This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/joOy9zn86SRS3S0JJdQNk7WRD1s.roa File: joOy9zn86SRS3S0JJdQNk7WRD1s.roa (raw, json) Hash identifier: 6Lg/ZII9MO/NUIL4lYaxUeR/rqOY01y6TRhSs+4wA6A= Subject key identifier: 8E:83:B2:F7:39:FC:E9:24:52:DD:2D:09:25:D4:0D:93:B5:91:0F:5B Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Certificate serial: 019B7AC86E7FAA68BE8E1E5F41288C429341 Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/joOy9zn86SRS3S0JJdQNk7WRD1s.roa Signing time: Thu 01 Jan 2026 18:18:34 +0000 ROA not before: Thu 01 Jan 2026 18:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39783 IP address blocks: 31.24.128.0/21 maxlen: 21 46.226.8.0/21 maxlen: 21 62.122.248.0/21 maxlen: 21 81.27.32.0/20 maxlen: 20 91.189.168.0/21 maxlen: 21 91.189.168.0/24 maxlen: 24 91.192.220.0/22 maxlen: 22 178.21.128.0/21 maxlen: 21 185.7.60.0/22 maxlen: 22 185.35.184.0/22 maxlen: 22 193.93.220.0/22 maxlen: 22 2a02:2690::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6e:7f:aa:68:be:8e:1e:5f:41:28:8c:42:93:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e83b2f739fce92452dd2d0925d40d93b5910f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:62:c3:91:f7:36:f1:ce:b8:15:21:c5:7d:50: 46:a7:c7:7b:9c:1c:e7:3b:ee:e6:71:7c:5a:a5:cd: fc:c6:c7:c7:b0:ff:55:d0:6c:55:5c:29:de:bd:44: a3:b6:ea:28:8b:ae:0f:f9:2e:75:0e:e9:e4:4b:bd: 77:4d:63:a2:1a:d7:79:91:ef:59:0a:f3:99:3b:6f: 1a:82:2b:8b:71:69:0a:64:df:c4:c4:95:56:2d:74: 17:62:9b:b7:b0:83:9a:24:70:e7:56:b6:a3:b3:88: 65:0d:f0:48:f7:3d:76:bf:6f:82:a0:a9:14:d8:58: 2c:55:a2:ab:bb:22:1c:5c:95:76:c4:55:54:09:db: 96:28:91:28:9a:4e:b4:4b:66:a2:b1:72:e8:39:98: 18:82:6b:d9:20:bc:2a:39:6a:c8:00:94:3e:06:a5: 85:8d:a8:13:aa:32:e1:59:32:3a:e2:f4:02:41:13: ab:5a:7a:b3:17:aa:2f:bd:9a:12:7f:d1:33:39:2c: b9:7f:97:cc:59:58:21:03:7b:de:88:82:9e:73:d7: 6e:71:70:26:d0:f3:20:1f:86:e4:0a:76:28:9e:e3: d9:02:26:c4:8f:d2:12:3a:4d:58:d7:a9:39:a7:9d: b7:05:89:e1:68:26:b0:19:47:20:02:85:d3:63:d6: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:83:B2:F7:39:FC:E9:24:52:DD:2D:09:25:D4:0D:93:B5:91:0F:5B X509v3 Authority Key Identifier: keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/joOy9zn86SRS3S0JJdQNk7WRD1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.128.0/21 46.226.8.0/21 62.122.248.0/21 81.27.32.0/20 91.189.168.0/21 91.192.220.0/22 178.21.128.0/21 185.7.60.0/22 185.35.184.0/22 193.93.220.0/22 IPv6: 2a02:2690::/32 Signature Algorithm: sha256WithRSAEncryption 