This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa File: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (raw, json) Hash identifier: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I= Subject key identifier: 3A:E5:25:9A:B3:74:6B:15:9F:4A:A7:98:49:66:77:54:5C:91:F6:04 Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019B7E374DA4EBAAE82BBB47101383AC46A4 Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203953 IP address blocks: 2.110.64.0/18 maxlen: 18 2.110.128.0/17 maxlen: 17 89.150.128.0/18 maxlen: 18 90.184.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4d:a4:eb:aa:e8:2b:bb:47:10:13:83:ac:46:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ae5259ab3746b159f4aa798496677545c91f604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:44:6c:40:3f:17:f9:42:c3:3d:95:6c:4f: e3:e7:65:78:b8:e7:77:fd:97:31:7b:b8:c2:f0:68: 4e:f3:ef:26:18:00:81:66:24:63:f2:ba:fa:8c:53: 22:d3:36:98:56:6d:71:2a:9c:6a:37:d0:41:aa:32: dd:9c:04:2e:20:a2:66:25:96:0b:67:f2:e5:14:f2: 5f:4e:57:7e:a7:58:9f:63:5d:b9:f6:7f:24:5b:41: bc:cd:a5:d2:98:12:08:4d:71:9c:68:9c:4a:c5:e8: 8b:dc:09:2a:5f:e7:97:b5:72:9a:40:6f:df:53:a6: 29:cf:12:eb:a5:86:36:bb:47:ca:a4:25:4b:52:aa: b1:d9:e5:b9:22:78:9f:76:91:ad:95:da:15:98:88: 04:57:4d:8e:e4:29:22:13:0c:f4:1e:0c:89:c9:5b: a5:d1:30:98:f6:e9:b0:34:8a:00:9f:b4:11:ce:5c: 31:ff:a6:de:1e:c3:3d:34:69:9d:b5:84:08:62:0e: 93:d3:f4:a8:e3:ca:25:80:23:b0:4b:53:26:c7:52: ef:ad:7d:e9:13:4e:c6:6a:ca:65:27:74:79:9c:ef: f3:6f:94:c2:7e:31:fa:52:73:d1:ca:5c:bf:93:53: 56:70:ed:2a:df:bc:88:b5:45:e7:d9:ba:18:d1:9b: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E5:25:9A:B3:74:6B:15:9F:4A:A7:98:49:66:77:54:5C:91:F6:04 X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.110.64.0-2.110.255.255 89.150.128.0/18 90.184.0.0/15 Signature Algorithm: sha256WithRSAEncryption 66:6f:c3:7c:e4:4c:0b:c1:0e:f1:d4:6b:a1:9e:bf:fa:83:44: 98:27:20:2e:67:08:c4:a9:0c:8f:3c:58:2a:fa:61:6b:4e:23: b3:5f:ed:de:b8:7c:88:94:1a:5c:e9:46:e1:69:67:49:53:e4: 83:da:45:8e:89:94:43:70:3a:ff:b0:9a:38:07:6c:32:31:76: f3:6b:e3:72:0e:3b:c0:9d:3c:9a:7c:37:3f:28:1c:af:02:10: 4b:01:44:ae:6d:5e:64:9a:aa:ec:bf:42:9c:ae:f5:cf:03:4b: 03:70:35:cf:80:e4:62:36:47:5a:20:76:2c:dd:e0:ed:48:ad: 5d:e8:22:b8:e7:25:19:ae:f7:92:dc:85:2c:da:80:dd:47:0d: 17:0e:40:08:54:01:2e:3d:21:3a:da:ca:cc:a3:93:3d:ac:fb: 7d:ef:f1:ca:c6:5a:6b:6d:eb:b3:30:8f:d3:bb:f2:b1:ce:d5: db:35:ff:92:3b:13:64:61:6a:5f:11:49:11:78:da:9b:de:44: d5:94:c8:60:bb:2f:53:36:05:23:ed:1c:a7:c9:79:77:a5:be: 60:8c:1a:86:dd:8c:28:19:e7:ee:c6:fa:d7:b9:2c:20:46:c9: e4:37:51:03:2f:bc:d5:33:11:fa:82:66:89:18:7f:15:b1:73: 26:c9:fa:eb -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+N02k66roK7tHEBODrEakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWU1MjU5YWIzNzQ2YjE1OWY0YWE3OTg0OTY2Nzc1NDVjOTFmNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv69EbEA/F/lCwz2VbE/j52V4uOd3 /Zcxe7jC8GhO8+8mGACBZiRj8rr6jFMi0zaYVm1xKpxqN9BBqjLdnAQuIKJmJZYL Z/LlFPJfTld+p1ifY1259n8kW0G8zaXSmBIITXGcaJxKxeiL3AkqX+eXtXKaQG/f U6YpzxLrpYY2u0fKpCVLUqqx2eW5InifdpGtldoVmIgEV02O5CkiEwz0HgyJyVul 0TCY9umwNIoAn7QRzlwx/6beHsM9NGmdtYQIYg6T0/So48olgCOwS1Mmx1LvrX3p E07GasplJ3R5nO/zb5TCfjH6UnPRyly/k1NWcO0q37yItUXn2boY0ZuLDQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFDrlJZqzdGsVn0qnmElmd1RckfYEMB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xL091VWxtck4wYXhXZlNxZVlTV1ozVkZ5UjlnUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5 Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgwCwMEBgJu QAMDAAJuAwQGWZaAAwMBWrgwDQYJKoZIhvcNAQELBQADggEBAGZvw3zkTAvBDvHU a6Gev/qDRJgnIC5nCMSpDI88WCr6YWtOI7Nf7d64fIiUGlzpRuFpZ0lT5IPaRY6J lENwOv+wmjgHbDIxdvNr43IOO8CdPJp8Nz8oHK8CEEsBRK5tXmSaquy/Qpyu9c8D SwNwNc+A5GI2R1ogdizd4O1IrV3oIrjnJRmu95LchSzagN1HDRcOQAhUAS49ITra ysyjkz2s+33v8crGWmtt67Mwj9O78rHO1ds1/5I7E2Rhal8RSRF42pveRNWUyGC7 L1M2BSPtHKfJeXelvmCMGobdjCgZ5+7G+te5LCBGyeQ3UQMvvNUzEfqCZokYfxWx cybJ+us= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:11 2026 by rpki-client