This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/v2IhDQ8dMh0vSfLTkTNdx07j3Do.roa File: v2IhDQ8dMh0vSfLTkTNdx07j3Do.roa (raw, json) Hash identifier: q5Y57O7PdAe9bYY9H4RfsF6Bk+AQ07ZKzaQosqJ2ejw= Subject key identifier: BF:62:21:0D:0F:1D:32:1D:2F:49:F2:D3:91:33:5D:C7:4E:E3:DC:3A Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA66ACEC684FD18A34D4D8CBFA7DF3D Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/v2IhDQ8dMh0vSfLTkTNdx07j3Do.roa Signing time: Fri 02 Jan 2026 12:19:54 +0000 ROA not before: Fri 02 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8427 IP address blocks: 31.47.112.0/20 maxlen: 32 46.167.64.0/18 maxlen: 32 79.134.0.0/19 maxlen: 32 109.201.192.0/19 maxlen: 32 178.18.96.0/20 maxlen: 32 212.21.0.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6a:ce:c6:84:fd:18:a3:4d:4d:8c:bf:a7:df:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf62210d0f1d321d2f49f2d391335dc74ee3dc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:85:c3:da:5f:9f:68:2d:cd:de:03:e1:63: c8:c5:c9:95:12:75:70:25:e3:5b:c8:d1:4f:69:f9: 8f:3a:64:af:b3:7c:50:27:88:1d:9c:cb:d5:23:4b: 59:04:aa:ad:30:a6:56:41:45:19:f8:f0:1a:bb:22: a3:a7:3a:b9:b9:92:9f:50:57:4b:10:5e:60:c1:e3: 6c:49:e7:9c:7b:f1:f6:bf:40:18:09:41:46:1f:01: 76:d1:57:63:a0:6f:cc:f4:9e:3c:f1:57:3d:db:df: fd:08:16:23:fb:66:47:c1:42:bb:71:2a:0e:5c:f1: 45:4a:f9:c4:7d:fd:52:49:14:d0:ac:dc:75:f2:e2: 83:6d:fd:e2:a2:f8:b5:7f:da:3a:e3:81:b7:48:c3: 56:d6:f4:84:7d:0e:85:d8:f5:02:53:3f:e6:ff:f7: 25:dd:4c:10:7f:1f:4d:cd:7f:75:71:95:8b:32:18: 3d:eb:4d:3c:9f:cf:cc:98:3e:21:b1:b8:b8:07:1f: 13:3d:9d:00:5c:3e:f4:9b:3d:86:49:7d:fd:57:da: 4a:7d:cc:c8:13:d1:d0:54:74:c4:03:e1:04:d0:ec: 92:e5:9a:40:54:8b:b8:c3:76:e7:98:cb:86:0f:e5: 83:37:2b:38:b9:70:c1:6b:22:85:76:43:bc:57:af: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:62:21:0D:0F:1D:32:1D:2F:49:F2:D3:91:33:5D:C7:4E:E3:DC:3A X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/v2IhDQ8dMh0vSfLTkTNdx07j3Do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.112.0/20 46.167.64.0/18 79.134.0.0/19 109.201.192.0/19 178.18.96.0/20 212.21.0.0/19 Signature Algorithm: sha256WithRSAEncryption 0a:e6:dc:86:27:13:3a:64:26:e0:ca:6b:9e:5e:29:24:9d:a8: f9:14:cd:f7:75:29:43:d0:40:3c:4b:ac:ad:d0:fb:c4:cc:61: ca:e4:49:68:51:0b:a2:b7:50:80:ab:22:71:96:36:cd:6d:14: af:1f:ba:27:a6:9a:09:42:8f:d5:53:d8:79:30:1d:b3:e4:d0: 1b:10:e7:e0:1b:b8:7d:1a:59:f0:82:c8:37:4c:4d:1c:b5:00: e7:50:14:4b:ae:8b:28:f2:db:9e:87:af:ac:75:29:b7:40:57: cd:cd:95:82:12:11:dd:4a:5e:e9:cd:5a:b0:a5:05:65:e2:79: d7:a7:d7:a9:8c:4e:98:84:8f:7d:46:7d:de:1e:7f:04:fc:1f: 14:ea:8f:97:13:c3:59:ee:a1:06:91:07:a8:12:5d:60:17:94: 70:25:4f:19:84:d5:0b:de:5a:38:8b:f6:d5:0a:c4:3d:26:9d: 08:b9:ed:bc:d2:5b:20:4d:36:34:52:b7:0a:fc:d4:2e:d5:c3: 91:a4:d4:e1:7e:5c:41:9b:46:47:3f:94:36:eb:a8:f6:14:aa: b0:38:55:45:3b:fd:d4:d7:4d:cc:54:1b:9a:aa:29:be:48:8c: 86:40:3d:a5:c0:0e:e5:23:9e:38:51:46:45:1b:c5:7a:1f:78: be:52:69:78 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+pmrOxoT9GKNNTYy/p989MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjYyMjEwZDBmMWQzMjFkMmY0OWYyZDM5MTMzNWRjNzRlZTNkYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmomFw9pfn2gtzd4D4WPIxcmVEnVw JeNbyNFPafmPOmSvs3xQJ4gdnMvVI0tZBKqtMKZWQUUZ+PAauyKjpzq5uZKfUFdL EF5gweNsSeece/H2v0AYCUFGHwF20VdjoG/M9J488Vc929/9CBYj+2ZHwUK7cSoO XPFFSvnEff1SSRTQrNx18uKDbf3iovi1f9o644G3SMNW1vSEfQ6F2PUCUz/m//cl 3UwQfx9NzX91cZWLMhg96008n8/MmD4hsbi4Bx8TPZ0AXD70mz2GSX39V9pKfczI E9HQVHTEA+EE0OyS5ZpAVIu4w3bnmMuGD+WDNys4uXDBayKFdkO8V68GHwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFL9iIQ0PHTIdL0ny05EzXcdO49w6MB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvdjJJaERROGRNaDB2U2ZMVGtUTmR4MDdqM0RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEHy9wAwQG LqdAAwQFT4YAAwQFbcnAAwQEshJgAwQF1BUAMA0GCSqGSIb3DQEBCwUAA4IBAQAK 5tyGJxM6ZCbgymueXikknaj5FM33dSlD0EA8S6yt0PvEzGHK5EloUQuit1CAqyJx ljbNbRSvH7onppoJQo/VU9h5MB2z5NAbEOfgG7h9Glnwgsg3TE0ctQDnUBRLroso 8tueh6+sdSm3QFfNzZWCEhHdSl7pzVqwpQVl4nnXp9epjE6YhI99Rn3eHn8E/B8U 6o+XE8NZ7qEGkQeoEl1gF5RwJU8ZhNUL3lo4i/bVCsQ9Jp0Iue280lsgTTY0UrcK /NQu1cORpNThflxBm0ZHP5Q266j2FKqwOFVFO/3U103MVBuaqim+SIyGQD2lwA7l I544UUZFG8V6H3i+Uml4 -----END CERTIFICATE-----Generated at Sat Jan 31 07:25:00 2026 by rpki-client