6b:a9:1c:30:20:bf:4f:04:55:8d:0e:a7:2c:be:6c:90:95:03: e8:6f:bd:c0:c4:0b:1b:2e:92:1b:e0:35:b3:ca:bf:c7:a3:ea: ab:84:bb:d9:b6:18:83:9e:b7:1a:d7:cf:a3:6a:7d:84:30:28: 77:6c:dd:61:5b:88:76:6f:1e:ca:a0:b6:fd:6c:9d:0f:76:37: d9:40:ec:f5:a2:a6:95:ad:ee:9c:7f:bc:93:7b:c1:84:21:2a: 66:86:69:f5:93:b5:12:c7:39:74:e6:1e:ee:d3:a4:8e:18:ac: 44:3a:a6:f0:5f:5f:57:a6:77:60:02:40:58:20:42:d1:7e:2b: e9:80:f4:89:d8:12:f8:50:87:33:0f:ea:29:90:f7:75:8d:6a: 1c:fa:ea:dd:58:0b:d7:cb:50:ab:ef:d8:06:eb:de:6d:03:4f: 13:b3:68:cb:3f:7c:d9:49:74:7d:c9:69:2a:e4:df:4f:ba:a8: 52:4b:77:52:cc:ad:4d:69:4a:a6:92:3e:3b:f7:c3:c9:c4:4d: 7e:2c:1c:83:e2:da:d2:73:ba:a4:de:e9:01:aa:fb:cd:19:b9: 04:8f:9c:86:66:2b:d6:fe:08:84:95:6c:ae:99:2f:d4:9e:b6: 82:20:df:fe:af:91:9d:d7:09:68:0d:b0:6b:42:6e:88:8f:71: e6:6f:b1:0f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt6yG5/qmi+jh5fQSiMQpNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjRkYjFkY2YwYzI0MjllMTIxNTE2YWUyNzkyZmMzMjUz ZmQzYmEwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTgzYjJmNzM5ZmNlOTI0NTJkZDJkMDkyNWQ0MGQ5M2I1OTEwZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72LDkfc28c64FSHFfVBGp8d7nBzn O+7mcXxapc38xsfHsP9V0GxVXCnevUSjtuooi64P+S51DunkS713TWOiGtd5ke9Z CvOZO28agiuLcWkKZN/ExJVWLXQXYpu3sIOaJHDnVrajs4hlDfBI9z12v2+CoKkU 2FgsVaKruyIcXJV2xFVUCduWKJEomk60S2aisXLoOZgYgmvZILwqOWrIAJQ+BqWF jagTqjLhWTI64vQCQROrWnqzF6ovvZoSf9EzOSy5f5fMWVghA3veiIKec9ducXAm 0PMgH4bkCnYonuPZAibEj9ISOk1Y16k5p523BYnhaCawGUcgAoXTY9aGiQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFI6Dsvc5/OkkUt0tCSXUDZO1kQ9bMB8GA1UdIwQY MBaAFAMk2x3PDCQp4SFRauJ5L8MlP9O6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUt NGQyYzRkYTcyMWQ0LzEvam9PeTl6bjg2U1JTM1MwSkpkUU5rN1dSRDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85MGY5NDItNjUxMS00MDU0LTk0YmUtNGQyYzRkYTcyMWQ0 LzEvQXlUYkhjOE1KQ25oSVZGcTRua3Z3eVVfMDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDHxiAAwQD LuIIAwQDPnr4AwQEURsgAwQDW72oAwQCW8DcAwQDshWAAwQCuQc8AwQCuSO4AwQC wV3cMA0EAgACMAcDBQAqAiaQMA0GCSqGSIb3DQEBCwUAA4IBAQBrqRwwIL9PBFWN DqcsvmyQlQPob73AxAsbLpIb4DWzyr/Ho+qrhLvZthiDnrca18+jan2EMCh3bN1h W4h2bx7KoLb9bJ0PdjfZQOz1oqaVre6cf7yTe8GEISpmhmn1k7USxzl05h7u06SO GKxEOqbwX19XpndgAkBYIELRfivpgPSJ2BL4UIczD+opkPd1jWoc+urdWAvXy1Cr 79gG695tA08Ts2jLP3zZSXR9yWkq5N9PuqhSS3dSzK1NaUqmkj4798PJxE1+LByD 4trSc7qk3ukBqvvNGbkEj5yGZivW/giElWyumS/UnraCIN/+r5Gd1wloDbBrQm6I j3Hmb7EP -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:25 2026 by rpki-client