This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/gIto1Fy1TsyHHnAGFT5iCKyW4rY.roa File: gIto1Fy1TsyHHnAGFT5iCKyW4rY.roa (raw, json) Hash identifier: v1wkRjk0YYXxOxEvKabcya7rIMKJY3kl2YxedO3Onmc= Subject key identifier: 80:8B:68:D4:5C:B5:4E:CC:87:1E:70:06:15:3E:62:08:AC:96:E2:B6 Certificate issuer: /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc Certificate serial: 019B7E37975C5B89F23238E1061C1FC3571E Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/gIto1Fy1TsyHHnAGFT5iCKyW4rY.roa Signing time: Fri 02 Jan 2026 10:18:50 +0000 ROA not before: Fri 02 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44964 IP address blocks: 37.203.240.0/21 maxlen: 21 37.203.240.0/24 maxlen: 24 37.203.242.0/24 maxlen: 29 37.203.242.32/28 maxlen: 28 37.203.242.48/29 maxlen: 29 37.203.242.64/27 maxlen: 27 37.203.242.128/26 maxlen: 26 37.203.242.192/26 maxlen: 26 37.203.243.0/24 maxlen: 24 37.203.245.0/24 maxlen: 24 37.203.246.0/24 maxlen: 24 37.203.247.0/24 maxlen: 24 93.188.40.0/21 maxlen: 21 93.188.41.79/32 maxlen: 32 2a00:c8c0::/47 maxlen: 47 2a00:c8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:97:5c:5b:89:f2:32:38:e1:06:1c:1f:c3:57:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc Validity Not Before: Jan 2 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=808b68d45cb54ecc871e7006153e6208ac96e2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:fe:11:27:27:25:b7:af:09:c2:7e:9c:92: 70:88:6c:2e:20:b8:f8:24:86:94:de:31:f0:85:be: fd:a1:5a:0b:73:34:ce:f6:1a:b4:be:35:bb:3a:41: 6c:97:7d:0f:50:83:ff:14:3f:f5:ee:df:d0:33:fa: 2d:fe:08:2b:d7:de:c2:03:5f:e1:aa:b2:5d:fe:11: 0c:bd:3b:03:4d:a2:03:61:7a:16:e1:94:55:17:36: f4:ab:e1:6b:a5:b6:51:72:29:df:51:41:04:2c:6b: c3:35:70:5c:88:5e:bf:2d:3e:53:90:48:da:ba:bc: 4c:4e:8d:47:ff:83:32:f5:a8:bb:5f:dc:55:0a:50: 12:28:16:99:9d:2c:f8:01:ad:ae:d5:df:c3:26:ad: 7d:5b:72:c8:8c:8b:6a:86:e5:92:58:c0:8c:c7:bf: f5:bb:a1:c1:de:98:bf:95:c5:c2:68:e8:cd:48:b0: dc:87:71:8c:f4:18:c2:e0:ff:ba:e9:39:50:99:f2: eb:06:b1:28:d3:99:0b:68:2e:9c:30:17:98:16:cb: 8f:7a:3d:7c:15:91:17:c0:4f:ca:89:d6:a2:ad:c5: 19:4b:bf:a6:40:6f:71:0a:23:86:6b:32:bc:45:24: 7a:98:9b:5d:39:98:e1:2b:d3:1b:2d:c3:ec:72:15: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:68:D4:5C:B5:4E:CC:87:1E:70:06:15:3E:62:08:AC:96:E2:B6 X509v3 Authority Key Identifier: keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/gIto1Fy1TsyHHnAGFT5iCKyW4rY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.240.0/21 93.188.40.0/21 IPv6: 2a00:c8c0::/47 Signature Algorithm: sha256WithRSAEncryption 78:1a:e3:f2:f7:dd:80:62:ed:2c:9d:85:c7:17:45:17:98:8b: d0:2b:da:31:93:d5:ba:dd:41:e2:93:fb:b3:31:40:53:6c:8c: 69:04:84:6b:0c:dd:1f:7e:9a:e2:3a:d6:db:10:bf:31:63:cd: 70:95:c3:30:8f:88:00:07:32:d7:ec:ef:70:52:7e:e5:ac:9e: 57:63:1e:ee:e0:d1:ea:6d:4a:7e:84:90:2a:72:29:87:af:9a: 58:25:73:c6:4b:59:2d:76:fb:6e:28:22:18:ab:b3:71:26:89: 71:e0:3a:3d:1b:4e:30:22:ee:0f:85:22:14:6f:96:88:3a:b9: e6:c8:b8:78:76:3a:14:fa:10:fc:0c:c9:7e:6f:4e:a0:8d:bb: 00:14:59:94:bc:0b:66:d8:5b:8a:b3:3b:63:db:61:fb:e2:c8: fc:2d:43:1a:94:9a:ee:bb:22:59:54:e6:eb:01:7b:bc:a6:20: 5e:62:99:3b:b9:14:da:46:6b:07:46:77:49:60:a2:7e:de:ee: 78:c7:22:74:6a:38:92:cd:12:67:ff:02:fa:03:8f:7f:dd:c8: 06:08:5f:ac:a6:7f:0b:e3:91:60:3a:23:78:9a:e0:ab:4a:82: 57:e7:c6:0f:72:17:39:4e:9a:10:fd:ca:67:02:b3:1b:13:07: 22:79:07:96 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+N5dcW4nyMjjhBhwfw1ceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl OGVkY2MwHhcNMjYwMTAyMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDhiNjhkNDVjYjU0ZWNjODcxZTcwMDYxNTNlNjIwOGFjOTZlMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18b+EScnJbevCcJ+nJJwiGwuILj4 JIaU3jHwhb79oVoLczTO9hq0vjW7OkFsl30PUIP/FD/17t/QM/ot/ggr197CA1/h qrJd/hEMvTsDTaIDYXoW4ZRVFzb0q+FrpbZRcinfUUEELGvDNXBciF6/LT5TkEja urxMTo1H/4My9ai7X9xVClASKBaZnSz4Aa2u1d/DJq19W3LIjItqhuWSWMCMx7/1 u6HB3pi/lcXCaOjNSLDch3GM9BjC4P+66TlQmfLrBrEo05kLaC6cMBeYFsuPej18 FZEXwE/KidaircUZS7+mQG9xCiOGazK8RSR6mJtdOZjhK9MbLcPschVbCwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFICLaNRctU7Mhx5wBhU+YgisluK2MB8GA1UdIwQY MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt MjdiMTEzY2ZmNTNiLzEvZ0l0bzFGeTFUc3lISG5BR0ZUNWlDS3lXNHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDJcvwAwQD XbwoMA8EAgACMAkDBwEqAMjAAAAwDQYJKoZIhvcNAQELBQADggEBAHga4/L33YBi 7SydhccXRReYi9Ar2jGT1brdQeKT+7MxQFNsjGkEhGsM3R9+muI61tsQvzFjzXCV wzCPiAAHMtfs73BSfuWsnldjHu7g0eptSn6EkCpyKYevmlglc8ZLWS12+24oIhir s3EmiXHgOj0bTjAi7g+FIhRvlog6uebIuHh2OhT6EPwMyX5vTqCNuwAUWZS8C2bY W4qzO2PbYfviyPwtQxqUmu67IllU5usBe7ymIF5imTu5FNpGawdGd0lgon7e7njH InRqOJLNEmf/AvoDj3/dyAYIX6ymfwvjkWA6I3ia4KtKglfnxg9yFzlOmhD9ymcC sxsTByJ5B5Y= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:10 2026 by rpki-client