This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/P0OUzf8dSvmExJwUtJ0n2x9_5To.roa File: P0OUzf8dSvmExJwUtJ0n2x9_5To.roa (raw, json) Hash identifier: TK5fbLc52j4bkHB/r8jxGRizxLaHRCRki8SR0RyXg1M= Subject key identifier: 3F:43:94:CD:FF:1D:4A:F9:84:C4:9C:14:B4:9D:27:DB:1F:7F:E5:3A Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e Certificate serial: 019B7758E36ACCB3FEA86ACADEC4DF8AD15D Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/P0OUzf8dSvmExJwUtJ0n2x9_5To.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41360 IP address blocks: 31.128.180.0/23 maxlen: 23 31.128.180.0/24 maxlen: 24 31.128.181.0/24 maxlen: 24 91.192.44.0/22 maxlen: 22 91.192.44.0/23 maxlen: 23 91.192.44.0/24 maxlen: 24 91.192.45.0/24 maxlen: 24 91.192.46.0/23 maxlen: 23 91.192.46.0/24 maxlen: 24 91.192.47.0/24 maxlen: 24 91.217.66.0/23 maxlen: 23 91.217.66.0/24 maxlen: 24 91.217.67.0/24 maxlen: 24 194.9.14.0/23 maxlen: 23 194.9.14.0/24 maxlen: 24 194.9.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e3:6a:cc:b3:fe:a8:6a:ca:de:c4:df:8a:d1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f4394cdff1d4af984c49c14b49d27db1f7fe53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:9b:00:f7:b8:51:1e:38:9c:9a:37:2e:a5: 5f:b2:cc:e3:54:8c:cc:f3:3a:4a:6c:96:4e:44:f3: 5f:76:46:02:dd:25:06:e6:90:0a:7b:68:e5:a5:06: c7:c2:2c:ca:ab:23:14:8e:81:6e:bd:14:b1:f5:95: 20:31:cc:01:91:c5:93:9a:1b:8d:67:50:39:bb:83: 9a:a1:52:a8:f4:3d:44:d3:00:05:27:79:95:b4:f4: 42:ac:9c:08:2a:1b:be:e0:a1:df:93:74:11:52:e0: 8b:5c:95:db:20:8d:e2:e0:17:5a:4a:4a:7e:3e:ce: 01:bf:63:0a:89:63:db:91:ac:cc:18:bf:e2:22:06: f9:64:7e:65:a9:7f:e0:2f:b9:34:1d:84:0a:c1:0f: 8a:b9:c5:74:85:a6:0c:a0:0b:9e:71:87:b6:5b:f0: bb:71:e7:8f:20:8c:66:4a:e4:32:39:f4:50:db:5e: c2:e0:04:0e:ee:87:60:af:21:35:e6:da:69:52:df: 6d:16:3f:38:28:3e:2c:87:24:90:e0:a1:ec:3e:7a: 4f:a5:ed:93:34:d2:12:2e:a0:53:8b:ce:b0:52:fc: 8e:0c:29:73:a9:5b:91:4b:8e:e9:f6:6d:bb:c9:b5: 2c:24:93:9f:b2:a8:5a:64:b8:8c:83:97:a7:37:52: e4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:43:94:CD:FF:1D:4A:F9:84:C4:9C:14:B4:9D:27:DB:1F:7F:E5:3A X509v3 Authority Key Identifier: keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/P0OUzf8dSvmExJwUtJ0n2x9_5To.