This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/ps2vvRE8em2BhpWugO8HL3Oy4sw.roa File: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (raw, json) Hash identifier: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U= Subject key identifier: A6:CD:AF:BD:11:3C:7A:6D:81:86:95:AE:80:EF:07:2F:73:B2:E2:CC Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Certificate serial: 019B79EC2A9E6E5E926D4DB1EA9A6A02E9A2 Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/ps2vvRE8em2BhpWugO8HL3Oy4sw.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5391 IP address blocks: 31.216.192.0/19 maxlen: 19 31.217.0.0/17 maxlen: 17 31.217.0.0/19 maxlen: 19 31.217.32.0/19 maxlen: 19 31.217.64.0/19 maxlen: 19 31.217.96.0/19 maxlen: 19 46.188.128.0/17 maxlen: 17 46.188.128.0/19 maxlen: 19 46.188.160.0/19 maxlen: 19 46.188.192.0/19 maxlen: 19 46.188.192.0/20 maxlen: 20 46.188.208.0/21 maxlen: 21 46.188.224.0/19 maxlen: 19 78.0.0.0/16 maxlen: 16 78.1.0.0/16 maxlen: 16 78.2.0.0/16 maxlen: 16 78.3.0.0/16 maxlen: 16 83.131.0.0/16 maxlen: 16 83.131.0.0/18 maxlen: 18 83.131.8.0/24 maxlen: 24 87.252.128.0/19 maxlen: 24 87.252.128.0/20 maxlen: 20 89.172.0.0/16 maxlen: 16 93.136.0.0/16 maxlen: 16 93.137.0.0/16 maxlen: 18 93.137.128.0/18 maxlen: 18 93.138.0.0/16 maxlen: 16 93.139.0.0/16 maxlen: 16 93.140.0.0/16 maxlen: 16 93.141.0.0/16 maxlen: 16 93.142.0.0/16 maxlen: 16 93.143.0.0/16 maxlen: 16 93.159.64.0/19 maxlen: 19 178.160.0.0/17 maxlen: 17 178.160.0.0/18 maxlen: 18 188.125.0.0/20 maxlen: 20 194.152.192.0/18 maxlen: 18 194.152.198.0/24 maxlen: 24 195.29.0.0/16 maxlen: 18 195.29.0.0/18 maxlen: 18 195.29.64.0/18 maxlen: 18 195.29.128.0/18 maxlen: 18 195.29.192.0/18 maxlen: 18 2a00:c30::/29 maxlen: 29 2a00:c30::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2a:9e:6e:5e:92:6d:4d:b1:ea:9a:6a:02:e9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6cdafbd113c7a6d818695ae80ef072f73b2e2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:ed:84:57:dc:db:54:17:a6:8d:4e:d3:93: d6:a4:12:d1:46:d3:fa:d8:b1:c2:27:db:95:66:30: 28:4c:f5:64:86:2e:3e:9c:fb:6c:65:c3:ea:06:0d: 29:f8:55:60:2b:36:36:33:7b:f6:80:4e:85:da:65: 12:b1:b8:c8:dd:e0:a0:c6:00:34:d6:5c:d5:35:92: 8b:3e:b7:e0:f7:f9:69:d4:0d:05:d7:72:62:84:11: ec:2f:d6:fc:01:40:cf:55:a1:17:b9:6a:d6:8b:69: 60:80:c0:7c:d6:f4:d4:bc:d7:84:67:37:19:33:b8: bc:5c:f0:24:d1:69:87:8c:89:c1:c1:08:8b:d3:8e: df:52:a7:be:c3:3f:63:df:17:a3:62:0c:54:0c:77: 80:a6:61:f2:f0:33:a9:12:dd:ab:ed:99:36:dd:4f: 2a:bd:bc:49:1a:59:d4:e4:f6:03:75:70:49:24:59: 6d:be:1a:7f:0a:aa:67:f0:4b:d9:1f:af:9b:d8:d7: f1:f9:82:b7:b7:1c:f4:49:9c:da:7a:32:e5:f1:4b: 12:29:3b:f7:50:b7:3a:93:10:c9:67:c7:e1:df:68: f5:09:47:42:82:63:98:b2:bc:17:c9:d7:79:3f:e7: 90:e7:41:36:74:aa:45:85:6c:50:53:da:1d:51:7e: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CD:AF:BD:11:3C:7A:6D:81:86:95:AE:80:EF:07:2F:73:B2:E2:CC