This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/oRALtbh2nuCRd23sDYqfy35X5z0.roa File: oRALtbh2nuCRd23sDYqfy35X5z0.roa (raw, json) Hash identifier: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4= Subject key identifier: A1:10:0B:B5:B8:76:9E:E0:91:77:6D:EC:0D:8A:9F:CB:7E:57:E7:3D Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019B972B098DC6DA4AFBFF625D9A9908D7D5 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/oRALtbh2nuCRd23sDYqfy35X5z0.roa Signing time: Wed 07 Jan 2026 06:35:38 +0000 ROA not before: Wed 07 Jan 2026 06:35:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12880 IP address blocks: 5.74.128.0/17 maxlen: 17 5.232.0.0/13 maxlen: 13 5.232.160.0/20 maxlen: 20 5.238.0.0/16 maxlen: 16 5.239.0.0/16 maxlen: 16 5.239.244.0/23 maxlen: 23 46.100.0.0/16 maxlen: 16 46.100.6.0/23 maxlen: 23 46.100.43.0/24 maxlen: 24 46.100.44.0/24 maxlen: 24 77.81.144.0/21 maxlen: 21 77.81.152.0/21 maxlen: 21 80.210.48.0/20 maxlen: 20 80.210.48.0/22 maxlen: 22 93.118.96.0/19 maxlen: 19 93.118.168.0/21 maxlen: 21 178.236.96.0/24 maxlen: 24 178.236.97.0/24 maxlen: 24 178.236.104.0/24 maxlen: 24 178.236.110.0/24 maxlen: 24 185.18.156.0/24 maxlen: 24 185.18.157.0/24 maxlen: 24 185.18.158.0/24 maxlen: 24 185.18.159.0/24 maxlen: 24 185.72.80.0/24 maxlen: 24 185.72.81.0/24 maxlen: 24 185.72.82.0/24 maxlen: 24 185.72.83.0/24 maxlen: 24 185.88.48.0/22 maxlen: 22 185.105.100.0/23 maxlen: 23 185.105.102.0/23 maxlen: 23 185.111.80.0/24 maxlen: 24 185.111.81.0/24 maxlen: 24 185.111.82.0/24 maxlen: 24 185.111.83.0/24 maxlen: 24 188.209.16.0/21 maxlen: 21 188.209.24.0/22 maxlen: 22 188.209.28.0/23 maxlen: 23 188.209.30.0/23 maxlen: 23 188.212.160.0/19 maxlen: 19 188.215.160.0/20 maxlen: 20 212.33.212.0/23 maxlen: 23 212.33.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:2b:09:8d:c6:da:4a:fb:ff:62:5d:9a:99:08:d7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 7 06:35:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1100bb5b8769ee091776dec0d8a9fcb7e57e73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:15:ff:2f:ee:21:66:25:12:cf:7b:db:d8: cd:d3:9f:87:aa:1d:0c:3c:7c:4d:ba:d7:5a:d7:ee: f2:19:8b:99:c6:26:d5:33:ff:15:a6:a3:a9:39:8d: 1c:de:34:95:39:be:70:7d:52:d3:37:58:dd:05:2a: 9c:cd:c4:6e:6d:3b:9c:b0:a6:e3:36:66:7e:18:69: f1:45:28:35:5e:2e:83:ea:e5:b7:12:85:17:78:dd: 5c:a6:e5:0a:54:71:ae:14:86:e1:8b:80:13:b9:86: d1:cb:bd:09:04:eb:2f:19:21:f6:95:cb:90:46:05: e3:8e:42:1b:7e:0c:2d:80:37:6b:05:f1:05:12:10: 9f:98:64:85:ba:f0:5d:40:b8:2c:96:1b:8b:a6:01: 1a:e0:40:a3:46:6d:cd:da:fe:e3:f4:86:38:e8:b4: 60:80:41:2e:dd:4f:0f:86:e1:1e:06:32:e4:5e:c1: 32:df:62:99:e9:3b:a4:2d:88:e6:c6:47:02:1f:8b: bc:36:30:e8:3c:9b:e2:2b:84:43:41:b0:92:a7:16: 9e:5a:d6:8a:f3:b0:23:ff:4b:1c:5e:2d:5b:f3:d2: 09:32:6d:cc:ea:8c:20:04:09:00:61:3f:d7:bc:f5: 