.163.230.0/23 maxlen: 24 109.163.232.0/24 maxlen: 24 109.163.233.0/24 maxlen: 24 109.163.234.0/23 maxlen: 24 109.163.236.0/22 maxlen: 24 109.163.239.0/24 maxlen: 24 185.5.172.0/24 maxlen: 24 185.5.173.0/24 maxlen: 24 185.5.174.0/24 maxlen: 24 185.5.175.0/24 maxlen: 24 195.60.76.0/23 maxlen: 24 2a03:5180::/32 maxlen: 48 2a03:5180::/48 maxlen: 48 2a03:5180:1::/48 maxlen: 64 2a03:5180:1:6::/64 maxlen: 64 2a03:5180:2::/48 maxlen: 48 2a03:5180:3::/48 maxlen: 48 2a03:5180:4::/48 maxlen: 48 2a03:5180:5::/48 maxlen: 48 2a03:5180:6::/48 maxlen: 48 2a03:5180:7::/48 maxlen: 48 2a03:5180:8::/48 maxlen: 48 2a03:5180:9::/48 maxlen: 48 2a03:5180:b::/48 maxlen: 64 2a03:5180:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7d:78:77:29:17:aa:4e:ea:5c:00:6b:db:19:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Validity Not Before: Jan 1 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a81f59fb31dd9a31054881b6bdf2467c831da40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:6b:7b:9d:42:0d:72:60:82:c2:a8:d3:d6: 53:26:02:97:9f:0e:80:2a:a3:5c:b5:60:24:d8:97: 72:12:19:46:22:9f:ce:43:de:78:df:0d:f7:3f:44: 83:c7:09:27:8d:d4:59:eb:03:c7:1a:8e:e2:83:bc: 13:e0:73:52:a9:23:f0:2b:b9:1f:1c:0f:09:19:1f: ab:d0:db:27:9d:de:ff:23:2f:1f:3e:50:7c:12:c3: a8:d2:f0:57:41:51:41:84:5b:65:02:fc:7b:d7:4c: 7f:44:16:d3:d2:27:92:32:f0:ec:1e:dd:a7:b5:d0: 36:c8:43:bd:37:0a:2d:31:13:87:8e:b1:80:33:9b: 7a:d3:86:74:bc:99:0b:ae:fa:af:6d:fa:ea:f4:63: 49:8d:5e:12:61:81:d3:43:e2:d5:c4:6e:eb:ce:c4: 1c:6c:94:e6:cd:38:d0:18:80:63:a1:3c:4f:d3:cd: 92:c5:d3:d4:3c:f5:5b:a4:70:dd:9a:ff:e4:c9:f8: 3d:be:48:87:60:fa:27:9a:ee:67:89:40:d6:4e:87: 11:2c:99:bc:38:55:6e:d2:a7:e8:be:9b:fa:94:b2: 10:79:ee:32:b9:f5:50:a0:fb:c1:bd:84:8f:f3:06: bf:85:76:a6:a5:e2:37:4d:a0:1a:06:e9:60:46:62: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1F:59:FB:31:DD:9A:31:05:48:81:B6:BD:F2:46:7C:83:1D:A4:0D X509v3 Authority Key Identifier: keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.160.0/20 109.163.224.0/20 185.5.172.0/22 195.60.76.0/23 IPv6: 2a03:5180::/32 Signature Algorithm: sha256WithRSAEncryption 02:b8:f9:70:1f:d3:85:a1:65:79:1a:84:18:e6:5e:7f:64:e1: 4c:1e:7f:6b:95:a0:ca:5b:d2:57:d9:ef:79:5a:d5:db:75:93: 4f:50:2f:1f:12:c8:b9:35:31:76:a4:2b:a8:fb:71:26:1d:4a: 1f:41:bb:40:36:75:d8:8e:4d:7b:b9:f0:91:15:48:ac:de:1c: aa:e1:07:6c:87:05:7b:e6:ef:fe:7d:7f:f8:09:b8:d5:02:94: b5:2a:81:3a:3b:24:04:1d:a7:95:d1:47:75:65:b8:1e:46:20: 08:e5:5c:fa:5a:fc:b5:df:3b:26:85:67:43:e5:77:03:15:06: 94:1c:4f:0f:f3:fe:a1:89:41:d4:d3:c5:f9:96:95:cc:7b:39: 5a:08:91:fa:43:53:16:40:d0:c7:52:a4:37:7c:6a:ff:a7:6e: e1:3a:8e:fe:d5:d8:3b:f3:90:43:40:c6:ec:bc:26:e1:dc:4a: 0a:5a:cf:6c:b9:f2:35:df:ca:fe:15:c5:2f:b6:40:7f:ae:bb: 2e:ef:45:07:5f:5c:40:a3:03:13:b8:da:aa:59:6f:23:da:33: 2c:cf:57:88:da:d2:40:4f:9f:2b:d1:b2:cc:29:48:04:6d:84: 6c:97:98:84:c9:db:e2:0f:24:1b:51:48:1b:95:f3:02:16:24: ba:1f:d5:10 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5fn14dykXqk7qXABr2xnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk N2JjNzUwHhcNMjYwMTAxMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODFmNTlmYjMxZGQ5YTMxMDU0ODgxYjZiZGYyNDY3YzgzMWRhNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Zre51CDXJggsKo09ZTJgKXnw6A KqNctWAk2JdyEhlGIp/OQ9543w33P0SDxwknjdRZ6wPHGo7ig7wT4HNSqSPwK7kf HA8JGR+r0Nsnnd7/Iy8fPlB8EsOo0vBXQVFBhFtlAvx710x/RBbT0ieSMvDsHt2n tdA2yEO9NwotMROHjrGAM5t604Z0vJkLrvqvbfrq9GNJjV4SYYHTQ+LVxG7rzsQc bJTmzTjQGIBjoTxP082SxdPUPPVbpHDdmv/kyfg9vkiHYPonmu5niUDWTocRLJm8 OFVu0qfovpv6lLIQee4yufVQoPvBvYSP8wa/hXampeI3TaAaBulgRmK71wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKgfWfsx3ZoxBUiBtr3yRnyDHaQNMB8GA1UdIwQY MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt NzUxODhiM2MxMTJlLzEvcUI5Wi16SGRtakVGU0lHMnZmSkdmSU1kcEEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJd2gAwQE baPgAwQCuQWsAwQBwzxMMA0EAgACMAcDBQAqA1GAMA0GCSqGSIb3DQEBCwUAA4IB AQACuPlwH9OFoWV5GoQY5l5/ZOFMHn9rlaDKW9JX2e95WtXbdZNPUC8fEsi5NTF2 pCuo+3EmHUofQbtANnXYjk17ufCRFUis3hyq4QdshwV75u/+fX/4CbjVApS1KoE6 OyQEHaeV0Ud1ZbgeRiAI5Vz6Wvy13zsmhWdD5XcDFQaUHE8P8/6hiUHU08X5lpXM ezlaCJH6Q1MWQNDHUqQ3fGr/p27hOo7+1dg785BDQMbsvCbh3EoKWs9sufI138r+ FcUvtkB/rrsu70UHX1xAowMTuNqqWW8j2jMsz1eI2tJAT58r0bLMKUgEbYRsl5iE ydviDyQbUUgblfMCFiS6H9UQ -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:22 2026 by rpki-client