This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/PoOb7W4NWRN_AS-pm6tqUBAqQq8.roa File: PoOb7W4NWRN_AS-pm6tqUBAqQq8.roa (raw, json) Hash identifier: tHkHlWPC24fo6Qw1AGu+2Iu8cbzz/uwKoHqifwDnzt0= Subject key identifier: 3E:83:9B:ED:6E:0D:59:13:7F:01:2F:A9:9B:AB:6A:50:10:2A:42:AF Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019BE57A3635DE4F40B44263E1E8B116B451 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/PoOb7W4NWRN_AS-pm6tqUBAqQq8.roa Signing time: Thu 22 Jan 2026 11:32:30 +0000 ROA not before: Thu 22 Jan 2026 11:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 131.222.128.0/18 maxlen: 18 131.222.192.0/19 maxlen: 19 131.222.224.0/20 maxlen: 20 131.222.240.0/21 maxlen: 21 131.222.248.0/22 maxlen: 22 131.222.252.0/23 maxlen: 23 131.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:7a:36:35:de:4f:40:b4:42:63:e1:e8:b1:16:b4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 22 11:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e839bed6e0d59137f012fa99bab6a50102a42af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:34:1d:6a:99:f8:00:60:a2:89:e8:9d:dc: f4:2c:c4:db:27:20:68:79:cf:10:c1:d1:11:1c:b8: 9f:86:e2:9f:11:bb:b5:82:74:7e:53:f3:2e:85:6b: 9b:db:f6:d1:a4:9f:c4:1c:b8:d1:5e:09:e7:77:cc: d3:69:35:e7:6d:00:96:8d:14:a6:e1:9b:4a:92:a9: 85:94:36:4a:a2:2e:dc:bf:a5:17:99:c1:70:10:1c: 90:51:c2:c1:52:04:b1:6e:36:4b:c4:49:a7:c3:92: 94:f4:59:28:f7:8e:f2:21:cb:bd:07:40:5e:27:7b: f0:22:fb:ee:14:7d:e5:f0:e5:96:38:4b:9f:bf:30: db:22:c4:99:7d:7b:57:67:0c:c8:b4:bf:52:7e:e9: a9:a5:16:a7:00:ff:5b:d1:dc:21:4d:00:5e:26:1f: c3:4c:c0:0d:c6:d2:b4:7b:54:6c:2f:38:f0:e8:b1: 8b:46:13:39:3c:02:1e:5d:fe:7e:79:60:29:f9:a3: b0:dd:f3:e1:aa:40:c1:1c:06:b0:dd:10:e3:cc:d0: 22:f1:dd:18:c9:9e:7b:0d:2f:05:2e:b5:72:64:62: 92:ed:29:b8:f5:ac:0b:66:87:82:01:d9:7c:7f:1d: 1a:02:e9:6c:0f:5f:9b:3f:b8:76:23:2a:e3:1b:5d: 36:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:83:9B:ED:6E:0D:59:13:7F:01:2F:A9:9B:AB:6A:50:10:2A:42:AF X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/PoOb7W4NWRN_AS-pm6tqUBAqQq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.222.128.0-131.222.254.255 Signature Algorithm: sha256WithRSAEncryption 77:89:c4:7f:99:29:d9:61:0b:8f:ae:87:1c:bc:87:b4:77:87: b2:3e:94:a3:91:aa:81:86:9e:ad:9d:b5:c0:11:93:a0:79:74: 55:d3:4c:af:1c:02:da:26:23:4f:52:e9:f2:a3:8d:c8:b4:84: 58:43:3a:29:fa:a0:0d:e7:c7:7e:53:1f:f4:a9:9b:18:1c:40: 3b:06:bc:20:02:d4:28:ea:fa:26:e5:ec:95:51:ae:3e:7a:01: c5:a4:c5:17:43:41:72:3e:77:5c:bb:8b:bd:d7:b6:48:2f:71: 2d:e3:e0:f0:47:ea:a9:6b:fd:65:37:38:05:bb:75:1c:a0:5a: 04:18:51:a1:f8:dc:9f:58:19:03:49:8c:e1:54:08:39:c1:8c: 71:70:a0:7e:94:94:69:f2:1c:72:23:30:38:35:9f:62:ca:fe: c0:b5:a8:4d:6d:a7:87:32:50:13:16:15:11:46:ea:93:c9:fa: c5:a1:3c:aa:8e:c2:b9:f9:a0:0c:8e:af:4d:c3:31:8c:a6:15: 72:31:a1:17:dc:f9:a7:5c:f0:85:85:c1:69:5a:61:a4:b9:75: 27:6b:00:2b:e0:c5:a2:c4:5f:f8:1e:20:fe:24:54:04:a2:bf: 96:95:a9:57:aa:ea:09:28:02:1c:9d:6a:86:99:34:3f:ed:e1: 0c:a7:af:e4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZvlejY13k9AtEJj4eixFrRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTIyMTEzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTgzOWJlZDZlMGQ1OTEzN2YwMTJmYTk5YmFiNmE1MDEwMmE0MmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4A0HWqZ+ABgoonondz0LMTbJyBo ec8QwdERHLifhuKfEbu1gnR+U/MuhWub2/bRpJ/EHLjRXgnnd8zTaTXnbQCWjRSm 4ZtKkqmFlDZKoi7cv6UXmcFwEByQUcLBUgSxbjZLxEmnw5KU9Fko947yIcu9B0Be J3vwIvvuFH3l8OWWOEufvzDbIsSZfXtXZwzItL9SfumppRanAP9b0dwhTQBeJh/D TMANxtK0e1RsLzjw6LGLRhM5PAIeXf5+eWAp+aOw3fPhqkDBHAaw3RDjzNAi8d0Y yZ57DS8FLrVyZGKS7Sm49awLZoeCAdl8fx0aAulsD1+bP7h2IyrjG102BQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD6Dm+1uDVkTfwEvqZuralAQKkKvMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvUG9PYjdXNE5XUk5fQVMtcG02dHFVQkFxUXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeD3oAD BACD3v4wDQYJKoZIhvcNAQELBQADggEBAHeJxH+ZKdlhC4+uhxy8h7R3h7I+lKOR qoGGnq2dtcARk6B5dFXTTK8cAtomI09S6fKjjci0hFhDOin6oA3nx35TH/Spmxgc QDsGvCAC1Cjq+ibl7JVRrj56AcWkxRdDQXI+d1y7i73XtkgvcS3j4PBH6qlr/WU3 OAW7dRygWgQYUaH43J9YGQNJjOFUCDnBjHFwoH6UlGnyHHIjMDg1n2LK/sC1qE1t p4cyUBMWFRFG6pPJ+sWhPKqOwrn5oAyOr03DMYymFXIxoRfc+adc8IWFwWlaYaS5 dSdrACvgxaLEX/geIP4kVASiv5aVqVeq6gkoAhydaoaZND/t4Qynr+Q= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:38 2026 by rpki-client