This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/taO64xY4tC0rzgQTKi7mNXkODLo.roa File: taO64xY4tC0rzgQTKi7mNXkODLo.roa (raw, json) Hash identifier: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY= Subject key identifier: B5:A3:BA:E3:16:38:B4:2D:2B:CE:04:13:2A:2E:E6:35:79:0E:0C:BA Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFC55DD369398D8B54727198A6268 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/taO64xY4tC0rzgQTKi7mNXkODLo.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41689 IP address blocks: 31.7.64.0/20 maxlen: 32 31.25.128.0/21 maxlen: 32 37.156.144.0/22 maxlen: 32 46.143.0.0/17 maxlen: 32 77.238.120.0/22 maxlen: 32 79.127.0.0/17 maxlen: 32 86.57.0.0/17 maxlen: 32 89.41.40.0/22 maxlen: 32 89.235.96.0/22 maxlen: 32 93.115.144.0/21 maxlen: 32 93.118.180.0/22 maxlen: 32 128.65.176.0/20 maxlen: 32 176.65.240.0/22 maxlen: 32 176.65.252.0/23 maxlen: 32 176.65.254.0/23 maxlen: 32 178.22.120.0/21 maxlen: 32 185.49.84.0/22 maxlen: 32 185.98.112.0/22 maxlen: 32 185.99.212.0/22 maxlen: 32 185.109.244.0/22 maxlen: 32 185.109.248.0/22 maxlen: 32 185.112.32.0/22 maxlen: 32 185.112.36.0/22 maxlen: 32 185.120.220.0/22 maxlen: 32 185.120.248.0/22 maxlen: 32 188.0.240.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fc:55:dd:36:93:98:d8:b5:47:27:19:8a:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5a3bae31638b42d2bce04132a2ee635790e0cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:79:45:e3:08:65:31:7d:2d:a3:05:4f:6f: 1b:0e:cf:3b:e7:6a:54:9d:da:0a:68:38:2c:39:63: 04:a8:9f:03:12:11:79:84:37:d1:cd:fd:38:16:7a: c9:3f:74:42:ba:ca:e1:54:3a:74:c6:04:f5:8e:24: 97:7f:1e:f2:9e:76:6d:6f:4b:75:6e:75:ff:43:30: 82:d7:0e:40:49:42:cb:93:1e:c9:41:6d:cf:cf:26: 4e:e8:ab:bf:89:a0:4b:8a:ee:c8:1d:af:b9:32:c6: 79:89:80:b5:91:4a:62:d2:fd:db:d5:9c:37:1c:4a: df:08:ce:d9:5c:24:03:ca:7d:1f:59:07:a5:83:d8: a1:6d:66:51:45:63:21:75:e9:c2:59:5e:c6:76:c9: 40:ea:25:6a:cc:1a:34:50:2c:70:b9:77:d4:e4:00: 73:80:c6:88:42:fc:e7:2e:1e:9d:a2:68:78:e3:4c: 33:2d:e1:96:4b:35:43:85:f8:6e:21:ee:88:7f:3b: 9d:d2:bf:fe:a0:55:03:6e:5e:7e:fd:96:cc:79:0e: 95:cf:9d:33:cc:16:fb:7e:42:de:d7:5d:83:35:cd: a2:e8:4a:6b:62:75:ab:77:b8:5e:74:0a:82:08:cd: c1:a8:3e:15:fb:e0:12:22:21:30:e8:44:84:04:01: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A3:BA:E3:16:38:B4:2D:2B:CE:04:13:2A:2E:E6:35:79:0E:0C:BA X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/taO64xY4tC0rzgQTKi7mNXkODLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.64.0/20 31.25.128.0/21 37.156.144.0/22 46.143.0.0/17 77.238.120.0/22 79.127.0.0/17 86.57.0.0/17 89.41.40.0/22 89.235.96.0/22 93.115.144.0/21 93.118.180.0/22 128.65.176.0/20 176.65.240.0/22 176.65.252.0/22 178.22.120.0/21 185.49.84.0/22 185.98.112.0/22 185.99.212.0/22 185.109.244.0-185.109.251.255 185.112.32.0/21 185.120.220.0/22 185.120.248.0/22 188.0.240.