This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/ghMafnCVzl3WC9e2jXdlhprt6tE.roa File: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (raw, json) Hash identifier: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg= Subject key identifier: 82:13:1A:7E:70:95:CE:5D:D6:0B:D7:B6:8D:77:65:86:9A:ED:EA:D1 Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7 Certificate serial: 019B7A5B5D52D8000BC8A260C41FB0110143 Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/ghMafnCVzl3WC9e2jXdlhprt6tE.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203053 IP address blocks: 31.14.56.0/24 maxlen: 24 37.156.4.0/24 maxlen: 24 37.156.180.0/24 maxlen: 24 37.156.181.0/24 maxlen: 24 85.204.69.0/24 maxlen: 24 86.105.228.0/24 maxlen: 24 86.107.43.0/24 maxlen: 24 86.107.78.0/24 maxlen: 24 86.107.79.0/24 maxlen: 24 89.36.154.0/24 maxlen: 24 89.37.29.0/24 maxlen: 24 89.39.209.0/24 maxlen: 24 89.40.32.0/24 maxlen: 24 89.40.33.0/24 maxlen: 24 89.42.13.0/24 maxlen: 24 89.44.105.0/24 maxlen: 24 93.113.54.0/24 maxlen: 24 93.113.55.0/24 maxlen: 24 93.114.248.0/24 maxlen: 24 93.119.122.0/24 maxlen: 24 94.176.213.0/24 maxlen: 24 176.126.172.0/24 maxlen: 24 176.223.167.0/24 maxlen: 24 185.146.84.0/22 maxlen: 22 185.146.85.0/24 maxlen: 24 185.146.86.0/24 maxlen: 24 185.146.87.0/24 maxlen: 24 188.212.127.0/24 maxlen: 24 188.212.252.0/24 maxlen: 24 188.212.255.0/24 maxlen: 24 188.214.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5d:52:d8:00:0b:c8:a2:60:c4:1f:b0:11:01:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82131a7e7095ce5dd60bd7b68d7765869aedead1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:54:7c:b4:c4:90:1f:b0:b7:0f:aa:d8:98: 31:f3:cd:7e:b8:c9:e9:21:5f:b1:e6:bd:fa:23:5c: 28:27:f9:4b:04:c0:b2:3d:b9:19:6c:8a:28:ce:12: ab:35:e0:15:e9:10:39:93:12:47:3c:9d:b4:ec:5d: b4:36:db:6a:7a:01:6d:21:68:0f:22:21:3a:a0:8d: 35:08:44:ac:fc:c5:1a:b9:df:60:aa:d3:5a:9f:80: d6:70:0c:a3:97:6b:83:8e:44:7c:1c:a3:c9:58:f7: 4b:b8:49:f0:20:51:87:a6:30:29:ba:26:85:75:03: b2:1f:85:ff:c6:ad:98:86:9c:57:a2:cb:29:7f:93: b2:20:d8:a7:e0:eb:e4:ee:6d:a1:5d:0e:70:4d:c7: b4:51:f4:da:27:26:ea:36:24:3b:cb:a7:7c:d6:dd: 2d:ed:e9:d3:f5:27:e8:54:1e:e7:e0:77:e5:7b:d0: 16:30:9f:83:08:9e:a3:46:01:1f:c8:60:c7:c2:96: 1d:57:45:d9:67:e2:f8:72:d5:d6:3c:b0:ed:b6:d5: 84:01:b9:55:db:aa:02:68:8d:07:93:f2:cb:b8:08: f5:c3:e3:a3:b1:87:73:dd:6a:fb:1f:cd:4a:e6:1f: a5:6b:f9:d6:58:53:9b:60:5a:46:18:fc:f1:86:72: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:13:1A:7E:70:95:CE:5D:D6:0B:D7:B6:8D:77:65:86:9A:ED:EA:D1 X509v3 Authority Key Identifier: keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/ghMafnCVzl3WC9e2jXdlhprt6tE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.56.0/24 37.156.4.0/24 37.156.180.0/23 85.204.69.0/24 86.105.228.0/24 86.107.43.0/24 86.107.78.0/23 89.36.154.0/24 89.37.29.0/24 89.39.209.0/24 89.40.32.0/23 89.42.13.0/24 89.44.105.0/24 93.113.54.0/23 93.114.248.0/24 93.119.122.0/24 94.176.213.0/24 176.126.172.0/24 176.223.167.0/24 185.146.84.0/22 188.212.127.0/24 188.212.252.0/24 188.212.255.0/24 188.214.214.