This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o7SvypNrxLdwwwmewnSok1RHnBY.roa File: o7SvypNrxLdwwwmewnSok1RHnBY.roa (raw, json) Hash identifier: 6Op9xZIZs3pdbpT2rG/iqETyA95UjdlKv7ACQr8U4PQ= Subject key identifier: A3:B4:AF:CA:93:6B:C4:B7:70:C3:09:9E:C2:74:A8:93:54:47:9C:16 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1384F073D9BBBC78804FAC219602B0 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o7SvypNrxLdwwwmewnSok1RHnBY.roa Signing time: Fri 02 Jan 2026 00:20:12 +0000 ROA not before: Fri 02 Jan 2026 00:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201942 IP address blocks: 31.170.100.0/22 maxlen: 24 37.32.99.0/24 maxlen: 24 45.90.238.0/24 maxlen: 24 45.131.132.0/23 maxlen: 24 45.137.160.0/22 maxlen: 24 45.147.104.0/22 maxlen: 24 45.147.116.0/22 maxlen: 24 45.159.76.0/22 maxlen: 24 62.106.87.0/24 maxlen: 24 81.21.228.0/22 maxlen: 24 85.115.192.0/22 maxlen: 24 88.135.64.0/22 maxlen: 24 91.235.40.0/24 maxlen: 24 91.235.41.0/24 maxlen: 24 91.238.239.0/24 maxlen: 24 92.60.34.0/24 maxlen: 24 92.60.35.0/24 maxlen: 24 93.92.228.0/22 maxlen: 24 93.189.120.0/24 maxlen: 24 93.189.123.0/24 maxlen: 24 95.214.144.0/22 maxlen: 24 109.230.194.0/24 maxlen: 24 109.230.250.0/24 maxlen: 24 185.91.108.0/22 maxlen: 24 185.105.12.0/22 maxlen: 24 185.105.232.0/22 maxlen: 24 185.106.124.0/22 maxlen: 24 185.107.152.0/22 maxlen: 24 185.118.52.0/23 maxlen: 23 185.118.54.0/23 maxlen: 23 185.119.48.0/22 maxlen: 24 185.128.52.0/22 maxlen: 24 185.129.104.0/22 maxlen: 24 185.150.78.0/23 maxlen: 24 185.163.168.0/22 maxlen: 24 185.163.232.0/22 maxlen: 24 185.166.172.0/22 maxlen: 24 185.175.152.0/22 maxlen: 24 185.176.188.0/22 maxlen: 24 185.179.228.0/22 maxlen: 24 185.179.232.0/22 maxlen: 24 185.189.64.0/22 maxlen: 24 185.196.40.0/22 maxlen: 24 185.196.42.0/24 maxlen: 24 185.196.43.0/24 maxlen: 24 185.197.216.0/22 maxlen: 24 185.199.44.0/22 maxlen: 24 185.199.55.0/24 maxlen: 24 185.200.228.0/22 maxlen: 24 185.201.152.0/22 maxlen: 24 185.202.204.0/22 maxlen: 24 185.204.108.0/24 maxlen: 24 185.204.244.0/22 maxlen: 24 185.212.84.0/22 maxlen: 24 185.216.28.0/22 maxlen: 24 185.217.12.0/22 maxlen: 24 185.218.16.0/22 maxlen: 24 185.220.240.0/22 maxlen: 24 185.221.16.0/22 maxlen: 24 185.222.188.0/22 maxlen: 24 185.223.220.0/22 maxlen: 24 185.224.220.0/22 maxlen: 24 185.226.8.0/22 maxlen: 24 185.226.28.0/22 maxlen: 24 185.227.176.0/22 maxlen: 24 185.227.204.0/24 maxlen: 24 185.230.48.0/22 maxlen: 24 185.239.252.0/22 maxlen: 24 185.239.252.0/24 maxlen: 24 185.239.253.0/24 maxlen: 24 185.239.255.0/24 maxlen: 24 185.245.32.0/23 maxlen: 23 185.247.4.0/24 maxlen: 24 193.17.180.0/22 maxlen: 24 193.17.180.0/24 maxlen: 24 193.17.182.0/24 maxlen: 24 193.35.88.0/22 maxlen: 24 193.105.66.0/24 maxlen: 24 193.162.15.0/24 maxlen: 24 194.35.40.0/24 maxlen: 24 194.41.116.0/22 maxlen: 24 194.41.118.0/24 maxlen: 24 195.182.13.0/24 maxlen: 24 212.80.208.0/22 maxlen: 24 212.115.44.0/22 maxlen: 24 213.232.