This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GCnCKJHRQWkpl_o1_9x1Dm1a_SA.roa File: GCnCKJHRQWkpl_o1_9x1Dm1a_SA.roa (raw, json) Hash identifier: stkjf74J4sIyiPTBa7WJt//Wt2irTuYCuLoxhKPUtaI= Subject key identifier: 18:29:C2:28:91:D1:41:69:29:97:FA:35:FF:DC:75:0E:6D:5A:FD:20 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1D33EC302B949EDA51F3336DC5B7 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GCnCKJHRQWkpl_o1_9x1Dm1a_SA.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203380 IP address blocks: 77.76.13.0/24 maxlen: 24 78.128.99.0/24 maxlen: 24 78.128.127.0/24 maxlen: 24 79.124.7.0/24 maxlen: 24 79.124.77.0/24 maxlen: 24 82.118.227.0/24 maxlen: 24 82.118.230.0/24 maxlen: 24 82.118.233.0/24 maxlen: 24 82.118.234.0/24 maxlen: 24 82.118.235.0/24 maxlen: 24 82.118.245.0/24 maxlen: 24 91.148.132.0/24 maxlen: 24 91.148.141.0/24 maxlen: 24 94.72.140.0/23 maxlen: 24 94.72.143.0/24 maxlen: 24 130.185.249.0/24 maxlen: 24 130.185.251.0/24 maxlen: 24 2a01:8740:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1d:33:ec:30:2b:94:9e:da:51:f3:33:6d:c5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1829c22891d141692997fa35ffdc750e6d5afd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:85:16:cd:2f:b4:2a:5e:39:ea:e8:46:55: 0a:76:50:b7:ea:90:9d:c5:52:dd:64:35:ba:f3:cc: 65:d5:0a:a4:74:45:73:9d:c1:ad:41:48:d4:16:38: c2:0f:b9:eb:a3:7f:c8:b4:e3:b0:dd:ff:19:27:0a: 79:5c:1c:de:72:17:b2:2d:f3:ae:5d:10:b5:42:fb: ca:33:fc:9c:f3:4a:8f:f7:17:82:48:09:b2:49:7d: 49:8d:e6:9b:96:75:db:7c:75:2e:81:d3:4b:81:03: 33:75:6d:9e:1c:d5:b4:02:a1:d8:bf:23:d0:9d:21: 91:f6:b0:17:a3:f5:13:44:d5:63:c0:5f:c8:3f:54: f0:1b:26:8d:9a:51:2b:45:9c:64:b3:84:fd:a3:dd: 56:f8:ca:41:75:da:d1:ec:9b:1c:eb:c9:f8:c9:32: b9:40:05:9f:ce:e8:f7:d0:0b:f0:26:29:4c:2c:25: e4:07:ee:9a:63:c7:8a:78:81:64:b9:f0:90:6d:ae: 78:c9:1a:6f:65:22:59:35:c1:80:1c:31:15:c3:9a: 51:1f:a1:81:52:d3:43:9c:1f:8d:6b:67:66:26:91: 0d:c5:b0:7a:f4:07:31:3f:07:c7:b5:d3:15:89:29: 87:64:92:30:5f:93:24:03:5d:a9:bf:9c:e3:77:f9: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:29:C2:28:91:D1:41:69:29:97:FA:35:FF:DC:75:0E:6D:5A:FD:20 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/GCnCKJHRQWkpl_o1_9x1Dm1a_SA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.13.0/24 78.128.99.0/24 78.128.127.0/24 79.124.7.0/24 79.124.77.0/24 82.118.227.0/24 82.118.230.0/24 82.118.233.0-82.118.235.255 