This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/ow6igTPRlqbGU9GWr5GsAICpDvc.roa File: ow6igTPRlqbGU9GWr5GsAICpDvc.roa (raw, json) Hash identifier: M2OOGjwOx0AiSEzEWO1U/xWbG8Khv5JvliFIW9WxDrw= Subject key identifier: A3:0E:A2:81:33:D1:96:A6:C6:53:D1:96:AF:91:AC:00:80:A9:0E:F7 Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019B77C6C31881578015129F8B2960A868FE Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/ow6igTPRlqbGU9GWr5GsAICpDvc.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197882 IP address blocks: 31.25.136.0/24 maxlen: 24 31.25.137.0/24 maxlen: 24 31.25.138.0/24 maxlen: 24 31.25.139.0/24 maxlen: 24 31.25.140.0/24 maxlen: 24 31.25.141.0/24 maxlen: 24 130.255.92.0/24 maxlen: 24 130.255.93.0/24 maxlen: 24 130.255.94.0/24 maxlen: 24 130.255.95.0/24 maxlen: 24 159.255.160.0/22 maxlen: 22 159.255.160.0/24 maxlen: 24 159.255.161.0/24 maxlen: 24 159.255.162.0/24 maxlen: 24 159.255.163.0/24 maxlen: 24 159.255.164.0/24 maxlen: 24 185.14.248.0/23 maxlen: 23 185.14.250.0/24 maxlen: 24 185.101.236.0/24 maxlen: 24 185.101.237.0/24 maxlen: 24 185.101.238.0/24 maxlen: 24 185.101.239.0/24 maxlen: 24 185.184.198.0/24 maxlen: 24 185.184.199.0/24 maxlen: 24 185.212.33.0/24 maxlen: 24 2a03:bcc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c3:18:81:57:80:15:12:9f:8b:29:60:a8:68:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a30ea28133d196a6c653d196af91ac0080a90ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:70:c2:59:19:40:3f:36:0c:5f:e3:d4:eb: 98:3a:80:19:66:7f:d4:77:79:84:a4:1c:aa:48:02: 18:31:16:a5:c6:2c:1e:c5:ca:46:ac:16:45:f4:99: a0:46:dd:67:7a:72:96:5c:17:24:7b:1e:41:b6:79: 3c:a3:0a:06:28:36:2f:56:7c:0c:ea:48:c7:57:89: 52:4e:b4:c4:71:56:c0:d1:57:a0:7f:6a:0b:8f:d9: 3e:86:86:06:6b:df:21:70:1c:29:05:91:28:f3:70: df:08:11:73:6a:c5:29:ac:b1:2e:39:4c:fb:a8:30: 44:f3:77:7a:d9:b9:9f:46:a2:d2:a3:32:03:a4:d1: 5b:f9:f7:0d:d6:55:05:9b:14:4f:da:fe:a3:7f:41: 69:50:9c:28:60:ee:19:9e:85:07:02:3f:e3:95:2a: 14:23:ea:c6:aa:b3:6c:71:8b:1a:de:de:d4:93:48: 6a:fd:21:a1:d6:9e:6b:a7:9a:d5:db:f7:b0:93:1f: 6e:37:ce:fe:f6:45:6a:21:24:9c:a9:98:08:e3:a5: 21:95:47:2c:b7:07:1e:2f:d0:9b:79:8c:4c:60:e4: 9c:e0:33:14:79:a6:96:dd:8d:09:34:48:75:d3:e2: 4a:39:2b:f9:3e:91:6a:9e:bf:b7:36:06:ee:5b:ac: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0E:A2:81:33:D1:96:A6:C6:53:D1:96:AF:91:AC:00:80:A9:0E:F7 X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/ow6igTPRlqbGU9GWr5GsAICpDvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.136.0-31.25.141.255 