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.180.0/23 91.192.44.0/22 91.217.66.0/23 194.9.14.0/23 Signature Algorithm: sha256WithRSAEncryption 50:92:00:ee:aa:e2:38:05:0c:de:5a:15:06:0f:f3:ae:0e:ff: ca:ca:3d:ff:1b:8c:61:ac:4d:94:e1:2a:db:b2:ba:9a:4b:40: 37:e4:ea:1f:41:4c:bd:4d:72:69:36:5a:18:a3:94:51:55:b2: 37:3f:3a:cb:d0:d8:98:f4:2e:e8:32:f2:b4:5f:73:d5:47:fe: 71:38:62:5b:da:2d:32:01:df:b7:56:3a:be:78:58:00:5f:7a: 3b:c2:ed:9d:ad:f7:b8:7b:f4:79:37:ae:55:6a:0f:5d:e2:0c: 88:1a:6f:57:28:10:34:bb:1c:7c:0e:fb:de:f9:a8:ec:85:1b: 7b:df:1b:63:5b:c6:5d:e8:87:2a:9a:eb:0f:3e:01:e8:d0:29: 39:75:0a:af:71:32:05:d9:11:a8:96:2d:f0:77:3f:d8:1b:93: b1:5d:aa:6b:9f:5d:4b:92:31:ba:78:31:84:0f:51:d6:ea:b2: d2:b5:3a:6d:c2:8e:d4:8a:9e:60:d1:82:58:52:71:a2:8d:34: 15:65:b8:c4:69:8c:5e:2b:67:2d:fd:9e:11:7b:3e:94:f4:05: ff:b0:e9:e8:5e:b1:5a:ef:8d:58:88:c1:ed:81:fb:63:6b:de: ae:9e:05:5f:eb:f5:71:df:bb:7e:df:52:84:f4:9b:a8:7e:bf: 82:41:c9:e0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WONqzLP+qGrK3sTfitFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZGM1NzgzNzI1ZDU5NTAxOTYyYWEyY2I1YjU5MGM0MmI1 N2RmNWUwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjQzOTRjZGZmMWQ0YWY5ODRjNDljMTRiNDlkMjdkYjFmN2ZlNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmubAPe4UR44nJo3LqVfsszjVIzM 8zpKbJZORPNfdkYC3SUG5pAKe2jlpQbHwizKqyMUjoFuvRSx9ZUgMcwBkcWTmhuN Z1A5u4OaoVKo9D1E0wAFJ3mVtPRCrJwIKhu+4KHfk3QRUuCLXJXbII3i4BdaSkp+ Ps4Bv2MKiWPbkazMGL/iIgb5ZH5lqX/gL7k0HYQKwQ+KucV0haYMoAuecYe2W/C7 ceePIIxmSuQyOfRQ217C4AQO7odgryE15tppUt9tFj84KD4shySQ4KHsPnpPpe2T NNISLqBTi86wUvyODClzqVuRS47p9m27ybUsJJOfsqhaZLiMg5enN1Lk0QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD9DlM3/HUr5hMScFLSdJ9sff+U6MB8GA1UdIwQY MBaAFC7cV4NyXVlQGWKqLLW1kMQrV99eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2Yt ZWRkYWMwYzdhMWYyLzEvUDBPVXpmOGRTdm1FeEp3VXRKMG4yeDlfNVRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2YtZWRkYWMwYzdhMWYy LzEvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBH4C0AwQC W8AsAwQBW9lCAwQBwgkOMA0GCSqGSIb3DQEBCwUAA4IBAQBQkgDuquI4BQzeWhUG D/OuDv/Kyj3/G4xhrE2U4SrbsrqaS0A35OofQUy9TXJpNloYo5RRVbI3PzrL0NiY 9C7oMvK0X3PVR/5xOGJb2i0yAd+3Vjq+eFgAX3o7wu2drfe4e/R5N65Vag9d4gyI Gm9XKBA0uxx8Dvve+ajshRt73xtjW8Zd6IcqmusPPgHo0Ck5dQqvcTIF2RGoli3w dz/YG5OxXaprn11LkjG6eDGED1HW6rLStTptwo7Uip5g0YJYUnGijTQVZbjEaYxe K2ct/Z4Rez6U9AX/sOnoXrFa741YiMHtgftja96ungVf6/Vx37t+31KE9Juofr+C Qcng -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:53 2026 by rpki-client