This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/P5V8zRMhjxtwjJTTASMRkvjriAI.roa File: P5V8zRMhjxtwjJTTASMRkvjriAI.roa (raw, json) Hash identifier: cZKIfpLpDtSikSqUawRk4D7lUQdNwOHcWKhwSq/btQY= Subject key identifier: 3F:95:7C:CD:13:21:8F:1B:70:8C:94:D3:01:23:11:92:F8:EB:88:02 Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133 Certificate serial: 019B7BA509CDC6801F7F2EA8E26BBD8E6157 Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/P5V8zRMhjxtwjJTTASMRkvjriAI.roa Signing time: Thu 01 Jan 2026 22:19:32 +0000 ROA not before: Thu 01 Jan 2026 22:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62282 IP address blocks: 31.14.176.0/22 maxlen: 22 62.77.152.0/21 maxlen: 21 79.98.24.0/21 maxlen: 21 80.208.224.0/21 maxlen: 21 80.209.224.0/20 maxlen: 20 89.40.0.0/20 maxlen: 20 89.47.160.0/21 maxlen: 21 89.47.172.0/24 maxlen: 24 89.47.173.0/24 maxlen: 24 89.47.174.0/24 maxlen: 24 89.47.175.0/24 maxlen: 24 94.176.232.0/21 maxlen: 21 109.235.64.0/21 maxlen: 21 176.223.128.0/20 maxlen: 20 185.5.52.0/22 maxlen: 22 185.69.52.0/22 maxlen: 22 185.81.164.0/22 maxlen: 22 194.135.80.0/20 maxlen: 20 195.181.240.0/21 maxlen: 21 212.24.96.0/20 maxlen: 20 212.237.232.0/22 maxlen: 22 2a02:7b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:09:cd:c6:80:1f:7f:2e:a8:e2:6b:bd:8e:61:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f957ccd13218f1b708c94d301231192f8eb8802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:32:54:48:8f:2b:d4:ee:17:14:f3:cb:ce: b6:19:71:32:8d:b2:1c:a8:2b:39:c9:53:b8:7e:c9: 5e:da:7e:cb:5e:42:0a:ea:ac:93:99:43:ae:ee:3d: 37:54:33:c6:25:d4:c3:ed:43:96:6f:6e:d7:a2:f8: 7e:7a:e6:fc:c5:95:a2:75:c4:e3:a0:04:36:ac:de: b2:84:93:4a:5e:7d:a4:7c:c0:a3:92:3d:13:58:e6: 34:3b:30:0f:64:8b:d4:7c:95:f0:91:4f:d6:b2:bc: 2a:f7:86:1d:94:87:2a:48:04:4e:61:98:d9:ef:e0: fb:b6:68:89:0d:48:80:4c:90:50:55:4c:53:84:17: e7:34:37:2e:24:10:57:2a:58:2e:29:71:02:cd:63: 1c:2e:1d:77:2c:08:37:c9:a4:46:92:47:3c:90:ee: c3:e1:c8:da:7b:24:69:fd:e1:72:a6:cd:3a:63:35: 5d:b2:87:0b:89:cd:ab:17:b6:0a:99:98:17:89:e2: dd:fe:18:f1:08:ad:0f:e8:4d:50:5d:8c:12:8c:b3: c0:e4:1f:49:1f:f2:7b:fd:fc:f9:38:5a:dd:4b:96: 0b:51:12:b7:94:bc:2d:67:2f:fd:1e:9a:f9:c4:73: 8e:be:44:bc:62:9e:5a:cb:4b:c4:a7:7e:15:eb:0f: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:7C:CD:13:21:8F:1B:70:8C:94:D3:01:23:11:92:F8:EB:88:02 X509v3 Authority Key Identifier: keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/P5V8zRMhjxtwjJTTASMRkvjriAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.176.0/22 62.77.152.0/21 79.98.24.0/21 80.208.224.0/21 80.209.224.0/20 89.40.0.0/20 89.47.160.0/21 89.47.172.0/22 94.176.232.0/21 109.235.64.0/21 176.223.128.0/20 185.5.52.0/22 