6f:dc:f9:7f:c4:af:12:16:d9:3a:f3:dd:56:1a:c5: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:0B:B5:B8:76:9E:E0:91:77:6D:EC:0D:8A:9F:CB:7E:57:E7:3D X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/oRALtbh2nuCRd23sDYqfy35X5z0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.74.128.0/17 5.232.0.0/13 46.100.0.0/16 77.81.144.0/20 80.210.48.0/20 93.118.96.0/19 93.118.168.0/21 178.236.96.0/23 178.236.104.0/24 178.236.110.0/24 185.18.156.0/22 185.72.80.0/22 185.88.48.0/22 185.105.100.0/22 185.111.80.0/22 188.209.16.0/20 188.212.160.0/19 188.215.160.0/20 212.33.212.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:16:e6:57:71:8e:f7:a4:74:ea:cd:03:37:0d:c4:09:6d:8e: b9:f7:b4:c7:dc:c1:1a:6c:79:4b:ff:07:e0:b7:98:76:6a:54: 6b:d3:ec:bd:05:26:e6:1f:8c:e7:6e:33:63:2a:e7:a3:55:68: 7c:fa:a9:df:d4:ad:89:af:e8:32:64:4c:00:a7:4d:e4:b1:35: 3a:a6:ac:57:7a:b1:04:aa:0c:e6:9c:58:61:84:c9:c7:22:a9: ba:b3:57:11:4a:f3:9e:b4:2c:00:2d:34:5b:32:30:ab:fc:a9: b6:e3:ce:d3:eb:97:52:40:3f:ce:51:c3:4d:eb:13:43:80:b9: 7c:cd:42:49:1a:88:1d:14:42:e9:7c:16:65:33:83:61:93:07: 29:0b:ff:cb:04:d0:c8:67:52:af:ef:d1:b1:2d:4a:90:38:a4: ca:2e:ef:16:54:bd:eb:78:da:09:78:c1:43:ee:a3:be:3a:07: 83:40:4c:e2:6f:d6:c2:00:f8:8d:8e:34:38:e9:41:11:cb:8f: b2:70:45:22:b8:ec:b1:d6:fb:5b:d4:78:27:60:d9:c5:04:69: a9:be:11:72:c3:83:ea:72:62:08:bd:b5:f7:74:1c:9b:3c:b4: 8d:fa:02:31:78:9f:bb:b2:a4:f6:b4:15:73:04:24:07:65:15: a6:04:47:aa -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZuXKwmNxtpK+/9iXZqZCNfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTA3MDYzNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTEwMGJiNWI4NzY5ZWUwOTE3NzZkZWMwZDhhOWZjYjdlNTdlNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ4V/y/uIWYlEs9729jN05+Hqh0M PHxNutda1+7yGYuZxibVM/8VpqOpOY0c3jSVOb5wfVLTN1jdBSqczcRubTucsKbj NmZ+GGnxRSg1Xi6D6uW3EoUXeN1cpuUKVHGuFIbhi4ATuYbRy70JBOsvGSH2lcuQ RgXjjkIbfgwtgDdrBfEFEhCfmGSFuvBdQLgslhuLpgEa4ECjRm3N2v7j9IY46LRg gEEu3U8PhuEeBjLkXsEy32KZ6TukLYjmxkcCH4u8NjDoPJviK4RDQbCSpxaeWtaK 87Aj/0scXi1b89IJMm3M6owgBAkAYT/XvPVv3Pl/xK8SFtk6891WGsVYAQIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFKEQC7W4dp7gkXdt7A2Kn8t+V+c9MB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvb1JBTHRiaDJudUNSZDIzc0RZcWZ5MzVYNXowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEBwVKgAMD AwXoAwMALmQDBARNUZADBARQ0jADBAVddmADBANddqgDBAGy7GADBACy7GgDBACy 7G4DBAK5EpwDBAK5SFADBAK5WDADBAK5aWQDBAK5b1ADBAS80RADBAW81KADBAS8 16ADBALUIdQwDQYJKoZIhvcNAQELBQADggEBAF0W5ldxjvekdOrNAzcNxAltjrn3 tMfcwRpseUv/B+C3mHZqVGvT7L0FJuYfjOduM2Mq56NVaHz6qd/UrYmv6DJkTACn TeSxNTqmrFd6sQSqDOacWGGEycciqbqzVxFK8560LAAtNFsyMKv8qbbjztPrl1JA P85Rw03rE0OAuXzNQkkaiB0UQul8FmUzg2GTBykL/8sE0MhnUq/v0bEtSpA4pMou 7xZUvet42gl4wUPuo746B4NATOJv1sIA+I2ONDjpQRHLj7JwRSK47LHW+1vUeCdg 2cUEaam+EXLDg+pyYgi9tfd0HJs8tI36AjF4n7uypPa0FXMEJAdlFaYER6o= -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:50 2026 by rpki-client