This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/V7t9HoQFq6tA2kgolQRcRfuRldU.roa File: V7t9HoQFq6tA2kgolQRcRfuRldU.roa (raw, json) Hash identifier: hielByb8U0KHIxejo6mEN1esKRKu+XesjxBKkhAqRLc= Subject key identifier: 57:BB:7D:1E:84:05:AB:AB:40:DA:48:28:95:04:5C:45:FB:91:95:D5 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E3923C2F816BF9775AF1C3596983F8E Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/V7t9HoQFq6tA2kgolQRcRfuRldU.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18530 IP address blocks: 31.13.214.0/24 maxlen: 24 37.60.142.0/24 maxlen: 24 37.61.225.0/24 maxlen: 24 37.61.230.0/24 maxlen: 24 46.243.160.0/24 maxlen: 24 87.120.58.0/24 maxlen: 24 87.120.62.0/24 maxlen: 24 87.120.247.0/24 maxlen: 24 87.121.102.0/24 maxlen: 24 93.123.25.0/24 maxlen: 24 93.123.111.0/24 maxlen: 24 94.156.40.0/23 maxlen: 23 94.156.43.0/24 maxlen: 24 94.156.62.0/23 maxlen: 23 94.156.132.0/23 maxlen: 23 94.156.145.0/24 maxlen: 24 94.156.224.0/23 maxlen: 23 158.120.252.0/23 maxlen: 23 188.212.110.0/24 maxlen: 24 192.175.2.0/24 maxlen: 24 198.160.152.0/24 maxlen: 24 203.17.237.0/24 maxlen: 24 203.25.139.0/24 maxlen: 24 203.78.161.0/24 maxlen: 24 203.78.163.0/24 maxlen: 24 203.78.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:c2:f8:16:bf:97:75:af:1c:35:96:98:3f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57bb7d1e8405abab40da482895045c45fb9195d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:6a:1e:63:93:bb:41:2a:5f:fe:1a:94:c1: 18:f7:e2:99:91:78:d1:77:71:93:1e:e3:81:7f:5a: 5d:f9:6c:7a:29:5e:96:32:46:96:c0:ff:c6:d7:fe: e1:43:f5:ca:e9:bb:61:f5:b2:d2:b1:a9:5e:ea:fa: 72:98:ba:72:23:0e:c6:99:61:1d:68:78:66:64:72: 55:94:f3:28:a3:86:7b:cf:bd:fc:2a:3a:d2:0d:9e: 0e:8a:ef:ae:74:45:04:7f:a4:ea:73:75:82:61:e9: b6:76:5b:df:4f:a8:8b:a9:32:c1:18:16:ec:f8:62: f5:89:68:0a:73:3b:9c:4c:1f:65:40:d9:08:d2:d2: ea:27:f6:81:8d:40:3c:4b:6a:9b:37:dd:82:1e:79: 03:47:d0:8d:56:9a:ff:45:81:98:dd:95:0f:91:8f: 7c:7f:e2:ba:49:bb:44:2c:17:47:74:c6:67:54:65: 9b:c3:18:ce:b9:ff:b6:4e:3b:4a:fe:32:e5:18:d3: 60:ae:06:1c:01:6f:77:eb:31:77:b7:38:96:88:91: a5:ea:36:fb:dd:6d:f3:34:c0:4e:6d:5a:8b:2f:90: 8a:34:64:54:03:9f:ed:92:9d:55:84:87:c3:81:97: 09:71:2f:c4:15:be:9d:c8:6d:e9:99:29:b3:d2:f2: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BB:7D:1E:84:05:AB:AB:40:DA:48:28:95:04:5C:45:FB:91:95:D5 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/V7t9HoQFq6tA2kgolQRcRfuRldU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.214.0/24 37.60.142.0/24 37.61.225.0/24 37.61.230.0/24 46.243.160.0/24 87.120.58.0/24 87.120.62.0/24 87.120.247.0/24 