This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/Ct4L5h-sIatr6msdqcxlgTI_xdU.roa File: Ct4L5h-sIatr6msdqcxlgTI_xdU.roa (raw, json) Hash identifier: gHONK6a4Mhjfk+VJSaAss48ZBM5ufB0sZ7/viKj/2/U= Subject key identifier: 0A:DE:0B:E6:1F:AC:21:AB:6B:EA:6B:1D:A9:CC:65:81:32:3F:C5:D5 Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Certificate serial: 019B7FF24BB8A295661F229BB3980406E59A Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/Ct4L5h-sIatr6msdqcxlgTI_xdU.roa Signing time: Fri 02 Jan 2026 18:22:24 +0000 ROA not before: Fri 02 Jan 2026 18:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25577 IP address blocks: 31.3.208.0/24 maxlen: 24 31.3.211.0/24 maxlen: 24 31.3.212.0/23 maxlen: 23 31.3.221.0/24 maxlen: 24 31.3.223.0/24 maxlen: 24 81.27.64.0/24 maxlen: 24 81.27.66.0/23 maxlen: 23 81.27.72.0/23 maxlen: 23 81.27.75.0/24 maxlen: 24 81.27.76.0/24 maxlen: 24 81.27.80.0/22 maxlen: 22 81.27.87.0/24 maxlen: 24 81.27.88.0/21 maxlen: 21 81.27.88.0/22 maxlen: 22 81.27.92.0/23 maxlen: 23 81.27.94.0/24 maxlen: 24 81.27.95.0/24 maxlen: 24 82.197.72.0/24 maxlen: 24 2001:9d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:4b:b8:a2:95:66:1f:22:9b:b3:98:04:06:e5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a Validity Not Before: Jan 2 18:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ade0be61fac21ab6bea6b1da9cc6581323fc5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:dd:ff:41:21:71:81:3a:c1:65:2a:04:29: c1:54:25:34:a5:c0:ca:8b:42:86:dd:eb:fb:5f:86: 2c:15:7b:71:f9:c8:d2:35:da:30:8a:f7:eb:af:ed: 6e:b5:a7:02:96:24:38:08:7d:21:a2:70:9b:cb:a3: b1:ef:1c:86:2d:2b:82:c6:ae:4b:b9:5e:0d:d1:6d: e4:ac:d4:e9:56:e5:cd:f7:1e:ce:79:26:4e:d6:05: c5:17:1d:b7:fb:b3:a3:4d:48:f1:3f:ef:03:cb:b7: 50:a3:e2:56:f5:de:1d:25:5f:2c:96:12:7d:59:2a: 9f:8f:87:48:61:d1:b3:1f:d1:aa:17:73:7b:65:3a: 50:61:bb:72:8f:df:74:c8:d8:9d:b4:d3:87:53:b3: e9:04:a5:1d:2d:20:fb:48:ca:a9:78:ab:c5:10:1c: 61:51:d5:ce:1b:00:61:fe:d4:e2:3a:72:89:1c:9b: 67:7f:44:e8:7e:57:40:20:59:fc:f0:1e:2c:a1:1c: 85:99:7c:9a:08:c8:31:0a:af:e3:dc:99:42:6e:dc: 19:8d:7e:62:05:2c:c7:0e:0d:15:ac:15:17:a9:d2: e7:e0:24:05:93:3e:68:d1:b1:53:20:21:89:0e:4e: f9:1f:33:c0:4a:fd:8b:77:f2:04:35:67:90:88:92: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DE:0B:E6:1F:AC:21:AB:6B:EA:6B:1D:A9:CC:65:81:32:3F:C5:D5 X509v3 Authority Key Identifier: keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/Ct4L5h-sIatr6msdqcxlgTI_xdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.208.0/24 31.3.211.0-31.3.213.255 