This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa File: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (raw, json) Hash identifier: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A= Subject key identifier: D0:54:78:AE:D0:6C:52:09:02:43:D9:B9:3A:0B:87:7C:E9:B5:18:74 Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Certificate serial: 019B797EEDFDFA4CA778F0BC1F42CB724D61 Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa Signing time: Thu 01 Jan 2026 12:18:40 +0000 ROA not before: Thu 01 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60672 IP address blocks: 31.24.104.0/21 maxlen: 21 31.28.64.0/24 maxlen: 24 31.28.66.0/24 maxlen: 24 31.28.69.0/24 maxlen: 24 31.28.71.0/24 maxlen: 24 31.28.73.0/24 maxlen: 24 31.28.76.0/22 maxlen: 22 31.28.87.0/24 maxlen: 24 31.28.88.0/21 maxlen: 21 31.28.92.0/24 maxlen: 24 94.126.41.0/24 maxlen: 24 94.126.42.0/24 maxlen: 24 94.126.44.0/23 maxlen: 23 94.126.46.0/24 maxlen: 24 178.18.120.0/22 maxlen: 22 193.192.2.0/23 maxlen: 23 193.193.162.0/23 maxlen: 23 2a01:8000::/32 maxlen: 32 2a10:6740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ed:fd:fa:4c:a7:78:f0:bc:1f:42:cb:72:4d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Validity Not Before: Jan 1 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d05478aed06c52090243d9b93a0b877ce9b51874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:e0:a4:35:50:b0:96:37:52:44:de:28:0f: b7:8c:45:82:50:b0:28:57:55:61:a2:56:01:21:08: 26:f0:b2:69:7e:0a:b0:b0:cf:07:d1:18:37:ed:64: 1a:4f:67:c2:f9:78:00:94:c9:f9:17:58:54:23:e0: 47:4d:69:08:96:9b:47:70:dc:15:17:1b:96:56:b2: 2e:bb:fa:0f:d7:7d:76:e9:3e:6c:d5:79:7f:e6:9e: f3:83:b0:1e:1d:4d:ef:37:3d:95:fa:b4:3e:0e:97: 09:35:0f:37:e7:89:42:41:87:78:aa:11:da:46:82: 02:3e:9c:f2:3b:a2:bc:c5:e9:ac:68:43:1e:e8:a9: a7:7e:30:16:e0:39:f1:6b:76:cc:92:f7:0c:2e:fb: cd:c9:cc:17:fd:62:0b:cc:69:85:c4:ff:a2:f4:db: 86:8b:15:fd:ef:9e:49:77:00:4e:08:de:d8:3c:e2: f6:63:f5:92:64:7f:0c:77:69:72:b1:b3:07:95:5d: 25:b1:ce:0b:e3:1a:03:02:07:f6:bd:ee:be:84:bc: 9f:92:78:01:c8:a3:a5:dd:33:4a:db:a5:0d:30:d4: 4f:6e:54:3d:4a:0d:c9:a4:92:2c:9c:86:0e:1d:c1: 1e:be:9e:43:9d:5c:bb:e1:f5:a9:8e:ad:99:2e:c8: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:54:78:AE:D0:6C:52:09:02:43:D9:B9:3A:0B:87:7C:E9:B5:18:74 X509v3 Authority Key Identifier: keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.104.0/21 31.28.64.0/24 31.28.66.0/24 31.28.69.0/24 31.28.71.0/24 31.28.73.0/24 31.28.76.0/22 31.28.87.0-31.28.95.255 94.126.41.0-94.126.42.255 94.126.44.0-94.126.46.255 178.18.120.0/22 193.192.2.0/23 193.193.162.0/23 IPv6: 