X509v3 Authority Key Identifier: keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/ps2vvRE8em2BhpWugO8HL3Oy4sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.192.0/19 31.217.0.0/17 46.188.128.0/17 78.0.0.0/14 83.131.0.0/16 87.252.128.0/19 89.172.0.0/16 93.136.0.0/13 93.159.64.0/19 178.160.0.0/17 188.125.0.0/20 194.152.192.0/18 195.29.0.0/16 IPv6: 2a00:c30::/29 Signature Algorithm: sha256WithRSAEncryption 4e:54:31:01:5d:fa:e0:28:b5:f0:30:73:c9:2e:59:3a:6d:a1: 3a:b2:49:42:ea:0a:84:5e:28:dd:29:ce:6c:bc:c7:c8:aa:53: cf:76:74:15:ad:99:33:28:a8:de:86:f4:2b:de:83:7b:12:d2: c2:ef:e6:0f:d6:e1:8a:9f:4f:c7:37:a0:62:91:fc:1a:a5:63: 48:7c:06:e5:9d:12:6c:98:7b:7d:aa:3c:e9:92:39:2f:15:36: 93:94:22:c1:51:4f:a0:00:26:a1:8b:37:c2:a2:87:c7:73:96: de:d6:61:dc:1d:9b:40:c3:e9:aa:78:38:29:7f:8e:2b:ce:1f: d9:1a:b7:b8:48:30:04:e5:65:d6:36:11:09:85:f3:e3:05:84: 80:c0:fc:09:cf:8d:cf:d5:71:09:5f:0d:16:f3:1a:82:ea:8f: e7:11:ef:59:36:9b:4d:f5:db:b4:95:32:99:bd:99:7a:5d:68: 0c:5f:f8:30:75:31:f6:26:14:eb:9b:4c:58:22:3b:c4:47:e5: 8a:4f:bb:90:d4:ee:f3:f7:ff:1e:a4:3d:58:f6:a6:a9:11:b8: 24:3d:16:c7:a8:93:45:b5:35:dc:a4:0f:52:07:50:5f:c3:b0: 92:4a:33:12:d0:c9:a3:85:10:72:a9:78:9b:40:a2:61:d0:98: 03:d2:e6:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt57Cqebl6SbU2x6ppqAumiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5 YzlhMjMwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmNkYWZiZDExM2M3YTZkODE4Njk1YWU4MGVmMDcyZjczYjJlMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzthFfc21QXpo1O05PWpBLRRtP6 2LHCJ9uVZjAoTPVkhi4+nPtsZcPqBg0p+FVgKzY2M3v2gE6F2mUSsbjI3eCgxgA0 1lzVNZKLPrfg9/lp1A0F13JihBHsL9b8AUDPVaEXuWrWi2lggMB81vTUvNeEZzcZ M7i8XPAk0WmHjInBwQiL047fUqe+wz9j3xejYgxUDHeApmHy8DOpEt2r7Zk23U8q vbxJGlnU5PYDdXBJJFltvhp/Cqpn8EvZH6+b2Nfx+YK3txz0SZzaejLl8UsSKTv3 ULc6kxDJZ8fh32j1CUdCgmOYsrwXydd5P+eQ50E2dKpFhWxQU9odUX7XgwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFKbNr70RPHptgYaVroDvBy9zsuLMMB8GA1UdIwQY MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt YzAxZjgwYTFjODA1LzEvcHMydnZSRThlbTJCaHBXdWdPOEhMM095NHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1 LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBPBAIAATBJAwQFH9jAAwQH H9kAAwQHLryAAwMCTgADAwBTgwMEBVf8gAMDAFmsAwMDXYgDBAVdn0ADBAeyoAAD BAS8fQADBAbCmMADAwDDHTANBAIAAjAHAwUDKgAMMDANBgkqhkiG9w0BAQsFAAOC AQEATlQxAV364Ci18DBzyS5ZOm2hOrJJQuoKhF4o3SnObLzHyKpTz3Z0Fa2ZMyio 3ob0K96DexLSwu/mD9bhip9PxzegYpH8GqVjSHwG5Z0SbJh7fao86ZI5LxU2k5Qi wVFPoAAmoYs3wqKHx3OW3tZh3B2bQMPpqng4KX+OK84f2Rq3uEgwBOVl1jYRCYXz 4wWEgMD8Cc+Nz9VxCV8NFvMaguqP5xHvWTabTfXbtJUymb2Zel1oDF/4MHUx9iYU 65tMWCI7xEflik+7kNTu8/f/HqQ9WPamqRG4JD0Wx6iTRbU13KQPUgdQX8Owkkoz EtDJo4UQcql4m0CiYdCYA9LmZg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:39 2026 by rpki-client