This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/_oMe5r1pVk1eWmBM0xQjlQQMYoA.roa File: _oMe5r1pVk1eWmBM0xQjlQQMYoA.roa (raw, json) Hash identifier: vP6cRMyhx+tL5mecHizDEMHQb47lEApjkAoW42mWOaI= Subject key identifier: FE:83:1E:E6:BD:69:56:4D:5E:5A:60:4C:D3:14:23:95:04:0C:62:80 Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf Certificate serial: 019C0335E98E0BB59DA8010A41913C21428B Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/_oMe5r1pVk1eWmBM0xQjlQQMYoA.roa Signing time: Wed 28 Jan 2026 06:06:30 +0000 ROA not before: Wed 28 Jan 2026 06:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57724 IP address blocks: 45.10.240.0/22 maxlen: 32 45.10.240.0/24 maxlen: 24 45.10.241.0/24 maxlen: 24 45.10.242.0/24 maxlen: 24 45.10.243.0/24 maxlen: 24 91.215.40.0/24 maxlen: 32 91.215.41.0/24 maxlen: 24 91.215.42.0/24 maxlen: 24 91.215.43.0/24 maxlen: 24 95.129.232.0/24 maxlen: 32 95.129.233.0/24 maxlen: 32 95.129.234.0/24 maxlen: 32 95.129.235.0/24 maxlen: 24 95.129.236.0/24 maxlen: 32 95.129.237.0/24 maxlen: 32 185.129.100.0/24 maxlen: 24 185.129.101.0/24 maxlen: 24 185.129.102.0/24 maxlen: 24 185.129.103.0/24 maxlen: 24 185.178.208.0/24 maxlen: 24 185.178.209.0/24 maxlen: 24 185.178.210.0/24 maxlen: 24 2a0a:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:35:e9:8e:0b:b5:9d:a8:01:0a:41:91:3c:21:42:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf Validity Not Before: Jan 28 06:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe831ee6bd69564d5e5a604cd3142395040c6280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:d5:fc:4f:6e:7a:51:da:6e:3d:a3:cf:68: 61:8c:ff:f0:2b:89:61:d4:ba:c9:6c:82:9c:79:17: 65:45:cf:37:9b:15:78:63:e6:85:c5:85:0b:ac:ad: 7a:98:a7:33:31:a5:ff:12:6a:82:c8:e1:dd:eb:ed: 9a:7b:b9:da:1c:4f:c8:da:3c:8d:e8:76:a9:29:a9: 1b:45:a6:51:e4:82:38:09:90:1b:38:59:b5:8c:6a: ab:d9:6b:48:7f:b8:9e:d4:17:55:a0:48:23:79:5f: 7b:c2:57:87:c6:36:77:e0:9c:8d:70:e4:07:f8:3a: 77:13:74:35:69:27:da:78:7b:98:25:e6:8f:3a:a8: 47:d3:0a:42:df:a6:39:01:24:8d:8d:3d:87:2b:d9: 17:30:18:c9:41:60:1c:37:8e:3c:6a:c2:22:09:4a: 45:0a:b1:6b:c8:8e:2b:d4:2e:01:19:0c:0c:43:f2: cb:b3:f2:d1:81:aa:59:78:3d:6e:09:94:89:bc:c6: 6d:9e:31:41:25:e8:68:eb:b6:67:c7:ae:9a:09:7f: 78:7d:aa:1d:e8:4d:77:f5:99:9f:97:04:46:e4:5f: 44:79:d8:4e:26:1a:fa:f9:36:0e:38:f2:49:8e:61: 8b:95:47:26:15:49:10:da:f1:10:20:2c:ee:97:99: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:1E:E6:BD:69:56:4D:5E:5A:60:4C:D3:14:23:95:04:0C:62:80 X509v3 Authority Key Identifier: keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/_oMe5r1pVk1eWmBM0xQjlQQMYoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.240.0/22 91.215.40.0/22 95.129.232.0-95.129.237.255 185.129.100.0/22 185.178.208.0-185.178.210.255 IPv6: 2a0a:4180::/48 Signature Algorithm: sha256WithRSAEncryption 77:dd:1a:bf:80:b9:ec:20:3c:64:36:ac:cb:99:6d:ee:0e:32: e3:58:49:86:71:a5:af:3e:d2:c1:91:6c:d1:1e:1e:4a:5b:29: f0:d1:76:5d:00:c9:08:40:df:0b:58:81:51:42:ac:7d:8e:dd: 35:40:05:47:70:7e:59:a7:50:e4:fd:02:1a:28:bb:e3:8b:f5: 32:51:37:60:3e:8e:87:e2:5a:86:95:f1:c8:b6:1b:5f:ab:12: 64:74:99:60:14:13:f0:27:39:b4:c7:19:83:e9:74:ac:69:8e: 80:42:dd:34:09:49:87:26:a1:90:b4:9a:86:eb:08:1b:c8:07: 21:0f:39:8f:34:80:ec:62:4e:20:e3:cf:53:d2:3a:32:50:70: f5:d8:93:bb:e7:48:dc:6e:0e:81:da:a3:a0:b9:8e:47:84:35: ad:5f:84:4e:99:56:49:2d:2e:97:c4:f1:b4:4f:b8:7e:cc:be: 6b:f6:24:d5:e0:0d:ea:7f:7e:15:80:93:82:34:05:5f:cc:2b: 33:18:ef:2b:38:8f:28:4b:62:d6:ef:51:b2:fb:af:fd:5c:5e: 36:0e:84:f6:bc:fe:95:07:73:69:d4:bd:a6:a1:c1:d1:c8:8a: cd:f8:3a:b5:18:dc:51:2b:09:06:93:1d:95:23:59:29:45:07: 61:41:28:97 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZwDNemOC7WdqAEKQZE8IUKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm MTZlZGYwHhcNMjYwMTI4MDYwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTgzMWVlNmJkNjk1NjRkNWU1YTYwNGNkMzE0MjM5NTA0MGM2MjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaXV/E9uelHabj2jz2hhjP/wK4lh 1LrJbIKceRdlRc83mxV4Y+aFxYULrK16mKczMaX/EmqCyOHd6+2ae7naHE/I2jyN 6HapKakbRaZR5II4CZAbOFm1jGqr2WtIf7ie1BdVoEgjeV97wleHxjZ34JyNcOQH +Dp3E3Q1aSfaeHuYJeaPOqhH0wpC36Y5ASSNjT2HK9kXMBjJQWAcN448asIiCUpF CrFryI4r1C4BGQwMQ/LLs/LRgapZeD1uCZSJvMZtnjFBJeho67Znx66aCX94faod 6E139ZmflwRG5F9EedhOJhr6+TYOOPJJjmGLlUcmFUkQ2vEQICzul5lZcwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFP6DHua9aVZNXlpgTNMUI5UEDGKAMB8GA1UdIwQY MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt ZjJiODEwNzliNzQ2LzEvX29NZTVyMXBWazFlV21CTTB4UWpsUVFNWW9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2 LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA0BAIAATAuAwQCLQrwAwQC W9coMAwDBANfgegDBAFfgewDBAK5gWQwDAMEBLmy0AMEALmy0jAPBAIAAjAJAwcA KgpBgAAAMA0GCSqGSIb3DQEBCwUAA4IBAQB33Rq/gLnsIDxkNqzLmW3uDjLjWEmG caWvPtLBkWzRHh5KWynw0XZdAMkIQN8LWIFRQqx9jt01QAVHcH5Zp1Dk/QIaKLvj i/UyUTdgPo6H4lqGlfHIthtfqxJkdJlgFBPwJzm0xxmD6XSsaY6AQt00CUmHJqGQ tJqG6wgbyAchDzmPNIDsYk4g489T0joyUHD12JO750jcbg6B2qOguY5HhDWtX4RO mVZJLS6XxPG0T7h+zL5r9iTV4A3qf34VgJOCNAVfzCszGO8rOI8oS2LW71Gy+6/9 XF42DoT2vP6VB3Np1L2mocHRyIrN+Dq1GNxRKwkGkx2VI1kpRQdhQSiX -----END CERTIFICATE-----Generated at Wed Feb 4 20:16:56 2026 by rpki-client