This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/Ov46GgLCmGN9cynwnomndLJK3rE.roa File: Ov46GgLCmGN9cynwnomndLJK3rE.roa (raw, json) Hash identifier: 4L/nJ8yxPDp+NjD2T6a5/b4C4w4UlasaJygLN6MYTus= Subject key identifier: 3A:FE:3A:1A:02:C2:98:63:7D:73:29:F0:9E:89:A7:74:B2:4A:DE:B1 Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384 Certificate serial: 019B7B3646C0049225B1BB446F5BDB82640A Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/Ov46GgLCmGN9cynwnomndLJK3rE.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9136 IP address blocks: 5.159.24.0/21 maxlen: 21 62.176.224.0/19 maxlen: 19 91.186.32.0/19 maxlen: 19 92.118.192.0/22 maxlen: 22 185.72.232.0/22 maxlen: 22 213.162.128.0/19 maxlen: 19 2a01:580::/29 maxlen: 29 2a01:581:6::/48 maxlen: 48 2a01:581:7::/48 maxlen: 48 2a01:581:8::/48 maxlen: 48 2a01:581:9::/48 maxlen: 48 2a01:581:a::/48 maxlen: 48 2a01:581:b::/48 maxlen: 48 2a01:581:c::/48 maxlen: 48 2a01:581:d::/48 maxlen: 48 2a01:581:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:46:c0:04:92:25:b1:bb:44:6f:5b:db:82:64:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384 Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3afe3a1a02c298637d7329f09e89a774b24adeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:9f:24:6c:e9:8d:70:17:32:c8:85:df:1c: 17:03:a8:8d:60:45:fd:4e:d9:dd:49:e0:9a:21:a2: 08:fb:f5:ec:69:9c:77:02:fd:10:c7:a5:1a:b0:be: 05:da:30:97:6d:c3:07:94:fb:3c:17:db:30:15:f7: 18:ae:ac:b2:f0:8a:93:1b:00:b1:98:2f:f0:1f:8d: 44:cc:88:4a:cb:9f:9d:57:ae:10:02:e9:63:48:9f: dd:ca:74:b3:66:7d:dc:82:1f:70:8a:44:c4:58:29: c4:35:10:a9:ea:38:e3:14:9a:1c:b6:35:16:4c:07: 00:ff:a7:2a:35:27:7b:73:48:91:68:13:d2:2b:d1: 56:ad:79:fd:d8:74:1d:86:ca:92:71:b3:8a:7d:90: 5b:b7:0a:99:56:13:85:46:6f:49:45:34:7e:ae:53: 79:ea:c7:79:bc:cc:af:ad:ba:1e:69:0a:e5:3e:80: cb:37:8a:70:a9:0c:bd:66:0c:48:a2:db:2f:36:91: af:26:75:af:c5:e0:44:0e:a8:91:4e:76:47:20:91: 27:a4:ff:f6:e8:02:5d:b7:8f:85:82:54:3a:c1:8c: 5d:24:2f:97:df:f6:e1:2c:d5:e2:34:1d:4b:d2:ad: af:1e:21:4a:32:9f:c4:74:a3:46:f3:2a:6c:53:04: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FE:3A:1A:02:C2:98:63:7D:73:29:F0:9E:89:A7:74:B2:4A:DE:B1 X509v3 Authority Key Identifier: keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/Ov46GgLCmGN9cynwnomndLJK3rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.159.24.0/21 62.176.224.0/19 91.186.32.0/19 92.118.192.0/22 185.72.232.0/22 213.162.128.0/19 IPv6: 2a01:580::/29 Signature Algorithm: sha256WithRSAEncryption 0f:5e:37:fd:0e:47:09:51:86:a6:71:52:3a:0f:7f:1e:85:8d: fe:9f:52:de:6f:dc:3d:a8:46:92:ac:b6:cd:d1:9a:3e:29:f8: 93:2e:68:83:00:32:ce:8a:e6:d5:2f:77:55:cc:dd:ac:e2:ee: f8:a3:32:1d:2e:b3:db:b4:1f:09:ee:0a:70:ba:14:47:ab:86: 7d:1a:0c:d1:88:fb:7e:98:24:46:a7:f7:38:1c:62:90:3c:e0: 2e:83:81:74:54:2d:55:99:a5:98:9d:96:d0:0c:24:b5:15:29: 4b:ce:7d:25:4f:82:85:a0:1e:5e:be:59:ce:4e:06:f2:14:62: 11:61:52:1a:4b:08:46:9f:58:a2:03:9e:f4:2b:f7:0d:44:b6: b7:50:bb:9a:0e:7f:0a:76:8a:2b:48:47:f9:40:6c:0f:51:da: a0:b1:99:36:a6:63:74:b3:b2:d1:7a:ac:ef:63:35:b8:6e:e4: 4e:a8:b7:c6:7e:ec:1c:c7:3f:b6:b0:f4:f7:09:fd:46:04:43: 4a:1a:29:29:ad:1d:c8:e5:80:73:8a:d1:fd:1c:ef:2c:cd:fa: 9c:bb:b9:16:35:b6:00:ce:41:7d:ca:49:14:53:25:2b:c0:02: 5c:98:ef:5a:64:4b:20:6d:9e:e8:5c:d1:e6:8e:65:b2:6c:38: 3c:f5:23:f5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt7NkbABJIlsbtEb1vbgmQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm NzQzODQwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWZlM2ExYTAyYzI5ODYzN2Q3MzI5ZjA5ZTg5YTc3NGIyNGFkZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02ufJGzpjXAXMsiF3xwXA6iNYEX9 TtndSeCaIaII+/XsaZx3Av0Qx6UasL4F2jCXbcMHlPs8F9swFfcYrqyy8IqTGwCx mC/wH41EzIhKy5+dV64QAuljSJ/dynSzZn3cgh9wikTEWCnENRCp6jjjFJoctjUW TAcA/6cqNSd7c0iRaBPSK9FWrXn92HQdhsqScbOKfZBbtwqZVhOFRm9JRTR+rlN5 6sd5vMyvrboeaQrlPoDLN4pwqQy9ZgxIotsvNpGvJnWvxeBEDqiRTnZHIJEnpP/2 6AJdt4+FglQ6wYxdJC+X3/bhLNXiNB1L0q2vHiFKMp/EdKNG8ypsUwSTFwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFDr+OhoCwphjfXMp8J6Jp3SySt6xMB8GA1UdIwQY MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt MDdlZDQ2YjE0OWMzLzEvT3Y0NkdnTENtR045Y3lud25vbW5kTEpLM3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBZ8YAwQF PrDgAwQFW7ogAwQCXHbAAwQCuUjoAwQF1aKAMA0EAgACMAcDBQMqAQWAMA0GCSqG SIb3DQEBCwUAA4IBAQAPXjf9DkcJUYamcVI6D38ehY3+n1Leb9w9qEaSrLbN0Zo+ KfiTLmiDADLOiubVL3dVzN2s4u74ozIdLrPbtB8J7gpwuhRHq4Z9GgzRiPt+mCRG p/c4HGKQPOAug4F0VC1VmaWYnZbQDCS1FSlLzn0lT4KFoB5evlnOTgbyFGIRYVIa SwhGn1iiA570K/cNRLa3ULuaDn8KdoorSEf5QGwPUdqgsZk2pmN0s7LReqzvYzW4 buROqLfGfuwcxz+2sPT3Cf1GBENKGikprR3I5YBzitH9HO8szfqcu7kWNbYAzkF9 ykkUUyUrwAJcmO9aZEsgbZ7oXNHmjmWybDg89SP1 -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:28 2026 by rpki-client