This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa File: 93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa (raw, json) Hash identifier: WXzD03j8xoR9D+l/6kOBvEB/Gim510LMJ3OHuaq0Urg= Subject key identifier: F7:76:68:EC:FB:B6:87:79:7A:62:5F:53:F5:14:81:44:A9:E3:C3:6D Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Certificate serial: 019B7C805B9E9F17E2076B8A0633892C9606 Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 31.186.0.0/24 maxlen: 24 31.186.1.0/24 maxlen: 24 31.186.2.0/24 maxlen: 24 31.186.3.0/24 maxlen: 24 31.186.4.0/24 maxlen: 24 31.186.5.0/24 maxlen: 24 31.186.6.0/24 maxlen: 24 31.186.7.0/24 maxlen: 24 31.186.8.0/24 maxlen: 24 31.186.9.0/24 maxlen: 24 31.186.10.0/24 maxlen: 24 31.186.11.0/24 maxlen: 24 31.186.12.0/24 maxlen: 24 31.186.13.0/24 maxlen: 24 31.186.14.0/24 maxlen: 24 31.186.15.0/24 maxlen: 24 31.186.16.0/24 maxlen: 24 31.186.17.0/24 maxlen: 24 31.186.18.0/24 maxlen: 24 31.186.19.0/24 maxlen: 24 31.186.20.0/24 maxlen: 24 31.186.21.0/24 maxlen: 24 31.186.22.0/24 maxlen: 24 31.186.23.0/24 maxlen: 24 31.186.24.0/24 maxlen: 24 31.186.25.0/24 maxlen: 24 31.186.26.0/24 maxlen: 24 31.186.27.0/24 maxlen: 24 31.186.28.0/24 maxlen: 24 31.186.29.0/24 maxlen: 24 31.186.30.0/24 maxlen: 24 31.186.31.0/24 maxlen: 24 2a0d:a000:0:a00::/56 maxlen: 56 2a0d:a000:0:b00::/56 maxlen: 56 2a0d:a000:0:c00::/56 maxlen: 56 2a0d:a000:0:d00::/56 maxlen: 56 2a0d:a000:0:e00::/56 maxlen: 56 2a0d:a000:0:f00::/56 maxlen: 56 2a0d:a000:0:1000::/56 maxlen: 56 2a0d:a000:0:1100::/56 maxlen: 56 2a0d:a000:0:1200::/56 maxlen: 56 2a0d:a000:0:1300::/56 maxlen: 56 2a0d:a000:0:1400::/56 maxlen: 56 2a0d:a000:0:1500::/56 maxlen: 56 2a0d:a000:0:1600::/56 maxlen: 56 2a0d:a000:0:1700::/56 maxlen: 56 2a0d:a000:0:1800::/56 maxlen: 56 2a0d:a000:0:1900::/56 maxlen: 56 2a0d:a000:0:1a00::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5b:9e:9f:17:e2:07:6b:8a:06:33:89:2c:96:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f77668ecfbb687797a625f53f5148144a9e3c36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:e9:5c:ff:03:94:4a:c0:5e:4b:13:c6:84: a1:45:fe:bf:cf:29:21:d5:d8:8a:2f:d9:38:e5:1f: fa:10:ea:98:ee:41:1b:ab:f4:52:9a:7a:b2:e3:fd: 60:91:40:09:cf:b8:4f:50:a3:64:dc:aa:b4:c4:6e: f7:62:bd:d4:dc:57:6a:85:7c:e3:dc:c8:c1:e3:3d: 0e:1f:5b:41:ce:59:73:50:8f:f1:7a:6f:06:cd:80: 9f:c3:98:1c:bc:8a:f6:b6:95:d9:0f:0d:b7:5b:36: e3:e1:bf:35:8e:8f:49:3e:f7:f6:e0:5d:11:64:ac: a7:b3:b3:c8:bc:66:ae:0f:5d:73:79:11:61:92:28: 16:77:66:fa:d8:7b:34:da:70:d1:90:f7:69:b1:09: ff:f1:0b:a7:66:50:04:70:34:ca:fe:ab:6b:6e:c3: ce:1d:48:bd:99:42:3c:f3:11:30:d7:d0:b7:1c:3b: f7:1e:c3:8d:d0:f9:68:9a:08:25:d2:62:ed:ee:8c: 8a:e6:17:93:bd:87:c9:a4:36:5a:3b:94:37:d8:c5: 