This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gPlC2KzNznlzLnjd-UuUfvD7ZnI.roa File: gPlC2KzNznlzLnjd-UuUfvD7ZnI.roa (raw, json) Hash identifier: T+zeiRapu5lBPjUo0AfNqxykQTavKB7WM8fPghffrwc= Subject key identifier: 80:F9:42:D8:AC:CD:CE:79:73:2E:78:DD:F9:4B:94:7E:F0:FB:66:72 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C498B8569DA57B7CB916158B9DF2 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gPlC2KzNznlzLnjd-UuUfvD7ZnI.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20910 IP address blocks: 37.148.168.0/21 maxlen: 32 62.84.0.0/20 maxlen: 32 62.205.192.0/18 maxlen: 32 77.38.128.0/17 maxlen: 32 85.254.120.0/23 maxlen: 23 87.226.0.0/17 maxlen: 32 89.201.0.0/17 maxlen: 32 91.142.0.0/20 maxlen: 32 91.188.32.0/19 maxlen: 32 93.177.192.0/18 maxlen: 32 94.30.128.0/17 maxlen: 32 109.110.0.0/19 maxlen: 32 136.169.0.0/17 maxlen: 32 185.144.184.0/22 maxlen: 32 188.112.128.0/18 maxlen: 32 195.62.128.0/19 maxlen: 32 195.244.128.0/20 maxlen: 32 213.180.96.0/19 maxlen: 32 217.198.224.0/20 maxlen: 32 217.199.96.0/19 maxlen: 32 2a00:9000::/29 maxlen: 32 2a00:f4a0::/29 maxlen: 32 2a03:6740::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c4:98:b8:56:9d:a5:7b:7c:b9:16:15:8b:9d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80f942d8accdce79732e78ddf94b947ef0fb6672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:e1:07:c0:02:28:9a:79:57:12:64:fa:41: e2:68:21:32:f6:66:77:2d:3e:5f:18:c5:fd:c1:4e: b9:61:34:23:b9:53:b3:ce:ad:94:4f:1b:0f:0f:bd: 93:96:85:3f:15:8a:4b:09:b5:3c:c4:3a:8e:02:0d: ac:78:8e:d0:40:1c:10:35:5c:f6:6c:55:08:27:2e: 90:0e:dd:47:bd:4a:9b:67:0b:d6:4a:4c:e9:c7:7a: a9:c2:cd:d6:7e:20:8d:8d:03:70:d2:22:61:6e:fc: 30:8f:68:b6:f6:19:00:6c:3e:64:7d:87:2b:ba:b7: 21:04:9a:f4:b2:50:d5:67:d2:d4:96:70:e6:df:9d: 04:b6:5a:4d:dd:b7:e0:6e:91:3a:65:c9:fd:4a:d2: a4:8b:d9:78:e6:a2:2e:8d:36:6f:6a:42:7a:eb:ad: 25:52:64:ee:13:42:1e:7e:7a:76:8f:ae:3d:6e:03: 93:0e:ac:04:13:4b:28:96:cc:fb:50:2d:76:31:8d: 6b:69:66:76:e7:10:53:b7:2e:82:77:79:fe:2b:bf: b6:c1:37:fe:66:78:fe:ce:4b:1f:cc:58:12:3b:fc: ea:75:4e:f1:41:fb:14:e0:6a:88:75:b7:37:2b:78: 9e:72:21:81:da:a1:1a:f1:57:ca:17:89:94:96:c7: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:42:D8:AC:CD:CE:79:73:2E:78:DD:F9:4B:94:7E:F0:FB:66:72 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/gPlC2KzNznlzLnjd-UuUfvD7ZnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.168.0/21 62.84.0.0/20 62.205.192.0/18 77.38.128.0/17 85.254.120.0/23 87.226.0.0/17 89.201.0.0/17 91.142.0.0/20 91.188.32.0/19 93.177.192.0/18 