This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/EPkMocEIf6YHtVveQVCBv3QN0fQ.roa File: EPkMocEIf6YHtVveQVCBv3QN0fQ.roa (raw, json) Hash identifier: P29zKbxU8CX1RFik6k8KtMo4X8xEhL7qfYBrdaaVZmo= Subject key identifier: 10:F9:0C:A1:C1:08:7F:A6:07:B5:5B:DE:41:50:81:BF:74:0D:D1:F4 Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851 Certificate serial: 019B79ED14EB55E3B268745BF10748DB01D5 Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/EPkMocEIf6YHtVveQVCBv3QN0fQ.roa Signing time: Thu 01 Jan 2026 14:18:59 +0000 ROA not before: Thu 01 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56476 IP address blocks: 31.42.192.0/19 maxlen: 19 31.42.192.0/24 maxlen: 24 31.42.193.0/24 maxlen: 24 31.42.194.0/24 maxlen: 24 31.42.195.0/24 maxlen: 24 31.42.196.0/24 maxlen: 24 31.42.197.0/24 maxlen: 24 31.42.198.0/24 maxlen: 24 31.42.199.0/24 maxlen: 24 31.42.200.0/24 maxlen: 24 31.42.201.0/24 maxlen: 24 31.42.202.0/24 maxlen: 24 31.42.203.0/24 maxlen: 24 31.42.204.0/24 maxlen: 24 31.42.205.0/24 maxlen: 24 31.42.206.0/24 maxlen: 24 31.42.207.0/24 maxlen: 24 31.42.208.0/24 maxlen: 24 31.42.209.0/24 maxlen: 24 31.42.210.0/24 maxlen: 24 31.42.211.0/24 maxlen: 24 31.42.212.0/24 maxlen: 24 31.42.213.0/24 maxlen: 24 31.42.214.0/24 maxlen: 24 31.42.215.0/24 maxlen: 24 31.42.216.0/24 maxlen: 24 31.42.217.0/24 maxlen: 24 31.42.218.0/24 maxlen: 24 31.42.219.0/24 maxlen: 24 31.42.220.0/24 maxlen: 24 31.42.221.0/24 maxlen: 24 31.42.222.0/24 maxlen: 24 31.42.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:14:eb:55:e3:b2:68:74:5b:f1:07:48:db:01:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851 Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10f90ca1c1087fa607b55bde415081bf740dd1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:84:5d:04:23:da:61:93:a7:80:cd:f8:55:5b: b8:49:a9:c3:10:8e:44:a6:e8:d2:4d:e4:5a:f2:6e: 11:16:f3:f6:af:ee:81:bb:03:c8:b2:8d:af:66:0d: d9:7d:6c:fc:cd:e2:a0:4d:5c:2d:c5:ca:ac:44:6c: cd:e9:e3:35:87:32:22:bb:ed:05:03:67:a1:73:7c: b0:7f:83:50:d4:81:bf:26:e6:17:a9:56:2e:93:60: aa:af:9c:6d:8d:74:dd:67:ce:67:fe:8d:6e:09:db: 10:46:91:32:3e:0f:63:82:87:a7:cc:bc:ca:fb:d7: e6:fb:31:d0:ca:f0:a2:94:0d:3d:1c:5f:b1:7d:07: be:98:65:f7:96:e9:08:a7:68:0f:7a:b1:75:08:a8: ed:6e:b6:c3:26:ee:23:64:91:1d:50:e8:5b:be:3c: 1d:f5:48:2d:35:29:77:95:87:32:de:cc:ff:72:78: 05:51:ac:e9:e3:67:15:82:22:93:3e:73:39:a3:b6: b1:ad:ed:58:3d:72:c8:08:eb:21:c8:ce:bf:b5:21: 01:05:3e:b2:27:3d:df:45:fa:46:5e:70:49:ce:4b: d3:57:18:6c:e9:70:39:db:1c:77:45:09:0d:f3:43: