This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/vvOgIMkDpg0381NKvOJ6xEsVrhU.roa File: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (raw, json) Hash identifier: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g= Subject key identifier: BE:F3:A0:20:C9:03:A6:0D:37:F3:53:4A:BC:E2:7A:C4:4B:15:AE:15 Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030 Certificate serial: 019B7AC91EECB0E22A1AEE2448A134C0437E Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/vvOgIMkDpg0381NKvOJ6xEsVrhU.roa Signing time: Thu 01 Jan 2026 18:19:19 +0000 ROA not before: Thu 01 Jan 2026 18:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15967 IP address blocks: 31.172.168.0/22 maxlen: 22 31.172.168.0/24 maxlen: 24 31.172.169.0/24 maxlen: 24 31.172.170.0/23 maxlen: 23 77.55.0.0/16 maxlen: 16 77.55.0.0/18 maxlen: 18 77.55.1.0/24 maxlen: 24 77.55.2.0/24 maxlen: 24 77.55.11.0/24 maxlen: 24 77.55.12.0/24 maxlen: 24 77.55.15.0/24 maxlen: 24 77.55.20.0/24 maxlen: 24 77.55.23.0/24 maxlen: 24 77.55.26.0/24 maxlen: 24 77.55.31.0/24 maxlen: 24 77.55.35.0/24 maxlen: 24 77.55.40.0/24 maxlen: 24 77.55.43.0/24 maxlen: 24 77.55.64.0/22 maxlen: 22 77.55.68.0/22 maxlen: 22 77.55.72.0/22 maxlen: 22 77.55.76.0/23 maxlen: 23 77.55.78.0/23 maxlen: 23 77.55.84.0/22 maxlen: 22 77.55.88.0/23 maxlen: 23 77.55.90.0/24 maxlen: 24 77.55.91.0/24 maxlen: 24 77.55.92.0/24 maxlen: 24 77.55.93.0/24 maxlen: 24 77.55.94.0/24 maxlen: 24 77.55.95.0/24 maxlen: 24 77.55.96.0/22 maxlen: 22 77.55.100.0/22 maxlen: 22 77.55.104.0/23 maxlen: 23 77.55.106.0/23 maxlen: 23 77.55.108.0/23 maxlen: 23 77.55.110.0/24 maxlen: 24 77.55.111.0/24 maxlen: 24 77.55.112.0/23 maxlen: 23 77.55.114.0/23 maxlen: 23 77.55.116.0/23 maxlen: 23 77.55.118.0/23 maxlen: 23 77.55.120.0/24 maxlen: 24 77.55.121.0/24 maxlen: 24 77.55.122.0/23 maxlen: 23 77.55.124.0/24 maxlen: 24 77.55.125.0/24 maxlen: 24 77.55.126.0/24 maxlen: 24 77.55.127.0/24 maxlen: 24 77.55.128.0/20 maxlen: 20 77.55.144.0/21 maxlen: 21 77.55.152.0/24 maxlen: 24 77.55.153.0/24 maxlen: 24 77.55.154.0/24 maxlen: 24 77.55.155.0/24 maxlen: 24 77.55.156.0/23 maxlen: 23 77.55.158.0/23 maxlen: 23 77.55.160.0/20 maxlen: 20 77.55.160.0/23 maxlen: 23 77.55.162.0/23 maxlen: 23 77.55.164.0/23 maxlen: 23 77.55.166.0/24 maxlen: 24 77.55.167.0/24 maxlen: 24 77.55.168.0/24 maxlen: 24 77.55.169.0/24 maxlen: 24 77.55.170.0/23 maxlen: 23 77.55.172.0/23 maxlen: 23 77.55.174.0/23 maxlen: 23 77.55.176.0/21 maxlen: 21 77.55.176.0/23 maxlen: 23 