This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/t23_omorbxNaeI1t-2_nVI-M9Bo.roa File: t23_omorbxNaeI1t-2_nVI-M9Bo.roa (raw, json) Hash identifier: tkmuOhPWK63hgBOOCfU7J7aL82MJy/fu9mcuqv0UO0w= Subject key identifier: B7:6D:FF:A2:6A:2B:6F:13:5A:78:8D:6D:FB:6F:E7:54:8F:8C:F4:1A Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019B7BA43E0DD3234849D1081F881FA5E17B Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/t23_omorbxNaeI1t-2_nVI-M9Bo.roa Signing time: Thu 01 Jan 2026 22:18:39 +0000 ROA not before: Thu 01 Jan 2026 22:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6871 IP address blocks: 31.185.32.0/19 maxlen: 19 31.185.128.0/17 maxlen: 17 37.152.192.0/18 maxlen: 18 46.208.0.0/16 maxlen: 16 51.6.0.0/15 maxlen: 15 51.9.0.0/16 maxlen: 16 80.189.0.0/16 maxlen: 16 80.229.0.0/16 maxlen: 16 81.174.128.0/17 maxlen: 17 83.216.128.0/19 maxlen: 19 84.51.128.0/18 maxlen: 18 84.92.0.0/15 maxlen: 15 87.112.0.0/14 maxlen: 14 87.112.0.0/16 maxlen: 16 87.113.0.0/16 maxlen: 16 87.114.0.0/16 maxlen: 16 87.115.0.0/16 maxlen: 16 91.125.0.0/16 maxlen: 16 146.66.32.0/19 maxlen: 19 146.90.0.0/16 maxlen: 16 194.75.0.0/19 maxlen: 19 194.75.80.0/20 maxlen: 20 194.75.220.0/22 maxlen: 22 195.99.8.0/21 maxlen: 21 195.99.32.0/19 maxlen: 19 195.99.88.0/21 maxlen: 21 195.99.224.0/20 maxlen: 20 195.166.128.0/19 maxlen: 19 195.213.0.0/16 maxlen: 16 212.56.64.0/18 maxlen: 18 212.140.0.0/19 maxlen: 19 212.140.32.0/20 maxlen: 20 212.140.48.0/21 maxlen: 21 212.159.0.0/17 maxlen: 17 212.159.0.0/19 maxlen: 19 212.159.8.0/23 maxlen: 23 212.159.32.0/19 maxlen: 19 212.159.64.0/18 maxlen: 18 213.31.0.0/16 maxlen: 16 213.162.96.0/19 maxlen: 19 217.32.30.0/23 maxlen: 23 217.32.32.0/20 maxlen: 20 217.32.112.0/22 maxlen: 22 217.32.148.0/22 maxlen: 22 217.32.152.0/21 maxlen: 21 217.32.160.0/22 maxlen: 22 217.32.176.0/22 maxlen: 22 217.39.16.0/20 maxlen: 20 217.39.112.0/20 maxlen: 20 217.45.24.0/21 maxlen: 21 217.45.96.0/20 maxlen: 20 217.46.24.0/22 maxlen: 22 217.46.128.0/20 maxlen: 20 2a02:16c8::/32 maxlen: 32 2a02:16c8::/35 maxlen: 35 2a06:7200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3e:0d:d3:23:48:49:d1:08:1f:88:1f:a5:e1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Jan 1 22:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b76dffa26a2b6f135a788d6dfb6fe7548f8cf41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:f3:73:61:d4:6c:e4:01:da:5b:72:21:68: ce:88:96:4a:04:2c:21:a7:cb:c2:29:98:ef:70:d5: db:af:74:c6:03:46:6c:e5:93:d7:95:62:fe:55:2f: 71:96:4b:58:50:ef:03:b3:e4:8a:40:f9:de:99:87: a9:a7:d2:b1:aa:65:fa:50:67:f0:64:e4:e2:b6:38: f9:6c:0d:87:a9:69:e1:41:86:da:92:38:32:00:91: 30:c8:e0:65:b4:24:c9:88:3c:d0:93:56:58:0e:c3: 31:50:9b:c0:a3:bd:b5:7a:81:75:08:2b:36:7a:f4: bf:87:ef:72:ca:ba:23:36:4d:99:f7:45:78:8d:1b: 4b:6b:fb:2e:4d:08:d9:82:d4:dc:43:71:85:10:2e: a6:10:d2:a3:03:9b:a9:cb:6e:60:b1:0d:12:f2:1c: e2:78:ed:22:11:12:01:75:cf:6e:57:cb:a8:31:b2: a0:cf:95:86:6a:9a:07:9a:e4:ae:7c:dc:fe:ff:99: 33:44:f2:c3:c9:60:0c:c0:8a:1b:d7:64:0a:30:64: fe:3b:83:50:ed:da:da:f1:f8:a9:fb:4f:c0:a9:5b: d7:5f:3e:e8:67:f6:73:90:d7:aa:82:60:9b:81:fc: 8d:ff:86:ee:67:d9:ca:de:61:55:16:72:4c:b3:43: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6D:FF:A2:6A:2B:6F:13:5A:78:8D:6D:FB:6F:E7:54:8F:8C:F4:1A