This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa File: X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa (raw, json) Hash identifier: rh/WCgNGpWe5SFzXuknTX7T5+ylOXQCOCuQbZtqKNPA= Subject key identifier: 5F:46:81:FA:F5:FA:10:35:40:86:4F:09:75:0D:49:C3:88:C2:97:1E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12BEFC7C65C72083A95DBB252F32AB Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42109 IP address blocks: 31.7.160.0/21 maxlen: 21 31.7.160.0/24 maxlen: 24 31.7.161.0/24 maxlen: 24 31.7.163.0/24 maxlen: 24 31.7.164.0/24 maxlen: 24 31.7.165.0/24 maxlen: 24 77.95.188.0/22 maxlen: 22 77.95.189.0/24 maxlen: 24 91.103.24.0/21 maxlen: 21 91.103.24.0/24 maxlen: 24 91.103.25.0/24 maxlen: 24 91.103.26.0/24 maxlen: 24 91.103.27.0/24 maxlen: 24 91.103.28.0/24 maxlen: 24 91.103.29.0/24 maxlen: 24 91.103.30.0/24 maxlen: 24 91.103.56.0/21 maxlen: 21 91.103.56.0/24 maxlen: 24 91.103.57.0/24 maxlen: 24 91.103.59.0/24 maxlen: 24 91.103.60.0/24 maxlen: 24 91.103.61.0/24 maxlen: 24 91.103.62.0/24 maxlen: 24 91.103.63.0/24 maxlen: 24 93.94.216.0/21 maxlen: 21 93.94.217.0/24 maxlen: 24 93.94.219.0/24 maxlen: 24 93.94.221.0/24 maxlen: 24 95.140.192.0/20 maxlen: 20 95.140.192.0/24 maxlen: 24 95.140.194.0/24 maxlen: 24 95.140.195.0/24 maxlen: 24 95.140.196.0/24 maxlen: 24 95.140.197.0/24 maxlen: 24 95.140.198.0/23 maxlen: 23 95.140.200.0/24 maxlen: 24 95.140.201.0/24 maxlen: 24 95.140.202.0/24 maxlen: 24 95.140.203.0/24 maxlen: 24 95.140.204.0/22 maxlen: 22 185.79.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:be:fc:7c:65:c7:20:83:a9:5d:bb:25:2f:32:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f4681faf5fa103540864f09750d49c388c2971e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:3d:2f:c6:ee:07:23:95:b2:18:5f:16:13: f7:bb:52:ba:b7:8d:0e:ed:32:15:fe:9a:b1:f7:f6: e0:00:9c:dd:01:44:8e:c0:e8:a6:8c:25:93:05:60: 51:ff:9a:93:17:48:da:9f:43:98:76:03:c0:81:ac: 1f:50:f2:85:1a:70:bc:1d:58:ca:33:e1:74:54:7a: 71:e7:88:3c:f7:82:88:a6:61:79:7f:00:1a:f1:9d: e2:27:c7:05:6f:b7:60:77:7a:8a:f3:56:73:94:3f: e8:8d:93:2e:06:d0:ad:46:f2:66:7f:c7:4c:4e:2d: e8:26:51:b1:85:7c:af:3a:b3:f7:5e:ae:24:28:4d: f1:9e:39:a5:91:93:5e:1b:8a:3a:39:87:a4:34:3d: f7:89:32:88:50:9f:db:3d:c6:8e:69:1d:3a:7e:68: 13:eb:f2:ee:88:7e:65:f9:d4:82:c8:17:28:ce:15: fd:74:21:97:ec:ce:7f:eb:24:49:ee:ba:8e:f1:4e: ed:8c:81:30:d5:f5:30:8b:b5:b3:86:83:02:e6:c3: 1c:fe:85:ce:68:ec:84:43:bd:09:ca:4a:28:5e:8b: f2:ea:f0:39:bf:61:63:bb:4c:54:3b:75:a5:24:62: 