This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/O-c5bDoinLB67lf8OmUMI0MD6tU.roa File: O-c5bDoinLB67lf8OmUMI0MD6tU.roa (raw, json) Hash identifier: LTvM6S/H/oxShLRKP+ChB1jS8Y8S3yDfio7PzudorcA= Subject key identifier: 3B:E7:39:6C:3A:22:9C:B0:7A:EE:57:FC:3A:65:0C:23:43:03:EA:D5 Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06 Certificate serial: 019B7E3929C0D9D989D732AE2D0552FBEE88 Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/O-c5bDoinLB67lf8OmUMI0MD6tU.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216129 IP address blocks: 81.30.105.0/24 maxlen: 24 95.215.56.0/24 maxlen: 24 107.161.154.0/24 maxlen: 24 121.127.37.0/24 maxlen: 24 148.253.208.0/24 maxlen: 24 148.253.209.0/24 maxlen: 24 148.253.210.0/24 maxlen: 24 148.253.211.0/24 maxlen: 24 148.253.212.0/24 maxlen: 24 148.253.213.0/24 maxlen: 24 148.253.214.0/24 maxlen: 24 148.253.215.0/24 maxlen: 24 185.28.84.0/24 maxlen: 24 185.28.85.0/24 maxlen: 24 185.56.162.0/24 maxlen: 24 194.164.245.0/24 maxlen: 24 199.83.103.0/24 maxlen: 24 202.181.148.0/24 maxlen: 24 202.181.188.0/24 maxlen: 24 203.31.40.0/24 maxlen: 24 2a13:d200::/32 maxlen: 32 2a13:d200:6::/48 maxlen: 48 2a13:d200:7::/48 maxlen: 48 2a13:d200:8::/48 maxlen: 48 2a13:d200:9::/48 maxlen: 48 2a13:d200:10::/48 maxlen: 48 2a13:d200:11::/48 maxlen: 48 2a13:d200:14::/48 maxlen: 48 2a13:d201::/48 maxlen: 48 2a13:d201:1::/48 maxlen: 48 2a13:d201:2::/48 maxlen: 48 2a13:d201:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:29:c0:d9:d9:89:d7:32:ae:2d:05:52:fb:ee:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be7396c3a229cb07aee57fc3a650c234303ead5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:62:83:77:39:07:a0:11:e6:cd:c7:a9:77: 91:42:eb:9d:09:32:b6:78:d2:d4:b7:d5:56:42:e7: 1f:d3:dc:fa:99:9e:f6:0f:bd:bd:4b:f7:96:7c:11: 5a:24:2e:36:8c:60:41:3a:6b:7b:25:99:a0:ae:09: e3:ce:bc:7a:6c:33:e9:be:ae:c4:9c:54:d0:2e:3e: 2f:86:a6:6f:96:76:36:76:ec:93:59:f5:bc:29:4a: 07:15:d4:1e:ba:27:4d:7a:0b:f7:75:c1:f6:1c:ba: 6c:71:ef:0b:83:7e:da:9e:c4:8e:07:4d:25:a8:45: 6a:0d:cf:75:26:e8:d8:29:5f:16:6b:3a:e9:a0:0a: ea:7b:d2:64:bb:11:b8:b0:23:f0:8b:a3:ff:b1:e1: 0a:21:06:8c:07:1f:03:a4:7d:bb:c9:cf:a2:e4:f6: c3:2f:a0:c9:e2:29:c1:24:ee:64:ed:50:3a:a9:38: 67:a7:fa:eb:1b:17:d1:fb:88:d3:21:49:23:d0:21: 07:b8:b3:d8:b1:04:3f:ca:6f:00:ee:79:e6:11:0d: 99:2b:88:98:5e:c2:63:40:56:d5:ca:34:bc:fe:73: 61:bf:3c:20:d5:d6:ee:ab:82:72:27:d4:08:f5:69: d0:64:d5:d5:db:99:b3:1d:66:fe:4d:de:7b:ff:89: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E7:39:6C:3A:22:9C:B0:7A:EE:57:FC:3A:65:0C:23:43:03:EA:D5 X509v3 Authority Key Identifier: keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/O-c5bDoinLB67lf8OmUMI0MD6tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.105.0/24 