77.55.176.0/24 maxlen: 24 77.55.177.0/24 maxlen: 24 77.55.178.0/24 maxlen: 24 77.55.179.0/24 maxlen: 24 77.55.180.0/24 maxlen: 24 77.55.181.0/24 maxlen: 24 77.55.182.0/23 maxlen: 23 77.55.184.0/23 maxlen: 23 77.55.186.0/23 maxlen: 23 77.55.188.0/23 maxlen: 23 77.55.190.0/24 maxlen: 24 77.55.191.0/24 maxlen: 24 77.55.192.0/20 maxlen: 20 77.55.208.0/20 maxlen: 20 77.55.224.0/20 maxlen: 20 77.55.240.0/23 maxlen: 23 77.55.242.0/23 maxlen: 23 77.55.245.0/24 maxlen: 24 77.55.246.0/24 maxlen: 24 77.55.247.0/24 maxlen: 24 77.55.248.0/22 maxlen: 22 77.55.252.0/23 maxlen: 23 77.55.254.0/24 maxlen: 24 77.55.255.0/24 maxlen: 24 85.128.128.0/17 maxlen: 17 85.128.128.0/24 maxlen: 24 85.128.129.0/24 maxlen: 24 85.128.130.0/24 maxlen: 24 85.128.131.0/24 maxlen: 24 85.128.132.0/23 maxlen: 23 85.128.134.0/24 maxlen: 24 85.128.135.0/24 maxlen: 24 85.128.136.0/22 maxlen: 22 85.128.140.0/23 maxlen: 23 85.128.142.0/24 maxlen: 24 85.128.143.0/24 maxlen: 24 85.128.144.0/20 maxlen: 20 85.128.160.0/19 maxlen: 19 85.128.192.0/18 maxlen: 18 2a01:6100::/32 maxlen: 32 2a01:6100::/48 maxlen: 48 2a01:6100:111::/48 maxlen: 48 2a01:6100:fe00::/48 maxlen: 48 2a01:6100:fe01::/48 maxlen: 48 2a01:6100:fe02::/48 maxlen: 48 2a01:6100:fe10::/48 maxlen: 48 2a01:6100:fe11::/48 maxlen: 48 2a01:6100:fe12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1e:ec:b0:e2:2a:1a:ee:24:48:a1:34:c0:43:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030 Validity Not Before: Jan 1 18:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bef3a020c903a60d37f3534abce27ac44b15ae15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:5a:b0:23:c3:25:97:72:13:2c:f2:f2:4d: fe:68:48:e4:60:d2:50:0e:74:bf:21:c0:32:18:50: f0:b7:77:f4:d0:ba:13:91:79:ba:8b:c3:9b:9e:c6: cb:00:a7:f5:96:38:58:42:5b:6b:d7:f2:63:3c:a0: 63:35:ff:8b:0d:ec:bc:b4:28:c8:10:b3:a6:5a:ee: a8:d2:a8:90:4b:83:d1:52:e9:f3:50:86:86:a5:49: 2d:95:92:08:6b:5b:0b:66:0e:f8:39:20:e7:1a:55: 6d:9b:9c:25:c8:b8:97:02:02:15:3f:f6:2c:cb:25: b9:9c:51:01:b5:7b:5a:f6:fe:7e:83:66:be:51:83: f7:a1:c3:7d:4e:54:af:6c:6d:82:1e:de:0a:1e:75: d1:8e:ab:3a:39:d7:f1:16:78:82:1b:e7:45:a7:9c: b6:19:27:da:ab:52:12:11:00:46:6a:90:de:17:d0: 43:96:4b:25:e3:53:13:0b:09:87:0d:20:f5:aa:2d: a7:fe:3c:97:10:7a:ba:49:81:8d:a7:93:a2:e4:de: cc:00:5e:f4:9c:ed:5d:b6:6d:e5:14:9b:0b:50:51: bf:4d:a5:8d:db:21:a8:6d:3f:01:ef:1e:d6:26:7d: fe:c0:43:2a:3c:a7:64:68:ad:0c:e0:04:02:40:d6: 35:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F3:A0:20:C9:03:A6:0D:37:F3:53:4A:BC:E2:7A:C4:4B:15:AE:15 