This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o0_t-8Ix0qgeBseYWMqQLjCj0tM.roa File: o0_t-8Ix0qgeBseYWMqQLjCj0tM.roa (raw, json) Hash identifier: 1ewMGFBv7Au8HRe2cUPpaq/NvdaqGnMl0BIvQ3X5ONQ= Subject key identifier: A3:4F:ED:FB:C2:31:D2:A8:1E:06:C7:98:58:CA:90:2E:30:A3:D2:D3 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BB1B82BDAE671695A7762621CDE3BE4D7 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o0_t-8Ix0qgeBseYWMqQLjCj0tM.roa Signing time: Mon 12 Jan 2026 10:19:55 +0000 ROA not before: Mon 12 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.56.211.0/24 maxlen: 24 31.57.200.0/24 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.90.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:b8:2b:da:e6:71:69:5a:77:62:62:1c:de:3b:e4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 12 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a34fedfbc231d2a81e06c79858ca902e30a3d2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:da:4b:c2:de:cb:6b:1b:0f:0c:48:b7:75: 56:e3:39:7b:32:47:bd:a6:d2:c9:32:64:f4:94:0d: f6:f5:8e:e1:bd:da:74:ba:29:5a:46:6e:de:20:0b: 87:b9:85:1a:b3:17:f8:83:a3:d1:79:ce:6a:93:31: 13:9d:f7:e0:62:5e:bc:41:73:4a:73:c6:c7:2a:13: a5:ec:7c:76:ff:a6:55:40:17:57:4b:e0:ab:6f:01: 9e:66:b3:84:a5:f4:22:6f:62:50:47:f8:65:ff:ab: bc:d7:85:71:dc:7c:50:61:8d:9d:f0:11:1f:6c:15: c2:e0:1f:05:cb:29:3c:90:41:e3:8f:76:0b:c5:ea: da:a3:6e:cc:f3:9f:b1:46:ef:c6:db:34:d8:e1:d4: dd:f6:b7:7e:e7:fd:35:e1:1e:ae:e4:51:e5:02:36: 5c:ac:75:14:94:34:10:9c:a5:25:cd:f9:b1:06:93: 37:ac:2b:8c:a5:2d:b9:ec:dc:32:2e:64:08:1f:46: ff:46:0c:2f:fa:53:8d:0b:fc:0d:34:83:ec:c0:fb: 2c:d1:b2:bb:3a:b9:d9:7b:e0:60:3a:82:6e:cd:19: 85:7c:7c:88:9a:a6:ad:86:36:74:97:08:b6:43:66: e8:3f:1c:5f:5f:fd:78:e2:43:2e:5e:67:85:f2:82: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4F:ED:FB:C2:31:D2:A8:1E:06:C7:98:58:CA:90:2E:30:A3:D2:D3 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o0_t-8Ix0qgeBseYWMqQLjCj0tM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.211.0/24 31.57.200.0/24 31.58.180.0-31.58.195.255 31.58.239.0/24 31.59.84.0/22 31.59.90.0/23 94.183.151.0/24 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.180.0/23 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.208.0-217.60.235.255 217.60.237.0/24 Signature Algorithm: sha256WithRSAEncryption 46:da:3d:ec:b3:50:80:a2:9a:af:38:1b:00:d2:c1:09:2e:24: e1:36:64:6c:1d:e4:6d:f0:c1:b7:36:72:6a:e3:e9:74:50:b2: e6:98:b3:c3:f6:71:16:d1:19:7e:2b:3e:5c:00:c3:a8:45:f8: ee:49:0b:71:fc:fc:da:33:1e:fe:f1:12:8e:0b:0b:af:2c:1e: 4c:2c:14:2b:1b:ff:e3:dc:9f:13:fc:1a:ef:e6:4c:ba:d2:4e: 59:8c:7c:5c:af:d0:61:ac:23:36:5b:cc:d9:2e:af:11:08:a2: 90:8e:de:b3:e8:99:fc:c4:83:c4:bb:87:81:b8:18:14:6a:18: d2:88:6f:d2:1f:8e:0d:3c:14:63:e2:61:cb:21:e1:a4:94:20: 2f:b0:f4:55:ca:49:74:57:af:61:da:19:06:9e:55:47:e8:ac: be:53:7a:7d:dc:e8:6e:a6:7a:a1:71:2e:f3:19:4c:a5:b4:5c: e8:c6:4b:4e:bd:3f:a3:c5:6d:45:d5:88:15:54:c6:0c:0b:76: b6:a4:71:f1:09:79:02:c0:39:0d:20:90:8e:c3:c5:6a:60:ef: 78:74:e5:12:99:c7:df:a3:aa:e7:8f:46:db:a8:11:a2:d0:f3: f3:8a:df:00:3c:69:0a:72:6d:ac:d5:c5:13:5a:eb:dd:58:b3: 44:4f:d5:e8 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZuxuCva5nFpWndiYhzeO+TXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTEyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzRmZWRmYmMyMzFkMmE4MWUwNmM3OTg1OGNhOTAyZTMwYTNkMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZfaS8Ley2sbDwxIt3VW4zl7Mke9 ptLJMmT0lA329Y7hvdp0uilaRm7eIAuHuYUasxf4g6PRec5qkzETnffgYl68QXNK c8bHKhOl7Hx2/6ZVQBdXS+CrbwGeZrOEpfQib2JQR/hl/6u814Vx3HxQYY2d8BEf bBXC4B8Fyyk8kEHjj3YLxerao27M85+xRu/G2zTY4dTd9rd+5/014R6u5FHlAjZc rHUUlDQQnKUlzfmxBpM3rCuMpS257NwyLmQIH0b/Rgwv+lONC/wNNIPswPss0bK7 OrnZe+BgOoJuzRmFfHyImqathjZ0lwi2Q2boPxxfX/144kMuXmeF8oKd0wIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFKNP7fvCMdKoHgbHmFjKkC4wo9LTMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvbzBfdC04SXgwcWdlQnNlWVdNcVFMakNqMHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAf ONMDBAAfOcgwDAMEAh86tAMEAh86wAMEAB867wMEAh87VAMEAR87WgMEAF63lwME AF63ngMEAF63pAMEAF63pjAMAwQBXreuAwQAXrewAwQBXre0MAwDBAXZPKADBAPZ PLADBALZPLwwDAMEBNk80AMEAtk86AMEANk87TANBgkqhkiG9w0BAQsFAAOCAQEA Rto97LNQgKKarzgbANLBCS4k4TZkbB3kbfDBtzZyauPpdFCy5pizw/ZxFtEZfis+ XADDqEX47kkLcfz82jMe/vESjgsLryweTCwUKxv/49yfE/wa7+ZMutJOWYx8XK/Q YawjNlvM2S6vEQiikI7es+iZ/MSDxLuHgbgYFGoY0ohv0h+ODTwUY+JhyyHhpJQg L7D0VcpJdFevYdoZBp5VR+isvlN6fdzobqZ6oXEu8xlMpbRc6MZLTr0/o8VtRdWI FVTGDAt2tqRx8Ql5AsA5DSCQjsPFamDveHTlEpnH36Oq549G26gRotDz84rfADxp CnJtrNXFE1rr3VizRE/V6A== -----END CERTIFICATE-----Generated at Tue Jan 13 06:59:26 2026 by rpki-client