This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa File: oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa (raw, json) Hash identifier: g0N6pLY+sNIqbqq3i2xctEc69tyHJmh/CSOpC4j0mH4= Subject key identifier: A0:34:49:AC:B1:16:23:00:76:6D:02:0D:DD:54:91:15:59:B3:3C:4B Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892 Certificate serial: 019B7F834ABE0948A35BBDE9EFC241A77671 Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa Signing time: Fri 02 Jan 2026 16:21:09 +0000 ROA not before: Fri 02 Jan 2026 16:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 31.3.136.0/21 maxlen: 21 46.18.128.0/21 maxlen: 21 62.240.224.0/19 maxlen: 19 79.99.32.0/21 maxlen: 21 89.185.32.0/19 maxlen: 19 91.208.181.0/24 maxlen: 24 94.198.144.0/21 maxlen: 21 95.131.136.0/21 maxlen: 24 146.185.40.0/21 maxlen: 24 185.7.36.0/22 maxlen: 24 185.29.40.0/22 maxlen: 22 185.29.43.0/24 maxlen: 24 185.88.104.0/22 maxlen: 22 185.93.36.0/22 maxlen: 22 194.146.172.0/22 maxlen: 22 212.43.192.0/18 maxlen: 18 2001:a70::/32 maxlen: 32 2a01:4580::/29 maxlen: 29 2a02:1f8::/32 maxlen: 32 2a02:c70::/32 maxlen: 32 2a02:2328::/32 maxlen: 32 2a03:7300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:4a:be:09:48:a3:5b:bd:e9:ef:c2:41:a7:76:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892 Validity Not Before: Jan 2 16:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a03449acb1162300766d020ddd54911559b33c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:35:19:9b:eb:88:65:94:51:f2:c3:90:ab: 81:a4:ec:2f:f3:9b:39:ad:13:1b:11:49:f4:d8:94: 85:43:7c:e2:c4:40:d2:30:f5:85:aa:64:48:48:57: cd:ec:c6:34:67:04:4d:01:60:53:23:41:3f:b2:bd: dd:f6:a7:9f:eb:7b:5b:d2:eb:da:9a:5f:5b:70:4b: 4b:51:56:83:f9:e0:03:d2:f6:2a:5f:e8:49:9d:3a: 17:6f:aa:2e:f6:bf:a4:b2:5f:52:c1:65:02:87:6b: 07:82:d1:c9:b8:8e:f1:7f:4d:39:48:52:ed:cc:e1: bf:74:32:dd:e2:74:8c:85:9e:1a:71:3d:e3:8c:97: 06:74:e0:8c:60:7e:41:28:f1:dd:f8:8b:d5:ff:b9: a7:3e:0e:be:5e:79:22:e2:6b:05:00:1d:f2:08:e9: be:6b:57:df:39:69:d3:81:6c:44:38:d4:0f:2f:e6: e7:97:3e:c4:ba:81:b6:d0:48:86:52:d8:a9:ef:c9: 71:15:0c:18:f9:ce:94:7b:ce:03:0e:57:95:c1:bc: 67:a9:02:4e:f2:6e:33:10:6d:11:85:76:46:ee:ca: f6:4e:76:5f:c5:30:d6:cc:8b:13:23:ef:72:94:33: eb:cc:25:b1:49:69:53:e4:7a:27:c2:a0:15:bf:87: b0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:49:AC:B1:16:23:00:76:6D:02:0D:DD:54:91:15:59:B3:3C:4B X509v3 Authority Key Identifier: keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/oDRJrLEWIwB2bQIN3VSRFVmzPEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.136.0/21 46.18.128.0/21 62.240.224.0/19 79.99.32.0/21 89.185.32.0/19 91.208.181.0/24 94.198.144.0/21 