This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/lAOACP6fIFrSs106QfV9vDc0Enk.roa File: lAOACP6fIFrSs106QfV9vDc0Enk.roa (raw, json) Hash identifier: rcK1+vZOHdd9T291evHaFUXPt0RJ4Nnm4VGGlDkZdbU= Subject key identifier: 94:03:80:08:FE:9F:20:5A:D2:B3:5D:3A:41:F5:7D:BC:37:34:12:79 Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Certificate serial: 019B7910AE7C4AF891BBFB1908D09F080237 Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/lAOACP6fIFrSs106QfV9vDc0Enk.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8585 IP address blocks: 31.204.192.0/18 maxlen: 18 37.122.160.0/19 maxlen: 19 46.33.192.0/19 maxlen: 19 46.33.192.0/22 maxlen: 22 46.33.196.0/24 maxlen: 24 46.33.197.0/24 maxlen: 24 46.33.198.0/24 maxlen: 24 46.33.199.0/24 maxlen: 24 46.161.64.0/18 maxlen: 18 46.161.76.0/22 maxlen: 22 77.222.0.0/19 maxlen: 19 78.155.32.0/19 maxlen: 19 85.94.96.0/19 maxlen: 19 95.155.0.0/18 maxlen: 18 109.228.64.0/18 maxlen: 18 195.66.160.0/19 maxlen: 19 195.66.164.0/24 maxlen: 24 195.66.166.0/24 maxlen: 24 195.66.167.0/24 maxlen: 24 195.66.180.0/24 maxlen: 24 195.66.189.0/24 maxlen: 24 213.149.96.0/19 maxlen: 19 2a00:fe80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ae:7c:4a:f8:91:bb:fb:19:08:d0:9f:08:02:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94038008fe9f205ad2b35d3a41f57dbc37341279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:09:28:ae:f8:29:b0:28:7f:d5:b0:02:51: 3c:85:bf:5f:d9:14:b4:33:34:93:f6:03:7f:c2:0f: 0f:16:f4:c0:5b:e0:79:d3:13:eb:b5:33:bf:4b:6a: e1:2d:64:89:9f:72:54:af:71:90:68:0e:c8:36:1f: df:ca:6b:8f:d0:ae:9b:0f:92:a9:b9:15:91:48:13: 69:e2:27:94:af:e9:14:db:06:d4:05:6d:dd:a5:96: a8:4d:d7:94:f2:41:ac:41:6b:6c:57:95:e5:c6:b4: a3:de:94:ec:76:66:70:77:5d:5e:9b:21:61:46:2f: c0:be:31:85:5f:15:8e:56:ca:70:b5:31:19:ef:0b: a3:9c:1f:2e:3c:2f:82:18:af:89:fa:d5:73:f7:1f: d0:32:7a:3c:f6:cb:a1:9f:5f:c9:cb:f4:49:1e:64: de:1f:73:7b:3f:11:bf:86:c1:36:62:0d:c1:dd:6d: f8:23:5a:10:f9:8c:d6:65:bf:9f:3d:17:c2:0a:ec: 0a:ae:cb:0d:0e:19:0a:52:a9:d7:ea:db:29:54:a2: 55:62:61:13:d7:3c:e8:17:28:1c:de:14:0f:ca:4a: 41:30:79:38:b0:8a:df:05:a7:19:67:b8:cf:95:9d: 31:a1:dc:21:8b:21:88:93:68:7a:7c:87:8f:51:dd: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:03:80:08:FE:9F:20:5A:D2:B3:5D:3A:41:F5:7D:BC:37:34:12:79 X509v3 Authority Key Identifier: keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/lAOACP6fIFrSs106QfV9vDc0Enk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.204.192.0/18 37.122.160.0/19 46.33.192.0/19 46.161.64.0/18 77.222.0.0/19 78.155.32.0/19 