87.121.102.0/24 93.123.25.0/24 93.123.111.0/24 94.156.40.0/23 94.156.43.0/24 94.156.62.0/23 94.156.132.0/23 94.156.145.0/24 94.156.224.0/23 158.120.252.0/23 188.212.110.0/24 192.175.2.0/24 198.160.152.0/24 203.17.237.0/24 203.25.139.0/24 203.78.161.0/24 203.78.163.0-203.78.164.255 Signature Algorithm: sha256WithRSAEncryption 3f:93:0c:a6:81:93:95:6c:6d:f7:d1:5e:32:96:22:ea:24:ee: 09:7c:d0:ba:05:c0:15:da:a1:8d:e9:78:c7:21:e9:86:62:61: ae:ce:89:96:b1:7b:ed:00:91:29:77:1e:f7:06:fe:11:3b:82: cc:9b:6c:06:89:2b:af:18:56:d8:60:ce:a6:23:db:e1:8a:78: 4a:50:3e:47:17:ca:ca:f0:05:9c:2b:bf:32:1a:29:0f:44:05: ad:21:e5:a1:83:c9:a1:77:42:fc:44:18:e2:01:ec:e7:14:26: 16:10:70:90:a5:8d:34:05:8e:b8:9d:78:cf:d7:c5:56:7e:73: c3:5b:07:f6:92:c4:0b:b8:f4:db:ed:3b:7a:7c:45:1f:2b:1b: 35:79:97:8a:aa:ea:c0:0b:58:45:93:52:05:a3:3f:60:8d:fb: 40:e7:2b:49:a5:e2:e1:a5:4f:c7:37:09:09:a8:01:69:bd:cd: ca:4d:b2:33:01:4e:5b:28:6b:0e:5e:62:24:37:ee:23:f4:57: a3:a4:37:17:76:58:5a:26:15:4c:e9:05:ac:fa:90:ea:4b:be: 6f:0f:ad:03:76:c2:2a:a8:38:a2:dc:db:4b:5d:4b:fa:d3:bb: b2:fb:ef:ac:6d:f7:24:59:9c:b9:86:17:16:b4:88:74:0c:91: e5:55:f1:19 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+OSPC+Ba/l3WvHDWWmD+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2JiN2QxZTg0MDVhYmFiNDBkYTQ4Mjg5NTA0NWM0NWZiOTE5NWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuJqHmOTu0EqX/4alMEY9+KZkXjR d3GTHuOBf1pd+Wx6KV6WMkaWwP/G1/7hQ/XK6bth9bLSsale6vpymLpyIw7GmWEd aHhmZHJVlPMoo4Z7z738KjrSDZ4Oiu+udEUEf6Tqc3WCYem2dlvfT6iLqTLBGBbs +GL1iWgKczucTB9lQNkI0tLqJ/aBjUA8S2qbN92CHnkDR9CNVpr/RYGY3ZUPkY98 f+K6SbtELBdHdMZnVGWbwxjOuf+2TjtK/jLlGNNgrgYcAW936zF3tziWiJGl6jb7 3W3zNMBObVqLL5CKNGRUA5/tkp1VhIfDgZcJcS/EFb6dyG3pmSmz0vLVfwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFFe7fR6EBaurQNpIKJUEXEX7kZXVMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvVjd0OUhvUUZxNnRBMmtnb2xRUmNSZnVSbGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAAf DdYDBAAlPI4DBAAlPeEDBAAlPeYDBAAu86ADBABXeDoDBABXeD4DBABXePcDBABX eWYDBABdexkDBABde28DBAFenCgDBABenCsDBAFenD4DBAFenIQDBABenJEDBAFe nOADBAGeePwDBAC81G4DBADArwIDBADGoJgDBADLEe0DBADLGYsDBADLTqEwDAME AMtOowMEAMtOpDANBgkqhkiG9w0BAQsFAAOCAQEAP5MMpoGTlWxt99FeMpYi6iTu CXzQugXAFdqhjel4xyHphmJhrs6JlrF77QCRKXce9wb+ETuCzJtsBokrrxhW2GDO piPb4Yp4SlA+RxfKyvAFnCu/MhopD0QFrSHloYPJoXdC/EQY4gHs5xQmFhBwkKWN NAWOuJ14z9fFVn5zw1sH9pLEC7j02+07enxFHysbNXmXiqrqwAtYRZNSBaM/YI37 QOcrSaXi4aVPxzcJCagBab3Nyk2yMwFOWyhrDl5iJDfuI/RXo6Q3F3ZYWiYVTOkF rPqQ6ku+bw+tA3bCKqg4otzbS11L+tO7svvvrG33JFmcuYYXFrSIdAyR5VXxGQ== -----END CERTIFICATE-----Generated at Fri Jan 9 18:41:48 2026 by rpki-client