This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/vw7gHWfBBupEylKbz5KlpmkColQ.roa File: vw7gHWfBBupEylKbz5KlpmkColQ.roa (raw, json) Hash identifier: nY95hIWpw8rUaH69ugJhCtRUoPs5WzlykHcCc1XaBg4= Subject key identifier: BF:0E:E0:1D:67:C1:06:EA:44:CA:52:9B:CF:92:A5:A6:69:02:A2:54 Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Certificate serial: 019B7EA57D0931AE71D6EDD59C2BDC42B82B Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/vw7gHWfBBupEylKbz5KlpmkColQ.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48108 IP address blocks: 31.222.227.0/24 maxlen: 24 176.53.146.0/23 maxlen: 23 185.235.230.0/24 maxlen: 24 2001:678:e30::/48 maxlen: 48 2a0a:2e80::/32 maxlen: 32 2a0a:2e81::/32 maxlen: 32 2a0a:2e81::/36 maxlen: 36 2a0a:2e82::/32 maxlen: 32 2a11:7e40::/48 maxlen: 48 2a11:7e40:1::/48 maxlen: 48 2a11:7e40:2::/48 maxlen: 48 2a11:7e40:3::/48 maxlen: 48 2a11:7e40:4::/48 maxlen: 48 2a11:7e46::/32 maxlen: 32 2a11:7e47:1000::/48 maxlen: 48 2a11:7e47:2000::/48 maxlen: 48 2a11:7e47:3000::/48 maxlen: 48 2a11:7e47:4000::/48 maxlen: 48 2a11:7e47:5000::/48 maxlen: 48 2a11:7e47:6000::/48 maxlen: 48 2a11:7e47:7000::/48 maxlen: 48 2a11:7e47:8000::/48 maxlen: 48 2a11:7e47:9000::/48 maxlen: 48 2a11:7e47:a000::/48 maxlen: 48 2a11:7e47:b000::/48 maxlen: 48 2a11:8480::/32 maxlen: 32 2a11:8481::/32 maxlen: 32 2a11:8482::/32 maxlen: 32 2a11:8485::/32 maxlen: 32 2a12:6702::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7d:09:31:ae:71:d6:ed:d5:9c:2b:dc:42:b8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf0ee01d67c106ea44ca529bcf92a5a66902a254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:b7:b4:f0:03:53:05:3e:c6:8f:e1:9b:74: 3d:72:fe:4d:d8:15:17:f2:c2:b5:21:43:90:d0:30: b0:67:ea:68:ea:dd:0f:56:6e:5e:32:03:54:65:66: 13:1c:19:42:d9:59:f7:78:59:34:78:4a:88:1f:11: 2d:1f:81:5e:3f:1e:8d:0c:5d:50:a0:c5:af:ef:0c: d0:72:68:52:77:a0:c3:e6:05:36:80:fb:2f:00:56: 4b:d4:6a:75:cc:07:74:15:1f:7a:88:82:75:bf:6e: 1f:9f:13:31:29:a2:40:65:cc:3b:8e:03:75:d8:4f: 62:58:da:9d:57:61:34:97:ea:19:a2:9c:6f:b8:e4: d0:83:e8:ff:48:e0:51:58:92:89:c9:d1:df:ba:a0: be:17:6c:04:94:6a:55:56:3b:a6:20:ef:04:60:7e: 96:97:ff:41:42:97:ed:d1:53:ae:9d:bd:4c:4f:20: 81:f0:9d:fb:4b:6e:64:f4:46:5c:23:8b:94:41:b4: d1:0e:95:be:f4:50:8e:b5:b1:3d:1d:07:89:2e:a3: 0a:43:e2:6c:62:7b:62:31:fa:70:39:92:50:cc:18: ed:cc:f3:84:76:05:66:dd:cb:5e:72:b1:e1:b0:e1: 0c:16:97:14:2b:43:fb:db:e3:19:0d:64:6a:a0:93: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0E:E0:1D:67:C1:06:EA:44:CA:52:9B:CF:92:A5:A6:69:02:A2:54 X509v3 Authority Key Identifier: keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/vw7gHWfBBupEylKbz5KlpmkColQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.227.0/24 176.53.146.0/23 185.235.230.0/24 IPv6: 2001:678:e30::/48 2a0a:2e80::-2a0a:2e82:ffff:ffff:ffff:ffff:ffff:ffff 2a11:7e40::-2a11:7e40:4:ffff:ffff:ffff:ffff:ffff 2a11:7e46::/32 