This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/B6NOQ5L6_SMBWsHOp2sNGO8QpMw.roa File: B6NOQ5L6_SMBWsHOp2sNGO8QpMw.roa (raw, json) Hash identifier: BKcVGIsYMVRjDSrmZwIXj+CvyyBzPVUKfR8gvSCiafc= Subject key identifier: 07:A3:4E:43:92:FA:FD:23:01:5A:C1:CE:A7:6B:0D:18:EF:10:A4:CC Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133 Certificate serial: 019B7BA50A5EE2F745BDE26B694669814D55 Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/B6NOQ5L6_SMBWsHOp2sNGO8QpMw.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212531 IP address blocks: 31.14.176.0/22 maxlen: 22 62.77.152.0/21 maxlen: 21 79.98.24.0/21 maxlen: 21 80.208.224.0/21 maxlen: 21 80.209.224.0/20 maxlen: 20 89.40.0.0/20 maxlen: 20 89.47.160.0/21 maxlen: 21 89.47.172.0/24 maxlen: 24 89.47.173.0/24 maxlen: 24 89.47.174.0/24 maxlen: 24 89.47.175.0/24 maxlen: 24 94.176.232.0/21 maxlen: 21 109.235.64.0/21 maxlen: 21 176.223.128.0/20 maxlen: 20 185.5.52.0/22 maxlen: 22 185.69.52.0/22 maxlen: 22 185.81.164.0/22 maxlen: 22 194.135.80.0/20 maxlen: 20 195.181.240.0/21 maxlen: 21 212.24.96.0/20 maxlen: 20 212.237.232.0/22 maxlen: 22 2a02:7b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0a:5e:e2:f7:45:bd:e2:6b:69:46:69:81:4d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07a34e4392fafd23015ac1cea76b0d18ef10a4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:2c:fe:fc:77:84:0d:4b:58:f9:49:01:7d: 03:4a:b5:8a:3b:93:e7:0e:85:6b:bb:3d:ec:bf:19: cd:70:bb:29:4d:26:b3:5b:11:a9:41:c4:d7:9f:78: 85:8d:00:5a:d2:bb:70:64:0a:6c:45:b7:4f:22:47: 22:31:a8:72:51:46:9a:6b:27:f8:dd:2a:f0:c2:b0: d0:00:0d:f9:a1:1a:ec:ab:fd:0c:33:b3:16:d9:72: 26:9e:e5:60:32:4f:5e:05:c5:28:06:29:a7:b9:7b: 54:b4:58:47:88:ee:00:2d:20:d7:df:cf:7e:35:eb: aa:cb:15:a0:c3:e9:43:4b:af:c8:2e:93:64:ff:4b: 6f:d3:db:df:5d:67:fe:1f:41:a7:01:c2:d6:55:4a: 8c:76:a6:65:10:30:74:61:73:84:e6:b5:b9:03:dd: ef:d4:12:6a:ec:fc:f9:56:af:93:fc:83:eb:d9:bb: bf:99:07:ec:69:b0:9b:6c:7d:ee:b5:de:54:be:84: 36:e1:a7:01:59:64:1f:a9:68:47:d7:1f:d0:15:15: 06:58:86:2c:ad:15:ca:f3:93:e3:54:a1:20:ad:81: c3:63:de:ca:66:b4:76:60:6d:8d:0f:15:26:43:76: b9:b0:9b:a4:c2:b3:95:2d:c6:28:08:56:3d:e6:b5: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A3:4E:43:92:FA:FD:23:01:5A:C1:CE:A7:6B:0D:18:EF:10:A4:CC X509v3 Authority Key Identifier: keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/B6NOQ5L6_SMBWsHOp2sNGO8QpMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.176.0/22 62.77.152.0/21 79.98.24.0/21 80.208.224.0/21 80.209.224.0/20 89.40.0.0/20 89.47.160.0/21 89.47.172.0/22 94.176.232.0/21 109.235.64.0/21 176.223.128.0/20 185.5.52.0/22 185.69.52.0/22 