This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Oo1gTH_nt_2ixgBNaJd31MKJpHs.roa File: Oo1gTH_nt_2ixgBNaJd31MKJpHs.roa (raw, json) Hash identifier: yblPd9oTsFMJUw6X5sK/O/ZrMoG8WJS0eDiBJtfIAhI= Subject key identifier: 3A:8D:60:4C:7F:E7:B7:FD:A2:C6:00:4D:68:97:77:D4:C2:89:A4:7B Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB7016B80911677BC867B31F47152F Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Oo1gTH_nt_2ixgBNaJd31MKJpHs.roa Signing time: Fri 02 Jan 2026 08:20:42 +0000 ROA not before: Fri 02 Jan 2026 08:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 5.182.117.0/24 maxlen: 24 31.40.250.0/24 maxlen: 24 31.222.230.0/24 maxlen: 24 37.72.128.0/24 maxlen: 24 45.129.197.0/24 maxlen: 24 62.204.52.0/24 maxlen: 24 77.83.193.0/24 maxlen: 24 78.142.238.0/24 maxlen: 24 91.242.234.0/24 maxlen: 24 130.255.172.0/24 maxlen: 24 130.255.175.0/24 maxlen: 24 185.251.22.0/24 maxlen: 24 185.253.4.0/24 maxlen: 24 193.17.88.0/24 maxlen: 24 193.42.119.0/24 maxlen: 24 194.69.164.0/24 maxlen: 24 195.64.127.0/24 maxlen: 24 212.24.120.0/24 maxlen: 24 212.52.18.0/24 maxlen: 24 212.107.26.0/24 maxlen: 24 213.109.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:70:16:b8:09:11:67:7b:c8:67:b3:1f:47:15:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a8d604c7fe7b7fda2c6004d689777d4c289a47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:ed:40:21:a4:90:d4:a0:73:55:3d:cf:62: 73:47:60:c7:c6:e3:87:8e:9a:c0:09:d5:4d:f6:0c: 4b:79:93:25:ee:e0:be:f5:4b:e0:52:3e:a6:3a:23: 09:16:93:18:55:ac:ee:43:a5:6b:27:4d:b8:fe:bf: 48:dc:27:a2:e2:57:3a:c7:a3:3b:0f:41:53:f5:de: 3a:f8:e7:71:f7:1b:b4:0e:e6:31:5d:cc:48:e9:93: 36:15:8f:81:af:e9:04:c4:10:af:7d:fb:25:22:dc: 8a:3c:d7:75:62:dc:61:14:15:e3:d4:d8:ac:04:a1: f9:c0:fc:d1:66:b4:a6:ba:ee:3a:2f:d3:80:26:c4: 3a:ce:be:1c:b8:fd:6a:97:46:39:dc:71:97:04:ac: 2e:ad:12:85:44:fd:25:17:0f:c3:5d:e8:ea:58:19: 15:2e:37:54:c9:e1:aa:68:ba:53:31:a9:a8:f8:45: a4:ad:30:16:e8:33:57:c3:20:ed:8e:49:16:0a:3f: 1c:58:de:21:58:38:c4:6e:2f:88:1c:c4:d7:a9:df: f8:fb:7e:db:b3:75:45:0e:d4:dc:72:31:17:31:92: 50:91:60:c5:85:21:d1:e9:74:57:26:77:b1:44:94: 1e:c9:40:e1:28:cb:65:54:90:8b:52:8a:a0:17:b5: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:60:4C:7F:E7:B7:FD:A2:C6:00:4D:68:97:77:D4:C2:89:A4:7B X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Oo1gTH_nt_2ixgBNaJd31MKJpHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.117.0/24 31.40.250.0/24 31.222.230.0/24 37.72.128.0/24 45.129.197.0/24 62.204.52.0/24 77.83.193.0/24 