This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/W5i7jKztK_F-7p2FjKY5IXoTWnk.roa File: W5i7jKztK_F-7p2FjKY5IXoTWnk.roa (raw, json) Hash identifier: iWzQhvpIXmrZ9hLNW88m8Yge4x5Lx0tZrSAtIzszE3o= Subject key identifier: 5B:98:BB:8C:AC:ED:2B:F1:7E:EE:9D:85:8C:A6:39:21:7A:13:5A:79 Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019BFEF9022F6974614DE811CAE762A43F1F Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/W5i7jKztK_F-7p2FjKY5IXoTWnk.roa Signing time: Tue 27 Jan 2026 10:21:30 +0000 ROA not before: Tue 27 Jan 2026 10:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30893 IP address blocks: 31.22.91.0/24 maxlen: 24 31.22.92.0/24 maxlen: 24 31.22.94.0/24 maxlen: 24 185.231.100.0/22 maxlen: 24 195.47.238.0/24 maxlen: 24 2a0c:5700::/29 maxlen: 48 2a0c:5700:3133::/48 maxlen: 48 2a0c:5700:3135::/48 maxlen: 48 2a0c:5700:3136::/48 maxlen: 48 2a0c:5700:5353::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:f9:02:2f:69:74:61:4d:e8:11:ca:e7:62:a4:3f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Jan 27 10:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b98bb8caced2bf17eee9d858ca639217a135a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:da:ac:2a:de:35:d1:11:d5:0f:6b:ac:5d: 83:61:f2:40:d8:db:ab:0c:0f:10:2f:50:fc:e3:1f: b7:32:a0:9b:cc:5e:98:83:e3:8b:b9:46:2a:b8:3f: 8b:3a:4a:fc:bc:f8:37:9e:a1:11:e5:7e:1f:09:a7: 42:30:40:5f:57:8e:8d:f8:d7:fb:80:0b:73:d1:23: a3:0a:5a:0c:c0:be:9f:e5:b0:cf:0c:7d:fd:32:14: 96:dc:43:de:80:52:f1:52:64:84:02:ab:a3:e6:39: f0:48:e5:e3:88:a2:70:e3:39:2a:6b:08:bd:71:d8: 62:3e:56:a4:d2:ab:33:55:83:37:06:ab:63:02:d6: 75:c5:d6:3f:e9:26:05:2c:c8:a2:de:da:23:0e:71: 69:6c:7d:f2:b5:51:ab:86:15:75:43:ba:52:e9:0c: d2:de:f9:37:5d:eb:39:5e:1c:01:7c:f3:1d:a4:64: 48:7f:74:e3:fd:51:d9:a8:8e:c3:36:47:a9:a9:b0: b9:a8:76:f2:e9:cb:73:0f:7d:d3:c6:fb:d3:51:c5: 77:82:dd:b3:25:90:ba:1b:3a:55:c0:d1:8c:c8:ea: 3c:a8:ae:5f:0e:b9:ae:24:1d:db:6c:c3:b6:0d:4d: ad:bc:6f:21:7b:cc:37:ba:bf:ba:86:3b:4f:62:92: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:BB:8C:AC:ED:2B:F1:7E:EE:9D:85:8C:A6:39:21:7A:13:5A:79 X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/W5i7jKztK_F-7p2FjKY5IXoTWnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.91.0-31.22.92.255 31.22.94.0/24 185.231.100.0/22 195.47.238.0/24 IPv6: 2a0c:5700::/29 Signature Algorithm: sha256WithRSAEncryption 6a:51:f1:7c:1f:20:ea:1b:d5:f3:2e:cb:0a:4c:a3:83:25:df: 99:c2:fc:1c:0f:78:11:f0:89:c5:0e:7e:9c:c0:12:d7:c5:55: 5f:e8:ca:30:bf:38:89:ba:74:ca:d3:f0:2d:ff:d3:e6:72:33: 31:62:49:41:b1:de:f8:d6:88:27:d3:66:7a:69:47:ef:22:88: 65:df:a5:0d:b0:90:2e:ab:81:88:26:28:c0:70:b7:8c:0d:70: aa:1a:71:20:32:db:b6:ba:ac:d6:36:68:16:22:f2:fb:ac:37: 17:03:67:e0:60:8d:02:08:2f:16:50:6d:2b:da:9e:1d:8a:6e: 77:6c:91:87:9e:f9:8e:55:86:c6:f0:99:cf:32:4c:ac:47:c3: a5:9f:53:5d:f2:31:e1:97:ee:d3:1e:d4:b6:06:26:48:a9:61: ee:5b:0c:fb:ef:46:b4:24:a6:91:4c:cd:b9:64:53:ce:8f:9d: 0f:17:f2:92:8e:1e:32:5c:25:75:83:3c:e9:bc:7f:03:f9:ad: cb:89:af:46:0b:2c:8a:87:30:08:13:f4:d5:02:9b:ce:21:34: 14:62:26:0f:4e:0f:93:bc:12:dc:15:e2:1a:07:a2:50:27:55: c0:60:7b:0a:2b:4f:c0:18:f9:40:d9:5f:9c:27:c6:c3:34:75: b4:c9:d3:c8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZv++QIvaXRhTegRyudipD8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjYwMTI3MTAyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjk4YmI4Y2FjZWQyYmYxN2VlZTlkODU4Y2E2MzkyMTdhMTM1YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC/arCreNdER1Q9rrF2DYfJA2Nur DA8QL1D84x+3MqCbzF6Yg+OLuUYquD+LOkr8vPg3nqER5X4fCadCMEBfV46N+Nf7 gAtz0SOjCloMwL6f5bDPDH39MhSW3EPegFLxUmSEAquj5jnwSOXjiKJw4zkqawi9 cdhiPlak0qszVYM3BqtjAtZ1xdY/6SYFLMii3tojDnFpbH3ytVGrhhV1Q7pS6QzS 3vk3Xes5XhwBfPMdpGRIf3Tj/VHZqI7DNkepqbC5qHby6ctzD33TxvvTUcV3gt2z JZC6GzpVwNGMyOo8qK5fDrmuJB3bbMO2DU2tvG8he8w3ur+6hjtPYpIhTwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFFuYu4ys7Svxfu6dhYymOSF6E1p5MB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvVzVpN2pLenRLX0YtN3AyRmpLWTVJWG9UV25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAAfFlsD BAAfFlwDBAAfFl4DBAK552QDBADDL+4wDQQCAAIwBwMFAyoMVwAwDQYJKoZIhvcN AQELBQADggEBAGpR8XwfIOob1fMuywpMo4Ml35nC/BwPeBHwicUOfpzAEtfFVV/o yjC/OIm6dMrT8C3/0+ZyMzFiSUGx3vjWiCfTZnppR+8iiGXfpQ2wkC6rgYgmKMBw t4wNcKoacSAy27a6rNY2aBYi8vusNxcDZ+BgjQIILxZQbSvanh2KbndskYee+Y5V hsbwmc8yTKxHw6WfU13yMeGX7tMe1LYGJkipYe5bDPvvRrQkppFMzblkU86PnQ8X 8pKOHjJcJXWDPOm8fwP5rcuJr0YLLIqHMAgT9NUCm84hNBRiJg9OD5O8EtwV4hoH olAnVcBgeworT8AY+UDZX5wnxsM0dbTJ08g= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:04 2026 by rpki-client