This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/c-F07oW418TCkLIDuM4bPsepLlw.roa File: c-F07oW418TCkLIDuM4bPsepLlw.roa (raw, json) Hash identifier: HiwmaaNLgIsPLCrsmNEOGqUJ63k1RwsqFon6JmR4rWk= Subject key identifier: 73:E1:74:EE:85:B8:D7:C4:C2:90:B2:03:B8:CE:1B:3E:C7:A9:2E:5C Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Certificate serial: 019B7EA75BF818F76F7F868964656D3B8FF8 Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/c-F07oW418TCkLIDuM4bPsepLlw.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21107 IP address blocks: 31.223.208.0/20 maxlen: 20 31.223.223.0/24 maxlen: 24 62.68.96.0/19 maxlen: 19 62.68.96.0/20 maxlen: 20 62.68.112.0/20 maxlen: 20 79.142.180.0/22 maxlen: 22 79.143.160.0/20 maxlen: 20 80.242.112.0/20 maxlen: 20 92.241.128.0/19 maxlen: 19 92.241.143.0/24 maxlen: 24 92.241.144.0/24 maxlen: 24 93.180.144.0/21 maxlen: 21 134.90.128.0/21 maxlen: 21 185.32.175.0/24 maxlen: 24 185.36.84.0/22 maxlen: 22 185.39.0.0/22 maxlen: 22 185.187.4.0/22 maxlen: 22 188.124.192.0/19 maxlen: 19 188.124.192.0/20 maxlen: 20 188.124.208.0/20 maxlen: 20 188.246.64.0/19 maxlen: 19 188.246.64.0/20 maxlen: 20 188.246.80.0/20 maxlen: 20 194.41.40.0/22 maxlen: 22 213.91.72.0/21 maxlen: 21 213.91.80.0/20 maxlen: 20 217.23.192.0/20 maxlen: 20 217.23.194.0/24 maxlen: 24 217.23.196.0/24 maxlen: 24 217.23.199.0/24 maxlen: 24 217.71.49.0/24 maxlen: 24 217.71.50.0/23 maxlen: 23 217.71.52.0/22 maxlen: 22 2a00:1a98::/32 maxlen: 32 2a00:1a98::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5b:f8:18:f7:6f:7f:86:89:64:65:6d:3b:8f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73e174ee85b8d7c4c290b203b8ce1b3ec7a92e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:76:f2:01:2d:12:ad:32:45:42:6a:76:81: 60:bf:9c:d4:f7:5d:ee:75:f8:b6:b1:9c:1f:7c:5d: c1:d6:b5:00:8d:a8:b1:1a:f9:e3:5f:22:0e:85:10: d3:3f:2f:0e:44:a1:9a:2a:fb:90:cc:f1:c3:a5:60: 12:a2:58:d2:a7:48:2f:83:61:f9:4f:da:59:20:7b: 38:bb:11:6a:e3:87:03:4b:2e:ab:6c:eb:d7:06:9d: c6:5d:51:d8:cb:e2:66:c4:9f:28:79:87:6d:ca:53: 66:06:ab:fb:1f:ee:15:d9:11:72:ea:d5:ab:84:b4: e2:48:92:52:91:df:f5:f1:cc:35:1e:71:8a:31:3a: b6:03:0f:d1:8c:ef:a0:b3:28:17:a5:20:47:b1:fe: be:8e:d5:12:a9:98:da:87:5e:2b:f4:21:3f:82:87: a5:59:0c:bd:82:4f:5c:09:1e:fa:79:36:ec:7e:a1: 46:15:21:34:e6:f7:63:ac:14:41:ba:37:34:1f:48: d5:47:44:a7:ad:2d:cf:7a:c3:37:21:a6:98:3c:64: db:32:ec:4f:e3:4b:11:b8:6d:80:cf:54:02:c7:d1: 60:b0:4a:4f:87:bb:b1:d2:7c:cf:e8:a8:91:87:02: 1e:5b:4b:7f:07:a4:71:12:74:73:88:63:e0:a3:bb: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E1:74:EE:85:B8:D7:C4:C2:90:B2:03:B8:CE:1B:3E:C7:A9:2E:5C X509v3 Authority Key Identifier: keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/c-F07oW418TCkLIDuM4bPsepLlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.208.0/20 