82.118.245.0/24 91.148.132.0/24 91.148.141.0/24 94.72.140.0/23 94.72.143.0/24 130.185.249.0/24 130.185.251.0/24 IPv6: 2a01:8740:1::/48 Signature Algorithm: sha256WithRSAEncryption a2:04:7f:dd:4b:e8:d6:3e:27:87:74:85:79:86:d7:f2:bb:c8: 17:02:f4:d7:fc:db:75:9a:3d:6a:bf:fc:1e:34:84:fb:f0:84: 5d:4b:0a:eb:6a:1d:e5:a9:03:d6:1b:dd:a3:f5:44:ea:fd:d9: 7b:cf:a6:5f:e8:5b:5f:7d:b5:e1:67:a4:d7:c2:72:43:47:a0: 78:22:7a:b7:65:0e:55:52:ae:9f:77:b8:3e:96:25:eb:46:28: 8e:57:32:97:9a:71:a3:a1:6c:81:1a:2c:a9:0c:2e:1c:39:74: 1e:86:d3:79:ce:29:13:d5:c8:46:9b:ff:00:38:eb:3a:9f:cc: 60:06:e1:71:de:b9:4b:77:0a:00:ec:9a:3e:28:04:53:ba:7c: 9c:ee:82:6a:9f:b3:f2:1d:01:77:2b:f4:61:a2:79:84:a8:6a: 4e:7e:9d:76:14:5d:ed:f3:16:a9:00:9e:34:3f:c2:75:9a:11: 97:30:9e:99:97:53:1b:e4:95:b5:a6:48:08:de:24:7e:dc:a2: 26:5b:8f:42:79:b1:78:a3:b5:17:69:18:74:28:d3:95:ba:8d: 8a:44:03:e4:ca:e1:37:84:ad:94:0c:d0:ee:0e:10:52:ca:6f: 40:a0:bf:ba:65:d4:ad:5d:d1:63:89:99:66:fd:09:c1:16:3f: a2:93:8f:a0 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgISAZt9Wx0z7DArlJ7aUfMzbcW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODI5YzIyODkxZDE0MTY5Mjk5N2ZhMzVmZmRjNzUwZTZkNWFmZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgSFFs0vtCpeOeroRlUKdlC36pCd xVLdZDW688xl1QqkdEVzncGtQUjUFjjCD7nro3/ItOOw3f8ZJwp5XBzecheyLfOu XRC1QvvKM/yc80qP9xeCSAmySX1JjeablnXbfHUugdNLgQMzdW2eHNW0AqHYvyPQ nSGR9rAXo/UTRNVjwF/IP1TwGyaNmlErRZxks4T9o91W+MpBddrR7Jsc68n4yTK5 QAWfzuj30AvwJilMLCXkB+6aY8eKeIFkufCQba54yRpvZSJZNcGAHDEVw5pRH6GB UtNDnB+Na2dmJpENxbB69AcxPwfHtdMViSmHZJIwX5MkA12pv5zjd/nwhQIDAQAB o4ICdzCCAnMwHQYDVR0OBBYEFBgpwiiR0UFpKZf6Nf/cdQ5tWv0gMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvR0NuQ0tKSFJRV2twbF9vMV85eDFEbTFhX1NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswaAQCAAEwYgMEAE1MDQME AE6AYwMEAE6AfwMEAE98BwMEAE98TQMEAFJ24wMEAFJ25jAMAwQAUnbpAwQCUnbo AwQAUnb1AwQAW5SEAwQAW5SNAwQBXkiMAwQAXkiPAwQAgrn5AwQAgrn7MA8EAgAC MAkDBwAqAYdAAAEwDQYJKoZIhvcNAQELBQADggEBAKIEf91L6NY+J4d0hXmG1/K7 yBcC9Nf823WaPWq//B40hPvwhF1LCutqHeWpA9Yb3aP1ROr92XvPpl/oW199teFn pNfCckNHoHgierdlDlVSrp93uD6WJetGKI5XMpeacaOhbIEaLKkMLhw5dB6G03nO KRPVyEab/wA46zqfzGAG4XHeuUt3CgDsmj4oBFO6fJzugmqfs/IdAXcr9GGieYSo ak5+nXYUXe3zFqkAnjQ/wnWaEZcwnpmXUxvklbWmSAjeJH7coiZbj0J5sXijtRdp GHQo05W6jYpEA+TK4TeErZQM0O4OEFLKb0Cgv7pl1K1d0WOJmWb9CcEWP6KTj6A= -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:10 2026 by rpki-client