This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa File: s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa (raw, json) Hash identifier: zD3icNxMD7rBY0nFB8uq8qwc1AnBefPqnwojqYvDvKo= Subject key identifier: B3:F3:9C:6F:94:73:C8:37:9C:32:A9:8C:9B:07:17:12:40:D2:E6:46 Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Certificate serial: 019C1DFC759C18395475FC76A25DFF122619 Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa Signing time: Mon 02 Feb 2026 10:53:30 +0000 ROA not before: Mon 02 Feb 2026 10:53:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211261 IP address blocks: 5.252.92.0/24 maxlen: 24 5.253.156.0/24 maxlen: 24 5.253.157.0/24 maxlen: 24 5.253.158.0/24 maxlen: 24 5.253.159.0/24 maxlen: 24 62.122.228.0/24 maxlen: 24 62.122.230.0/24 maxlen: 24 62.122.231.0/24 maxlen: 24 91.210.126.0/24 maxlen: 24 185.146.67.0/24 maxlen: 24 185.210.192.0/24 maxlen: 24 185.210.193.0/24 maxlen: 24 185.210.195.0/24 maxlen: 24 185.218.160.0/24 maxlen: 24 185.218.161.0/24 maxlen: 24 185.218.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:fc:75:9c:18:39:54:75:fc:76:a2:5d:ff:12:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Validity Not Before: Feb 2 10:53:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3f39c6f9473c8379c32a98c9b07171240d2e646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:16:b4:26:4d:43:78:3d:9e:b6:27:12:2e: d5:91:6a:68:0d:2e:0e:ff:9b:5f:5e:61:d8:d7:d5: f9:76:d9:33:5b:a5:84:fc:22:82:91:ed:26:b4:bc: 3e:0a:45:86:2a:4a:38:1f:c3:3f:08:60:8c:ce:b3: e0:4b:e3:c8:5c:4f:5a:c6:1d:7a:de:7b:4e:97:4d: 0c:56:5d:f5:ad:d1:8f:9f:f3:a8:d8:12:e0:4f:2c: 54:5c:c1:55:0e:d8:b0:00:fd:28:02:53:98:e0:91: 97:3d:2d:22:5f:0b:1e:ff:85:28:11:8c:49:cb:53: d6:6c:cf:22:24:97:06:64:ff:b9:68:8e:db:68:a3: a5:8a:a2:d1:0e:cf:a8:51:f2:89:1b:fe:02:e4:28: dc:a9:36:23:3e:f9:7a:68:71:3a:c1:a3:d4:12:b0: 34:be:27:cc:0f:6c:f6:47:f3:50:8a:f6:92:1b:73: 86:fb:ab:24:81:9b:23:55:e3:86:4d:e7:0d:ed:cd: 6e:26:98:2c:37:b0:d1:b0:aa:53:a0:d4:fe:9c:6b: 6a:95:7c:dd:ee:12:04:52:32:01:4b:45:24:c3:8d: 0f:32:19:be:54:0b:a8:17:2f:a7:1d:4a:a0:47:55: 75:da:a6:de:1b:4b:02:44:61:b7:7c:e4:42:cd:dd: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F3:9C:6F:94:73:C8:37:9C:32:A9:8C:9B:07:17:12:40:D2:E6:46 X509v3 Authority Key Identifier: keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.92.0/24 5.253.156.0/22 62.122.228.0/24 62.122.230.0/23 91.210.126.0/24 185.146.67.0/24 185.210.192.0/23 185.210.195.0/24 185.218.160.0-185.218.162.255 Signature Algorithm: sha256WithRSAEncryption 3d:93:d4:0a:f9:4a:bc:7b:c6:ed:52:6a:b3:f3:68:4e:dc:bf: 28:d8:04:3e:a4:75:b6:b2:46:3a:f3:c2:a0:ca:a9:77:a2:8d: 26:a5:8a:13:4a:3d:03:d0:a8:7a:05:a6:d2:3a:6e:11:84:2b: ff:ad:52:fd:05:18:4b:d1:28:13:b6:d3:25:42:a9:c8:94:c5: 13:27:e1:cd:3d:67:6b:28:b6:2e:49:d0:35:3e:0a:95:05:a6: 3c:9c:fc:28:f1:77:74:59:29:61:4a:e0:f3:47:2b:b8:b4:c7: aa:08:d9:ed:ac:c5:b6:03:6d:e3:15:1c:52:70:67:0a:5b:ba: 8f:f7:ac:b3:05:5e:76:c5:c2:be:14:9e:4b:91:d3:a0:33:ff: aa:48:44:27:bf:72:d7:c8:4e:0c:4e:e2:bd:93:f2:e4:38:c5: 65:87:ad:69:23:c5:ea:92:61:01:1a:db:8a:b6:18:1c:da:cd: 53:65:19:a9:c2:e0:ea:55:c7:18:72:70:c1:83:78:e5:81:71: 18:81:75:f4:0d:95:11:26:60:3d:ae:7a:95:3e:63:3d:80:73: 54:bc:97:5f:d3:fe:bc:b4:b9:d1:01:d7:05:5a:3a:74:f3:e0: 75:96:3b:8e:66:48:66:64:ca:28:31:48:5d:85:b5:34:76:16: 60:ce:db:ff -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZwd/HWcGDlUdfx2ol3/EiYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh OWZhM2IwHhcNMjYwMjAyMTA1MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2YzOWM2Zjk0NzNjODM3OWMzMmE5OGM5YjA3MTcxMjQwZDJlNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7AWtCZNQ3g9nrYnEi7VkWpoDS4O /5tfXmHY19X5dtkzW6WE/CKCke0mtLw+CkWGKko4H8M/CGCMzrPgS+PIXE9axh16 3ntOl00MVl31rdGPn/Oo2BLgTyxUXMFVDtiwAP0oAlOY4JGXPS0iXwse/4UoEYxJ y1PWbM8iJJcGZP+5aI7baKOliqLRDs+oUfKJG/4C5CjcqTYjPvl6aHE6waPUErA0 vifMD2z2R/NQivaSG3OG+6skgZsjVeOGTecN7c1uJpgsN7DRsKpToNT+nGtqlXzd 7hIEUjIBS0Ukw40PMhm+VAuoFy+nHUqgR1V12qbeG0sCRGG3fORCzd17qQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFLPznG+Uc8g3nDKpjJsHFxJA0uZGMB8GA1UdIwQY MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt YzkwN2FlMWMyMTFlLzEvc19PY2I1Unp5RGVjTXFtTW13Y1hFa0RTNWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQABfxcAwQC Bf2cAwQAPnrkAwQBPnrmAwQAW9J+AwQAuZJDAwQBudLAAwQAudLDMAwDBAW52qAD BAC52qIwDQYJKoZIhvcNAQELBQADggEBAD2T1Ar5Srx7xu1SarPzaE7cvyjYBD6k dbayRjrzwqDKqXeijSalihNKPQPQqHoFptI6bhGEK/+tUv0FGEvRKBO20yVCqciU xRMn4c09Z2soti5J0DU+CpUFpjyc/Cjxd3RZKWFK4PNHK7i0x6oI2e2sxbYDbeMV HFJwZwpbuo/3rLMFXnbFwr4UnkuR06Az/6pIRCe/ctfITgxO4r2T8uQ4xWWHrWkj xeqSYQEa24q2GBzazVNlGanC4OpVxxhycMGDeOWBcRiBdfQNlREmYD2uepU+Yz2A c1S8l1/T/ry0udEB1wVaOnTz4HWWO45mSGZkyigxSF2FtTR2FmDO2/8= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:59 2026 by rpki-client