2a11:7e47:1000::/48 2a11:7e47:2000::/48 2a11:7e47:3000::/48 2a11:7e47:4000::/48 2a11:7e47:5000::/48 2a11:7e47:6000::/48 2a11:7e47:7000::/48 2a11:7e47:8000::/48 2a11:7e47:9000::/48 2a11:7e47:a000::/48 2a11:7e47:b000::/48 2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff 2a11:8485::/32 2a12:6702::/32 Signature Algorithm: sha256WithRSAEncryption 42:ee:68:34:46:d6:17:c6:c3:80:4a:0a:6b:96:cf:29:8b:2e: 87:66:7d:90:7b:9d:cd:4a:43:73:25:85:60:4c:0b:ac:cf:74: c8:c2:cb:7f:94:7b:ce:ab:2d:54:79:76:37:d0:bc:ba:89:46: 4b:58:99:1e:4e:fb:af:cb:a2:2c:06:ed:0f:a5:5a:ed:54:0b: e1:bf:eb:e1:86:0f:18:a0:77:92:89:91:f8:94:1c:ef:ab:0d: 6e:47:c0:52:ce:7d:c0:ee:53:69:e5:19:07:19:64:1c:6a:98: 26:67:ca:08:87:94:b2:cc:ff:d4:29:20:87:66:f5:2c:20:7f: 5d:f4:e8:8c:f9:94:2d:7f:f8:3f:3b:34:69:ad:57:9d:7d:c0: 83:f1:c5:e5:3d:ff:12:25:cc:61:59:b5:2e:75:9a:b0:8a:9b: 88:87:70:f5:df:0e:c4:72:f1:84:41:05:53:a4:fd:39:70:54: a5:b0:16:8b:ab:ce:0d:5e:83:1f:c1:8c:bf:ea:da:8c:d5:47: 04:fc:12:e2:5a:84:01:e8:83:08:be:08:60:d2:c4:66:ea:b0: ea:b1:8d:39:84:37:8a:72:34:77:71:a6:86:45:28:c5:2d:ee: 79:d2:a0:62:ef:c1:f3:01:db:6a:c1:31:b0:22:9e:84:83:72: d7:5e:fa:43 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt+pX0JMa5x1u3VnCvcQrgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3 ZmY3MzYwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjBlZTAxZDY3YzEwNmVhNDRjYTUyOWJjZjkyYTVhNjY5MDJhMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaW3tPADUwU+xo/hm3Q9cv5N2BUX 8sK1IUOQ0DCwZ+po6t0PVm5eMgNUZWYTHBlC2Vn3eFk0eEqIHxEtH4FePx6NDF1Q oMWv7wzQcmhSd6DD5gU2gPsvAFZL1Gp1zAd0FR96iIJ1v24fnxMxKaJAZcw7jgN1 2E9iWNqdV2E0l+oZopxvuOTQg+j/SOBRWJKJydHfuqC+F2wElGpVVjumIO8EYH6W l/9BQpft0VOunb1MTyCB8J37S25k9EZcI4uUQbTRDpW+9FCOtbE9HQeJLqMKQ+Js YntiMfpwOZJQzBjtzPOEdgVm3ctecrHhsOEMFpcUK0P72+MZDWRqoJNU9wIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFL8O4B1nwQbqRMpSm8+SpaZpAqJUMB8GA1UdIwQY MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut YWYxZWYxZDdhZmI4LzEvdnc3Z0hXZkJCdXBFeWxLYno1S2xwbWtDb2xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4 LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHqBggrBgEFBQcBBwEB/wSB2jCB1zAYBAIAATASAwQAH97j AwQBsDWSAwQAuevmMIG6BAIAAjCBswMHACABBngOMDAOAwUHKgougAMFACoKLoIw EAMFBioRfkADBwAqEX5AAAQDBQAqEX5GAwcAKhF+RxAAAwcAKhF+RyAAAwcAKhF+ RzAAAwcAKhF+R0AAAwcAKhF+R1AAAwcAKhF+R2AAAwcAKhF+R3AAAwcAKhF+R4AA AwcAKhF+R5AAAwcAKhF+R6AAAwcAKhF+R7AAMA4DBQcqEYSAAwUAKhGEggMFACoR hIUDBQAqEmcCMA0GCSqGSIb3DQEBCwUAA4IBAQBC7mg0RtYXxsOASgprls8piy6H Zn2Qe53NSkNzJYVgTAusz3TIwst/lHvOqy1UeXY30Ly6iUZLWJkeTvuvy6IsBu0P pVrtVAvhv+vhhg8YoHeSiZH4lBzvqw1uR8BSzn3A7lNp5RkHGWQcapgmZ8oIh5Sy zP/UKSCHZvUsIH9d9OiM+ZQtf/g/OzRprVedfcCD8cXlPf8SJcxhWbUudZqwipuI h3D13w7EcvGEQQVTpP05cFSlsBaLq84NXoMfwYy/6tqM1UcE/BLiWoQB6IMIvghg 0sRm6rDqsY05hDeKcjR3caaGRSjFLe550qBi78HzAdtqwTGwIp6Eg3LXXvpD -----END CERTIFICATE-----Generated at Wed Jan 21 15:23:55 2026 by rpki-client