6a:3b:46:e2:fa:b2:1f:ef:20:cc:aa:12:89:9b:ad: f5:0b:33:bd:68:a9:5d:82:2c:aa:55:6e:81:69:89: 47:1f:2b:a9:e7:8b:48:bb:56:f0:79:ef:10:aa:e4: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:76:68:EC:FB:B6:87:79:7A:62:5F:53:F5:14:81:44:A9:E3:C3:6D X509v3 Authority Key Identifier: keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/93Zo7Pu2h3l6Yl9T9RSBRKnjw20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.0.0/19 IPv6: 2a0d:a000:0:a00::-2a0d:a000:0:1aff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5f:54:e3:ec:d9:da:81:e9:f6:d5:dc:87:6f:a5:0f:e3:65:61: 3f:13:a7:82:d1:ab:dd:d4:05:68:f9:e3:da:ed:f9:35:2a:79: 7b:25:34:0e:75:00:ef:26:67:23:be:33:43:44:ff:6a:82:02: 03:46:b0:8b:99:2c:7c:41:98:ba:fe:73:72:a9:5a:84:64:33: cd:55:47:83:35:68:c3:3e:67:c0:43:6e:b9:8e:26:3a:6c:95: 00:74:1d:d7:cf:ec:30:fc:dc:09:55:36:fa:55:f7:71:aa:a5: b5:2e:76:5b:82:d1:1e:06:2b:4c:17:0c:fa:39:0f:e2:e1:f9: 26:6e:fd:b8:9a:bf:ed:17:6d:e5:91:7c:b6:b8:11:fc:b7:13: a5:56:ce:77:47:ab:fd:04:72:81:dc:ac:ae:4e:b3:b1:c8:53: 92:ee:af:e9:35:4e:5f:65:4d:1f:aa:32:d7:1d:02:b5:ed:7f: 92:ca:db:1d:f6:e4:67:ab:33:21:55:d6:e7:66:b5:a9:0f:0c: 99:e4:e9:23:d5:65:24:9f:45:de:17:d3:64:0b:ab:61:5b:1f: f1:e7:ce:a7:96:35:e0:c4:b7:f7:2e:5b:e1:d3:25:55:c4:83: 60:db:9f:a8:ff:a3:fc:b6:8c:d2:59:a1:4b:ef:88:de:c5:be: 6b:6d:4a:29 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8gFuenxfiB2uKBjOJLJYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh OGU3ZTIwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzc2NjhlY2ZiYjY4Nzc5N2E2MjVmNTNmNTE0ODE0NGE5ZTNjMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArijpXP8DlErAXksTxoShRf6/zykh 1diKL9k45R/6EOqY7kEbq/RSmnqy4/1gkUAJz7hPUKNk3Kq0xG73Yr3U3FdqhXzj 3MjB4z0OH1tBzllzUI/xem8GzYCfw5gcvIr2tpXZDw23Wzbj4b81jo9JPvf24F0R ZKyns7PIvGauD11zeRFhkigWd2b62Hs02nDRkPdpsQn/8QunZlAEcDTK/qtrbsPO HUi9mUI88xEw19C3HDv3HsON0Plomggl0mLt7oyK5heTvYfJpDZaO5Q32MVqO0bi +rIf7yDMqhKJm631CzO9aKldgiyqVW6BaYlHHyup54tIu1bwee8QquR24wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPd2aOz7tod5emJfU/UUgUSp48NtMB8GA1UdIwQY MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt ZTRmNTg3MDQ4MDRlLzEvOTNabzdQdTJoM2w2WWw5VDlSU0JSS25qdzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAMBAIAATAGAwQFH7oAMBwE AgACMBYwFAMIASoNoAAAAAoDCAAqDaAAAAAaMA0GCSqGSIb3DQEBCwUAA4IBAQBf VOPs2dqB6fbV3IdvpQ/jZWE/E6eC0avd1AVo+ePa7fk1Knl7JTQOdQDvJmcjvjND RP9qggIDRrCLmSx8QZi6/nNyqVqEZDPNVUeDNWjDPmfAQ265jiY6bJUAdB3Xz+ww /NwJVTb6VfdxqqW1LnZbgtEeBitMFwz6OQ/i4fkmbv24mr/tF23lkXy2uBH8txOl Vs53R6v9BHKB3KyuTrOxyFOS7q/pNU5fZU0fqjLXHQK17X+Sytsd9uRnqzMhVdbn ZrWpDwyZ5Okj1WUkn0XeF9NkC6thWx/x586nljXgxLf3Llvh0yVVxINg25+o/6P8 tozSWaFL74jexb5rbUop -----END CERTIFICATE-----Generated at Mon Feb 2 15:41:09 2026 by rpki-client