31.3.221.0/24 31.3.223.0/24 81.27.64.0/24 81.27.66.0/23 81.27.72.0/23 81.27.75.0-81.27.76.255 81.27.80.0/22 81.27.87.0-81.27.95.255 82.197.72.0/24 IPv6: 2001:9d8::/32 Signature Algorithm: sha256WithRSAEncryption 89:e9:04:27:a2:03:18:a9:fd:20:03:6d:fa:a3:bc:d1:fa:81: f5:d0:b2:ac:f3:09:9a:a8:a0:c0:bd:78:d2:aa:0e:3f:9b:00: b7:39:74:63:db:23:1f:9e:7d:09:ac:d2:87:4f:fd:ec:12:0a: d5:e6:d0:50:3c:9a:e9:60:28:f2:6f:d3:98:e1:fb:cc:32:5c: 59:72:f0:da:71:7a:e0:2d:d6:44:9a:c4:e0:19:c0:15:e7:d5: 0a:0d:96:54:61:50:c7:55:1e:88:1a:7f:cc:49:d7:e6:b1:75: af:4d:b9:f1:1b:81:85:88:16:9b:a9:cf:e4:85:a0:7d:9a:61: 51:b8:cc:06:4f:59:d2:44:b6:c5:dc:84:29:71:30:df:d3:18: 5c:42:53:96:88:c9:f8:4e:e2:88:63:60:bb:b6:94:d2:df:d0: 4e:b7:1f:08:99:87:27:ec:13:7a:75:23:3e:62:3c:d1:f5:52: c9:e3:39:11:f0:74:53:fb:85:5b:06:1e:71:be:95:73:38:57: 15:5f:6b:06:bb:47:1f:9f:01:9a:81:ae:a5:a3:20:f2:a1:22: d9:27:32:a4:b9:6a:de:4e:01:00:0c:a6:50:81:e1:86:cd:7d: b7:81:88:2a:52:e7:02:5d:c0:0c:d9:13:7b:54:7c:70:34:47: 86:60:b4:4c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt/8ku4opVmHyKbs5gEBuWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm Y2FmMmEwHhcNMjYwMTAyMTgyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWRlMGJlNjFmYWMyMWFiNmJlYTZiMWRhOWNjNjU4MTMyM2ZjNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpbd/0EhcYE6wWUqBCnBVCU0pcDK i0KG3ev7X4YsFXtx+cjSNdowivfrr+1utacCliQ4CH0honCby6Ox7xyGLSuCxq5L uV4N0W3krNTpVuXN9x7OeSZO1gXFFx23+7OjTUjxP+8Dy7dQo+JW9d4dJV8slhJ9 WSqfj4dIYdGzH9GqF3N7ZTpQYbtyj990yNidtNOHU7PpBKUdLSD7SMqpeKvFEBxh UdXOGwBh/tTiOnKJHJtnf0TofldAIFn88B4soRyFmXyaCMgxCq/j3JlCbtwZjX5i BSzHDg0VrBUXqdLn4CQFkz5o0bFTICGJDk75HzPASv2Ld/IENWeQiJKfNQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFAreC+YfrCGra+prHanMZYEyP8XVMB8GA1UdIwQY MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt MTYzZmI3MDAzZTVkLzEvQ3Q0TDVoLXNJYXRyNm1zZHFjeGxnVElfeGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEAB8D0DAM AwQAHwPTAwQBHwPUAwQAHwPdAwQAHwPfAwQAURtAAwQBURtCAwQBURtIMAwDBABR G0sDBABRG0wDBAJRG1AwDAMEAFEbVwMEBVEbQAMEAFLFSDANBAIAAjAHAwUAIAEJ 2DANBgkqhkiG9w0BAQsFAAOCAQEAiekEJ6IDGKn9IANt+qO80fqB9dCyrPMJmqig wL140qoOP5sAtzl0Y9sjH559CazSh0/97BIK1ebQUDya6WAo8m/TmOH7zDJcWXLw 2nF64C3WRJrE4BnAFefVCg2WVGFQx1UeiBp/zEnX5rF1r0258RuBhYgWm6nP5IWg fZphUbjMBk9Z0kS2xdyEKXEw39MYXEJTlojJ+E7iiGNgu7aU0t/QTrcfCJmHJ+wT enUjPmI80fVSyeM5EfB0U/uFWwYecb6VczhXFV9rBrtHH58BmoGupaMg8qEi2Scy pLlq3k4BAAymUIHhhs19t4GIKlLnAl3ADNkTe1R8cDRHhmC0TA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:10 2026 by rpki-client