This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/j7OkdY2sGSM-sSkXikcRJgYHNOQ.roa File: j7OkdY2sGSM-sSkXikcRJgYHNOQ.roa (raw, json) Hash identifier: nPzQITN1WUJedpqGtx/YyCLrwyo9hulFJnuk/YLkhpY= Subject key identifier: 8F:B3:A4:75:8D:AC:19:23:3E:B1:29:17:8A:47:11:26:06:07:34:E4 Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Certificate serial: 019B7A5B4A2ADE61FE5969C1929F02405DC4 Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/j7OkdY2sGSM-sSkXikcRJgYHNOQ.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31263 IP address blocks: 31.44.160.0/20 maxlen: 20 31.193.144.0/20 maxlen: 20 45.67.40.0/22 maxlen: 22 45.94.0.0/22 maxlen: 22 45.142.184.0/22 maxlen: 22 46.102.173.0/24 maxlen: 24 77.81.166.0/24 maxlen: 24 77.240.224.0/20 maxlen: 20 77.241.0.0/21 maxlen: 21 77.241.6.0/24 maxlen: 24 77.241.10.0/23 maxlen: 23 77.241.10.0/24 maxlen: 24 77.241.11.0/24 maxlen: 24 77.241.12.0/22 maxlen: 22 79.133.100.0/22 maxlen: 22 80.68.176.0/20 maxlen: 20 80.88.160.0/20 maxlen: 20 84.247.16.0/24 maxlen: 24 84.247.192.0/18 maxlen: 18 84.247.208.0/20 maxlen: 20 84.247.224.0/19 maxlen: 19 85.204.252.0/24 maxlen: 24 89.34.203.0/24 maxlen: 24 92.62.80.0/20 maxlen: 20 93.91.128.0/20 maxlen: 20 119.12.32.0/20 maxlen: 20 151.2.16.0/22 maxlen: 22 151.2.64.0/19 maxlen: 19 151.2.112.0/20 maxlen: 20 176.62.48.0/20 maxlen: 20 178.175.192.0/18 maxlen: 18 178.238.48.0/20 maxlen: 20 185.5.196.0/22 maxlen: 22 185.229.172.0/22 maxlen: 22 193.135.15.0/24 maxlen: 24 193.135.24.0/24 maxlen: 24 2a02:600::/29 maxlen: 29 2a07:580::/29 maxlen: 29 2a07:4f00::/29 maxlen: 29 2a07:55c0::/29 maxlen: 29 2a07:5ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4a:2a:de:61:fe:59:69:c1:92:9f:02:40:5d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fb3a4758dac19233eb129178a471126060734e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:8c:3f:bb:68:7a:3c:b0:a1:eb:56:3b:6e: ec:06:b4:52:8e:c2:4f:08:fa:b9:b3:8c:05:78:74: bb:ed:88:77:59:3f:56:6b:ce:e4:2d:4a:99:7f:37: 04:2c:e2:93:e0:96:5e:2b:6e:fe:16:e2:ef:8b:97: 07:fd:47:a4:ee:d8:50:65:ae:0f:49:a2:31:f3:e6: 63:be:81:6b:5a:e0:d3:9f:62:4f:44:c8:af:23:fb: 7e:1f:ce:6a:6d:70:34:a7:8a:f1:8b:80:83:7f:c8: c2:fd:2d:42:a4:94:50:f6:dc:7f:27:e8:00:f0:31: 1c:08:48:37:a1:9a:8a:7a:fb:28:ff:89:4a:c8:21: d2:c2:99:e1:c0:b0:29:bf:36:17:1c:56:a5:70:6d: 6f:4c:08:f0:15:ce:1b:f1:28:4e:f6:91:da:ec:b3: 0d:2b:09:27:49:39:40:e2:22:03:ef:cf:13:51:f6: fc:da:ea:98:cc:35:79:94:11:71:09:e4:8a:3d:d3: 39:a8:6a:cf:b6:b8:29:20:01:fe:38:60:fa:ee:0d: 38:3b:1e:35:79:f8:4d:e2:03:83:95:ce:54:07:21: 07:38:43:a1:1e:25:d5:5b:fa:46:39:b6:cf:2a:a4: ab:ae:86:d7:48:8e:2c:f2:68:36:1a:37:56:53:26: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B3:A4:75:8D:AC:19:23:3E:B1:29:17:8A:47:11:26:06:07:34:E4 X509v3 Authority Key Identifier: keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/j7OkdY2sGSM-sSkXikcRJgYHNOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.160.0/20 31.193.144.0/20 45.67.40.0/22 45.94.0.0/22 45.142.184.0/22 