This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oI1vuyUHTBbrHTvxJzpWHFjXnY0.roa File: oI1vuyUHTBbrHTvxJzpWHFjXnY0.roa (raw, json) Hash identifier: NkW72OtbV1DtGuF63x1HL+4ROzn6GsVc2/kwgPaLv2g= Subject key identifier: A0:8D:6F:BB:25:07:4C:16:EB:1D:3B:F1:27:3A:56:1C:58:D7:9D:8D Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019BFB72516BF7F9D4F5EDF1CF9CB69D5AC2 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oI1vuyUHTBbrHTvxJzpWHFjXnY0.roa Signing time: Mon 26 Jan 2026 17:55:31 +0000 ROA not before: Mon 26 Jan 2026 17:55:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 31.56.176.0/22 maxlen: 24 31.56.182.0/23 maxlen: 24 31.56.184.0/22 maxlen: 24 31.56.188.0/23 maxlen: 24 31.56.208.0/23 maxlen: 24 31.56.228.0/23 maxlen: 24 31.57.36.0/23 maxlen: 24 31.57.168.0/23 maxlen: 24 31.57.184.0/23 maxlen: 24 31.57.200.0/24 maxlen: 24 31.57.208.0/22 maxlen: 22 31.57.216.0/23 maxlen: 24 31.57.250.0/23 maxlen: 24 31.58.76.0/22 maxlen: 24 31.58.92.0/22 maxlen: 24 31.58.180.0/22 maxlen: 24 31.58.184.0/21 maxlen: 24 31.58.192.0/22 maxlen: 24 31.58.196.0/22 maxlen: 24 31.58.204.0/22 maxlen: 24 31.58.208.0/23 maxlen: 24 31.58.232.0/23 maxlen: 24 31.58.239.0/24 maxlen: 24 31.59.36.0/22 maxlen: 24 31.59.44.0/22 maxlen: 24 31.59.84.0/22 maxlen: 24 31.59.84.0/23 maxlen: 24 31.59.90.0/23 maxlen: 24 31.59.140.0/22 maxlen: 24 31.59.148.0/22 maxlen: 24 31.59.152.0/21 maxlen: 24 31.59.160.0/22 maxlen: 24 31.59.164.0/23 maxlen: 24 94.183.151.0/24 maxlen: 24 94.183.152.0/22 maxlen: 22 94.183.158.0/24 maxlen: 24 94.183.164.0/24 maxlen: 24 94.183.166.0/24 maxlen: 24 94.183.174.0/24 maxlen: 24 94.183.175.0/24 maxlen: 24 94.183.176.0/24 maxlen: 24 94.183.179.0/24 maxlen: 24 94.183.180.0/24 maxlen: 24 94.183.181.0/24 maxlen: 24 94.183.192.0/22 maxlen: 22 94.183.196.0/22 maxlen: 22 94.183.200.0/22 maxlen: 22 94.183.204.0/22 maxlen: 22 94.183.208.0/22 maxlen: 22 94.183.212.0/22 maxlen: 22 94.183.216.0/22 maxlen: 22 94.183.220.0/22 maxlen: 22 94.183.224.0/22 maxlen: 22 94.183.228.0/22 maxlen: 22 94.183.236.0/22 maxlen: 22 94.183.240.0/22 maxlen: 22 94.183.244.0/22 maxlen: 22 94.183.248.0/22 maxlen: 22 94.183.252.0/22 maxlen: 22 217.60.8.0/22 maxlen: 24 217.60.15.0/24 maxlen: 24 217.60.16.0/21 maxlen: 24 217.60.28.0/22 maxlen: 24 217.60.32.0/22 maxlen: 24 217.60.40.0/22 maxlen: 24 217.60.44.0/22 maxlen: 24 217.60.48.0/22 maxlen: 24 217.60.52.0/22 maxlen: 24 217.60.56.0/22 maxlen: 24 217.60.160.0/20 maxlen: 24 217.60.176.0/21 maxlen: 24 