8a:f9:cd:d5:66:d1:4a:2e:71:4d:78:19:b8:fc:21: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:46:81:FA:F5:FA:10:35:40:86:4F:09:75:0D:49:C3:88:C2:97:1E X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.160.0/21 77.95.188.0/22 91.103.24.0/21 91.103.56.0/21 93.94.216.0/21 95.140.192.0/20 185.79.0.0/24 Signature Algorithm: sha256WithRSAEncryption 81:0e:39:82:92:0d:63:f0:50:59:d5:5a:0a:3f:f2:36:ba:9f: fc:e3:51:63:30:d0:90:be:2e:e7:19:93:92:c7:41:7a:28:03: 46:e9:24:3e:cc:b9:67:ef:1e:b4:32:4b:a5:0b:24:e6:a5:d5: 0c:6c:38:8c:e4:30:98:2b:9e:01:57:2a:6f:b8:81:b3:c4:ab: 4d:ea:00:09:3e:06:2b:90:66:05:f6:e7:cc:f3:86:8d:e6:0c: 45:d4:11:6f:06:2b:40:7b:38:8d:4e:ee:37:27:d9:bc:ff:7e: f5:5d:e5:5b:e6:fc:04:3d:50:22:e6:14:a2:a8:17:d3:f3:26: 50:89:59:b7:d3:90:22:b0:b9:2e:5e:b8:e8:29:23:1d:f5:4f: 51:83:9d:69:44:0f:76:44:3d:88:ee:3e:98:d9:41:d6:b8:de: c2:52:72:4f:aa:1a:67:72:67:6d:10:c9:b1:ad:18:b2:5a:fc: ca:e3:13:80:43:06:c9:c6:08:a9:6c:88:ef:98:db:9c:a7:75: 54:3e:01:9d:5a:24:0c:cf:ba:f6:05:43:27:99:87:91:f0:fb: 4b:4f:ac:a2:08:51:45:7c:36:4b:e4:73:99:41:a5:51:ef:89: 92:36:38:1a:98:06:52:a6:fb:ec:71:73:f2:0b:a4:30:74:49: 7e:23:3a:69 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8Er78fGXHIIOpXbslLzKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjQ2ODFmYWY1ZmExMDM1NDA4NjRmMDk3NTBkNDljMzg4YzI5NzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/k9L8buByOVshhfFhP3u1K6t40O 7TIV/pqx9/bgAJzdAUSOwOimjCWTBWBR/5qTF0jan0OYdgPAgawfUPKFGnC8HVjK M+F0VHpx54g894KIpmF5fwAa8Z3iJ8cFb7dgd3qK81ZzlD/ojZMuBtCtRvJmf8dM Ti3oJlGxhXyvOrP3Xq4kKE3xnjmlkZNeG4o6OYekND33iTKIUJ/bPcaOaR06fmgT 6/LuiH5l+dSCyBcozhX9dCGX7M5/6yRJ7rqO8U7tjIEw1fUwi7WzhoMC5sMc/oXO aOyEQ70JykooXovy6vA5v2Fju0xUO3WlJGKK+c3VZtFKLnFNeBm4/CFRLwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFF9Ggfr1+hA1QIZPCXUNScOIwpceMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvWDBhQi12WDZFRFZBaGs4SmRRMUp3NGpDbHg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDHwegAwQC TV+8AwQDW2cYAwQDW2c4AwQDXV7YAwQEX4zAAwQAuU8AMA0GCSqGSIb3DQEBCwUA A4IBAQCBDjmCkg1j8FBZ1VoKP/I2up/841FjMNCQvi7nGZOSx0F6KANG6SQ+zLln 7x60MkulCyTmpdUMbDiM5DCYK54BVypvuIGzxKtN6gAJPgYrkGYF9ufM84aN5gxF 1BFvBitAeziNTu43J9m8/371XeVb5vwEPVAi5hSiqBfT8yZQiVm305AisLkuXrjo KSMd9U9Rg51pRA92RD2I7j6Y2UHWuN7CUnJPqhpncmdtEMmxrRiyWvzK4xOAQwbJ xgipbIjvmNucp3VUPgGdWiQMz7r2BUMnmYeR8PtLT6yiCFFFfDZL5HOZQaVR74mS NjgamAZSpvvscXPyC6QwdEl+Izpp -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:24 2026 by rpki-client