X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/t23_omorbxNaeI1t-2_nVI-M9Bo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.32.0/19 31.185.128.0/17 37.152.192.0/18 46.208.0.0/16 51.6.0.0/15 51.9.0.0/16 80.189.0.0/16 80.229.0.0/16 81.174.128.0/17 83.216.128.0/19 84.51.128.0/18 84.92.0.0/15 87.112.0.0/14 91.125.0.0/16 146.66.32.0/19 146.90.0.0/16 194.75.0.0/19 194.75.80.0/20 194.75.220.0/22 195.99.8.0/21 195.99.32.0/19 195.99.88.0/21 195.99.224.0/20 195.166.128.0/19 195.213.0.0/16 212.56.64.0/18 212.140.0.0-212.140.55.255 212.159.0.0/17 213.31.0.0/16 213.162.96.0/19 217.32.30.0-217.32.47.255 217.32.112.0/22 217.32.148.0-217.32.163.255 217.32.176.0/22 217.39.16.0/20 217.39.112.0/20 217.45.24.0/21 217.45.96.0/20 217.46.24.0/22 217.46.128.0/20 IPv6: 2a02:16c8::/32 2a06:7200::/29 Signature Algorithm: sha256WithRSAEncryption 8e:ab:97:22:73:26:25:16:06:9a:73:05:77:69:e0:55:35:75: 4d:c7:92:76:80:5f:b8:ab:9d:2b:6e:e6:78:28:6c:82:3e:1d: cb:5f:6f:ac:81:cc:2d:ad:30:22:7a:af:0f:58:7a:3b:d9:f9: 07:3a:3d:9c:be:47:47:fa:54:b9:b4:52:d7:26:b2:95:e3:33: 40:37:b3:98:c1:cf:ff:cc:a6:4a:de:f4:a2:60:13:ba:a3:42: a8:aa:17:85:49:2f:86:16:d6:a8:e7:24:b6:36:1c:49:67:16: be:55:1b:e0:83:28:77:b7:20:07:82:c5:eb:74:a2:00:9a:92: 4d:ef:7f:c8:1e:95:a5:c2:d5:6d:d1:a7:5f:13:93:ad:50:89: 77:fd:0c:0c:30:50:75:06:6c:6f:a2:d2:d9:66:cb:50:0e:73: 34:c6:32:4a:39:bd:ce:24:99:eb:39:f8:3d:a4:79:4a:bc:61: 72:f8:66:d4:81:ea:2d:7a:42:c6:f2:b5:78:cd:e0:c1:d7:f6: 88:16:81:3b:df:fc:8a:62:3f:4d:41:05:23:d5:bf:8c:3e:81: 55:55:c9:e2:bb:86:3f:6d:93:33:e0:0a:d9:3c:ba:c4:20:42: 14:4e:41:7d:d2:53:0f:52:67:bf:40:dd:3f:23:75:8f:83:e3: 95:de:c1:d1 -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgISAZt7pD4N0yNISdEIH4gfpeF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjYwMTAxMjIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzZkZmZhMjZhMmI2ZjEzNWE3ODhkNmRmYjZmZTc1NDhmOGNmNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsTzc2HUbOQB2ltyIWjOiJZKBCwh p8vCKZjvcNXbr3TGA0Zs5ZPXlWL+VS9xlktYUO8Ds+SKQPnemYepp9KxqmX6UGfw ZOTitjj5bA2HqWnhQYbakjgyAJEwyOBltCTJiDzQk1ZYDsMxUJvAo721eoF1CCs2 evS/h+9yyrojNk2Z90V4jRtLa/suTQjZgtTcQ3GFEC6mENKjA5upy25gsQ0S8hzi eO0iERIBdc9uV8uoMbKgz5WGapoHmuSufNz+/5kzRPLDyWAMwIob12QKMGT+O4NQ 7dra8fip+0/AqVvXXz7oZ/ZzkNeqgmCbgfyN/4buZ9nK3mFVFnJMs0Oq+wIDAQAB o4IDHjCCAxowHQYDVR0OBBYEFLdt/6JqK28TWniNbftv51SPjPQaMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvdDIzX29tb3JieE5hZUkxdC0yX25WSS1NOUJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBMgYIKwYBBQUHAQcBAf8EggEhMIIBHTCCAQMEAgABMIH8 AwQFH7kgAwQHH7mAAwQGJZjAAwMALtADAwEzBgMDADMJAwMAUL0DAwBQ5QMEB1Gu gAMEBVPYgAMEBlQzgAMDAVRcAwMCV3ADAwBbfQMEBZJCIAMDAJJaAwQFwksAAwQE wktQAwQCwkvcAwQDw2MIAwQFw2MgAwQDw2NYAwQEw2PgAwQFw6aAAwMAw9UDBAbU OEAwCwMDAtSMAwQD1IwwAwQH1J8AAwMA1R8DBAXVomAwDAMEAdkgHgMEBNkgIAME AtkgcDAMAwQC2SCUAwQC2SCgAwQC2SCwAwQE2ScQAwQE2SdwAwQD2S0YAwQE2S1g AwQC2S4YAwQE2S6AMBQEAgACMA4DBQAqAhbIAwUDKgZyADANBgkqhkiG9w0BAQsF AAOCAQEAjquXInMmJRYGmnMFd2ngVTV1TceSdoBfuKudK27meChsgj4dy19vrIHM La0wInqvD1h6O9n5Bzo9nL5HR/pUubRS1yayleMzQDezmMHP/8ymSt70omATuqNC qKoXhUkvhhbWqOcktjYcSWcWvlUb4IMod7cgB4LF63SiAJqSTe9/yB6VpcLVbdGn XxOTrVCJd/0MDDBQdQZsb6LS2WbLUA5zNMYySjm9ziSZ6zn4PaR5Srxhcvhm1IHq LXpCxvK1eM3gwdf2iBaBO9/8imI/TUEFI9W/jD6BVVXJ4ruGP22TM+AK2Ty6xCBC FE5BfdJTD1Jnv0DdPyN1j4Pjld7B0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:38 2026 by rpki-client