95.131.136.0/21 146.185.40.0/21 185.7.36.0/22 185.29.40.0/22 185.88.104.0/22 185.93.36.0/22 194.146.172.0/22 212.43.192.0/18 IPv6: 2001:a70::/32 2a01:4580::/29 2a02:1f8::/32 2a02:c70::/32 2a02:2328::/32 2a03:7300::/32 Signature Algorithm: sha256WithRSAEncryption 8b:4a:3c:c3:13:ca:d2:1b:34:6b:d5:eb:ab:c8:ee:f4:ea:0b: 96:f5:cc:fd:2f:4c:5d:07:9f:40:67:64:e4:6b:5b:71:57:f4: 28:6c:a6:70:cb:53:09:59:d4:97:e6:1b:27:5b:db:ed:9b:16: c1:7b:7e:a2:c1:ef:e7:30:af:df:65:9c:32:48:4d:5e:04:11: ef:8f:07:f8:73:56:bd:aa:7f:3a:ca:9b:e5:ba:27:d8:e7:98: bb:48:86:97:0c:5d:ff:b1:4a:53:93:31:10:7b:c7:be:8c:ce: e7:52:34:c0:39:47:a2:c0:d5:f3:15:04:d6:2e:95:aa:d6:43: 85:13:f3:1d:04:52:53:a1:74:c0:a2:90:3f:0a:3e:bc:b0:41: b3:57:90:23:bd:3f:1d:e1:82:2b:88:26:37:1a:c7:71:21:15: a9:dd:b0:11:5b:53:a0:98:5a:2a:32:54:86:51:c8:73:f8:85: 1c:5a:3d:3d:82:fa:0c:d1:87:4c:07:50:b8:ab:ce:70:33:15: 2a:df:2e:05:4d:be:6a:0d:31:b0:a0:6e:db:dd:11:cf:1c:0c: 58:23:3c:1d:e8:b8:89:30:a4:28:0c:9d:9b:0e:a0:e2:10:45: e0:e4:e5:3e:90:5a:fb:e1:15:45:c9:a2:27:cb:02:87:ac:8c: cf:63:46:3e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt/g0q+CUijW73p78JBp3ZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3 MWQ4OTIwHhcNMjYwMTAyMTYyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDM0NDlhY2IxMTYyMzAwNzY2ZDAyMGRkZDU0OTExNTU5YjMzYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3I1GZvriGWUUfLDkKuBpOwv85s5 rRMbEUn02JSFQ3zixEDSMPWFqmRISFfN7MY0ZwRNAWBTI0E/sr3d9qef63tb0uva ml9bcEtLUVaD+eAD0vYqX+hJnToXb6ou9r+ksl9SwWUCh2sHgtHJuI7xf005SFLt zOG/dDLd4nSMhZ4acT3jjJcGdOCMYH5BKPHd+IvV/7mnPg6+Xnki4msFAB3yCOm+ a1ffOWnTgWxEONQPL+bnlz7EuoG20EiGUtip78lxFQwY+c6Ue84DDleVwbxnqQJO 8m4zEG0RhXZG7sr2TnZfxTDWzIsTI+9ylDPrzCWxSWlT5HonwqAVv4ewuwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFKA0SayxFiMAdm0CDd1UkRVZszxLMB8GA1UdIwQY MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt MmVmNDQ3ZTFiMDhjLzEvb0RSSnJMRVdJd0IyYlFJTjNWU1JGVm16UEVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDBgBAIAATBaAwQDHwOI AwQDLhKAAwQFPvDgAwQDT2MgAwQFWbkgAwQAW9C1AwQDXsaQAwQDX4OIAwQDkrko AwQCuQckAwQCuR0oAwQCuVhoAwQCuV0kAwQCwpKsAwQG1CvAMDAEAgACMCoDBQAg AQpwAwUDKgFFgAMFACoCAfgDBQAqAgxwAwUAKgIjKAMFACoDcwAwDQYJKoZIhvcN AQELBQADggEBAItKPMMTytIbNGvV66vI7vTqC5b1zP0vTF0Hn0BnZORrW3FX9Chs pnDLUwlZ1JfmGydb2+2bFsF7fqLB7+cwr99lnDJITV4EEe+PB/hzVr2qfzrKm+W6 J9jnmLtIhpcMXf+xSlOTMRB7x76MzudSNMA5R6LA1fMVBNYularWQ4UT8x0EUlOh dMCikD8KPrywQbNXkCO9Px3hgiuIJjcax3EhFandsBFbU6CYWioyVIZRyHP4hRxa PT2C+gzRh0wHULirznAzFSrfLgVNvmoNMbCgbtvdEc8cDFgjPB3ouIkwpCgMnZsO oOIQReDk5T6QWvvhFUXJoifLAoesjM9jRj4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:59 2026 by rpki-client