130.255.92.0/22 159.255.160.0-159.255.164.255 185.14.248.0-185.14.250.255 185.101.236.0/22 185.184.198.0/23 185.212.33.0/24 IPv6: 2a03:bcc0:1::/48 Signature Algorithm: sha256WithRSAEncryption a7:aa:f1:5b:22:5b:0b:72:6d:be:58:8f:10:23:b0:35:43:43: 2d:4b:75:4d:f2:e3:22:45:f0:33:75:48:db:84:71:47:2b:f0: 18:28:55:4f:3b:49:00:59:13:59:9d:39:17:5c:ad:e1:bb:4d: a5:26:9b:d6:1b:2e:02:27:5c:4e:8a:92:d0:6f:81:24:82:c0: 06:bc:b2:bd:15:cc:a5:12:9d:30:75:37:21:e3:66:0a:30:1f: f0:43:52:98:0e:f8:cf:46:ae:7c:2a:10:34:a8:a7:ce:63:53: cd:86:a0:e6:36:bd:e9:7b:df:70:48:0d:e1:eb:4f:5f:a7:6d: 88:0e:cc:75:61:af:07:6a:15:c8:94:4a:be:08:45:00:47:8c: ef:d3:75:b7:89:d9:e8:91:ef:ce:a7:e2:c6:02:7e:9a:71:95: f8:84:c7:d8:9b:cb:60:57:e8:f5:f4:96:7d:89:7c:4f:51:e5: f7:a9:ec:d4:4b:61:86:93:0f:55:38:83:f1:a9:69:03:a6:27: 06:5f:8a:68:17:b9:68:a6:c4:d1:b4:ba:47:80:d0:10:fa:de: ad:47:cd:21:31:e6:45:a6:37:02:ed:6c:91:ae:b6:0e:3e:b5: 77:61:99:b0:dc:aa:99:98:5e:3c:cc:d7:f0:ad:12:98:99:2b: 24:e0:61:68 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt3xsMYgVeAFRKfiylgqGj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzBlYTI4MTMzZDE5NmE2YzY1M2QxOTZhZjkxYWMwMDgwYTkwZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/dwwlkZQD82DF/j1OuYOoAZZn/U d3mEpByqSAIYMRalxiwexcpGrBZF9JmgRt1nenKWXBckex5Btnk8owoGKDYvVnwM 6kjHV4lSTrTEcVbA0Vegf2oLj9k+hoYGa98hcBwpBZEo83DfCBFzasUprLEuOUz7 qDBE83d62bmfRqLSozIDpNFb+fcN1lUFmxRP2v6jf0FpUJwoYO4ZnoUHAj/jlSoU I+rGqrNscYsa3t7Uk0hq/SGh1p5rp5rV2/ewkx9uN87+9kVqISScqZgI46UhlUcs twceL9CbeYxMYOSc4DMUeaaW3Y0JNEh10+JKOSv5PpFqnr+3NgbuW6y8qwIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFKMOooEz0ZamxlPRlq+RrACAqQ73MB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvb3c2aWdUUFJscWJHVTlHV3I1R3NBSUNwRHZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBIBAIAATBCMAwDBAMfGYgD BAEfGYwDBAKC/1wwDAMEBZ//oAMEAJ//pDAMAwQDuQ74AwQAuQ76AwQCuWXsAwQB ubjGAwQAudQhMA8EAgACMAkDBwAqA7zAAAEwDQYJKoZIhvcNAQELBQADggEBAKeq 8VsiWwtybb5YjxAjsDVDQy1LdU3y4yJF8DN1SNuEcUcr8BgoVU87SQBZE1mdORdc reG7TaUmm9YbLgInXE6KktBvgSSCwAa8sr0VzKUSnTB1NyHjZgowH/BDUpgO+M9G rnwqEDSop85jU82GoOY2vel733BIDeHrT1+nbYgOzHVhrwdqFciUSr4IRQBHjO/T dbeJ2eiR786n4sYCfppxlfiEx9iby2BX6PX0ln2JfE9R5fep7NRLYYaTD1U4g/Gp aQOmJwZfimgXuWimxNG0ukeA0BD63q1HzSEx5kWmNwLtbJGutg4+tXdhmbDcqpmY XjzM1/CtEpiZKyTgYWg= -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:25 2026 by rpki-client