X509v3 Authority Key Identifier: keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/vvOgIMkDpg0381NKvOJ6xEsVrhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.168.0/22 77.55.0.0/16 85.128.128.0/17 IPv6: 2a01:6100::/32 Signature Algorithm: sha256WithRSAEncryption 83:53:f7:22:59:57:84:a7:92:7c:ca:b1:f3:3b:00:90:ef:60: 8a:08:2f:4f:60:58:33:31:62:97:e5:75:66:70:8d:6c:cf:93: 34:4b:58:97:d5:d8:15:38:7c:87:95:04:a0:3a:63:a8:59:5e: b0:17:0c:48:5d:e4:30:24:8b:5a:9c:a7:ab:6a:c2:fb:ed:b6: 77:cd:f2:b4:38:b3:69:40:d8:9e:dd:ce:c7:48:1e:9e:bc:3c: 6f:26:83:ae:70:3e:7d:5c:b9:40:6f:4b:40:b3:8a:ba:f7:bf: b0:43:d7:8b:5d:e0:5a:51:74:a1:bb:57:98:05:3c:fb:29:bb: 41:e2:91:23:83:c3:2a:36:14:16:7c:45:46:b8:8a:77:28:73: f5:6c:c8:4d:94:a5:63:bb:83:16:1f:0d:fe:51:b4:f9:9e:4f: 2d:85:30:fe:f1:00:c8:c7:fe:e2:16:b4:cc:80:c6:2c:d7:73: 5f:76:1d:c0:6a:97:2b:18:1c:f8:da:61:c5:14:21:f8:5d:7a: 5c:68:6b:bc:3d:7b:f9:7f:59:55:47:f9:cc:b2:d2:43:bd:3d: da:11:f4:42:4f:4b:a2:66:2d:63:99:bc:ef:6f:c8:77:cf:5f: 42:4d:84:9e:57:d6:4c:60:46:58:82:b1:b3:68:6e:f9:20:a5: 2e:83:96:cd -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6yR7ssOIqGu4kSKE0wEN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm NmQwMzAwHhcNMjYwMTAxMTgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWYzYTAyMGM5MDNhNjBkMzdmMzUzNGFiY2UyN2FjNDRiMTVhZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOlasCPDJZdyEyzy8k3+aEjkYNJQ DnS/IcAyGFDwt3f00LoTkXm6i8ObnsbLAKf1ljhYQltr1/JjPKBjNf+LDey8tCjI ELOmWu6o0qiQS4PRUunzUIaGpUktlZIIa1sLZg74OSDnGlVtm5wlyLiXAgIVP/Ys yyW5nFEBtXta9v5+g2a+UYP3ocN9TlSvbG2CHt4KHnXRjqs6OdfxFniCG+dFp5y2 GSfaq1ISEQBGapDeF9BDlksl41MTCwmHDSD1qi2n/jyXEHq6SYGNp5Oi5N7MAF70 nO1dtm3lFJsLUFG/TaWN2yGobT8B7x7WJn3+wEMqPKdkaK0M4AQCQNY1VQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFL7zoCDJA6YNN/NTSrziesRLFa4VMB8GA1UdIwQY MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt ZmI1YzYyZTQyZjZiLzEvdnZPZ0lNa0RwZzAzODFOS3ZPSjZ4RXNWcmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQCH6yoAwMA TTcDBAdVgIAwDQQCAAIwBwMFACoBYQAwDQYJKoZIhvcNAQELBQADggEBAINT9yJZ V4SnknzKsfM7AJDvYIoIL09gWDMxYpfldWZwjWzPkzRLWJfV2BU4fIeVBKA6Y6hZ XrAXDEhd5DAki1qcp6tqwvvttnfN8rQ4s2lA2J7dzsdIHp68PG8mg65wPn1cuUBv S0Czirr3v7BD14td4FpRdKG7V5gFPPspu0HikSODwyo2FBZ8RUa4incoc/VsyE2U pWO7gxYfDf5RtPmeTy2FMP7xAMjH/uIWtMyAxizXc192HcBqlysYHPjaYcUUIfhd elxoa7w9e/l/WVVH+cyy0kO9PdoR9EJPS6JmLWOZvO9vyHfPX0JNhJ5X1kxgRliC sbNobvkgpS6Dls0= -----END CERTIFICATE-----Generated at Tue Feb 10 02:32:28 2026 by rpki-client