This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/ObjrmTselcOgfHeqKSeC3ZkZE8M.roa File: ObjrmTselcOgfHeqKSeC3ZkZE8M.roa (raw, json) Hash identifier: h15edxf80NHDBsD89JncvBzL8sjznUrSp3Fp172V3UI= Subject key identifier: 39:B8:EB:99:3B:1E:95:C3:A0:7C:77:AA:29:27:82:DD:99:19:13:C3 Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc Certificate serial: 019B76EB4B9C5B6C9233E11A1EBBCAEC2613 Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/ObjrmTselcOgfHeqKSeC3ZkZE8M.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6876 IP address blocks: 31.31.96.0/19 maxlen: 19 37.203.0.0/19 maxlen: 19 45.130.0.0/22 maxlen: 22 45.140.120.0/22 maxlen: 22 45.156.36.0/22 maxlen: 22 62.16.0.0/19 maxlen: 19 79.140.0.0/20 maxlen: 20 85.238.96.0/19 maxlen: 19 88.214.8.0/22 maxlen: 22 95.214.40.0/22 maxlen: 22 130.0.32.0/19 maxlen: 19 176.119.64.0/18 maxlen: 18 185.21.51.0/24 maxlen: 24 185.23.104.0/22 maxlen: 22 185.145.104.0/22 maxlen: 22 185.166.220.0/22 maxlen: 22 185.177.240.0/22 maxlen: 22 185.184.168.0/22 maxlen: 22 185.206.36.0/22 maxlen: 22 185.226.112.0/22 maxlen: 22 185.228.104.0/22 maxlen: 22 185.247.20.0/22 maxlen: 22 188.115.128.0/18 maxlen: 18 193.163.196.0/24 maxlen: 24 193.178.48.0/22 maxlen: 22 195.138.64.0/19 maxlen: 19 212.24.112.0/24 maxlen: 24 212.90.124.0/22 maxlen: 22 212.178.0.0/19 maxlen: 19 2a04:2c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4b:9c:5b:6c:92:33:e1:1a:1e:bb:ca:ec:26:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39b8eb993b1e95c3a07c77aa292782dd991913c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:58:ff:8d:58:19:de:89:e5:ad:72:8d:5c: 3f:b6:7e:2d:1c:e4:f6:23:85:c7:8d:c1:6c:70:e3: 2e:f6:83:6c:ed:e4:28:64:83:8f:38:6a:e9:73:b4: 66:bf:97:b6:62:9b:d9:3e:3d:9b:6a:e5:ce:df:57: 0a:85:35:3c:d7:f3:cd:e2:20:1e:23:d6:4d:d5:30: 95:d1:b9:04:7c:17:16:14:42:1f:b2:73:ad:55:8b: 78:dc:70:9e:8b:45:e4:bc:b7:62:56:38:29:2c:b5: c4:23:90:6f:40:b4:c7:2c:d0:21:36:5f:45:aa:8a: 9b:83:98:a4:8e:3b:ad:3b:9f:06:84:ff:ef:95:f0: 01:cc:93:f7:fe:98:c1:5e:7a:60:41:08:ff:56:20: 98:b8:25:af:7e:38:e3:e3:25:31:a7:af:12:63:d7: 97:7c:d0:03:04:00:5d:d7:bf:8c:0b:50:c0:e7:74: 25:7d:d1:b5:ee:4b:85:6a:22:bc:51:25:8c:23:47: b7:01:35:96:23:76:75:04:14:94:bf:6a:d6:b6:38: c9:a9:0a:98:f4:ef:5f:49:7e:b7:9a:57:ae:29:45: fa:66:e2:6f:d1:a5:2b:b5:a4:e3:2e:6f:61:bb:37: 16:6f:4c:c6:f4:b2:82:4f:7c:35:af:da:f2:52:ab: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:EB:99:3B:1E:95:C3:A0:7C:77:AA:29:27:82:DD:99:19:13:C3 X509v3 Authority Key Identifier: keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/ObjrmTselcOgfHeqKSeC3ZkZE8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.96.0/19 37.203.0.0/19 45.130.0.0/22 45.140.120.0/22 45.156.36.0/22 62.16.0.0/19 79.140.0.0/20 85.238.96.0/19 88.214.8.0/22 95.214.40.0/22 130.0.32.0/19 176.119.64.0/18 185.21.51.0/24 185.23.104.0/22 185.145.104.0/22 