This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O9ERvz0J18WMbRei0l3Ha7EVJdc.roa File: O9ERvz0J18WMbRei0l3Ha7EVJdc.roa (raw, json) Hash identifier: 5qPYQWwq4tcRrm3fcPjzxCoAVsld/b//E2wlR5RKBYE= Subject key identifier: 3B:D1:11:BF:3D:09:D7:C5:8C:6D:17:A2:D2:5D:C7:6B:B1:15:25:D7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BEC813B8015F6FDC9CE0BC9DDC184FE92 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O9ERvz0J18WMbRei0l3Ha7EVJdc.roa Signing time: Fri 23 Jan 2026 20:17:30 +0000 ROA not before: Fri 23 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211066 IP address blocks: 5.83.134.0/24 maxlen: 24 5.175.140.0/24 maxlen: 24 5.175.161.0/24 maxlen: 24 5.175.192.0/24 maxlen: 24 5.175.221.0/24 maxlen: 24 5.175.236.0/24 maxlen: 24 5.230.184.0/24 maxlen: 24 5.231.30.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 87.239.135.0/24 maxlen: 24 89.106.73.0/24 maxlen: 24 89.106.75.0/24 maxlen: 24 89.106.77.0/24 maxlen: 24 89.106.79.0/24 maxlen: 24 89.106.81.0/24 maxlen: 24 89.106.82.0/24 maxlen: 24 89.106.83.0/24 maxlen: 24 89.106.88.0/24 maxlen: 24 89.106.91.0/24 maxlen: 24 89.144.3.0/24 maxlen: 24 89.144.22.0/24 maxlen: 24 89.144.60.0/24 maxlen: 24 89.144.61.0/24 maxlen: 24 94.249.148.0/24 maxlen: 24 94.249.173.0/24 maxlen: 24 94.249.195.0/24 maxlen: 24 94.249.230.0/24 maxlen: 24 94.249.232.0/24 maxlen: 24 94.249.241.0/24 maxlen: 24 94.249.243.0/24 maxlen: 24 94.249.244.0/24 maxlen: 24 94.249.249.0/24 maxlen: 24 94.249.250.0/24 maxlen: 24 94.249.251.0/24 maxlen: 24 94.249.252.0/24 maxlen: 24 94.249.254.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:81:3b:80:15:f6:fd:c9:ce:0b:c9:dd:c1:84:fe:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 23 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bd111bf3d09d7c58c6d17a2d25dc76bb11525d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:d0:94:a9:da:ab:ae:39:67:4a:21:83:42: 3a:d2:32:c4:93:51:72:5c:c4:19:98:80:e0:31:c3: 65:64:6c:9e:9b:82:66:54:58:77:fd:ed:ac:12:f7: 0f:1e:bf:e9:71:b6:7a:47:8a:30:52:f7:f5:22:55: f7:45:a7:b9:1e:33:dc:87:be:e3:a0:84:0b:d2:e0: ab:bd:48:e0:26:cb:ef:54:d1:7e:ca:e7:5f:0e:f6: 28:4a:1f:64:c6:e8:81:cc:6d:79:3e:e4:73:de:77: a1:fa:3f:56:cc:93:b3:1a:8b:42:d4:23:86:6d:b6: 1a:aa:c9:66:f1:67:f1:dd:6a:b2:72:82:dd:f2:fa: 8f:82:3f:5e:5a:7c:92:6d:6f:a7:87:cf:52:b5:85: 13:da:58:29:2e:1b:3f:d8:37:57:03:2b:78:45:95: b8:a0:c8:3b:5f:3d:c1:93:58:d6:57:db:98:45:4a: 72:25:d4:7e:f9:78:4d:c0:75:18:b1:85:67:9f:f2: af:ad:cb:0f:ba:f3:33:1c:d1:4d:14:a0:3e:ca:4f: 05:7c:19:bd:a9:cf:b8:73:ad:11:b0:6b:20:6c:ef: fd:d7:50:7b:9f:9f:8c:a2:97:39:08:17:f5:6c:e6: 12:73:ff:86:3a:c2:37:f3:c6:f1:0b:fe:2a:0e:8b: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D1:11:BF:3D:09:D7:C5:8C:6D:17:A2:D2:5D:C7:6B:B1:15:25:D7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O9ERvz0J18WMbRei0l3Ha7EVJdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.134.0/24 5.175.140.0/24 5.175.161.0/24 