This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/o2wMPqpUwKK3k92hqD5HvK3oiiI.roa File: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (raw, json) Hash identifier: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk= Subject key identifier: A3:6C:0C:3E:AA:54:C0:A2:B7:93:DD:A1:A8:3E:47:BC:AD:E8:8A:22 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019B7C7FE0F05CBE5D2E76B131BF2EB11060 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/o2wMPqpUwKK3k92hqD5HvK3oiiI.roa Signing time: Fri 02 Jan 2026 02:18:34 +0000 ROA not before: Fri 02 Jan 2026 02:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50266 IP address blocks: 31.20.0.0/16 maxlen: 24 31.21.0.0/16 maxlen: 24 31.184.64.0/18 maxlen: 24 31.187.128.0/17 maxlen: 24 62.166.128.0/17 maxlen: 24 62.250.0.0/17 maxlen: 24 62.250.128.0/17 maxlen: 24 81.59.0.0/17 maxlen: 17 82.172.0.0/17 maxlen: 17 82.174.0.0/16 maxlen: 24 85.223.0.0/17 maxlen: 24 87.208.0.0/16 maxlen: 24 87.209.0.0/16 maxlen: 24 87.210.0.0/16 maxlen: 24 87.212.0.0/16 maxlen: 24 92.254.0.0/17 maxlen: 24 94.157.0.0/16 maxlen: 24 95.98.0.0/15 maxlen: 24 95.99.0.0/16 maxlen: 16 143.177.0.0/16 maxlen: 24 143.178.0.0/17 maxlen: 24 143.178.128.0/17 maxlen: 24 143.179.0.0/16 maxlen: 24 178.224.0.0/16 maxlen: 24 178.226.0.0/16 maxlen: 24 188.88.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e0:f0:5c:be:5d:2e:76:b1:31:bf:2e:b1:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Jan 2 02:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a36c0c3eaa54c0a2b793dda1a83e47bcade88a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:e2:75:48:42:f6:5e:1d:b0:70:fc:b1:49: a8:27:a2:c0:de:bd:09:1b:cc:f7:45:3d:8e:e6:09: f4:0d:8d:1d:55:94:f2:7a:79:8c:02:9c:a4:94:6f: 97:65:7f:5e:2b:a0:7a:e9:7c:8a:29:98:b9:3d:24: d0:45:4b:d6:e1:a2:47:c7:22:ea:9f:37:af:8a:4f: 89:40:28:3f:a0:be:b9:24:17:21:18:2c:4e:32:ac: e9:30:5d:72:c6:27:53:aa:1f:a8:36:fc:d8:bc:95: 36:5a:22:57:3d:66:e5:c1:f2:1c:d1:31:35:4b:8d: bd:b5:5b:a5:18:ff:6e:b3:ee:a8:00:2a:75:78:76: 02:9e:3b:2c:ef:9c:af:10:61:32:6e:be:c6:25:4a: 6b:cf:bb:79:90:b5:a1:a9:ac:31:b8:fb:56:59:e9: 63:40:34:f2:c6:e0:28:af:e4:43:f0:29:0c:be:f2: 8e:9a:31:fe:aa:0d:14:01:c2:d2:58:36:9e:82:ce: 77:91:04:ab:35:c1:85:df:8d:d5:63:4e:9c:ab:c0: 20:de:b9:6b:96:ec:17:7b:35:2c:ef:8d:6b:f8:0b: 00:04:f2:56:0f:3f:27:d9:7c:b5:88:73:42:26:5b: 43:52:15:56:55:b7:c1:4a:3b:68:42:41:09:a9:3c: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:0C:3E:AA:54:C0:A2:B7:93:DD:A1:A8:3E:47:BC:AD:E8:8A:22 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/o2wMPqpUwKK3k92hqD5HvK3oiiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.20.0.0/15 