217.60.188.0/22 maxlen: 24 217.60.196.0/23 maxlen: 24 217.60.208.0/20 maxlen: 24 217.60.224.0/21 maxlen: 24 217.60.232.0/22 maxlen: 24 217.60.244.0/23 maxlen: 24 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:72:51:6b:f7:f9:d4:f5:ed:f1:cf:9c:b6:9d:5a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 26 17:55:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a08d6fbb25074c16eb1d3bf1273a561c58d79d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:80:b3:15:de:58:34:79:a8:d9:78:69:92: 82:e9:e0:25:06:64:d8:0c:51:73:25:a5:dd:67:28: 1f:88:0b:c5:80:a4:64:53:ee:15:57:9d:e6:c3:54: 79:38:79:35:a0:89:56:f3:82:47:7d:e3:b7:8a:e6: 1a:06:22:63:5e:c5:8e:fb:03:c6:50:a9:95:0e:bb: ec:69:ed:68:c6:30:4b:1c:cf:50:cc:39:2a:68:0a: 31:56:ad:da:4c:e3:14:6d:b0:aa:66:80:a8:f8:1e: af:9e:c0:e3:05:e2:5f:5a:c7:b5:1b:d3:61:7d:80: 24:8e:fd:dc:95:1f:c2:5b:07:4d:fc:e1:37:84:87: 1c:ab:dd:d1:fa:47:f3:79:ab:f1:1f:ba:af:96:f0: 66:58:28:87:2d:df:ca:7a:85:94:d4:7e:bb:24:ee: 2a:5c:3d:d0:73:bc:50:62:0f:d8:1b:e6:8b:21:23: 67:6a:5e:af:50:53:ef:e0:2e:76:8e:ee:de:d1:be: 61:ac:73:c7:72:79:a2:84:0f:cf:2e:a6:ab:5b:74: f3:2e:84:27:6f:53:20:1a:90:e7:48:f7:71:28:48: e5:52:19:f3:dc:f7:24:45:ca:51:92:cb:9d:17:61: 1c:0e:5c:45:1f:96:0e:a4:0e:74:4e:c8:71:f0:44: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8D:6F:BB:25:07:4C:16:EB:1D:3B:F1:27:3A:56:1C:58:D7:9D:8D X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/oI1vuyUHTBbrHTvxJzpWHFjXnY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.176.0/22 31.56.182.0-31.56.189.255 31.56.208.0/23 31.56.228.0/23 31.57.36.0/23 31.57.168.0/23 31.57.184.0/23 31.57.200.0/24 31.57.208.0/22 31.57.216.0/23 31.57.250.0/23 31.58.76.0/22 31.58.92.0/22 31.58.180.0-31.58.199.255 31.58.204.0-31.58.209.255 31.58.232.0/23 31.58.239.0/24 31.59.36.0/22 31.59.44.0/22 31.59.84.0/22 31.59.90.0/23 31.59.140.0/22 31.59.148.0-31.59.165.255 94.183.151.0-94.183.155.255 94.183.158.0/24 94.183.164.0/24 94.183.166.0/24 94.183.174.0-94.183.176.255 94.183.179.0-94.183.181.255 94.183.192.0-94.183.231.255 94.183.236.0-94.183.255.255 217.60.8.0/22 217.60.15.0-217.60.23.255 217.60.28.0-217.60.35.255 217.60.40.0-217.60.59.255 217.60.160.0-217.60.183.255 217.60.188.0/22 217.60.196.0/23 217.60.208.0-217.60.235.255 217.60.244.0/23 IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 97:f2:54:62:1b:eb:69:98:5c:d1:0c:2d:5d:4a:db:86:61:b0: a9:21:c2:07:f2:54:34:f3:71:9c:d4:87:52:5f:04:90:ca:d2: 0e:86:64:a0:4c:dc:f9:3b:3f:2e:b5:71:06:d0:b9:80:70:b2: 