This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/OdMVWui-4Jljx26VrFQSjyDGRvo.roa File: OdMVWui-4Jljx26VrFQSjyDGRvo.roa (raw, json) Hash identifier: UGyO9OR6VyOa56rqgYNKLWL4KF44h+tsmx4bpi6i9tw= Subject key identifier: 39:D3:15:5A:E8:BE:E0:99:63:C7:6E:95:AC:54:12:8F:20:C6:46:FA Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019B7F157D2F9462DD8291FAC90C7CD0A9AE Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/OdMVWui-4Jljx26VrFQSjyDGRvo.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20857 IP address blocks: 5.61.248.0/21 maxlen: 24 31.3.96.0/22 maxlen: 24 31.3.101.0/24 maxlen: 24 31.3.102.0/23 maxlen: 24 31.14.96.0/22 maxlen: 24 37.34.48.0/21 maxlen: 24 37.34.56.0/21 maxlen: 24 37.97.128.0/17 maxlen: 24 37.230.96.0/21 maxlen: 24 77.72.144.0/21 maxlen: 24 79.170.88.0/24 maxlen: 24 79.170.90.0/23 maxlen: 24 79.170.93.0/24 maxlen: 24 79.170.94.0/23 maxlen: 24 80.69.64.0/19 maxlen: 24 84.247.8.0/21 maxlen: 24 85.10.128.0/19 maxlen: 24 85.222.228.0/22 maxlen: 24 86.105.244.0/22 maxlen: 24 87.253.128.0/19 maxlen: 24 89.31.96.0/23 maxlen: 24 89.31.100.0/24 maxlen: 24 89.31.102.0/23 maxlen: 24 89.41.168.0/22 maxlen: 24 91.142.254.0/23 maxlen: 23 93.119.0.0/20 maxlen: 24 93.191.128.0/22 maxlen: 24 93.191.132.0/23 maxlen: 24 95.170.64.0/19 maxlen: 24 141.138.136.0/21 maxlen: 24 141.138.192.0/21 maxlen: 24 141.138.200.0/22 maxlen: 24 141.138.204.0/23 maxlen: 24 141.138.206.0/24 maxlen: 24 149.210.128.0/17 maxlen: 24 178.18.80.0/20 maxlen: 24 185.10.48.0/22 maxlen: 24 185.21.188.0/22 maxlen: 24 185.96.4.0/22 maxlen: 24 185.108.112.0/22 maxlen: 24 188.240.52.0/22 maxlen: 22 188.241.148.0/22 maxlen: 22 193.138.204.0/24 maxlen: 24 195.8.195.0/24 maxlen: 24 195.135.195.0/24 maxlen: 24 2a01:7c8::/32 maxlen: 32 2a01:7c8:7000::/36 maxlen: 36 2a01:7c8:d000::/36 maxlen: 36 2a01:7c8:e000::/36 maxlen: 36 2a01:7860::/32 maxlen: 32 2a02:348:3::/48 maxlen: 48 2a02:348:33::/48 maxlen: 48 2a02:348:35::/48 maxlen: 48 2a02:348:36::/48 maxlen: 48 2a02:348:39::/48 maxlen: 48 2a02:348:3a::/48 maxlen: 48 2a02:348:3b::/48 maxlen: 48 2a02:348:40::/42 maxlen: 48 2a02:348:80::/43 maxlen: 48 2a02:348:a0::/45 maxlen: 48 2a02:348:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7d:2f:94:62:dd:82:91:fa:c9:0c:7c:d0:a9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39d3155ae8bee09963c76e95ac54128f20c646fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:95:b9:42:2a:d3:3a:85:9f:9b:28:c0:36: 