fa:79:d6:2b:39:c1:77:4a:55:8d:b7:4f:fa:c1:a3: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F9:0C:A1:C1:08:7F:A6:07:B5:5B:DE:41:50:81:BF:74:0D:D1:F4 X509v3 Authority Key Identifier: keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/EPkMocEIf6YHtVveQVCBv3QN0fQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:fb:eb:3b:12:1e:53:2e:f3:fd:c5:d0:19:e8:cc:97:a6:76: 62:ea:72:00:7c:ad:db:65:97:65:53:0d:62:30:01:01:15:83: 44:69:49:ec:00:8b:bf:a0:1a:21:97:c9:76:36:64:d0:16:60: e1:a0:d5:8f:ad:7b:b9:d5:eb:a7:08:91:71:82:a3:6c:fe:41: 5b:a0:8a:2b:f9:04:a2:f8:1b:7b:20:f2:12:e6:6d:a9:c8:25: 6c:a1:df:42:c2:8c:f9:c2:e2:fd:af:ba:d6:ee:3b:a2:e8:99: 00:94:38:5d:6f:74:16:1f:d1:1d:ea:f6:8a:ea:01:57:05:a4: fd:8a:0b:cb:a2:03:0e:02:c6:c7:da:17:de:37:82:7b:21:6c: 02:0d:62:14:68:83:66:bc:1c:43:a3:ee:29:0c:e8:14:14:e7: fb:6c:73:c7:2c:65:f9:fa:1b:b7:99:08:28:d5:4e:57:36:40: b7:0b:b1:7d:a5:0d:e1:2a:ac:f2:94:f7:63:e3:a0:fa:7f:fa: 4e:06:30:02:c8:37:c8:c4:6f:2f:bf:92:55:cb:61:d8:a7:18: 17:57:55:0c:37:2f:52:73:aa:ab:4f:22:c9:cc:f5:c8:f9:ba: 3e:1c:aa:49:39:61:ec:b2:ad:76:96:c6:4c:25:41:39:bf:0d: f9:df:89:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RTrVeOyaHRb8QdI2wHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZGM0MTY3NGQ2NWQyYWY5MTc0YjFhYmFjZTBiMzcxMzYy YjQ4NTEwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGY5MGNhMWMxMDg3ZmE2MDdiNTViZGU0MTUwODFiZjc0MGRkMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYRdBCPaYZOngM34VVu4SanDEI5E pujSTeRa8m4RFvP2r+6BuwPIso2vZg3ZfWz8zeKgTVwtxcqsRGzN6eM1hzIiu+0F A2ehc3ywf4NQ1IG/JuYXqVYuk2Cqr5xtjXTdZ85n/o1uCdsQRpEyPg9jgoenzLzK +9fm+zHQyvCilA09HF+xfQe+mGX3lukIp2gPerF1CKjtbrbDJu4jZJEdUOhbvjwd 9UgtNSl3lYcy3sz/cngFUazp42cVgiKTPnM5o7axre1YPXLICOshyM6/tSEBBT6y Jz3fRfpGXnBJzkvTVxhs6XA52xx3RQkN80P6edYrOcF3SlWNt0/6waP3OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBD5DKHBCH+mB7Vb3kFQgb90DdH0MB8GA1UdIwQY MBaAFFvcQWdNZdKvkXSxq6zgs3E2K0hRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWIt OWY2N2ZmNmFmZDUwLzEvRVBrTW9jRUlmNllIdFZ2ZVFWQ0J2M1FOMGZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWItOWY2N2ZmNmFmZDUw LzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFHyrAMA0G CSqGSIb3DQEBCwUAA4IBAQBP++s7Eh5TLvP9xdAZ6MyXpnZi6nIAfK3bZZdlUw1i MAEBFYNEaUnsAIu/oBohl8l2NmTQFmDhoNWPrXu51eunCJFxgqNs/kFboIor+QSi +Bt7IPIS5m2pyCVsod9Cwoz5wuL9r7rW7jui6JkAlDhdb3QWH9Ed6vaK6gFXBaT9 igvLogMOAsbH2hfeN4J7IWwCDWIUaINmvBxDo+4pDOgUFOf7bHPHLGX5+hu3mQgo 1U5XNkC3C7F9pQ3hKqzylPdj46D6f/pOBjACyDfIxG8vv5JVy2HYpxgXV1UMNy9S c6qrTyLJzPXI+bo+HKpJOWHssq12lsZMJUE5vw3534l9 -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:39 2026 by rpki-client