This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/GtwmzzfSMyQuHA5xN2h8yl_66bg.roa File: GtwmzzfSMyQuHA5xN2h8yl_66bg.roa (raw, json) Hash identifier: b0cWR0WKtHBGdUpy+EpGKcmMMtl7w7UTXQhFBWlOy0A= Subject key identifier: 1A:DC:26:CF:37:D2:33:24:2E:1C:0E:71:37:68:7C:CA:5F:FA:E9:B8 Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97 Certificate serial: 019B7A5AB25BC9CD8AC345FC1AA7A2CDDEA1 Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/GtwmzzfSMyQuHA5xN2h8yl_66bg.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39351 IP address blocks: 45.83.220.0/24 maxlen: 24 45.83.221.0/24 maxlen: 24 45.83.222.0/23 maxlen: 24 45.129.56.0/24 maxlen: 24 45.129.57.0/24 maxlen: 24 45.129.58.0/24 maxlen: 24 45.129.59.0/24 maxlen: 24 141.98.252.0/24 maxlen: 24 141.98.253.0/24 maxlen: 24 141.98.254.0/24 maxlen: 24 141.98.255.0/24 maxlen: 24 185.65.132.0/24 maxlen: 24 185.65.133.0/24 maxlen: 24 185.65.134.0/24 maxlen: 24 185.65.135.0/24 maxlen: 24 185.195.232.0/24 maxlen: 24 185.195.233.0/24 maxlen: 24 185.195.235.0/24 maxlen: 24 185.209.196.0/24 maxlen: 24 185.209.197.0/24 maxlen: 24 185.209.198.0/24 maxlen: 24 185.209.199.0/24 maxlen: 24 185.213.152.0/24 maxlen: 24 185.213.153.0/24 maxlen: 24 185.213.154.0/24 maxlen: 24 185.213.155.0/24 maxlen: 24 193.32.126.0/24 maxlen: 24 193.32.127.0/24 maxlen: 24 193.32.248.0/24 maxlen: 24 193.32.249.0/24 maxlen: 24 193.138.216.0/22 maxlen: 22 195.54.182.0/24 maxlen: 24 195.54.183.0/24 maxlen: 24 2a03:1b20::/48 maxlen: 48 2a03:1b20:1::/48 maxlen: 48 2a03:1b20:2::/48 maxlen: 48 2a03:1b20:3::/48 maxlen: 48 2a03:1b20:4::/48 maxlen: 48 2a03:1b20:5::/48 maxlen: 48 2a03:1b20:6::/48 maxlen: 48 2a03:1b20:7::/48 maxlen: 48 2a03:1b20:8::/48 maxlen: 48 2a03:1b20:9::/48 maxlen: 48 2a03:1b20:a::/48 maxlen: 48 2a03:1b20:b::/48 maxlen: 48 2a03:1b20:c::/48 maxlen: 48 2a03:1b20:d::/48 maxlen: 48 2a03:1b20:901::/48 maxlen: 48 2a03:1b20:bef1::/48 maxlen: 48 2a03:1b20:bef2::/48 maxlen: 48 2a03:1b21:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b2:5b:c9:cd:8a:c3:45:fc:1a:a7:a2:cd:de:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1adc26cf37d233242e1c0e7137687cca5ffae9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:e8:b9:d2:24:3c:ce:63:99:00:05:3b:43: 38:1a:67:b3:8d:fd:cf:ef:16:9b:d7:59:6b:a8:32: 47:44:cc:6e:ff:78:2b:51:25:74:0f:33:a7:93:e3: aa:8d:95:a3:49:fa:3a:26:ad:b5:e1:cf:e5:cc:0e: a5:7a:40:02:c7:09:13:12:9f:7f:f1:70:3e:8f:72: 9e:68:e3:8e:ab:86:47:6f:e8:25:f5:63:c6:20:32: 8a:0e:4e:b3:8f:96:5a:44:74:b3:fa:70:8d:1e:d4: 7c:de:00:b7:55:62:6a:5f:a4:b1:a4:aa:66:6f:44: 40:9d:db:e5:0f:96:cc:19:8a:5b:eb:0f:2b:af:5e: 9d:30:c3:dd:8b:4b:b1:68:5b:cf:2b:a3:f0:ad:e2: 89:d8:ba:07:c1:e6:3b:78:6a:76:52:2c:59:ec:0b: e1:3f:0d:63:85:74:8a:48:ef:a1:fe:10:21:89:e2: 12:88:58:e6:41:e6:6d:9e:33:ac:22:b5:d3:f7:f1: f4:71:6b:f5:07:68:c4:13:39:95:1f:d1:38:5c:bd: 91:0b:c6:d6:00:67:29:f9:71:49:18:17:5b:1e:a8: e0:74:5c:03:77:8c:7e:a4:55:3e:a1:10:dc:57:52: ab:39:5d:f3:17:07:83:37:87:10:d3:ce:b0:3f:1f: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:26:CF:37:D2:33:24:2E:1C:0E:71:37:68:7C:CA:5F:FA:E9:B8 