4b:94:45:c1:22:fe:e2:3e:3d:f7:bc:82:88:6d:07: 62:9d:6f:a0:53:33:08:65:dd:82:e0:01:3e:20:88: ee:f6:c7:39:f4:e8:c8:dc:d1:be:83:5a:b9:90:cb: 94:22:dd:0e:d5:69:f4:33:6b:1d:88:de:eb:dd:5d: 5c:86:66:23:cb:30:cc:6a:7f:ee:92:a0:c6:ca:61: 9e:67:a4:8e:04:7f:9e:da:ee:2c:b7:81:86:8b:59: 43:0f:dc:96:49:2a:a3:e9:6d:94:df:2d:93:54:dc: f1:40:31:ff:52:5b:31:80:2a:f0:16:b8:45:28:bd: cb:39:c9:47:4e:6d:0b:c6:10:c4:fe:5e:2c:f1:cc: 58:89:de:79:cb:44:b0:26:9a:84:8d:92:74:ad:94: 4e:35:f9:a5:af:65:0b:9d:4f:9f:32:2e:0b:9b:03: 0e:5b:33:b0:b4:34:24:f5:ce:b0:d0:10:08:54:59: cd:b6:7b:19:9a:aa:7c:67:11:9e:a7:aa:ad:80:1e: 0b:64:64:98:5c:b9:b5:d8:10:c5:63:da:45:f9:e2: 83:13:c0:21:bb:79:5a:40:f9:0f:72:1e:4f:d9:a7: ea:50:e2:e6:e8:48:f2:6a:33:07:0a:9f:2c:32:b9: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D3:15:5A:E8:BE:E0:99:63:C7:6E:95:AC:54:12:8F:20:C6:46:FA X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/OdMVWui-4Jljx26VrFQSjyDGRvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.248.0/21 31.3.96.0/22 31.3.101.0-31.3.103.255 31.14.96.0/22 37.34.48.0/20 37.97.128.0/17 37.230.96.0/21 77.72.144.0/21 79.170.88.0/24 79.170.90.0/23 79.170.93.0-79.170.95.255 80.69.64.0/19 84.247.8.0/21 85.10.128.0/19 85.222.228.0/22 86.105.244.0/22 87.253.128.0/19 89.31.96.0/23 89.31.100.0/24 89.31.102.0/23 89.41.168.0/22 91.142.254.0/23 93.119.0.0/20 93.191.128.0-93.191.133.255 95.170.64.0/19 141.138.136.0/21 141.138.192.0-141.138.206.255 149.210.128.0/17 178.18.80.0/20 185.10.48.0/22 185.21.188.0/22 185.96.4.0/22 185.108.112.0/22 188.240.52.0/22 188.241.148.0/22 193.138.204.0/24 195.8.195.0/24 195.135.195.0/24 IPv6: 2a01:7c8::/32 2a01:7860::/32 2a02:348:3::/48 2a02:348:33::/48 2a02:348:35::-2a02:348:36:ffff:ffff:ffff:ffff:ffff 2a02:348:39::-2a02:348:3b:ffff:ffff:ffff:ffff:ffff 2a02:348:40::-2a02:348:a7:ffff:ffff:ffff:ffff:ffff 2a02:348:b0::/44 Signature Algorithm: sha256WithRSAEncryption 14:f0:8f:e4:48:7d:0b:b6:52:e0:0a:82:21:a5:e5:77:ff:ff: d9:32:21:29:4b:1c:d8:98:7d:0c:69:01:a1:34:da:5b:17:f4: 8f:db:9e:22:69:93:d5:d1:89:a2:e3:90:53:f3:ae:52:25:52: ca:6f:a7:64:d7:53:43:6c:75:e7:53:c7:fa:7a:0a:60:fe:f9: d0:c1:85:b6:05:7a:98:c3:9d:89:80:f4:df:d3:37:35:93:50: 