95.215.56.0/24 107.161.154.0/24 121.127.37.0/24 148.253.208.0/21 185.28.84.0/23 185.56.162.0/24 194.164.245.0/24 199.83.103.0/24 202.181.148.0/24 202.181.188.0/24 203.31.40.0/24 IPv6: 2a13:d200::-2a13:d201:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a0:a7:02:f3:d2:24:da:87:3c:fb:a0:9a:8e:44:d2:82:c7:82: a7:3b:a1:ff:4b:c5:0b:08:19:1f:82:51:1f:2c:0d:a6:bd:04: ba:72:23:f0:a0:84:4a:38:04:90:fe:74:53:6a:ea:00:8b:56: d7:be:e9:ea:ca:4a:3b:72:db:89:b0:fe:ad:55:a7:e2:9a:56: 90:79:7b:14:7b:6d:97:dc:a0:a8:11:0a:fb:b5:69:2f:bf:ed: 21:9a:39:01:6e:d6:53:13:4c:62:91:d1:7a:f1:8a:0f:38:d1: 1d:58:6b:d5:bf:22:a7:90:43:ed:7d:3b:14:1f:6c:03:22:b2: d5:32:65:36:d2:12:d7:94:9d:63:dd:54:02:66:89:be:c6:45: 9e:e5:fa:32:57:93:de:a1:75:ed:5c:4a:5c:82:66:a7:97:75: a2:09:00:98:85:ff:3b:12:0e:eb:5f:07:f3:77:e7:94:56:30: 7e:54:8f:1c:cb:97:4e:ce:5c:ba:d5:97:e5:5d:6f:01:78:5d: 5c:c2:73:34:4e:3d:c8:93:7e:51:7b:1f:f3:93:94:d1:36:47: 20:ee:75:7a:0b:35:fe:9b:5b:75:5a:71:91:a5:e7:29:f7:2f: 83:e8:db:d5:2c:4f:59:af:95:09:91:2e:47:f7:8e:0b:aa:cf: 93:8d:13:7c -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZt+OSnA2dmJ1zKuLQVS++6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MTZkYzlkYjRlNDlkZTcxYjJmZDA4MTlkYWU4NTNhZWIw NTNiMDYwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmU3Mzk2YzNhMjI5Y2IwN2FlZTU3ZmMzYTY1MGMyMzQzMDNlYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Big3c5B6AR5s3HqXeRQuudCTK2 eNLUt9VWQucf09z6mZ72D729S/eWfBFaJC42jGBBOmt7JZmgrgnjzrx6bDPpvq7E nFTQLj4vhqZvlnY2duyTWfW8KUoHFdQeuidNegv3dcH2HLpsce8Lg37ansSOB00l qEVqDc91JujYKV8WazrpoArqe9JkuxG4sCPwi6P/seEKIQaMBx8DpH27yc+i5PbD L6DJ4inBJO5k7VA6qThnp/rrGxfR+4jTIUkj0CEHuLPYsQQ/ym8A7nnmEQ2ZK4iY XsJjQFbVyjS8/nNhvzwg1dbuq4JyJ9QI9WnQZNXV25mzHWb+Td57/4lrbwIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFDvnOWw6Ipyweu5X/DplDCNDA+rVMB8GA1UdIwQY MBaAFOkW3J205J3nGy/QgZ2uhTrrBTsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMt YmU4NTJmNjQ0MjAxLzEvTy1jNWJEb2luTEI2N2xmOE9tVU1JME1ENnRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMtYmU4NTJmNjQ0MjAx LzEvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBOBAIAATBIAwQAUR5pAwQA X9c4AwQAa6GaAwQAeX8lAwQDlP3QAwQBuRxUAwQAuTiiAwQAwqT1AwQAx1NnAwQA yrWUAwQAyrW8AwQAyx8oMBcEAgACMBEwDwMEASoT0gMHAioT0gEAADANBgkqhkiG 9w0BAQsFAAOCAQEAoKcC89Ik2oc8+6CajkTSgseCpzuh/0vFCwgZH4JRHywNpr0E unIj8KCESjgEkP50U2rqAItW177p6spKO3LbibD+rVWn4ppWkHl7FHttl9ygqBEK +7VpL7/tIZo5AW7WUxNMYpHRevGKDzjRHVhr1b8ip5BD7X07FB9sAyKy1TJlNtIS 15SdY91UAmaJvsZFnuX6MleT3qF17VxKXIJmp5d1ogkAmIX/OxIO618H83fnlFYw flSPHMuXTs5cutWX5V1vAXhdXMJzNE49yJN+UXsf85OU0TZHIO51egs1/ptbdVpx kaXnKfcvg+jb1SxPWa+VCZEuR/eOC6rPk40TfA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:04 2026 by rpki-client