This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/OfRVJ7_eaet9FZN9xLvW_dLglGI.roa File: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (raw, json) Hash identifier: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc= Subject key identifier: 39:F4:55:27:BF:DE:69:EB:7D:15:93:7D:C4:BB:D6:FD:D2:E0:94:62 Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6 Certificate serial: 019B7B36AE8542D6C2DCB80EE31C8A297BB7 Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/OfRVJ7_eaet9FZN9xLvW_dLglGI.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31724 IP address blocks: 31.170.168.0/21 maxlen: 21 89.207.64.0/21 maxlen: 21 92.246.152.0/22 maxlen: 22 94.198.232.0/21 maxlen: 21 176.221.0.0/21 maxlen: 21 178.22.192.0/21 maxlen: 21 185.8.200.0/22 maxlen: 22 185.64.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ae:85:42:d6:c2:dc:b8:0e:e3:1c:8a:29:7b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39f45527bfde69eb7d15937dc4bbd6fdd2e09462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:a9:8a:26:86:2c:3b:38:4c:65:13:5a:77: 3f:b3:99:a7:ce:6b:36:ec:59:fa:97:2d:57:dc:15: 95:8e:7b:33:e8:2e:7a:07:0b:0c:c7:af:bb:72:0c: 46:d8:ed:4c:50:fd:2a:2e:74:32:40:2f:98:14:9d: 15:81:7a:b0:d7:c8:22:bd:93:73:97:18:f2:99:cc: 3d:30:b8:26:bc:cc:c1:e9:78:96:ec:15:e0:73:b2: 77:6d:2e:3c:6e:ca:0f:1a:e5:77:70:d2:77:67:5c: a0:87:4d:88:5a:3a:dc:f1:2d:70:a3:b6:e9:ad:a7: 87:99:0e:80:f4:02:fe:8f:b5:10:d9:33:84:6e:a6: 95:2a:33:35:2a:e6:6d:fa:12:c8:6f:99:a7:5d:b3: c9:3c:bc:63:60:f3:82:9c:8e:5c:52:2e:de:90:ed: 1e:40:e7:f7:8c:5d:af:7e:86:40:b6:cb:e9:27:a0: 46:8e:72:df:e5:92:e2:52:6a:2b:d7:d8:fa:ae:85: c8:06:bf:aa:91:59:40:90:81:4a:b4:71:00:41:d3: 96:2d:a5:af:a2:a8:4f:0c:f2:53:23:f9:16:87:ca: c3:81:23:c6:78:42:7b:23:b7:92:9f:1d:9b:37:94: 42:98:93:e8:e7:11:4a:29:5f:00:9e:a4:ca:41:3a: 9d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F4:55:27:BF:DE:69:EB:7D:15:93:7D:C4:BB:D6:FD:D2:E0:94:62 X509v3 Authority Key Identifier: keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/OfRVJ7_eaet9FZN9xLvW_dLglGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.168.0/21 89.207.64.0/21 92.246.152.0/22 94.198.232.0/21 176.221.0.0/21 178.22.192.0/21 185.8.200.0/22 185.64.208.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:d8:51:7a:48:eb:7f:fc:50:2f:f2:37:33:28:a2:3e:60:30: 17:a2:62:ed:5c:46:51:11:13:81:78:e4:0b:75:6e:6e:89:f6: 24:a8:82:47:99:02:a5:8d:cd:05:7f:dc:33:54:90:3b:d4:55: 8c:42:8c:00:b9:c3:3c:58:cd:54:2e:8d:be:44:73:8d:cf:9a: 28:dd:b9:aa:89:60:6d:01:42:07:43:86:55:f3:35:52:6a:67: 0e:6b:3e:e2:b3:2b:50:6a:69:5e:c5:2a:b4:99:17:8f:c3:56: 8f:c8:38:d4:7d:89:02:d7:71:38:78:a6:26:a3:7d:cd:1a:b8: 05:94:6b:96:d7:0b:bc:5b:b3:9b:c6:69:18:d4:a9:7d:4b:ff: 01:00:a2:a3:99:c5:4f:0a:02:81:23:eb:de:2d:6c:a0:10:11: 24:42:6c:cd:2c:f7:e7:1f:cd:72:9c:0c:8e:c3:73:1f:5e:84: 6b:7b:eb:22:c8:3c:8b:b5:e7:87:9f:12:d7:fd:19:67:ec:72: 53:46:e1:73:b9:a9:47:40:50:a0:5d:1d:c7:ee:fb:18:b6:ae: 24:58:e1:b8:34:9c:49:e1:62:7e:9c:75:11:88:d2:9d:a3:00: 47:24:79:26:63:5e:f9:5e:6b:17:a3:0e:81:6e:de:e2:5a:ff: 97:34:f9:d8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt7Nq6FQtbC3LgO4xyKKXu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDNlYTUyODcxNDg5ZDg2YWE5Y2E1Y2EwYzI5N2M4OGFi ODJhYjYwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWY0NTUyN2JmZGU2OWViN2QxNTkzN2RjNGJiZDZmZGQyZTA5NDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ+piiaGLDs4TGUTWnc/s5mnzms2 7Fn6ly1X3BWVjnsz6C56BwsMx6+7cgxG2O1MUP0qLnQyQC+YFJ0VgXqw18givZNz lxjymcw9MLgmvMzB6XiW7BXgc7J3bS48bsoPGuV3cNJ3Z1ygh02IWjrc8S1wo7bp raeHmQ6A9AL+j7UQ2TOEbqaVKjM1KuZt+hLIb5mnXbPJPLxjYPOCnI5cUi7ekO0e QOf3jF2vfoZAtsvpJ6BGjnLf5ZLiUmor19j6roXIBr+qkVlAkIFKtHEAQdOWLaWv oqhPDPJTI/kWh8rDgSPGeEJ7I7eSnx2bN5RCmJPo5xFKKV8AnqTKQTqdRQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFDn0VSe/3mnrfRWTfcS71v3S4JRiMB8GA1UdIwQY MBaAFPVD6lKHFInYaqnKXKDCl8iKuCq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYt ZGZiYmVkYTIxNTk0LzEvT2ZSVko3X2VhZXQ5RlpOOXhMdldfZExnbEdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYtZGZiYmVkYTIxNTk0 LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDH6qoAwQD Wc9AAwQCXPaYAwQDXsboAwQDsN0AAwQDshbAAwQCuQjIAwQCuUDQMA0GCSqGSIb3 DQEBCwUAA4IBAQCN2FF6SOt//FAv8jczKKI+YDAXomLtXEZREROBeOQLdW5uifYk qIJHmQKljc0Ff9wzVJA71FWMQowAucM8WM1ULo2+RHONz5oo3bmqiWBtAUIHQ4ZV 8zVSamcOaz7isytQamlexSq0mRePw1aPyDjUfYkC13E4eKYmo33NGrgFlGuW1wu8 W7ObxmkY1Kl9S/8BAKKjmcVPCgKBI+veLWygEBEkQmzNLPfnH81ynAyOw3MfXoRr e+siyDyLteeHnxLX/Rln7HJTRuFzualHQFCgXR3H7vsYtq4kWOG4NJxJ4WJ+nHUR iNKdowBHJHkmY175XmsXow6Bbt7iWv+XNPnY -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:29 2026 by rpki-client