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:b9:22:c8:71:9a:7f:7f:50:14:9f:89:f0:5f:57:fd:b9:9b: ef:55:57:fd:c5:82:db:c5:0c:1f:f6:02:9b:be:8d:40:fe:9f: 5a:03:4c:7f:59:e3:e1:a8:ce:69:30:48:f2:d7:f7:6f:1d:de: 4c:87:0d:c5:87:db:6b:97:46:62:e6:1d:73:12:30:3a:09:57: 98:d5:28:fe:73:2e:ce:a3:5e:5b:04:ab:8b:9e:cf:de:96:cd: c1:67:7b:65:12:0b:76:6e:4b:21:75:03:63:8d:70:db:5c:86: 20:e3:2d:e8:9c:fa:d4:f1:6b:56:26:3f:71:bb:ce:13:f8:d5: 5e:ee:a0:ed:8c:82:d7:1a:99:01:4e:bb:65:77:30:9d:e0:96: 34:66:80:b1:51:0b:b1:da:96:6e:66:b9:7d:c2:e8:48:51:09: cc:a7:59:c2:a5:45:55:51:43:45:6d:15:02:50:2a:df:9d:1b: 75:72:c2:92:0c:31:98:48:e2:bd:24:ae:1a:cf:f4:62:6a:d3: 9f:a8:54:df:8d:b4:24:2a:77:da:99:e2:75:bb:78:b8:8d:cf: 1e:cb:54:d7:18:60:63:59:54:58:e2:8e:bd:d4:ba:91:5d:64: 66:21:48:8f:e1:10:0b:6f:3f:f6:ae:7e:e0:fa:8b:e4:91:d6: a4:50:6c:7c -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt9XPxV3TaTmNi1RycZimJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWEzYmFlMzE2MzhiNDJkMmJjZTA0MTMyYTJlZTYzNTc5MGUwY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq95ReMIZTF9LaMFT28bDs8752pU ndoKaDgsOWMEqJ8DEhF5hDfRzf04FnrJP3RCusrhVDp0xgT1jiSXfx7ynnZtb0t1 bnX/QzCC1w5ASULLkx7JQW3PzyZO6Ku/iaBLiu7IHa+5MsZ5iYC1kUpi0v3b1Zw3 HErfCM7ZXCQDyn0fWQelg9ihbWZRRWMhdenCWV7GdslA6iVqzBo0UCxwuXfU5ABz gMaIQvznLh6domh440wzLeGWSzVDhfhuIe6Ifzud0r/+oFUDbl5+/ZbMeQ6Vz50z zBb7fkLe112DNc2i6EprYnWrd7hedAqCCM3BqD4V++ASIiEw6ESEBAEPMwIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFLWjuuMWOLQtK84EEyou5jV5Dgy6MB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvdGFPNjR4WTR0QzByemdRVEtpN21OWGtPRExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAQf B0ADBAMfGYADBAIlnJADBAcujwADBAJN7ngDBAdPfwADBAdWOQADBAJZKSgDBAJZ 62ADBANdc5ADBAJddrQDBASAQbADBAKwQfADBAKwQfwDBAOyFngDBAK5MVQDBAK5 YnADBAK5Y9QwDAMEArlt9AMEArlt+AMEA7lwIAMEArl43AMEArl4+AMEAbwA8DAN BgkqhkiG9w0BAQsFAAOCAQEAjbkiyHGaf39QFJ+J8F9X/bmb71VX/cWC28UMH/YC m76NQP6fWgNMf1nj4ajOaTBI8tf3bx3eTIcNxYfba5dGYuYdcxIwOglXmNUo/nMu zqNeWwSri57P3pbNwWd7ZRILdm5LIXUDY41w21yGIOMt6Jz61PFrViY/cbvOE/jV Xu6g7YyC1xqZAU67ZXcwneCWNGaAsVELsdqWbma5fcLoSFEJzKdZwqVFVVFDRW0V AlAq350bdXLCkgwxmEjivSSuGs/0YmrTn6hU3420JCp32pnidbt4uI3PHstU1xhg Y1lUWOKOvdS6kV1kZiFIj+EQC28/9q5+4PqL5JHWpFBsfA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:53 2026 by rpki-client