This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/OQVv5QkSzLFHCeZztVRUieZDZPc.roa File: OQVv5QkSzLFHCeZztVRUieZDZPc.roa (raw, json) Hash identifier: vYdS9MR1CGk4IGJAzwFEYebnVkZn8CGWtEzbXiqEhI0= Subject key identifier: 39:05:6F:E5:09:12:CC:B1:47:09:E6:73:B5:54:54:89:E6:43:64:F7 Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Certificate serial: 019BF231D39DA7B210E212975C875D0E3C3A Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/OQVv5QkSzLFHCeZztVRUieZDZPc.roa Signing time: Sat 24 Jan 2026 22:48:30 +0000 ROA not before: Sat 24 Jan 2026 22:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54600 IP address blocks: 222.167.228.0/24 maxlen: 24 222.167.229.0/24 maxlen: 24 222.167.230.0/24 maxlen: 24 222.167.233.0/24 maxlen: 24 222.167.234.0/24 maxlen: 24 222.167.235.0/24 maxlen: 24 222.167.237.0/24 maxlen: 24 222.167.238.0/24 maxlen: 24 222.167.240.0/24 maxlen: 24 222.167.241.0/24 maxlen: 24 222.167.242.0/24 maxlen: 24 222.167.243.0/24 maxlen: 24 222.167.245.0/24 maxlen: 24 222.167.247.0/24 maxlen: 24 222.167.248.0/24 maxlen: 24 222.167.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:31:d3:9d:a7:b2:10:e2:12:97:5c:87:5d:0e:3c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294 Validity Not Before: Jan 24 22:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39056fe50912ccb14709e673b5545489e64364f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:b1:52:6c:7a:33:4b:e2:5a:f0:7b:bc:6f: a2:73:ff:82:e9:1a:d4:88:e0:8e:02:4c:ca:4c:80: f5:a2:94:15:4d:50:12:56:6a:f6:06:7f:6d:3e:b1: 2b:6a:04:c3:e6:a5:0d:8e:07:20:fd:3f:7b:d3:d9: 58:28:5d:e8:a6:9d:10:59:8b:70:bf:df:99:a0:72: 45:5b:81:42:bb:1a:af:7a:ef:1a:06:39:55:c3:87: ef:6e:78:39:4f:b0:f2:1e:ff:34:a0:9e:5d:eb:df: 82:61:48:46:21:ca:ca:14:68:64:a6:43:05:73:aa: 10:61:1e:44:29:9d:c3:b1:d8:9e:c4:c1:72:76:23: c4:9d:fc:ce:1c:a9:57:c3:d8:15:77:42:bc:d0:ae: 31:ac:0e:49:88:9c:c0:43:ff:05:2d:1f:84:24:56: 7a:2e:ae:aa:e5:26:41:31:1b:41:60:55:a8:3b:0a: 1c:02:33:38:65:77:bf:2e:8f:98:10:97:b0:6e:34: c5:0f:72:79:c5:e5:5f:d0:e1:b3:a9:eb:ec:3d:1c: 18:58:bc:8a:86:6f:76:2d:07:4c:e0:28:b9:8d:21: 94:a2:aa:34:15:64:3c:77:2e:c6:d7:ec:94:6c:8f: 89:5d:31:da:3b:00:2a:d8:c7:61:43:bc:88:f8:e8: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:05:6F:E5:09:12:CC:B1:47:09:E6:73:B5:54:54:89:E6:43:64:F7 X509v3 Authority Key Identifier: keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/OQVv5QkSzLFHCeZztVRUieZDZPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 