78.142.238.0/24 91.242.234.0/24 130.255.172.0/24 130.255.175.0/24 185.251.22.0/24 185.253.4.0/24 193.17.88.0/24 193.42.119.0/24 194.69.164.0/24 195.64.127.0/24 212.24.120.0/24 212.52.18.0/24 212.107.26.0/24 213.109.153.0/24 Signature Algorithm: sha256WithRSAEncryption 08:57:b8:55:fa:e5:ea:4b:87:aa:cb:1e:b9:60:1e:51:e1:7d: 9a:2e:e9:85:82:86:a7:47:37:94:5f:16:35:2b:41:8c:13:ac: 38:7b:dc:a6:de:bc:ac:da:5f:cc:a6:9a:a7:73:46:74:1f:e2: 1b:6d:0c:c7:53:16:48:ba:15:2e:26:b9:3b:c2:6d:b5:57:ed: e7:58:86:23:c1:83:ab:60:6a:cc:09:d0:ab:47:65:ac:18:60: 21:28:35:6e:b3:a1:27:8e:0d:55:51:3c:71:33:49:48:93:61: 64:d2:67:cc:e1:21:66:13:70:c7:a4:29:24:36:99:9b:e3:99: b0:f8:c3:59:f5:22:5b:aa:74:40:0f:32:96:69:ba:76:b3:bf: a0:56:63:c3:80:c5:cc:dc:7a:52:9c:a1:c6:08:ba:14:87:16: 36:ca:e6:c2:dd:3d:a6:63:04:8d:a2:13:74:17:9e:de:f1:35: 75:8d:3c:83:e1:db:9c:43:c3:56:21:55:91:37:21:81:53:d9: 01:65:54:21:87:a1:cb:05:b2:96:ec:10:8b:3d:fc:94:49:76: 05:eb:b1:16:85:3c:dd:46:40:3e:96:fa:e1:9b:f9:39:95:3e: 1f:bf:8e:81:34:80:52:b4:d8:63:c8:b8:b0:7e:c0:76:bc:ec: 94:87:8e:4f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt9y3AWuAkRZ3vIZ7MfRxUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYThkNjA0YzdmZTdiN2ZkYTJjNjAwNGQ2ODk3NzdkNGMyODlhNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySvtQCGkkNSgc1U9z2JzR2DHxuOH jprACdVN9gxLeZMl7uC+9UvgUj6mOiMJFpMYVazuQ6VrJ024/r9I3Cei4lc6x6M7 D0FT9d46+Odx9xu0DuYxXcxI6ZM2FY+Br+kExBCvffslItyKPNd1YtxhFBXj1Nis BKH5wPzRZrSmuu46L9OAJsQ6zr4cuP1ql0Y53HGXBKwurRKFRP0lFw/DXejqWBkV LjdUyeGqaLpTMamo+EWkrTAW6DNXwyDtjkkWCj8cWN4hWDjEbi+IHMTXqd/4+37b s3VFDtTccjEXMZJQkWDFhSHR6XRXJnexRJQeyUDhKMtlVJCLUoqgF7Un/wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFDqNYEx/57f9osYATWiXd9TCiaR7MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvT28xZ1RIX250XzJpeGdCTmFKZDMxTUtKcEhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAAW2 dQMEAB8o+gMEAB/e5gMEACVIgAMEAC2BxQMEAD7MNAMEAE1TwQMEAE6O7gMEAFvy 6gMEAIL/rAMEAIL/rwMEALn7FgMEALn9BAMEAMERWAMEAMEqdwMEAMJFpAMEAMNA fwMEANQYeAMEANQ0EgMEANRrGgMEANVtmTANBgkqhkiG9w0BAQsFAAOCAQEACFe4 Vfrl6kuHqsseuWAeUeF9mi7phYKGp0c3lF8WNStBjBOsOHvcpt68rNpfzKaap3NG dB/iG20Mx1MWSLoVLia5O8JttVft51iGI8GDq2BqzAnQq0dlrBhgISg1brOhJ44N VVE8cTNJSJNhZNJnzOEhZhNwx6QpJDaZm+OZsPjDWfUiW6p0QA8ylmm6drO/oFZj w4DFzNx6Upyhxgi6FIcWNsrmwt09pmMEjaITdBee3vE1dY08g+HbnEPDViFVkTch gVPZAWVUIYehywWyluwQiz38lEl2BeuxFoU83UZAPpb64Zv5OZU+H7+OgTSAUrTY Y8i4sH7AdrzslIeOTw== -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:05 2026 by rpki-client