This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/oVJBkQA-O0NzrQgh8tJmHAKTQWQ.roa File: oVJBkQA-O0NzrQgh8tJmHAKTQWQ.roa (raw, json) Hash identifier: bAWpRSTao5SUodimZihTy0UH7Q46FL0EVHclliB3Pco= Subject key identifier: A1:52:41:91:00:3E:3B:43:73:AD:08:21:F2:D2:66:1C:02:93:41:64 Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f Certificate serial: 019B797E4DCDBC86697E6F2184DA91E26F84 Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/oVJBkQA-O0NzrQgh8tJmHAKTQWQ.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5398 IP address blocks: 31.44.32.0/20 maxlen: 20 31.44.44.0/23 maxlen: 23 31.44.46.0/23 maxlen: 23 46.21.22.0/24 maxlen: 24 46.21.29.0/24 maxlen: 24 185.155.176.0/22 maxlen: 22 185.155.184.0/23 maxlen: 23 193.222.104.0/23 maxlen: 23 193.222.105.0/24 maxlen: 24 2a04:1580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4d:cd:bc:86:69:7e:6f:21:84:da:91:e2:6f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1524191003e3b4373ad0821f2d2661c02934164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:6e:83:e9:50:5a:b9:cc:c7:62:dd:39:4f: 15:c6:01:77:69:45:e5:9b:37:c9:b2:f4:b5:61:c3: 89:eb:72:ff:57:b0:c1:2e:58:cb:d0:84:7d:30:79: da:a5:07:4d:f8:30:14:44:75:e9:ec:db:20:6d:b6: 41:76:b9:93:5d:f3:63:bf:55:f0:b6:5c:7c:0a:d4: 58:20:f2:5a:d8:71:d7:3d:25:24:c8:68:8b:de:4f: 9d:73:26:ba:ab:0a:28:16:07:6e:2b:6a:02:15:6c: 76:5b:3e:56:4b:bc:f7:bd:e1:ab:4c:b5:76:6d:6f: 70:80:71:3b:90:fe:5e:d1:0d:a6:14:8b:4a:47:5b: 36:89:b4:2f:1b:f4:1e:5a:29:ad:4c:27:4f:77:98: b4:66:70:3e:fb:19:ef:df:c6:e8:7f:18:b7:07:17: 94:85:f1:32:7b:a8:7c:d5:f7:1d:0b:36:c9:03:b4: 16:ea:2f:b2:b3:09:78:3a:fe:9f:d7:f6:f6:59:15: f0:9a:04:b6:fe:01:bf:85:15:74:cd:c3:15:cf:78: 16:96:96:f4:58:bb:23:f1:6c:e0:e6:e6:b4:bc:18: c7:fd:71:12:cd:9e:87:34:6b:3b:22:0b:3a:11:51: 52:4b:16:36:7f:50:13:42:2d:b7:ba:30:46:6a:ca: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:41:91:00:3E:3B:43:73:AD:08:21:F2:D2:66:1C:02:93:41:64 X509v3 Authority Key Identifier: keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/oVJBkQA-O0NzrQgh8tJmHAKTQWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.32.0/20 46.21.22.0/24 46.21.29.0/24 185.155.176.0/22 185.155.184.0/23 193.222.104.0/23 IPv6: 2a04:1580::/29 Signature Algorithm: sha256WithRSAEncryption 63:b9:a9:4e:4c:48:7e:65:37:ca:15:d9:bb:8b:26:97:ec:25: c6:a7:db:c4:3c:f1:5e:15:22:73:37:7d:ef:2a:01:2e:ba:8a: 1a:b7:73:41:61:5b:f5:4b:1e:22:90:07:60:3a:2a:de:b2:fe: d5:de:5b:54:2c:37:1f:d3:b2:0a:63:bd:03:cd:8c:d0:9e:c9: 40:4c:18:1b:0c:e9:6a:16:4c:27:76:e8:85:37:80:e5:86:18: d3:01:18:7c:ec:89:3a:fe:57:74:1a:44:43:94:a8:cf:7e:27: a1:62:64:e4:5e:67:f5:7f:9c:cc:4b:c7:26:54:27:15:bc:ca: 31:77:7f:a1:82:5f:f4:a1:af:08:9c:96:99:b5:b2:3e:9d:42: 56:81:98:42:42:2f:50:2b:17:51:71:7a:06:11:66:41:91:39: 33:73:f3:5d:a5:f9:de:de:49:4d:01:28:77:e7:6a:17:bd:cb: 84:e1:85:50:42:05:f2:9b:2e:20:1f:e5:87:a0:3f:24:2b:ad: 88:8b:8a:e9:7d:73:12:0c:12:ec:7e:bc:84:be:ff:38:f5:df: c6:c4:88:51:c4:95:89:3e:93:27:9a:83:fd:4b:fa:6e:5a:4d: 5f:e2:43:b5:43:9d:0a:ef:41:82:e0:9a:2a:aa:38:79:2b:fb: d2:29:98:21 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt5fk3NvIZpfm8hhNqR4m+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0 YmI0MWYwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTUyNDE5MTAwM2UzYjQzNzNhZDA4MjFmMmQyNjYxYzAyOTM0MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDtug+lQWrnMx2LdOU8VxgF3aUXl mzfJsvS1YcOJ63L/V7DBLljL0IR9MHnapQdN+DAURHXp7NsgbbZBdrmTXfNjv1Xw tlx8CtRYIPJa2HHXPSUkyGiL3k+dcya6qwooFgduK2oCFWx2Wz5WS7z3veGrTLV2 bW9wgHE7kP5e0Q2mFItKR1s2ibQvG/QeWimtTCdPd5i0ZnA++xnv38bofxi3BxeU hfEye6h81fcdCzbJA7QW6i+yswl4Ov6f1/b2WRXwmgS2/gG/hRV0zcMVz3gWlpb0 WLsj8Wzg5ua0vBjH/XESzZ6HNGs7Igs6EVFSSxY2f1ATQi23ujBGaspwpQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFKFSQZEAPjtDc60IIfLSZhwCk0FkMB8GA1UdIwQY MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt OWIyNmNhYjc5NDUxLzEvb1ZKQmtRQS1PME56clFnaDh0Sm1IQUtUUVdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEHywgAwQA LhUWAwQALhUdAwQCuZuwAwQBuZu4AwQBwd5oMA0EAgACMAcDBQMqBBWAMA0GCSqG SIb3DQEBCwUAA4IBAQBjualOTEh+ZTfKFdm7iyaX7CXGp9vEPPFeFSJzN33vKgEu uooat3NBYVv1Sx4ikAdgOiresv7V3ltULDcf07IKY70DzYzQnslATBgbDOlqFkwn duiFN4DlhhjTARh87Ik6/ld0GkRDlKjPfiehYmTkXmf1f5zMS8cmVCcVvMoxd3+h gl/0oa8InJaZtbI+nUJWgZhCQi9QKxdRcXoGEWZBkTkzc/Ndpfne3klNASh352oX vcuE4YVQQgXymy4gH+WHoD8kK62Ii4rpfXMSDBLsfryEvv849d/GxIhRxJWJPpMn moP9S/puWk1f4kO1Q50K70GC4Joqqjh5K/vSKZgh -----END CERTIFICATE-----Generated at Mon Jan 26 18:13:56 2026 by rpki-client