185.166.220.0/22 185.177.240.0/22 185.184.168.0/22 185.206.36.0/22 185.226.112.0/22 185.228.104.0/22 185.247.20.0/22 188.115.128.0/18 193.163.196.0/24 193.178.48.0/22 195.138.64.0/19 212.24.112.0/24 212.90.124.0/22 212.178.0.0/19 IPv6: 2a04:2c00::/29 Signature Algorithm: sha256WithRSAEncryption 0b:06:1e:90:6b:93:89:84:90:88:1a:0d:5a:4f:46:37:7c:fd: a2:f7:31:fe:03:e4:0b:e8:77:3a:39:90:12:a2:5a:1e:f9:87: 02:21:cd:e3:62:82:fe:9f:fa:af:45:c6:66:21:aa:9e:c1:c3: 94:99:f1:52:58:71:32:e4:8e:e6:bc:40:94:24:f1:7b:de:f0: 79:1c:da:48:68:6e:87:eb:78:72:62:be:58:c6:24:38:91:ab: d4:7b:d8:bc:2d:c1:1a:1d:67:ab:63:55:c2:30:6c:fc:32:7b: 8c:40:a3:c8:e7:ec:f2:ec:d1:b4:9e:67:2d:77:43:a8:72:68: 92:d0:a2:af:ae:e8:46:61:7f:69:f9:46:7c:d4:f9:94:25:36: 0a:1a:58:34:14:f4:32:95:07:4c:19:2d:13:9b:3f:c3:54:a2: bd:87:9e:a7:aa:fb:c8:2c:cb:42:10:55:4d:81:3c:b0:83:f8: c3:7d:65:04:d0:ce:30:28:35:e9:9e:56:39:3a:d0:02:bc:91: 94:31:b1:cd:c7:74:8c:8c:82:ee:5d:15:c7:e2:28:c3:d4:ce: db:bb:a2:87:a3:b7:37:c0:03:e1:45:8b:2a:a4:f2:5e:18:df: 1f:71:47:d0:1a:df:4e:a4:94:1e:74:68:ba:f4:91:ce:67:c4: 58:b1:2e:e3 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt260ucW2ySM+EaHrvK7CYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMmJlNjYxZTU3YzE0NjU5YTYwOGU5ZjZiZTYwNWQ2MjUw MDQ3ZmMwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWI4ZWI5OTNiMWU5NWMzYTA3Yzc3YWEyOTI3ODJkZDk5MTkxM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpRY/41YGd6J5a1yjVw/tn4tHOT2 I4XHjcFscOMu9oNs7eQoZIOPOGrpc7Rmv5e2YpvZPj2bauXO31cKhTU81/PN4iAe I9ZN1TCV0bkEfBcWFEIfsnOtVYt43HCei0XkvLdiVjgpLLXEI5BvQLTHLNAhNl9F qoqbg5ikjjutO58GhP/vlfABzJP3/pjBXnpgQQj/ViCYuCWvfjjj4yUxp68SY9eX fNADBABd17+MC1DA53QlfdG17kuFaiK8USWMI0e3ATWWI3Z1BBSUv2rWtjjJqQqY 9O9fSX63mleuKUX6ZuJv0aUrtaTjLm9huzcWb0zG9LKCT3w1r9ryUqt/pwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFDm465k7HpXDoHx3qikngt2ZGRPDMB8GA1UdIwQY MBaAFGAr5mHlfBRlmmCOn2vmBdYlAEf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQt YmQzYTYzMGVlNWNjLzEvT2Jqcm1Uc2VsY09nZkhlcUtTZUMzWmtaRThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQtYmQzYTYzMGVlNWNj LzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBtQQCAAEwga4DBAUf H2ADBAUlywADBAItggADBAItjHgDBAItnCQDBAU+EAADBARPjAADBAVV7mADBAJY 1ggDBAJf1igDBAWCACADBAawd0ADBAC5FTMDBAK5F2gDBAK5kWgDBAK5ptwDBAK5 sfADBAK5uKgDBAK5ziQDBAK54nADBAK55GgDBAK59xQDBAa8c4ADBADBo8QDBALB sjADBAXDikADBADUGHADBALUWnwDBAXUsgAwDQQCAAIwBwMFAyoELAAwDQYJKoZI hvcNAQELBQADggEBAAsGHpBrk4mEkIgaDVpPRjd8/aL3Mf4D5Avodzo5kBKiWh75 hwIhzeNigv6f+q9FxmYhqp7Bw5SZ8VJYcTLkjua8QJQk8Xve8Hkc2khobofreHJi vljGJDiRq9R72LwtwRodZ6tjVcIwbPwye4xAo8jn7PLs0bSeZy13Q6hyaJLQoq+u 6EZhf2n5RnzU+ZQlNgoaWDQU9DKVB0wZLRObP8NUor2Hnqeq+8gsy0IQVU2BPLCD +MN9ZQTQzjAoNemeVjk60AK8kZQxsc3HdIyMgu5dFcfiKMPUztu7ooejtzfAA+FF iyqk8l4Y3x9xR9Aa306klB50aLr0kc5nxFixLuM= -----END CERTIFICATE-----Generated at Thu Jan 1 12:26:58 2026 by rpki-client