222.167.228.0-222.167.230.255 222.167.233.0-222.167.235.255 222.167.237.0-222.167.238.255 222.167.240.0/22 222.167.245.0/24 222.167.247.0-222.167.248.255 222.167.250.0/24 Signature Algorithm: sha256WithRSAEncryption 36:22:6d:59:1d:d9:9a:c6:c7:c6:a4:c6:12:dc:95:89:77:10: 97:41:45:55:37:35:05:21:4d:78:54:23:01:7d:99:bc:cc:47: be:a4:08:3b:04:cb:ed:57:66:4e:40:af:b8:e9:36:a2:b5:b6: f7:2e:11:8c:8e:c0:8b:dc:9b:0a:b3:e8:07:8c:a3:11:44:b8: 82:32:70:2f:ab:39:3f:d2:2c:1e:61:d0:fb:3d:0a:f0:3a:4d: af:52:0d:dc:43:a3:89:90:77:84:82:cd:2f:c1:df:b9:2d:1b: eb:65:f0:4f:31:f6:e9:35:a8:04:b8:8f:16:29:dd:d3:86:96: 56:e6:51:83:e4:7d:c4:c4:19:9b:b6:61:5f:42:23:62:df:a6: 97:61:cc:c3:a5:cf:ae:c0:5c:3d:ee:af:eb:dc:42:e5:42:82: fa:21:d7:51:4f:b8:12:1d:af:71:10:30:c6:eb:44:9b:5a:5d: ca:57:37:36:a7:e1:06:8c:f7:82:10:d7:e0:02:ad:23:66:71: 75:37:f2:4d:ef:cc:33:bc:75:24:67:f4:6b:7e:56:d0:1f:39: e4:d7:0c:cd:c6:af:93:46:1a:88:2e:88:c6:4d:2d:b9:8d:45: bc:b8:dd:2a:c9:47:d7:df:3d:c0:b3:47:8b:5b:eb:06:d8:0e: 04:25:a2:70 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZvyMdOdp7IQ4hKXXIddDjw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1 YTkyOTQwHhcNMjYwMTI0MjI0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTA1NmZlNTA5MTJjY2IxNDcwOWU2NzNiNTU0NTQ4OWU2NDM2NGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpCxUmx6M0viWvB7vG+ic/+C6RrU iOCOAkzKTID1opQVTVASVmr2Bn9tPrEragTD5qUNjgcg/T9709lYKF3opp0QWYtw v9+ZoHJFW4FCuxqveu8aBjlVw4fvbng5T7DyHv80oJ5d69+CYUhGIcrKFGhkpkMF c6oQYR5EKZ3DsdiexMFydiPEnfzOHKlXw9gVd0K80K4xrA5JiJzAQ/8FLR+EJFZ6 Lq6q5SZBMRtBYFWoOwocAjM4ZXe/Lo+YEJewbjTFD3J5xeVf0OGzqevsPRwYWLyK hm92LQdM4Ci5jSGUoqo0FWQ8dy7G1+yUbI+JXTHaOwAq2MdhQ7yI+OjkSwIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFDkFb+UJEsyxRwnmc7VUVInmQ2T3MB8GA1UdIwQY MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt NGEzNDhlN2JlNDQxLzEvT1FWdjVRa1N6TEZIQ2VaenRWUlVpZVpEWlBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBALep+QD BADep+YwDAMEAN6n6QMEAt6n6DAMAwQA3qftAwQA3qfuAwQC3qfwAwQA3qf1MAwD BADep/cDBADep/gDBADep/owDQYJKoZIhvcNAQELBQADggEBADYibVkd2ZrGx8ak xhLclYl3EJdBRVU3NQUhTXhUIwF9mbzMR76kCDsEy+1XZk5Ar7jpNqK1tvcuEYyO wIvcmwqz6AeMoxFEuIIycC+rOT/SLB5h0Ps9CvA6Ta9SDdxDo4mQd4SCzS/B37kt G+tl8E8x9uk1qAS4jxYp3dOGllbmUYPkfcTEGZu2YV9CI2LfppdhzMOlz67AXD3u r+vcQuVCgvoh11FPuBIdr3EQMMbrRJtaXcpXNzan4QaM94IQ1+ACrSNmcXU38k3v zDO8dSRn9Gt+VtAfOeTXDM3Gr5NGGoguiMZNLbmNRby43SrJR9ffPcCzR4tb6wbY DgQlonA= -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:30 2026 by rpki-client