This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/0u0Z9G_sLm4VMeScNSe2qxkNpUw.roa File: 0u0Z9G_sLm4VMeScNSe2qxkNpUw.roa (raw, json) Hash identifier: ZjKrwSklc3LkDu0tAkV/6i8mo/dNcOG0GCNtibli/Q4= Subject key identifier: D2:ED:19:F4:6F:EC:2E:6E:15:31:E4:9C:35:27:B6:AB:19:0D:A5:4C Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B76EB935E11FEB449F3FAFD16BA81BAA8 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/0u0Z9G_sLm4VMeScNSe2qxkNpUw.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44843 IP address blocks: 31.207.66.0/23 maxlen: 23 31.207.66.0/24 maxlen: 24 31.207.67.0/24 maxlen: 24 31.207.71.0/24 maxlen: 24 152.89.134.0/24 maxlen: 24 178.236.128.0/21 maxlen: 21 178.236.128.0/24 maxlen: 24 178.236.129.0/24 maxlen: 24 178.236.130.0/24 maxlen: 24 178.236.131.0/24 maxlen: 24 178.236.132.0/24 maxlen: 24 178.236.133.0/24 maxlen: 24 178.236.134.0/24 maxlen: 24 178.236.135.0/24 maxlen: 24 2a02:1710:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:93:5e:11:fe:b4:49:f3:fa:fd:16:ba:81:ba:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2ed19f46fec2e6e1531e49c3527b6ab190da54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:68:2f:9b:a2:d5:f2:c5:a9:c8:41:5e:a1: 5a:05:10:8e:0e:d9:44:dd:b8:9c:fe:ec:4e:88:cc: 19:bf:0f:0e:16:ed:4b:7c:82:17:8d:99:d3:15:0f: c9:64:01:d4:90:a1:48:42:3a:2c:5d:ef:98:b1:7a: 60:d9:22:9a:63:7e:bb:7c:35:73:3d:45:fe:7b:bf: 8c:29:2d:c4:be:2f:2e:85:0b:9c:82:2b:d9:24:7e: 65:85:69:9a:38:aa:14:1e:8b:88:8a:19:cc:20:e0: ef:b5:19:cd:0d:8f:6a:aa:2f:32:8f:b0:0a:12:ce: 87:c7:df:77:bd:38:46:12:59:85:d8:38:b5:4c:6e: 4e:9a:d9:d0:72:d4:c8:b4:e5:ec:b9:d6:8d:0b:b1: 0d:74:ca:c8:f7:65:aa:46:52:a0:22:be:f4:21:45: f4:ce:d4:9e:bf:59:80:ac:6b:cb:fd:70:97:9f:bf: fe:55:69:56:f0:42:9f:30:50:5d:a0:44:6a:f2:44: 61:a1:62:26:26:d4:70:69:77:6e:b5:b6:24:0a:c7: 05:89:b6:66:04:ce:3c:6f:db:32:89:d2:ea:7c:62: 42:9b:c9:eb:09:43:e8:16:4f:43:8a:b0:84:14:98: c2:62:55:67:bb:38:e0:c0:58:e4:ec:c3:1f:6e:d5: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:ED:19:F4:6F:EC:2E:6E:15:31:E4:9C:35:27:B6:AB:19:0D:A5:4C X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/0u0Z9G_sLm4VMeScNSe2qxkNpUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.66.0/23 31.207.71.0/24 152.89.134.0/24 178.236.128.0/21 IPv6: 2a02:1710:4::/48 Signature Algorithm: sha256WithRSAEncryption 63:f9:5b:1b:8a:c7:22:8e:cf:db:98:5b:1b:7a:c5:da:a0:42: 57:fb:48:82:51:e6:3a:3b:a3:a5:a7:97:eb:0e:4e:a6:b8:8e: dc:1f:c6:8a:90:24:77:3a:56:b2:7a:eb:f7:05:bd:dc:95:e3: ea:a8:93:d5:e7:a6:58:f3:67:00:43:4e:45:a1:5e:7d:5b:43: 0f:a7:36:c8:d8:cb:dd:7f:c6:a2:ce:5b:2c:24:0c:6d:50:41: 8c:55:44:26:42:a8:7e:84:c5:88:e7:a8:53:e7:7e:cd:e7:e2: 84:48:7a:24:08:40:96:e9:e1:f3:0a:e9:e1:30:8b:2e:f2:75: b2:04:95:7c:bd:c0:5e:77:ba:79:11:bc:97:47:cc:dd:2f:88: 29:25:43:a6:e5:c5:e7:6b:01:01:66:ed:ec:9f:b6:23:06:e2: 34:74:71:87:e4:bc:5d:05:17:97:bc:de:09:77:d7:2e:de:c0: d8:83:0c:59:eb:6b:ec:77:80:40:c9:31:6a:a9:47:c2:25:c5: ab:f8:67:1d:61:88:83:c1:52:e9:f6:76:e4:86:bc:a5:c9:d7: 9c:0c:bc:5c:51:c6:96:2b:bd:9f:7a:0a:7f:d8:ad:9c:6d:b2: d9:87:95:ba:5b:46:c1:63:32:a7:e0:3b:05:ee:11:c3:12:af: 02:43:b6:d1 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt265NeEf60SfP6/Ra6gbqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmVkMTlmNDZmZWMyZTZlMTUzMWU0OWMzNTI3YjZhYjE5MGRhNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28loL5ui1fLFqchBXqFaBRCODtlE 3bic/uxOiMwZvw8OFu1LfIIXjZnTFQ/JZAHUkKFIQjosXe+YsXpg2SKaY367fDVz PUX+e7+MKS3Evi8uhQucgivZJH5lhWmaOKoUHouIihnMIODvtRnNDY9qqi8yj7AK Es6Hx993vThGElmF2Di1TG5OmtnQctTItOXsudaNC7ENdMrI92WqRlKgIr70IUX0 ztSev1mArGvL/XCXn7/+VWlW8EKfMFBdoERq8kRhoWImJtRwaXdutbYkCscFibZm BM48b9syidLqfGJCm8nrCUPoFk9DirCEFJjCYlVnuzjgwFjk7MMfbtWspQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFNLtGfRv7C5uFTHknDUntqsZDaVMMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvMHUwWjlHX3NMbTRWTWVTY05TZTJxeGtOcFV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBH89CAwQA H89HAwQAmFmGAwQDsuyAMA8EAgACMAkDBwAqAhcQAAQwDQYJKoZIhvcNAQELBQAD ggEBAGP5WxuKxyKOz9uYWxt6xdqgQlf7SIJR5jo7o6Wnl+sOTqa4jtwfxoqQJHc6 VrJ66/cFvdyV4+qok9XnpljzZwBDTkWhXn1bQw+nNsjYy91/xqLOWywkDG1QQYxV RCZCqH6ExYjnqFPnfs3n4oRIeiQIQJbp4fMK6eEwiy7ydbIElXy9wF53unkRvJdH zN0viCklQ6blxedrAQFm7eyftiMG4jR0cYfkvF0FF5e83gl31y7ewNiDDFnra+x3 gEDJMWqpR8Ilxav4Zx1hiIPBUun2duSGvKXJ15wMvFxRxpYrvZ96Cn/YrZxtstmH lbpbRsFjMqfgOwXuEcMSrwJDttE= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:01 2026 by rpki-client