This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/g35mWcEGcq2FL_ocMSP0RxgyJbQ.roa File: g35mWcEGcq2FL_ocMSP0RxgyJbQ.roa (raw, json) Hash identifier: TVfIUA4MSHRm3H/AediOWDJYEMm9upS+VZ1+4Q2NBSY= Subject key identifier: 83:7E:66:59:C1:06:72:AD:85:2F:FA:1C:31:23:F4:47:18:32:25:B4 Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019B7A5B7231CEE595BD7E2E1B32F505DA9C Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/g35mWcEGcq2FL_ocMSP0RxgyJbQ.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30893 IP address blocks: 31.22.91.0/24 maxlen: 24 31.22.92.0/24 maxlen: 24 31.22.94.0/24 maxlen: 24 185.231.100.0/22 maxlen: 24 195.47.238.0/24 maxlen: 24 2a0c:5700::/29 maxlen: 48 2a0c:5700:3133::/48 maxlen: 48 2a0c:5700:5353::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:72:31:ce:e5:95:bd:7e:2e:1b:32:f5:05:da:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=837e6659c10672ad852ffa1c3123f447183225b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:d9:a1:fa:2c:49:b8:a2:de:36:0b:14:dd: 65:37:93:ed:9d:a1:a3:98:e7:f1:5d:63:d5:3a:25: a7:6a:b2:6a:44:0e:2b:06:f6:a4:f1:d9:cd:bb:da: 4a:59:15:90:08:4f:66:c6:cc:81:eb:e2:dc:c0:d1: 43:ee:66:8b:58:98:c2:29:58:7e:5f:27:8a:fe:6e: a5:3e:a4:b9:cf:b2:e8:fb:1a:2b:f9:4f:89:92:df: 00:ba:9e:2d:14:3d:7d:5e:26:9c:60:b2:61:06:e8: ad:7e:d6:ed:90:9f:ac:2d:97:85:e9:5b:9f:3b:59: 53:28:d9:4a:a2:4b:70:1b:ac:a1:bd:28:0a:0f:de: 75:84:1e:83:3b:9b:58:fe:22:1b:02:57:7f:81:45: d4:75:a0:7e:9f:77:b5:95:10:84:fa:0e:42:85:e3: 4c:e7:b5:ff:8d:3a:89:17:19:e4:82:55:cc:4e:96: 63:46:2f:89:64:ad:85:61:73:ac:eb:f9:ff:f7:5a: 5d:e2:b8:1d:93:1b:b2:31:a4:50:67:13:9c:70:1f: 8c:52:1e:81:28:bc:9d:ed:9f:a9:c4:ce:1c:6e:06: ab:75:58:fb:b6:7d:9b:1c:ff:f3:79:55:7f:69:e9: 80:0e:b4:b4:53:49:29:0f:bd:c8:2a:57:6e:52:f2: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7E:66:59:C1:06:72:AD:85:2F:FA:1C:31:23:F4:47:18:32:25:B4 X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/g35mWcEGcq2FL_ocMSP0RxgyJbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.91.0-31.22.92.255 31.22.94.0/24 185.231.100.0/22 195.47.238.0/24 IPv6: 2a0c:5700::/29 Signature Algorithm: sha256WithRSAEncryption 59:b0:e0:03:e3:40:60:5a:a9:0d:2c:cf:d1:5f:87:fe:8b:4a: 19:5a:33:8f:5d:a3:a4:7e:92:49:0b:0c:c3:a2:53:97:92:33: 32:d3:cb:62:6f:c3:85:fc:3c:d8:29:cb:96:1b:02:80:22:b1: e0:0f:e7:5c:98:a9:29:50:19:61:6c:06:f9:2b:3a:e7:b2:44: 95:7a:b0:c2:58:d3:41:5e:21:39:09:ee:0f:29:99:2b:15:89: e2:10:8e:90:88:12:de:ef:ba:13:7f:df:ec:23:85:1a:dc:99: d7:b7:9d:04:0d:e4:35:6e:e7:39:f3:ed:6a:f2:9a:85:a5:21: 13:db:5c:1c:6f:b7:f0:86:f7:55:44:a4:21:94:c7:35:fd:40: 2c:b3:34:e0:d6:0e:53:f6:fe:85:3c:9a:23:65:c8:ba:f6:db: 81:f6:e0:f9:6a:3c:66:c1:92:a9:9f:2a:ed:42:07:3a:dd:2b: 5e:2a:23:b6:d4:8d:c3:44:b7:17:cd:c3:27:65:b8:02:cb:b8: c6:f4:73:78:54:1d:8f:0f:76:1c:2e:24:c6:61:7b:5b:a3:c7: c2:2c:d8:47:39:03:18:59:6d:3a:42:b6:52:d8:4c:86:cc:2c: 55:9d:16:ea:e4:31:48:4a:fe:d7:cf:97:65:47:c1:1a:2b:c1: c5:de:5b:aa -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt6W3IxzuWVvX4uGzL1BdqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzdlNjY1OWMxMDY3MmFkODUyZmZhMWMzMTIzZjQ0NzE4MzIyNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudLZofosSbii3jYLFN1lN5PtnaGj mOfxXWPVOiWnarJqRA4rBvak8dnNu9pKWRWQCE9mxsyB6+LcwNFD7maLWJjCKVh+ XyeK/m6lPqS5z7Lo+xor+U+Jkt8Aup4tFD19XiacYLJhBuitftbtkJ+sLZeF6Vuf O1lTKNlKoktwG6yhvSgKD951hB6DO5tY/iIbAld/gUXUdaB+n3e1lRCE+g5CheNM 57X/jTqJFxnkglXMTpZjRi+JZK2FYXOs6/n/91pd4rgdkxuyMaRQZxOccB+MUh6B KLyd7Z+pxM4cbgardVj7tn2bHP/zeVV/aemADrS0U0kpD73IKlduUvKtiQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFIN+ZlnBBnKthS/6HDEj9EcYMiW0MB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvZzM1bVdjRUdjcTJGTF9vY01TUDBSeGd5SmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAAfFlsD BAAfFlwDBAAfFl4DBAK552QDBADDL+4wDQQCAAIwBwMFAyoMVwAwDQYJKoZIhvcN AQELBQADggEBAFmw4APjQGBaqQ0sz9Ffh/6LShlaM49do6R+kkkLDMOiU5eSMzLT y2Jvw4X8PNgpy5YbAoAiseAP51yYqSlQGWFsBvkrOueyRJV6sMJY00FeITkJ7g8p mSsVieIQjpCIEt7vuhN/3+wjhRrcmde3nQQN5DVu5znz7WrymoWlIRPbXBxvt/CG 91VEpCGUxzX9QCyzNODWDlP2/oU8miNlyLr224H24PlqPGbBkqmfKu1CBzrdK14q I7bUjcNEtxfNwydluALLuMb0c3hUHY8PdhwuJMZhe1ujx8Is2Ec5AxhZbTpCtlLY TIbMLFWdFurkMUhK/tfPl2VHwRorwcXeW6o= -----END CERTIFICATE-----Generated at Mon Jan 26 15:35:00 2026 by rpki-client