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:d9:ed:f0:ed:da:99:d4:b3:0c:92:02:27:e2:02:eb:0f:2c: 87:9f:33:3e:1c:6d:45:d9:e2:0a:1b:25:11:0a:83:c8:a1:37: 8f:07:17:19:f7:1f:44:57:30:bf:65:22:6a:e7:4a:d1:74:20: 45:f6:41:aa:c7:f4:3b:28:8d:06:47:2f:c7:fe:f9:0c:ef:a1: 46:ca:82:76:f9:24:1a:a7:11:d9:39:5d:8c:be:92:0e:63:55: 60:8e:a8:75:7e:cb:d8:8e:67:19:d1:3b:7c:d6:bf:49:9e:bb: fb:db:1e:16:64:bd:99:d2:27:37:01:c2:42:88:9a:9d:4a:49: f8:5b:21:10:cd:9a:d0:32:30:f7:6b:84:4f:ba:f2:94:09:a6: 93:c3:36:30:f2:24:81:dc:44:ec:6c:7f:bf:89:d1:ba:55:36: 42:fc:d1:50:78:50:ee:29:18:26:24:46:5e:6d:d6:0c:e9:4c: 07:60:fd:28:48:07:8d:65:98:5a:c5:47:4f:0c:2d:fd:98:57: ce:17:28:f0:39:5a:b5:16:9b:59:16:f7:50:01:52:8f:0d:4f: 47:ee:7d:5a:16:76:80:51:7c:ee:c5:e9:e5:30:d8:11:88:88: 5a:5c:39:dc:8c:34:3d:77:a9:cf:c3:77:b2:f8:c3:b4:ac:5e: 64:10:e9:87 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt6W11S2AALyKJgxB+wEQFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw OWJiYjcwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjEzMWE3ZTcwOTVjZTVkZDYwYmQ3YjY4ZDc3NjU4NjlhZWRlYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnllUfLTEkB+wtw+q2Jgx881+uMnp IV+x5r36I1woJ/lLBMCyPbkZbIoozhKrNeAV6RA5kxJHPJ207F20NttqegFtIWgP IiE6oI01CESs/MUaud9gqtNan4DWcAyjl2uDjkR8HKPJWPdLuEnwIFGHpjApuiaF dQOyH4X/xq2YhpxXosspf5OyINin4Ovk7m2hXQ5wTce0UfTaJybqNiQ7y6d81t0t 7enT9SfoVB7n4Hfle9AWMJ+DCJ6jRgEfyGDHwpYdV0XZZ+L4ctXWPLDtttWEAblV 26oCaI0Hk/LLuAj1w+OjsYdz3Wr7H81K5h+la/nWWFObYFpGGPzxhnKGHwIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFIITGn5wlc5d1gvXto13ZYaa7erRMB8GA1UdIwQY MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt Zjk4YzdmZWMxOTRlLzEvZ2hNYWZuQ1Z6bDNXQzllMmpYZGxocHJ0NnRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAf DjgDBAAlnAQDBAElnLQDBABVzEUDBABWaeQDBABWaysDBAFWa04DBABZJJoDBABZ JR0DBABZJ9EDBAFZKCADBABZKg0DBABZLGkDBAFdcTYDBABdcvgDBABdd3oDBABe sNUDBACwfqwDBACw36cDBAK5klQDBAC81H8DBAC81PwDBAC81P8DBAC81tYwDQYJ KoZIhvcNAQELBQADggEBAH3Z7fDt2pnUswySAifiAusPLIefMz4cbUXZ4gobJREK g8ihN48HFxn3H0RXML9lImrnStF0IEX2QarH9DsojQZHL8f++QzvoUbKgnb5JBqn Edk5XYy+kg5jVWCOqHV+y9iOZxnRO3zWv0meu/vbHhZkvZnSJzcBwkKImp1KSfhb IRDNmtAyMPdrhE+68pQJppPDNjDyJIHcROxsf7+J0bpVNkL80VB4UO4pGCYkRl5t 1gzpTAdg/ShIB41lmFrFR08MLf2YV84XKPA5WrUWm1kW91ABUo8NT0fufVoWdoBR fO7F6eUw2BGIiFpcOdyMND13qc/Dd7L4w7SsXmQQ6Yc= -----END CERTIFICATE-----Generated at Tue Jan 27 08:49:01 2026 by rpki-client