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:84:f0:73:d9:bb:bc:78:80:4f:ac:21:96:02:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3b4afca936bc4b770c3099ec274a89354479c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:46:d0:c8:52:35:a9:64:d5:4d:39:f6:14: 80:bf:1c:1a:20:59:17:0f:fd:38:cc:2b:36:da:b5: 7d:1b:c5:48:76:17:12:00:8a:ac:7c:3a:56:a8:0f: e2:b9:54:d0:ea:c3:ee:4d:60:87:9b:0b:cf:8e:22: c7:d7:f3:c4:1a:1c:db:02:ec:9a:60:a3:00:c5:20: e3:c2:b7:bb:66:b5:81:fd:97:e3:29:14:57:b9:b8: 27:f9:c8:b7:c5:62:5f:95:00:dd:b8:87:74:53:ba: 40:44:87:07:a3:15:a0:85:4e:09:f5:76:10:ae:bb: 14:02:33:94:f4:88:da:fe:97:c1:ee:31:dd:fd:d3: b7:14:3d:90:63:cb:e6:b2:5c:a9:c3:30:d2:5a:02: fc:55:5d:63:6e:a9:de:bc:f0:8f:65:79:66:45:ce: ac:79:5b:d9:9f:ce:e0:04:b6:4c:83:72:53:74:a5: 87:e7:33:76:63:06:e1:7c:ed:5a:d0:20:fc:62:c4: b6:6b:9f:32:48:34:51:53:ee:2b:aa:d3:9b:d9:4e: c1:74:f9:ae:a5:90:0e:2f:0e:75:9a:80:39:7e:82: fe:df:01:da:28:5b:ec:92:95:63:bf:b6:46:b1:21: aa:4b:ad:f5:a7:57:1b:05:3a:95:9d:0b:a7:74:21: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B4:AF:CA:93:6B:C4:B7:70:C3:09:9E:C2:74:A8:93:54:47:9C:16 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o7SvypNrxLdwwwmewnSok1RHnBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.100.0/22 37.32.99.0/24 45.90.238.0/24 45.131.132.0/23 45.137.160.0/22 45.147.104.0/22 45.147.116.0/22 45.159.76.0/22 62.106.87.0/24 81.21.228.0/22 85.115.192.0/22 88.135.64.0/22 91.235.40.0/23 91.238.239.0/24 92.60.34.0/23 93.92.228.0/22 93.189.120.0/24 93.189.123.0/24 95.214.144.0/22 109.230.194.0/24 109.230.250.0/24 185.91.108.0/22 185.105.12.0/22 185.105.232.0/22 185.106.124.0/22 185.107.152.0/22 185.118.52.0/22 185.119.48.0/22 185.128.52.0/22 185.129.104.0/22 185.150.78.0/23 185.163.168.0/22 185.163.232.0/22 185.166.172.0/22 185.175.152.0/22 185.176.188.0/22 185.179.228.0-185.179.235.255 185.189.64.0/22 185.196.40.0/22 185.197.216.0/22 185.199.44.0/22 185.199.55.0/24 185.200.228.0/22 185.201.152.0/22 185.202.204.0/22 185.204.108.0/24 185.204.244.0/22 185.212.84.0/22 185.216.28.0/22 185.217.12.0/22 185.218.16.0/22 185.220.240.0/22 185.221.16.0/22 185.222.188.0/22 185.223.220.0/22 185.224.220.0/22 185.226.8.0/22 185.226.28.0/22 185.227.176.0/22 185.227.204.0/24 185.230.48.0/22 185.239.252.0/22 185.245.32.0/23 185.247.4.0/24 193.17.180.0/22 193.35.88.0/22 193.105.66.0/24 193.162.15.0/24 194.35.40.0/24 194.41.116.0/22 195.182.13.0/24 212.80.208.0/22 212.115.44.0/22 213.232.232.