2a01:8000::/32 2a10:6740::/32 Signature Algorithm: sha256WithRSAEncryption 2b:46:ed:1d:d8:3b:ea:08:c6:e3:64:7d:f1:43:a8:34:98:e0: b1:9e:90:98:82:a6:15:dd:e5:8b:a8:1c:6f:93:69:94:3f:31: 96:b0:d9:28:74:c3:af:6b:69:1d:cd:6a:b8:42:d0:d0:ac:74: 19:61:f4:75:71:ff:8f:38:8a:f5:e5:2e:44:81:af:95:b3:4c: 18:fe:40:fc:76:a1:b5:7b:28:b6:f3:c5:d1:66:e4:6d:ad:7f: de:d8:3b:eb:8d:ec:ce:c5:24:d4:0b:72:95:0e:3d:08:00:bf: 03:54:b9:6c:bf:f0:dd:69:bd:25:89:32:e7:6e:b4:bc:04:26: 2d:97:26:cb:97:a6:89:79:93:77:0e:6d:b1:99:ce:50:40:1b: 35:97:f5:00:6d:d3:0f:75:16:c6:8d:cd:63:10:62:94:5a:2a: 7f:65:da:45:65:65:3c:55:a3:9c:1f:16:03:fe:0a:7f:2a:f4: 85:90:b7:26:eb:c5:8a:4a:63:a5:9c:f9:8b:d7:1a:96:f1:84: 7a:05:9e:a2:1a:c4:6c:85:34:41:25:19:bd:9b:69:80:04:e1: 23:a8:4c:e0:a5:e2:0a:40:9e:d5:fd:f6:24:bb:38:ad:6c:d9: aa:b3:a1:9e:7b:d3:49:86:8e:37:dc:69:54:17:45:16:11:bd: 08:69:b1:3a -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgISAZt5fu39+kynePC8H0LLck1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NzJiZDQ5ZDU1MWI0YWRhNWJkNmJiNjk1NjE4YTc5NDUx YWQzNGUwHhcNMjYwMTAxMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDU0NzhhZWQwNmM1MjA5MDI0M2Q5YjkzYTBiODc3Y2U5YjUxODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7XgpDVQsJY3UkTeKA+3jEWCULAo V1VholYBIQgm8LJpfgqwsM8H0Rg37WQaT2fC+XgAlMn5F1hUI+BHTWkIlptHcNwV FxuWVrIuu/oP13126T5s1Xl/5p7zg7AeHU3vNz2V+rQ+DpcJNQ8354lCQYd4qhHa RoICPpzyO6K8xemsaEMe6KmnfjAW4Dnxa3bMkvcMLvvNycwX/WILzGmFxP+i9NuG ixX9755JdwBOCN7YPOL2Y/WSZH8Md2lysbMHlV0lsc4L4xoDAgf2ve6+hLyfkngB yKOl3TNK26UNMNRPblQ9Sg3JpJIsnIYOHcEevp5DnVy74fWpjq2ZLsj2swIDAQAB o4ICgjCCAn4wHQYDVR0OBBYEFNBUeK7QbFIJAkPZuToLh3zptRh0MB8GA1UdIwQY MBaAFLlyvUnVUbStpb1rtpVhinlFGtNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTkt Y2E1ZTY4NTQzOGEyLzEvMEZSNHJ0QnNVZ2tDUTltNU9ndUhmT20xR0hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mZTA3YjctZjQ2NC00ZTY3LTgyOTktY2E1ZTY4NTQzOGEy LzEvdVhLOVNkVlJ0SzJsdld1MmxXR0tlVVVhMDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDBsBAIAATBmAwQDHxho AwQAHxxAAwQAHxxCAwQAHxxFAwQAHxxHAwQAHxxJAwQCHxxMMAwDBAAfHFcDBAUf HEAwDAMEAF5+KQMEAF5+KjAMAwQCXn4sAwQAXn4uAwQCshJ4AwQBwcACAwQBwcGi MBQEAgACMA4DBQAqAYAAAwUAKhBnQDANBgkqhkiG9w0BAQsFAAOCAQEAK0btHdg7 6gjG42R98UOoNJjgsZ6QmIKmFd3li6gcb5NplD8xlrDZKHTDr2tpHc1quELQ0Kx0 GWH0dXH/jziK9eUuRIGvlbNMGP5A/HahtXsotvPF0Wbkba1/3tg7643szsUk1Aty lQ49CAC/A1S5bL/w3Wm9JYky5260vAQmLZcmy5emiXmTdw5tsZnOUEAbNZf1AG3T D3UWxo3NYxBilFoqf2XaRWVlPFWjnB8WA/4Kfyr0hZC3JuvFikpjpZz5i9calvGE egWeohrEbIU0QSUZvZtpgAThI6hM4KXiCkCe1f32JLs4rWzZqrOhnnvTSYaON9xp VBdFFhG9CGmxOg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:48 2026 by rpki-client