185.81.164.0/22 194.135.80.0/20 195.181.240.0/21 212.24.96.0/20 212.237.232.0/22 IPv6: 2a02:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 15:30:da:b5:c6:9d:47:d8:9f:36:87:82:a2:2f:3d:02:25:32: dc:69:46:16:a7:42:f2:9a:1c:fb:0d:80:b6:25:69:9a:4d:10: 48:af:e9:87:3a:71:c7:b9:78:f5:1b:c2:fb:27:61:8a:3a:54: f1:6e:8a:b1:03:93:94:39:d2:7a:ba:55:72:97:e3:61:6f:b2: cd:af:d9:cc:ba:ae:00:54:cc:48:b4:d8:29:8f:6e:a7:64:e0: 20:26:54:69:04:2d:98:55:2a:fc:5b:af:5a:3e:fd:5c:05:eb: 45:3d:93:ee:b5:c1:1f:67:eb:ff:11:a8:92:6a:e7:40:36:1f: 19:af:2c:a3:9f:0c:cc:d0:35:aa:12:0f:ad:6a:39:72:0c:1e: e8:e1:8d:4b:ca:26:a3:b0:ff:a3:dd:85:2a:30:77:3a:31:6b: 22:8e:72:3f:b7:5a:e4:48:91:f8:85:cd:bc:c5:31:c8:76:6f: 77:18:69:ed:8e:2a:69:1e:42:e6:ea:54:f4:7a:4a:6d:18:e0: e8:7e:be:a8:a8:78:39:db:8d:ed:74:23:70:a7:46:e9:b1:12: 6e:72:69:0c:36:6c:d4:c2:c6:f7:03:42:8a:9f:77:51:59:97: f6:58:7a:a2:cc:77:64:fe:6a:c2:ed:17:7b:83:78:65:b7:47: 5e:a5:96:05 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt7pQpe4vdFveJraUZpgU1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWU0MmEyN2U3YmMyY2MzNTA3ZWZhN2UzY2JjMjlkMzJl ZWExMzMwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2EzNGU0MzkyZmFmZDIzMDE1YWMxY2VhNzZiMGQxOGVmMTBhNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jks/vx3hA1LWPlJAX0DSrWKO5Pn DoVruz3svxnNcLspTSazWxGpQcTXn3iFjQBa0rtwZApsRbdPIkciMahyUUaaayf4 3SrwwrDQAA35oRrsq/0MM7MW2XImnuVgMk9eBcUoBimnuXtUtFhHiO4ALSDX389+ NeuqyxWgw+lDS6/ILpNk/0tv09vfXWf+H0GnAcLWVUqMdqZlEDB0YXOE5rW5A93v 1BJq7Pz5Vq+T/IPr2bu/mQfsabCbbH3utd5UvoQ24acBWWQfqWhH1x/QFRUGWIYs rRXK85PjVKEgrYHDY97KZrR2YG2NDxUmQ3a5sJukwrOVLcYoCFY95rUgFQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFAejTkOS+v0jAVrBzqdrDRjvEKTMMB8GA1UdIwQY MBaAFEquQqJ+e8LMNQfvp+PLwp0y7qEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgt Y2M5MzVjZDczNjMyLzEvQjZOT1E1TDZfU01CV3NIT3Ayc05HTzhRcE13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgtY2M5MzVjZDczNjMy LzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQCHw6w AwQDPk2YAwQDT2IYAwQDUNDgAwQEUNHgAwQEWSgAAwQDWS+gAwQCWS+sAwQDXrDo AwQDbetAAwQEsN+AAwQCuQU0AwQCuUU0AwQCuVGkAwQEwodQAwQDw7XwAwQE1Bhg AwQC1O3oMA0EAgACMAcDBQAqAntAMA0GCSqGSIb3DQEBCwUAA4IBAQAVMNq1xp1H 2J82h4KiLz0CJTLcaUYWp0Lymhz7DYC2JWmaTRBIr+mHOnHHuXj1G8L7J2GKOlTx boqxA5OUOdJ6ulVyl+Nhb7LNr9nMuq4AVMxItNgpj26nZOAgJlRpBC2YVSr8W69a Pv1cBetFPZPutcEfZ+v/EaiSaudANh8ZryyjnwzM0DWqEg+tajlyDB7o4Y1Lyiaj sP+j3YUqMHc6MWsijnI/t1rkSJH4hc28xTHIdm93GGntjippHkLm6lT0ekptGODo fr6oqHg5243tdCNwp0bpsRJucmkMNmzUwsb3A0KKn3dRWZf2WHqizHdk/mrC7Rd7 g3hlt0depZYF -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:47 2026 by rpki-client