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:93:7f:f3:9c:8a:95:69:60:93:55:d0:7b:19:6c:65:52:c6: 1a:25:37:ab:a0:d0:7e:5d:01:f9:8d:72:c4:fe:e8:67:b2:60: be:a4:a4:6f:a2:fc:57:d0:5e:f0:69:f6:37:32:81:b3:5a:50: 51:54:b8:d8:7a:81:68:06:fd:3d:b7:9a:89:b3:8c:da:72:ae: a6:33:91:f5:ed:44:5e:b9:51:fb:28:88:21:65:d1:82:d0:58: 7e:08:97:a1:f3:45:f8:af:5f:f3:0f:b3:11:9b:ba:dc:69:15: 44:f4:c8:b4:f7:39:b3:b9:28:0e:a4:60:54:bb:24:fd:d6:18: 07:58:97:da:c6:a1:5e:33:d1:4d:87:d5:13:b0:dd:d3:eb:f7: 24:6b:10:15:cf:33:16:1f:5e:36:d2:0c:ac:61:84:22:8d:79: 77:86:62:e3:bc:11:90:d8:84:28:5f:5e:18:42:11:b7:e3:69: c4:7e:bb:ec:d8:8a:37:2f:fe:3d:c0:65:74:f5:c7:8c:d7:3b: 88:83:0d:6e:b5:bf:f6:3a:a9:12:15:b1:0d:e9:ea:aa:a3:b6: 97:43:33:56:d7:d2:05:2a:cc:2a:22:57:15:88:4b:0e:20:a2: 42:7b:84:a9:0a:69:ae:e8:e5:87:23:76:d6:87:fc:7b:46:b0: a1:1c:5f:ad -----BEGIN CERTIFICATE----- MIIGxTCCBa2gAwIBAgISAZt8E4Twc9m7vHiAT6whlgKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2I0YWZjYTkzNmJjNGI3NzBjMzA5OWVjMjc0YTg5MzU0NDc5YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd1G0MhSNalk1U059hSAvxwaIFkX D/04zCs22rV9G8VIdhcSAIqsfDpWqA/iuVTQ6sPuTWCHmwvPjiLH1/PEGhzbAuya YKMAxSDjwre7ZrWB/ZfjKRRXubgn+ci3xWJflQDduId0U7pARIcHoxWghU4J9XYQ rrsUAjOU9Ija/pfB7jHd/dO3FD2QY8vmslypwzDSWgL8VV1jbqnevPCPZXlmRc6s eVvZn87gBLZMg3JTdKWH5zN2YwbhfO1a0CD8YsS2a58ySDRRU+4rqtOb2U7BdPmu pZAOLw51moA5foL+3wHaKFvskpVjv7ZGsSGqS631p1cbBTqVnQundCER5wIDAQAB o4ID0TCCA80wHQYDVR0OBBYEFKO0r8qTa8S3cMMJnsJ0qJNUR5wWMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvbzdTdnlwTnJ4TGR3d3dtZXduU29rMVJIbkJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB5QYIKwYBBQUHAQcBAf8EggHUMIIB0DCCAcwEAgABMIIB xAMEAh+qZAMEACUgYwMEAC1a7gMEAS2DhAMEAi2JoAMEAi2TaAMEAi2TdAMEAi2f TAMEAD5qVwMEAlEV5AMEAlVzwAMEAliHQAMEAVvrKAMEAFvu7wMEAVw8IgMEAl1c 5AMEAF29eAMEAF29ewMEAl/WkAMEAG3mwgMEAG3m+gMEArlbbAMEArlpDAMEArlp 6AMEArlqfAMEArlrmAMEArl2NAMEArl3MAMEArmANAMEArmBaAMEAbmWTgMEArmj qAMEArmj6AMEArmmrAMEArmvmAMEArmwvDAMAwQCubPkAwQCubPoAwQCub1AAwQC ucQoAwQCucXYAwQCuccsAwQAucc3AwQCucjkAwQCucmYAwQCucrMAwQAucxsAwQC ucz0AwQCudRUAwQCudgcAwQCudkMAwQCudoQAwQCudzwAwQCud0QAwQCud68AwQC ud/cAwQCueDcAwQCueIIAwQCueIcAwQCueOwAwQAuePMAwQCueYwAwQCue/8AwQB ufUgAwQAufcEAwQCwRG0AwQCwSNYAwQAwWlCAwQAwaIPAwQAwiMoAwQCwil0AwQA w7YNAwQC1FDQAwQC1HMsAwQA1ejoMA0GCSqGSIb3DQEBCwUAA4IBAQBbk3/znIqV aWCTVdB7GWxlUsYaJTeroNB+XQH5jXLE/uhnsmC+pKRvovxX0F7wafY3MoGzWlBR VLjYeoFoBv09t5qJs4zacq6mM5H17UReuVH7KIghZdGC0Fh+CJeh80X4r1/zD7MR m7rcaRVE9Mi09zmzuSgOpGBUuyT91hgHWJfaxqFeM9FNh9UTsN3T6/ckaxAVzzMW H1420gysYYQijXl3hmLjvBGQ2IQoX14YQhG342nEfrvs2Io3L/49wGV09ceM1zuI gw1utb/2OqkSFbEN6eqqo7aXQzNW19IFKswqIlcViEsOIKJCe4SpCmmu6OWHI3bW h/x7RrChHF+t -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:31 2026 by rpki-client