46.102.173.0/24 77.81.166.0/24 77.240.224.0/20 77.241.0.0/21 77.241.10.0-77.241.15.255 79.133.100.0/22 80.68.176.0/20 80.88.160.0/20 84.247.16.0/24 84.247.192.0/18 85.204.252.0/24 89.34.203.0/24 92.62.80.0/20 93.91.128.0/20 119.12.32.0/20 151.2.16.0/22 151.2.64.0/19 151.2.112.0/20 176.62.48.0/20 178.175.192.0/18 178.238.48.0/20 185.5.196.0/22 185.229.172.0/22 193.135.15.0/24 193.135.24.0/24 IPv6: 2a02:600::/29 2a07:580::/29 2a07:4f00::/29 2a07:55c0::/29 2a07:5ec0::/29 Signature Algorithm: sha256WithRSAEncryption 50:0c:7e:c1:a8:d0:4e:67:5f:5b:bc:d2:97:d6:13:b4:d4:ce: a0:d4:c2:70:3a:48:1d:ef:6e:75:e9:6e:a0:9c:10:d1:cd:1f: 49:38:31:0e:06:97:ec:ef:53:c7:32:dd:54:03:72:0b:c1:d7: e5:bf:a1:ce:a9:e2:b1:37:15:a8:ec:00:b9:c9:37:2d:b2:5f: 52:d3:3e:86:e8:6b:db:84:72:34:7c:54:c4:24:30:9a:19:68: c5:31:64:ae:82:10:df:ef:58:cb:05:49:5e:8a:ff:f1:99:f7: 58:31:6b:cc:fa:e8:b8:03:25:6e:8c:ee:5a:d1:1d:ee:c5:7c: 4f:c6:31:6a:e5:ba:c2:b9:80:f9:41:d2:95:d1:4a:f0:a9:96: 78:e9:aa:fb:a6:c9:48:32:89:f7:87:d3:a0:40:11:52:6a:b4: f7:34:03:12:75:54:ba:a5:c6:6f:32:0d:72:63:29:59:2a:4c: bc:f4:93:98:d5:2a:9e:57:db:5e:ad:2c:b1:6d:9e:79:3a:94: 52:55:9d:87:cc:d5:ff:0d:d2:14:9b:d5:fc:d5:91:e6:55:15: f1:b5:3f:11:25:f6:31:ee:79:56:1b:e6:ca:83:84:0c:88:18: e2:c7:2d:f9:18:fa:a6:7e:26:49:5b:94:36:d3:f3:c9:3b:b3: 5b:4f:4e:2c -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt6W0oq3mH+WWnBkp8CQF3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk ZmEwNmEwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmIzYTQ3NThkYWMxOTIzM2ViMTI5MTc4YTQ3MTEyNjA2MDczNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LmMP7toejywoetWO27sBrRSjsJP CPq5s4wFeHS77Yh3WT9Wa87kLUqZfzcELOKT4JZeK27+FuLvi5cH/Uek7thQZa4P SaIx8+ZjvoFrWuDTn2JPRMivI/t+H85qbXA0p4rxi4CDf8jC/S1CpJRQ9tx/J+gA 8DEcCEg3oZqKevso/4lKyCHSwpnhwLApvzYXHFalcG1vTAjwFc4b8ShO9pHa7LMN KwknSTlA4iID788TUfb82uqYzDV5lBFxCeSKPdM5qGrPtrgpIAH+OGD67g04Ox41 efhN4gODlc5UByEHOEOhHiXVW/pGObbPKqSrrobXSI4s8mg2GjdWUyZ1ywIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFI+zpHWNrBkjPrEpF4pHESYGBzTkMB8GA1UdIwQY MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt NTRkOGY2YjA2YjgzLzEvajdPa2RZMnNHU00tc1NrWGlrY1JKZ1lITk9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgcMEAgABMIG8AwQE HyygAwQEH8GQAwQCLUMoAwQCLV4AAwQCLY64AwQALmatAwQATVGmAwQETfDgAwQD TfEAMAwDBAFN8QoDBARN8QADBAJPhWQDBARQRLADBARQWKADBABU9xADBAZU98AD BABVzPwDBABZIssDBARcPlADBARdW4ADBAR3DCADBAKXAhADBAWXAkADBASXAnAD BASwPjADBAayr8ADBASy7jADBAK5BcQDBAK55awDBADBhw8DBADBhxgwKQQCAAIw IwMFAyoCBgADBQMqBwWAAwUDKgdPAAMFAyoHVcADBQMqB17AMA0GCSqGSIb3DQEB CwUAA4IBAQBQDH7BqNBOZ19bvNKX1hO01M6g1MJwOkgd72516W6gnBDRzR9JODEO Bpfs71PHMt1UA3ILwdflv6HOqeKxNxWo7AC5yTctsl9S0z6G6GvbhHI0fFTEJDCa GWjFMWSughDf71jLBUleiv/xmfdYMWvM+ui4AyVujO5a0R3uxXxPxjFq5brCuYD5 QdKV0UrwqZZ46ar7pslIMon3h9OgQBFSarT3NAMSdVS6pcZvMg1yYylZKky89JOY 1SqeV9terSyxbZ55OpRSVZ2HzNX/DdIUm9X81ZHmVRXxtT8RJfYx7nlWG+bKg4QM iBjixy35GPqmfiZJW5Q20/PJO7NbT04s -----END CERTIFICATE-----Generated at Mon Jan 26 18:43:34 2026 by rpki-client