62.68.96.0/19 79.142.180.0/22 79.143.160.0/20 80.242.112.0/20 92.241.128.0/19 93.180.144.0/21 134.90.128.0/21 185.32.175.0/24 185.36.84.0/22 185.39.0.0/22 185.187.4.0/22 188.124.192.0/19 188.246.64.0/19 194.41.40.0/22 213.91.72.0-213.91.95.255 217.23.192.0/20 217.71.49.0-217.71.55.255 IPv6: 2a00:1a98::/32 Signature Algorithm: sha256WithRSAEncryption 2d:db:77:9e:8d:10:a8:61:ff:6a:39:0c:d7:67:80:79:3a:56: de:e5:63:1b:5b:9a:59:32:09:e7:1d:52:5a:ca:ab:16:95:91: 5c:ce:b2:14:03:05:06:d2:73:14:18:52:4a:bf:c0:11:4b:91: 2d:47:76:6d:1a:33:ef:ea:cc:22:dc:4a:05:a4:7e:96:69:00: ee:b3:b1:f8:0d:d3:29:b1:da:63:8c:65:a9:23:c9:ee:9a:e9: ad:5b:09:62:d0:74:d5:a0:ca:88:51:a9:1d:c4:d0:4c:0b:e3: de:97:cc:c2:db:9a:a4:96:78:db:93:c5:bd:64:28:0f:98:4b: f7:fd:76:5f:47:5f:b9:4f:8b:df:25:1e:84:17:c9:c1:f6:c0: 52:d0:76:dc:bd:4a:50:14:92:f0:e5:f0:d1:dd:8d:ba:55:ae: 38:f1:b3:99:31:2b:39:d8:83:5e:6d:b8:23:73:dc:f7:8f:0f: 00:3e:e7:e0:e7:bd:22:cf:69:0f:91:3c:a1:82:99:d7:48:e7: 02:a9:1d:23:bc:97:67:21:68:4b:58:b2:6e:e4:a9:76:04:ee: bc:87:fc:1d:ea:6f:bd:e2:0f:25:1c:3b:4c:19:0f:80:36:51: eb:fa:59:af:dc:f2:d5:af:e0:d0:be:60:96:18:d6:c6:07:19: 43:ea:93:d5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt+p1v4GPdvf4aJZGVtO4/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm ZDRiMDEwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2UxNzRlZTg1YjhkN2M0YzI5MGIyMDNiOGNlMWIzZWM3YTkyZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAJ28gEtEq0yRUJqdoFgv5zU913u dfi2sZwffF3B1rUAjaixGvnjXyIOhRDTPy8ORKGaKvuQzPHDpWASoljSp0gvg2H5 T9pZIHs4uxFq44cDSy6rbOvXBp3GXVHYy+JmxJ8oeYdtylNmBqv7H+4V2RFy6tWr hLTiSJJSkd/18cw1HnGKMTq2Aw/RjO+gsygXpSBHsf6+jtUSqZjah14r9CE/goel WQy9gk9cCR76eTbsfqFGFSE05vdjrBRBujc0H0jVR0SnrS3PesM3IaaYPGTbMuxP 40sRuG2Az1QCx9FgsEpPh7ux0nzP6KiRhwIeW0t/B6RxEnRziGPgo7vIWwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFHPhdO6FuNfEwpCyA7jOGz7HqS5cMB8GA1UdIwQY MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt MDQ2MmI2NDg0ZDYwLzEvYy1GMDdvVzQxOFRDa0xJRHVNNGJQc2VwTGx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBggQCAAEwfAMEBB/f 0AMEBT5EYAMEAk+OtAMEBE+PoAMEBFDycAMEBVzxgAMEA120kAMEA4ZagAMEALkg rwMEArkkVAMEArknAAMEArm7BAMEBbx8wAMEBbz2QAMEAsIpKDAMAwQD1VtIAwQF 1VtAAwQE2RfAMAwDBADZRzEDBAPZRzAwDQQCAAIwBwMFACoAGpgwDQYJKoZIhvcN AQELBQADggEBAC3bd56NEKhh/2o5DNdngHk6Vt7lYxtbmlkyCecdUlrKqxaVkVzO shQDBQbScxQYUkq/wBFLkS1Hdm0aM+/qzCLcSgWkfpZpAO6zsfgN0ymx2mOMZakj ye6a6a1bCWLQdNWgyohRqR3E0EwL496XzMLbmqSWeNuTxb1kKA+YS/f9dl9HX7lP i98lHoQXycH2wFLQdty9SlAUkvDl8NHdjbpVrjjxs5kxKznYg15tuCNz3PePDwA+ 5+DnvSLPaQ+RPKGCmddI5wKpHSO8l2chaEtYsm7kqXYE7ryH/B3qb73iDyUcO0wZ D4A2Uev6Wa/c8tWv4NC+YJYY1sYHGUPqk9U= -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:31 2026 by rpki-client