94.30.128.0/17 109.110.0.0/19 136.169.0.0/17 185.144.184.0/22 188.112.128.0/18 195.62.128.0/19 195.244.128.0/20 213.180.96.0/19 217.198.224.0/20 217.199.96.0/19 IPv6: 2a00:9000::/29 2a00:f4a0::/29 2a03:6740::/29 Signature Algorithm: sha256WithRSAEncryption 08:c1:a4:a3:72:c2:b8:8d:89:7b:af:84:d4:b0:7d:0d:b6:9b: 29:b3:e8:38:03:33:16:1c:58:6f:12:d1:47:49:b4:97:de:97: 8d:c8:bc:b1:73:f9:d7:32:ed:68:0c:05:b4:40:f7:59:66:a6: 18:6f:b5:5f:60:4f:33:49:b6:e7:d0:6e:7f:ba:b1:0d:a6:d5: 3d:13:85:d3:cf:88:b7:f4:c8:dd:4b:e1:40:c5:3b:53:65:f7: 2f:44:5a:72:01:d7:a4:75:d0:47:6b:fd:a0:2e:07:e7:1f:96: ac:a9:40:4f:a3:b9:53:9e:ef:3a:53:27:4a:6a:a8:36:41:2e: d2:e1:9b:ec:f5:6d:49:a3:a9:ac:46:a1:80:4c:c1:28:a2:bf: 6a:5e:3c:22:f9:00:e9:59:cb:4c:22:58:9b:18:7d:74:99:12: c3:d9:7a:ad:5a:d7:05:ba:b5:b4:bd:ad:85:92:62:3a:12:ea: de:ab:fc:c0:d9:7d:a1:f2:93:6a:f0:98:9f:b7:0f:06:20:b8: b4:58:2e:f7:62:ce:bc:a4:cf:81:11:db:bf:a0:54:0e:84:d2: 05:7c:15:d8:2b:fe:a6:bd:40:f6:8b:e2:b8:bc:7c:09:52:80: c3:b6:bb:56:78:e2:7a:99:ac:55:6f:f8:4d:07:5e:ba:26:4d: 94:32:80:f1 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt6x8SYuFadpXt8uRYVi53yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGY5NDJkOGFjY2RjZTc5NzMyZTc4ZGRmOTRiOTQ3ZWYwZmI2NjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRrhB8ACKJp5VxJk+kHiaCEy9mZ3 LT5fGMX9wU65YTQjuVOzzq2UTxsPD72TloU/FYpLCbU8xDqOAg2seI7QQBwQNVz2 bFUIJy6QDt1HvUqbZwvWSkzpx3qpws3WfiCNjQNw0iJhbvwwj2i29hkAbD5kfYcr urchBJr0slDVZ9LUlnDm350EtlpN3bfgbpE6Zcn9StKki9l45qIujTZvakJ6660l UmTuE0Iefnp2j649bgOTDqwEE0solsz7UC12MY1raWZ25xBTty6Cd3n+K7+2wTf+ Znj+zksfzFgSO/zqdU7xQfsU4GqIdbc3K3ieciGB2qEa8VfKF4mUlscBSwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFID5Qtiszc55cy543flLlH7w+2ZyMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvZ1BsQzJLek56bmx6TG5qZC1VdVVmdkQ3Wm5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTB+BAIAATB4AwQDJZSo AwQEPlQAAwQGPs3AAwQHTSaAAwQBVf54AwQHV+IAAwQHWckAAwQEW44AAwQFW7wg AwQGXbHAAwQHXh6AAwQFbW4AAwQHiKkAAwQCuZC4AwQGvHCAAwQFwz6AAwQEw/SA AwQF1bRgAwQE2cbgAwQF2cdgMBsEAgACMBUDBQMqAJAAAwUDKgD0oAMFAyoDZ0Aw DQYJKoZIhvcNAQELBQADggEBAAjBpKNywriNiXuvhNSwfQ22mymz6DgDMxYcWG8S 0UdJtJfel43IvLFz+dcy7WgMBbRA91lmphhvtV9gTzNJtufQbn+6sQ2m1T0ThdPP iLf0yN1L4UDFO1Nl9y9EWnIB16R10Edr/aAuB+cflqypQE+juVOe7zpTJ0pqqDZB LtLhm+z1bUmjqaxGoYBMwSiiv2pePCL5AOlZy0wiWJsYfXSZEsPZeq1a1wW6tbS9 rYWSYjoS6t6r/MDZfaHyk2rwmJ+3DwYguLRYLvdizrykz4ER27+gVA6E0gV8Fdgr /qa9QPaL4ri8fAlSgMO2u1Z44nqZrFVv+E0HXromTZQygPE= -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:00 2026 by rpki-client