This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/oowSifZpNNKYzrjcaNUZJWL3m3Y.roa File: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (raw, json) Hash identifier: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM= Subject key identifier: A2:8C:12:89:F6:69:34:D2:98:CE:B8:DC:68:D5:19:25:62:F7:9B:76 Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Certificate serial: 019B7BA32C7141442179C96C04E9E0ADD36D Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/oowSifZpNNKYzrjcaNUZJWL3m3Y.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214748 IP address blocks: 31.210.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2c:71:41:44:21:79:c9:6c:04:e9:e0:ad:d3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639 Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a28c1289f66934d298ceb8dc68d5192562f79b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:0c:e8:c1:9e:68:58:c8:2c:f2:90:b0:7f: 07:c1:a1:e5:92:66:c2:28:5a:59:34:f0:ed:db:d7: 00:e8:d9:b7:6e:63:56:7e:82:84:b4:26:9f:c0:b3: 29:e3:31:ba:55:00:f1:df:58:f3:a7:05:a0:f4:fb: 79:a9:5c:dc:f5:14:0d:3f:f2:1c:fb:3b:56:2c:6f: 06:75:0d:67:bc:f7:f9:32:e7:cc:1f:13:48:12:8f: 35:11:01:b1:4c:82:d1:f3:a0:4f:23:b3:89:00:c0: 9f:55:56:d1:15:6e:c6:1a:bf:c6:92:b0:50:5d:b4: 03:5b:01:3e:8d:14:d6:0b:5d:17:9c:26:ce:11:15: 5a:1a:6f:8d:1c:44:2e:ba:7b:a5:5a:f0:bc:6b:d4: cf:27:c7:38:33:37:45:5b:7a:06:dd:82:4b:7f:dc: fb:9d:8e:c6:c1:82:3b:33:1f:c8:f3:ca:72:b2:b8: 92:20:d0:db:62:40:31:92:af:ee:39:2d:83:f5:fd: 5d:36:3d:b9:2f:cc:50:f4:b1:9d:5e:48:f5:84:0d: 13:f9:60:80:4b:0c:df:30:8e:16:30:5c:af:ab:c5: ee:d2:06:0a:ba:0c:13:d7:9a:d3:3b:d3:a0:b4:13: e6:98:d8:79:74:73:43:f6:c1:38:f2:a5:73:30:0a: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8C:12:89:F6:69:34:D2:98:CE:B8:DC:68:D5:19:25:62:F7:9B:76 X509v3 Authority Key Identifier: keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/oowSifZpNNKYzrjcaNUZJWL3m3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.137.0/24 Signature Algorithm: sha256WithRSAEncryption aa:be:b3:3c:92:df:7a:2e:7d:44:7d:38:8e:4b:f4:b0:d5:4e: d3:49:84:47:11:b3:07:09:47:04:75:bc:8f:fd:1e:6d:86:ad: de:4e:48:c3:08:2d:db:bc:84:a6:df:bf:ab:2c:8b:85:19:22: 4a:48:00:07:6d:5c:24:1b:84:c2:65:e4:ba:d8:bb:a2:f6:80: 77:9d:ff:f5:27:0f:21:9f:81:9e:1f:8f:0e:d2:8f:24:03:06: 20:cd:b9:f4:20:09:2e:07:d6:da:60:10:99:50:47:3b:60:91: d3:93:9c:71:32:7b:cb:23:4b:8f:0b:0d:7d:53:f5:4d:00:3f: 25:d3:7d:68:a8:47:92:d7:20:c1:23:3d:f6:15:ed:60:2c:53: 81:08:7f:b5:bc:2d:69:d0:ef:7b:76:16:88:87:e5:23:8f:4c: 83:f0:7c:73:f0:9b:67:78:99:59:12:5b:0e:6d:5a:c2:c0:30: db:7e:63:a1:c5:ac:62:9f:d5:05:e4:bf:a7:06:90:1d:2b:4f: 1d:16:73:7e:eb:98:36:b6:aa:84:42:ea:8e:ac:74:7e:8c:bc: b6:70:09:8d:33:e2:e6:30:58:6e:c6:dc:da:85:32:f0:0e:31: dc:55:be:03:8f:b9:26:9b:b8:18:32:ef:05:57:91:46:4c:ff: 1e:45:7e:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyxxQUQheclsBOngrdNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw YWI2MzkwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjhjMTI4OWY2NjkzNGQyOThjZWI4ZGM2OGQ1MTkyNTYyZjc5Yjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoYM6MGeaFjILPKQsH8HwaHlkmbC KFpZNPDt29cA6Nm3bmNWfoKEtCafwLMp4zG6VQDx31jzpwWg9Pt5qVzc9RQNP/Ic +ztWLG8GdQ1nvPf5MufMHxNIEo81EQGxTILR86BPI7OJAMCfVVbRFW7GGr/GkrBQ XbQDWwE+jRTWC10XnCbOERVaGm+NHEQuunulWvC8a9TPJ8c4MzdFW3oG3YJLf9z7 nY7GwYI7Mx/I88pysriSINDbYkAxkq/uOS2D9f1dNj25L8xQ9LGdXkj1hA0T+WCA SwzfMI4WMFyvq8Xu0gYKugwT15rTO9OgtBPmmNh5dHND9sE48qVzMArWNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKMEon2aTTSmM643GjVGSVi95t2MB8GA1UdIwQY MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt ZTgxY2Q3MDIyNTUzLzEvb293U2lmWnBOTktZenJqY2FOVVpKV0wzbTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9KJMA0G CSqGSIb3DQEBCwUAA4IBAQCqvrM8kt96Ln1EfTiOS/Sw1U7TSYRHEbMHCUcEdbyP /R5thq3eTkjDCC3bvISm37+rLIuFGSJKSAAHbVwkG4TCZeS62Lui9oB3nf/1Jw8h n4GeH48O0o8kAwYgzbn0IAkuB9baYBCZUEc7YJHTk5xxMnvLI0uPCw19U/VNAD8l 031oqEeS1yDBIz32Fe1gLFOBCH+1vC1p0O97dhaIh+Ujj0yD8Hxz8JtneJlZElsO bVrCwDDbfmOhxaxin9UF5L+nBpAdK08dFnN+65g2tqqEQuqOrHR+jLy2cAmNM+Lm MFhuxtzahTLwDjHcVb4Dj7kmm7gYMu8FV5FGTP8eRX7/ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:28 2026 by rpki-client