31.184.64.0/18 31.187.128.0/17 62.166.128.0/17 62.250.0.0/16 81.59.0.0/17 82.172.0.0/17 82.174.0.0/16 85.223.0.0/17 87.208.0.0-87.210.255.255 87.212.0.0/16 92.254.0.0/17 94.157.0.0/16 95.98.0.0/15 143.177.0.0-143.179.255.255 178.224.0.0/16 178.226.0.0/16 188.88.0.0/14 Signature Algorithm: sha256WithRSAEncryption 41:4d:ee:c6:a5:74:85:17:e9:e7:95:54:c6:f9:44:c4:6b:a3: 20:de:56:46:6f:bb:06:e7:35:28:3a:89:a3:c4:da:4a:d9:8a: 6a:b9:8b:22:c4:f4:ad:e4:d7:d6:c9:c2:ac:1a:a6:6a:e0:28: 09:ea:a3:b6:ca:c9:e0:15:b8:9e:8a:fa:4e:23:6d:73:a9:ec: d1:31:04:19:90:74:ba:fb:46:b6:e7:1d:af:50:ed:da:41:2d: df:1d:1c:ff:dc:78:f2:4c:fb:59:9d:56:de:2a:82:8d:86:ad: b6:35:5e:b2:a0:4a:b5:26:84:3a:91:a5:81:3c:0a:f4:98:21: e0:6f:18:2c:52:ee:5e:16:e4:b7:8c:54:b2:b6:53:18:aa:68: 73:a3:2b:b5:0a:9a:00:0f:5b:31:df:60:b6:14:ee:85:d3:04: fc:4e:a3:88:8e:79:ee:b4:b7:2a:bb:3a:2d:8e:53:98:c0:a7: 40:e7:ac:fc:41:dc:2c:93:a4:9a:f5:fd:a7:50:54:f3:e4:9d: 14:de:da:2f:0e:8e:e0:aa:ac:d9:ba:9a:ad:5e:e5:01:8e:f7: 65:2a:83:60:a1:2b:21:21:64:2a:09:0a:52:40:ac:d5:ca:f3: 59:c6:72:c5:99:d5:35:ed:82:c1:21:e0:ed:a3:44:18:d5:16: 76:80:b9:ce -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISAZt8f+DwXL5dLnaxMb8usRBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjYwMTAyMDIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzZjMGMzZWFhNTRjMGEyYjc5M2RkYTFhODNlNDdiY2FkZTg4YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EjidUhC9l4dsHD8sUmoJ6LA3r0J G8z3RT2O5gn0DY0dVZTyenmMApyklG+XZX9eK6B66XyKKZi5PSTQRUvW4aJHxyLq nzevik+JQCg/oL65JBchGCxOMqzpMF1yxidTqh+oNvzYvJU2WiJXPWblwfIc0TE1 S429tVulGP9us+6oACp1eHYCnjss75yvEGEybr7GJUprz7t5kLWhqawxuPtWWelj QDTyxuAor+RD8CkMvvKOmjH+qg0UAcLSWDaegs53kQSrNcGF343VY06cq8Ag3rlr luwXezUs741r+AsABPJWDz8n2Xy1iHNCJltDUhVWVbfBSjtoQkEJqTzuFQIDAQAB o4ICczCCAm8wHQYDVR0OBBYEFKNsDD6qVMCit5Pdoag+R7yt6IoiMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvbzJ3TVBxcFV3S0szazkyaHFENUh2SzNvaWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGIBggrBgEFBQcBBwEB/wR5MHcwdQQCAAEwbwMDAR8UAwQG H7hAAwQHH7uAAwQHPqaAAwMAPvoDBAdROwADBAdSrAADAwBSrgMEB1XfADAKAwME V9ADAwBX0gMDAFfUAwQHXP4AAwMAXp0DAwFfYjAKAwMAj7EDAwKPsAMDALLgAwMA suIDAwK8WDANBgkqhkiG9w0BAQsFAAOCAQEAQU3uxqV0hRfp55VUxvlExGujIN5W Rm+7Buc1KDqJo8TaStmKarmLIsT0reTX1snCrBqmauAoCeqjtsrJ4BW4nor6TiNt c6ns0TEEGZB0uvtGtucdr1Dt2kEt3x0c/9x48kz7WZ1W3iqCjYattjVesqBKtSaE OpGlgTwK9Jgh4G8YLFLuXhbkt4xUsrZTGKpoc6MrtQqaAA9bMd9gthTuhdME/E6j iI557rS3Krs6LY5TmMCnQOes/EHcLJOkmvX9p1BU8+SdFN7aLw6O4Kqs2bqarV7l AY73ZSqDYKErISFkKgkKUkCs1crzWcZyxZnVNe2CwSHg7aNEGNUWdoC5zg== -----END CERTIFICATE-----Generated at Tue Jan 20 12:46:51 2026 by rpki-client