3a:47:c8:66:23:6e:32:75:24:8a:9a:03:87:1e:b0:75:de:ef: 9c:ea:20:5d:76:be:e7:71:c9:f0:99:58:1f:af:b1:f7:58:e1: 60:cc:7c:30:05:b8:81:4d:2e:d9:36:77:28:39:72:68:3f:82: 4b:d1:7d:53:ff:d8:c0:c9:71:10:31:9a:94:2b:b7:61:07:26: 96:ba:65:95:e1:e7:4a:21:28:5d:fb:2e:09:31:5e:c1:2e:8d: 99:7a:f4:ac:e2:47:df:ca:f0:f8:ff:94:e4:51:5a:02:53:17: 0a:6b:8a:22:2a:81:71:e5:1e:bf:59:c2:25:a4:14:1c:56:50: d3:14:ac:4f:e9:84:ba:5b:70:39:de:4b:c8:e9:b7:82:25:d4: 73:3c:ee:71:cd:ba:eb:29:53:8a:a4:62:c6:f5:18:ea:de:bd: af:a4:6a:ab -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgISAZt/FX0vlGLdgpH6yQx80KmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQzMTU1YWU4YmVlMDk5NjNjNzZlOTVhYzU0MTI4ZjIwYzY0NmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3qVuUIq0zqFn5sowDZLlEXBIv7i Pj33vIKIbQdinW+gUzMIZd2C4AE+IIju9sc59OjI3NG+g1q5kMuUIt0O1Wn0M2sd iN7r3V1chmYjyzDMan/ukqDGymGeZ6SOBH+e2u4st4GGi1lDD9yWSSqj6W2U3y2T VNzxQDH/UlsxgCrwFrhFKL3LOclHTm0LxhDE/l4s8cxYid55y0SwJpqEjZJ0rZRO Nfmlr2ULnU+fMi4LmwMOWzOwtDQk9c6w0BAIVFnNtnsZmqp8ZxGep6qtgB4LZGSY XLm12BDFY9pF+eKDE8Ahu3laQPkPch5P2afqUOLm6EjyajMHCp8sMrlcPwIDAQAB o4IDfjCCA3owHQYDVR0OBBYEFDnTFVrovuCZY8dulaxUEo8gxkb6MB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvT2RNVld1aS00SmxqeDI2VnJGUVNqeURHUnZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBkgYIKwYBBQUHAQcBAf8EggGBMIIBfTCCAQwEAgABMIIB BAMEAwU9+AMEAh8DYDAMAwQAHwNlAwQDHwNgAwQCHw5gAwQEJSIwAwQHJWGAAwQD JeZgAwQDTUiQAwQAT6pYAwQBT6paMAwDBABPql0DBAVPqkADBAVQRUADBANU9wgD BAVVCoADBAJV3uQDBAJWafQDBAVX/YADBAFZH2ADBABZH2QDBAFZH2YDBAJZKagD BAFbjv4DBARddwAwDAMEB12/gAMEAV2/hAMEBV+qQAMEA42KiDAMAwQGjYrAAwQA jYrOAwQHldKAAwQEshJQAwQCuQowAwQCuRW8AwQCuWAEAwQCuWxwAwQCvPA0AwQC vPGUAwQAwYrMAwQAwwjDAwQAw4fDMGsEAgACMGUDBQAqAQfIAwUAKgF4YAMHACoC A0gAAwMHACoCA0gAMzASAwcAKgIDSAA1AwcAKgIDSAA2MBIDBwAqAgNIADkDBwIq AgNIADgwEgMHBioCA0gAQAMHAyoCA0gAoAMHBCoCA0gAsDANBgkqhkiG9w0BAQsF AAOCAQEAFPCP5Eh9C7ZS4AqCIaXld///2TIhKUsc2Jh9DGkBoTTaWxf0j9ueImmT 1dGJouOQU/OuUiVSym+nZNdTQ2x151PH+noKYP750MGFtgV6mMOdiYD039M3NZNQ OkfIZiNuMnUkipoDhx6wdd7vnOogXXa+53HJ8JlYH6+x91jhYMx8MAW4gU0u2TZ3 KDlyaD+CS9F9U//YwMlxEDGalCu3YQcmlrplleHnSiEoXfsuCTFewS6NmXr0rOJH 38rw+P+U5FFaAlMXCmuKIiqBceUev1nCJaQUHFZQ0xSsT+mEultwOd5LyOm3giXU czzucc266ylTiqRixvUY6t69r6Rqqw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:23 2026 by rpki-client