X509v3 Authority Key Identifier: keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/GtwmzzfSMyQuHA5xN2h8yl_66bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.220.0/22 45.129.56.0/22 141.98.252.0/22 185.65.132.0/22 185.195.232.0/23 185.195.235.0/24 185.209.196.0/22 185.213.152.0/22 193.32.126.0/23 193.32.248.0/23 193.138.216.0/22 195.54.182.0/23 IPv6: 2a03:1b20::-2a03:1b20:d:ffff:ffff:ffff:ffff:ffff 2a03:1b20:901::/48 2a03:1b20:bef1::-2a03:1b20:bef2:ffff:ffff:ffff:ffff:ffff 2a03:1b21:100::/40 Signature Algorithm: sha256WithRSAEncryption 82:d0:7d:71:95:f0:57:4f:66:b9:8d:a9:6f:ed:fa:4f:dd:d3: cf:0c:25:56:6d:4e:20:cd:7c:be:a1:a7:fa:b8:e3:f8:5e:fd: 26:8c:6f:e4:cc:d2:34:0a:97:8b:15:76:3c:85:19:12:1a:8e: 74:6a:bf:f1:5c:a3:7a:7c:a1:f1:42:a3:2c:42:e1:bc:9a:66: 9c:18:a1:ee:4a:0f:be:9b:fd:3f:3e:8e:f5:38:6d:4c:83:13: 5a:3b:6c:d2:c1:e0:84:49:f2:32:ef:d8:8a:65:08:ae:fc:33: 60:14:58:37:d1:ca:d2:16:12:0f:e3:a9:c6:60:06:2a:14:85: 2a:2b:9a:d4:28:cd:3c:70:f7:92:c5:8e:d2:f8:ca:80:30:b8: 42:6e:dc:85:02:6c:66:80:4a:62:8c:f4:82:2f:03:e1:24:08: 59:1c:c6:be:50:11:c6:80:fb:70:f9:e8:c0:d4:61:78:99:59: 85:f4:66:47:d9:78:d0:fa:ef:7d:33:5a:f5:df:c6:72:32:77: 51:ca:49:83:f7:b2:2c:ff:fe:e3:c5:30:11:34:e5:2d:58:92: 24:59:3f:d6:9b:15:cc:9e:ee:72:22:ee:e0:d8:31:be:e9:ea: cb:62:2c:b1:d1:de:79:8d:2d:0d:46:8f:1a:c9:4d:4a:ee:cb: 95:0f:f8:56 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgISAZt6WrJbyc2Kw0X8Gqeizd6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk YzNjOTcwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWRjMjZjZjM3ZDIzMzI0MmUxYzBlNzEzNzY4N2NjYTVmZmFlOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oroudIkPM5jmQAFO0M4Gmezjf3P 7xab11lrqDJHRMxu/3grUSV0DzOnk+OqjZWjSfo6Jq214c/lzA6lekACxwkTEp9/ 8XA+j3KeaOOOq4ZHb+gl9WPGIDKKDk6zj5ZaRHSz+nCNHtR83gC3VWJqX6SxpKpm b0RAndvlD5bMGYpb6w8rr16dMMPdi0uxaFvPK6PwreKJ2LoHweY7eGp2UixZ7Avh Pw1jhXSKSO+h/hAhieISiFjmQeZtnjOsIrXT9/H0cWv1B2jEEzmVH9E4XL2RC8bW AGcp+XFJGBdbHqjgdFwDd4x+pFU+oRDcV1KrOV3zFweDN4cQ086wPx95ywIDAQAB o4ICjTCCAokwHQYDVR0OBBYEFBrcJs830jMkLhwOcTdofMpf+um4MB8GA1UdIwQY MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt ZjhkNjVjOTgzNzQ0LzEvR3R3bXp6ZlNNeVF1SEE1eE4yaDh5bF82NmJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0 LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGiBggrBgEFBQcBBwEB/wSBkjCBjzBOBAIAATBIAwQCLVPc AwQCLYE4AwQCjWL8AwQCuUGEAwQBucPoAwQAucPrAwQCudHEAwQCudWYAwQBwSB+ AwQBwSD4AwQCwYrYAwQBwza2MD0EAgACMDcwEAMFBSoDGyADBwEqAxsgAAwDBwAq AxsgCQEwEgMHACoDGyC+8QMHACoDGyC+8gMGACoDGyEBMA0GCSqGSIb3DQEBCwUA A4IBAQCC0H1xlfBXT2a5jalv7fpP3dPPDCVWbU4gzXy+oaf6uOP4Xv0mjG/kzNI0 CpeLFXY8hRkSGo50ar/xXKN6fKHxQqMsQuG8mmacGKHuSg++m/0/Po71OG1MgxNa O2zSweCESfIy79iKZQiu/DNgFFg30crSFhIP46nGYAYqFIUqK5rUKM08cPeSxY7S +MqAMLhCbtyFAmxmgEpijPSCLwPhJAhZHMa+UBHGgPtw+ejA1GF4mVmF9GZH2XjQ +u99M1r138ZyMndRykmD97Is//7jxTARNOUtWJIkWT/WmxXMnu5yIu7g2DG+6erL Yiyx0d55jS0NRo8ayU1K7suVD/hW -----END CERTIFICATE-----Generated at Fri Jan 23 11:39:40 2026 by rpki-client