185.69.52.0/22 185.81.164.0/22 194.135.80.0/20 195.181.240.0/21 212.24.96.0/20 212.237.232.0/22 IPv6: 2a02:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 0c:29:2a:c4:1d:ae:55:59:0a:38:3d:05:34:85:4a:3f:24:c8: ec:a9:6a:a1:9a:03:38:bc:62:6c:7f:77:0e:c2:c1:ae:d7:77: 25:88:a0:bd:9d:71:d6:dd:e0:1f:2f:c0:4b:20:3e:0f:b1:76: 68:be:65:21:1a:d1:8a:b8:b2:63:32:19:20:a5:5c:43:30:67: 93:56:69:e8:97:c3:fd:12:ef:78:b2:e0:69:b0:94:5f:a6:b3: d6:89:81:95:d9:f9:85:fd:a9:b5:1a:c7:fe:cd:67:5a:04:71: ae:a6:3f:67:69:41:25:41:b0:24:e2:79:d8:38:e8:ca:6e:4b: 24:3c:15:44:0e:05:ed:3d:8b:d2:aa:a8:8e:1f:bd:d1:4e:9e: 53:83:d5:85:5b:6d:1e:cc:98:d2:42:68:cf:7a:36:b3:d4:e7: 46:f6:9b:ff:be:31:3a:eb:1d:37:51:1d:3e:11:e3:5b:3e:6c: 22:de:b6:8c:f3:56:b7:a5:03:37:22:5c:81:e4:7e:5a:75:6e: ce:6d:89:eb:f8:bb:7b:a7:ef:40:1d:bc:8c:df:27:cb:5f:22: e0:53:c7:f3:b8:20:ef:4c:87:45:ad:be:8c:68:e0:5e:29:fc: 6c:d0:2f:19:49:63:b6:e5:86:c3:19:cc:89:9d:2d:4c:f3:31: d1:10:f8:48 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt7pQnNxoAffy6o4mu9jmFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWU0MmEyN2U3YmMyY2MzNTA3ZWZhN2UzY2JjMjlkMzJl ZWExMzMwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjk1N2NjZDEzMjE4ZjFiNzA4Yzk0ZDMwMTIzMTE5MmY4ZWI4ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOgyVEiPK9TuFxTzy862GXEyjbIc qCs5yVO4fsle2n7LXkIK6qyTmUOu7j03VDPGJdTD7UOWb27Xovh+eub8xZWidcTj oAQ2rN6yhJNKXn2kfMCjkj0TWOY0OzAPZIvUfJXwkU/Wsrwq94YdlIcqSAROYZjZ 7+D7tmiJDUiATJBQVUxThBfnNDcuJBBXKlguKXECzWMcLh13LAg3yaRGkkc8kO7D 4cjaeyRp/eFyps06YzVdsocLic2rF7YKmZgXieLd/hjxCK0P6E1QXYwSjLPA5B9J H/J7/fz5OFrdS5YLURK3lLwtZy/9Hpr5xHOOvkS8Yp5ay0vEp34V6w/kzwIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFD+VfM0TIY8bcIyU0wEjEZL464gCMB8GA1UdIwQY MBaAFEquQqJ+e8LMNQfvp+PLwp0y7qEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgt Y2M5MzVjZDczNjMyLzEvUDVWOHpSTWhqeHR3akpUVEFTTVJrdmpyaUFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82MmYyNWYtOGIxYi00MTViLTlmYzgtY2M5MzVjZDczNjMy LzEvU3E1Q29uNTd3c3cxQi0tbjQ4dkNuVEx1b1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQCHw6w AwQDPk2YAwQDT2IYAwQDUNDgAwQEUNHgAwQEWSgAAwQDWS+gAwQCWS+sAwQDXrDo AwQDbetAAwQEsN+AAwQCuQU0AwQCuUU0AwQCuVGkAwQEwodQAwQDw7XwAwQE1Bhg AwQC1O3oMA0EAgACMAcDBQAqAntAMA0GCSqGSIb3DQEBCwUAA4IBAQAMKSrEHa5V WQo4PQU0hUo/JMjsqWqhmgM4vGJsf3cOwsGu13cliKC9nXHW3eAfL8BLID4PsXZo vmUhGtGKuLJjMhkgpVxDMGeTVmnol8P9Eu94suBpsJRfprPWiYGV2fmF/am1Gsf+ zWdaBHGupj9naUElQbAk4nnYOOjKbkskPBVEDgXtPYvSqqiOH73RTp5Tg9WFW20e zJjSQmjPejaz1OdG9pv/vjE66x03UR0+EeNbPmwi3raM81a3pQM3IlyB5H5adW7O bYnr+Lt7p+9AHbyM3yfLXyLgU8fzuCDvTIdFrb6MaOBeKfxs0C8ZSWO25YbDGcyJ nS1M8zHREPhI -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:12 2026 by rpki-client