85.94.96.0/19 95.155.0.0/18 109.228.64.0/18 195.66.160.0/19 213.149.96.0/19 IPv6: 2a00:fe80::/32 Signature Algorithm: sha256WithRSAEncryption 98:0c:e0:20:6e:c3:ef:bc:0c:ea:ca:be:39:c3:3c:f9:3c:ad: a8:c6:c2:2f:30:73:60:4c:72:63:9b:39:12:34:4b:af:1f:54: fe:15:8a:fe:62:dd:c3:be:89:a4:80:bb:20:9e:f1:46:fd:a6: 48:fd:d2:fa:bc:02:c5:18:1e:9b:1b:ad:91:7e:19:fc:a9:3a: 3c:77:08:d4:20:0a:d1:8a:32:0e:a6:f1:ba:18:3b:97:b5:4d: 17:fe:7a:fb:50:14:92:b3:28:40:43:1a:84:62:e9:94:47:0e: 8a:64:34:90:26:63:62:99:41:10:74:d0:26:19:ae:b6:31:a0: 02:d2:96:e7:aa:4b:50:f0:53:d0:ba:fd:40:ac:dd:d4:da:19: 14:91:ce:d6:26:1f:91:ba:fb:6b:11:84:a6:36:b5:65:3e:2e: bf:55:5b:64:5f:6d:c6:e7:15:60:6e:ae:3d:e5:29:7b:47:7a: 2a:b8:bd:66:bf:70:12:c5:0e:d4:a5:90:77:77:41:15:c3:be: 70:cd:7b:e1:6f:b8:71:3a:05:c1:bf:08:ee:bf:ab:40:5e:5e: 36:06:d9:e9:9d:76:7c:50:d1:23:bf:b9:4e:03:0f:bf:8c:df: fe:3b:0c:99:a2:90:18:2a:81:21:b9:cc:11:43:07:30:77:7d: 01:43:2f:35 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt5EK58SviRu/sZCNCfCAI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2E5MTdkZGNmYzI2ZThjODdiMzA4NThiNmYwN2YyOWEz ZGI0M2UwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDAzODAwOGZlOWYyMDVhZDJiMzVkM2E0MWY1N2RiYzM3MzQxMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveYJKK74KbAof9WwAlE8hb9f2RS0 MzST9gN/wg8PFvTAW+B50xPrtTO/S2rhLWSJn3JUr3GQaA7INh/fymuP0K6bD5Kp uRWRSBNp4ieUr+kU2wbUBW3dpZaoTdeU8kGsQWtsV5XlxrSj3pTsdmZwd11emyFh Ri/AvjGFXxWOVspwtTEZ7wujnB8uPC+CGK+J+tVz9x/QMno89suhn1/Jy/RJHmTe H3N7PxG/hsE2Yg3B3W34I1oQ+YzWZb+fPRfCCuwKrssNDhkKUqnX6tspVKJVYmET 1zzoFygc3hQPykpBMHk4sIrfBacZZ7jPlZ0xodwhiyGIk2h6fIePUd2hBQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFJQDgAj+nyBa0rNdOkH1fbw3NBJ5MB8GA1UdIwQY MBaAFEp6kX3c/CboyHswhYtvB/KaPbQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODIt ODIwMTZkZTQyMjEyLzEvbEFPQUNQNmZJRnJTczEwNlFmVjl2RGMwRW5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODItODIwMTZkZTQyMjEy LzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQGH8zAAwQF JXqgAwQFLiHAAwQGLqFAAwQFTd4AAwQFTpsgAwQFVV5gAwQGX5sAAwQGbeRAAwQF w0KgAwQF1ZVgMA0EAgACMAcDBQAqAP6AMA0GCSqGSIb3DQEBCwUAA4IBAQCYDOAg bsPvvAzqyr45wzz5PK2oxsIvMHNgTHJjmzkSNEuvH1T+FYr+Yt3DvomkgLsgnvFG /aZI/dL6vALFGB6bG62Rfhn8qTo8dwjUIArRijIOpvG6GDuXtU0X/nr7UBSSsyhA QxqEYumURw6KZDSQJmNimUEQdNAmGa62MaAC0pbnqktQ8FPQuv1ArN3U2hkUkc7W Jh+RuvtrEYSmNrVlPi6/VVtkX23G5xVgbq495Sl7R3oquL1mv3ASxQ7UpZB3d0EV w75wzXvhb7hxOgXBvwjuv6tAXl42BtnpnXZ8UNEjv7lOAw+/jN/+OwyZopAYKoEh ucwRQwcwd30BQy81 -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:35 2026 by rpki-client