5.175.192.0/24 5.175.221.0/24 5.175.236.0/24 5.230.184.0/24 5.231.30.0/24 87.239.131.0/24 87.239.135.0/24 89.106.73.0/24 89.106.75.0/24 89.106.77.0/24 89.106.79.0/24 89.106.81.0-89.106.83.255 89.106.88.0/24 89.106.91.0/24 89.144.3.0/24 89.144.22.0/24 89.144.60.0/23 94.249.148.0/24 94.249.173.0/24 94.249.195.0/24 94.249.230.0/24 94.249.232.0/24 94.249.241.0/24 94.249.243.0-94.249.244.255 94.249.249.0-94.249.252.255 94.249.254.0/24 95.215.32.0/24 Signature Algorithm: sha256WithRSAEncryption 10:6f:36:73:24:a1:e9:ea:99:45:82:a5:f7:e0:e3:c6:88:e4: d5:e1:57:89:af:e1:68:ad:0e:5b:53:b0:88:5f:f7:e3:1a:f0: 61:25:eb:f7:6d:52:f6:bd:9b:a5:7d:7d:9f:4e:50:2b:fc:a3: 0c:28:ba:45:32:b5:82:5c:4a:5c:e2:d2:c1:b5:ed:93:95:7f: 42:d5:5d:fa:fb:4e:89:dc:94:b5:a9:c3:07:d8:9f:34:b0:f1: 8a:5b:fd:2b:c2:54:1e:18:b3:96:3b:04:2e:9e:cd:48:d3:5d: 17:06:d7:d8:36:f7:36:b1:8b:8f:3a:d8:5a:20:b9:ae:e1:a3: 98:cf:69:ea:93:a3:ad:c1:da:75:06:9c:e7:8b:67:df:92:93: 84:1b:56:f0:49:94:1d:22:dd:dd:66:21:ad:f6:59:63:8e:8b: 18:4a:38:a4:c2:aa:99:4e:7d:23:1f:0a:f4:66:80:0e:75:20: d6:e2:b3:1f:c6:6d:d3:32:4f:dd:b2:1d:46:e8:21:d3:4a:51: 2c:1f:fd:2b:0d:90:7c:c3:41:f6:ce:d2:79:d3:24:96:54:6d: 0e:e2:76:6c:26:58:de:6f:8c:86:fa:ef:00:b8:dc:a6:ad:26: ee:f2:f3:94:5f:96:38:a8:86:e3:77:ed:48:1f:fd:d1:f3:7a: 56:8e:37:a5 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZvsgTuAFfb9yc4Lyd3BhP6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTIzMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQxMTFiZjNkMDlkN2M1OGM2ZDE3YTJkMjVkYzc2YmIxMTUyNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1PQlKnaq645Z0ohg0I60jLEk1Fy XMQZmIDgMcNlZGyem4JmVFh3/e2sEvcPHr/pcbZ6R4owUvf1IlX3Rae5HjPch77j oIQL0uCrvUjgJsvvVNF+yudfDvYoSh9kxuiBzG15PuRz3neh+j9WzJOzGotC1COG bbYaqslm8Wfx3WqycoLd8vqPgj9eWnySbW+nh89StYUT2lgpLhs/2DdXAyt4RZW4 oMg7Xz3Bk1jWV9uYRUpyJdR++XhNwHUYsYVnn/KvrcsPuvMzHNFNFKA+yk8FfBm9 qc+4c60RsGsgbO/911B7n5+Mopc5CBf1bOYSc/+GOsI388bxC/4qDosWsQIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFDvREb89CdfFjG0XotJdx2uxFSXXMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvTzlFUnZ6MEoxOFdNYlJlaTBsM0hhN0VWSmRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHpBggrBgEFBQcBBwEB/wSB2TCB1jCB0wQCAAEwgcwDBAAF U4YDBAAFr4wDBAAFr6EDBAAFr8ADBAAFr90DBAAFr+wDBAAF5rgDBAAF5x4DBABX 74MDBABX74cDBABZakkDBABZaksDBABZak0DBABZak8wDAMEAFlqUQMEAllqUAME AFlqWAMEAFlqWwMEAFmQAwMEAFmQFgMEAVmQPAMEAF75lAMEAF75rQMEAF75wwME AF755gMEAF756AMEAF758TAMAwQAXvnzAwQAXvn0MAwDBABe+fkDBABe+fwDBABe +f4DBABf1yAwDQYJKoZIhvcNAQELBQADggEBABBvNnMkoenqmUWCpffg48aI5NXh V4mv4WitDltTsIhf9+Ma8GEl6/dtUva9m6V9fZ9OUCv8owwoukUytYJcSlzi0sG1 7ZOVf0LVXfr7TonclLWpwwfYnzSw8Ypb/SvCVB4Ys5Y7BC6ezUjTXRcG19g29zax i4862Fogua7ho5jPaeqTo63B2nUGnOeLZ9+Sk4QbVvBJlB0i3d1mIa32WWOOixhK OKTCqplOfSMfCvRmgA51INbisx/GbdMyT92yHUboIdNKUSwf/SsNkHzDQfbO0nnT JJZUbQ7idmwmWN5vjIb67wC43KatJu7y85RfljiohuN37Ugf/dHzelaON6U= -----END CERTIFICATE-----Generated at Sun Jan 25 07:08:34 2026 by rpki-client