01:66:d6:ab:75:d5:8d:d9:05:cb:3b:2c:a8:d4:7d:ad:94:c5: ce:83:6a:5f:1d:28:d1:f3:34:8b:ce:44:44:fa:1b:05:bf:35: c1:6f:f7:2a:67:42:50:0c:be:d5:ee:ff:50:39:3f:c9:48:aa: 32:83:05:a1:93:38:d4:78:d3:c7:60:92:ca:1f:c8:39:d4:cb: 7d:d7:05:0d:08:36:08:9f:e6:1a:67:95:50:ca:09:8e:55:56: 00:94:3d:b3:f9:14:d4:8d:7d:ce:3e:f0:86:dd:24:e1:34:ae: 88:3a:f9:03:fe:a7:7b:8d:17:e3:a8:31:f2:62:22:a4:15:cf: 9f:14:6e:cf:d3:a8:ef:91:0a:31:41:b2:70:3e:01:30:78:58: d4:1a:48:c2:51:fd:37:e4:95:df:79:d1:35:75:13:22:1a:1e: 1a:68:07:3d:b5:a3:16:1a:75:5a:b6:2d:7e:87:9d:b9:c3:0a: db:36:21:7e:93:bd:a3:23:14:25:43:22:01:ce:22:2b:10:27: 44:b0:2c:a8 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgISAZv7clFr9/nU9e3xz5y2nVrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTI2MTc1NTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDhkNmZiYjI1MDc0YzE2ZWIxZDNiZjEyNzNhNTYxYzU4ZDc5ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniCAsxXeWDR5qNl4aZKC6eAlBmTY DFFzJaXdZygfiAvFgKRkU+4VV53mw1R5OHk1oIlW84JHfeO3iuYaBiJjXsWO+wPG UKmVDrvsae1oxjBLHM9QzDkqaAoxVq3aTOMUbbCqZoCo+B6vnsDjBeJfWse1G9Nh fYAkjv3clR/CWwdN/OE3hIccq93R+kfzeavxH7qvlvBmWCiHLd/KeoWU1H67JO4q XD3Qc7xQYg/YG+aLISNnal6vUFPv4C52ju7e0b5hrHPHcnmihA/PLqarW3TzLoQn b1MgGpDnSPdxKEjlUhnz3PckRcpRksudF2EcDlxFH5YOpA50Tshx8ETSNQIDAQAB o4IDfTCCA3kwHQYDVR0OBBYEFKCNb7slB0wW6x078Sc6VhxY152NMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvb0kxdnV5VUhUQmJySFR2eEp6cFdIRmpYblkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBkQYIKwYBBQUHAQcBAf8EggGAMIIBfDCCAWcEAgABMIIB XwMEAh84sDAMAwQBHzi2AwQBHzi8AwQBHzjQAwQBHzjkAwQBHzkkAwQBHzmoAwQB Hzm4AwQAHznIAwQCHznQAwQBHznYAwQBHzn6AwQCHzpMAwQCHzpcMAwDBAIfOrQD BAMfOsAwDAMEAh86zAMEAR860AMEAR866AMEAB867wMEAh87JAMEAh87LAMEAh87 VAMEAR87WgMEAh87jDAMAwQCHzuUAwQBHzukMAwDBABet5cDBAJet5gDBABet54D BABet6QDBABet6YwDAMEAV63rgMEAF63sDAMAwQAXrezAwQBXre0MAwDBAZet8AD BANet+AwCwMEAl637AMDA16wAwQC2TwIMAwDBADZPA8DBAPZPBAwDAMEAtk8HAME Atk8IDAMAwQD2TwoAwQC2Tw4MAwDBAXZPKADBAPZPLADBALZPLwDBAHZPMQwDAME BNk80AMEAtk86AMEAdk89DAPBAIAAjAJAwcAKhRuQAABMA0GCSqGSIb3DQEBCwUA A4IBAQCX8lRiG+tpmFzRDC1dStuGYbCpIcIH8lQ083Gc1IdSXwSQytIOhmSgTNz5 Oz8utXEG0LmAcLIBZtarddWN2QXLOyyo1H2tlMXOg2pfHSjR8zSLzkRE+hsFvzXB b/cqZ0JQDL7V7v9QOT/JSKoygwWhkzjUeNPHYJLKH8g51Mt91wUNCDYIn+YaZ5VQ ygmOVVYAlD2z+RTUjX3OPvCG3SThNK6IOvkD/qd7jRfjqDHyYiKkFc+fFG7P06jv kQoxQbJwPgEweFjUGkjCUf035JXfedE1dRMiGh4aaAc9taMWGnVati1+h525wwrb NiF+k72jIxQlQyIBziIrECdEsCyo -----END CERTIFICATE-----Generated at Tue Jan 27 12:39:23 2026 by rpki-client