This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/GJJ58FIls1lHjVVLLrf2JDQD3W4.roa File: GJJ58FIls1lHjVVLLrf2JDQD3W4.roa (raw, json) Hash identifier: l4YjelWHKqcJNFE4+5c8SK1AWUNzmjFYH0lSLSmVQek= Subject key identifier: 18:92:79:F0:52:25:B3:59:47:8D:55:4B:2E:B7:F6:24:34:03:DD:6E Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Certificate serial: 019B78A296C4342D6D1945E4A148FABB50A8 Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/GJJ58FIls1lHjVVLLrf2JDQD3W4.roa Signing time: Thu 01 Jan 2026 08:17:59 +0000 ROA not before: Thu 01 Jan 2026 08:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15895 IP address blocks: 5.248.0.0/16 maxlen: 16 37.115.0.0/16 maxlen: 16 37.229.0.0/16 maxlen: 16 46.118.0.0/15 maxlen: 15 46.185.0.0/17 maxlen: 17 46.211.0.0/16 maxlen: 16 62.64.64.0/18 maxlen: 18 77.247.216.0/21 maxlen: 21 81.23.16.0/20 maxlen: 20 81.23.16.0/24 maxlen: 24 83.170.192.0/18 maxlen: 18 85.223.128.0/17 maxlen: 17 89.162.128.0/17 maxlen: 17 94.27.0.0/17 maxlen: 17 94.153.0.0/16 maxlen: 16 94.153.114.0/23 maxlen: 23 94.153.164.0/22 maxlen: 22 109.162.0.0/17 maxlen: 17 134.249.0.0/16 maxlen: 16 176.8.0.0/16 maxlen: 16 178.137.0.0/16 maxlen: 16 188.163.0.0/16 maxlen: 16 188.163.0.0/17 maxlen: 17 193.41.60.0/22 maxlen: 22 193.41.60.0/23 maxlen: 23 193.41.62.0/23 maxlen: 23 193.239.128.0/23 maxlen: 23 212.82.192.0/19 maxlen: 19 212.109.32.0/19 maxlen: 19 2a02:8a8::/32 maxlen: 32 2a02:2378::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:96:c4:34:2d:6d:19:45:e4:a1:48:fa:bb:50:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b Validity Not Before: Jan 1 08:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=189279f05225b359478d554b2eb7f6243403dd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:b8:77:5b:f2:4e:d5:83:e9:c6:f8:9c:a4: b1:0b:81:ee:de:13:19:26:a4:d2:fd:dc:6e:61:9f: 34:bf:e7:33:0a:58:c0:12:23:56:7b:8e:1d:f0:82: 26:99:b9:94:64:19:01:6f:66:4c:e1:00:6b:24:a8: de:1a:b0:2f:c9:e9:27:99:c7:04:a8:82:fa:57:6d: ee:e9:ab:a0:2e:86:57:18:34:1f:6a:12:24:3f:2f: bf:0e:af:6d:dd:87:b1:62:cc:a1:ff:4e:12:d8:61: 37:de:33:67:ea:ff:69:1f:92:95:f8:94:f8:fe:ea: a2:c6:c2:c3:3d:13:c0:57:e7:00:79:14:82:f5:ae: 21:ca:ea:e8:d5:5e:a2:16:b6:d0:e3:29:4e:d7:49: 8c:4d:1a:5e:b1:81:2b:a6:2a:29:ca:76:27:1b:2b: ad:81:a6:9d:4f:27:64:14:60:14:e0:11:2d:b0:bb: 1a:06:58:d5:d9:bc:17:67:1b:be:5e:6d:37:45:92: b9:2e:33:11:62:04:60:34:5a:70:9a:f8:5a:58:35: 0b:3c:a1:db:76:71:ab:e0:a0:44:79:61:0b:85:7f: 41:f6:f3:f0:9b:76:46:31:a5:47:6b:0f:71:62:da: f9:ba:ca:53:09:01:b9:40:0d:31:84:f2:b4:11:af: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:92:79:F0:52:25:B3:59:47:8D:55:4B:2E:B7:F6:24:34:03:DD:6E X509v3 Authority Key Identifier: keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/GJJ58FIls1lHjVVLLrf2JDQD3W4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.248.0.0/16 37.115.0.0/16 37.229.0.0/16 46.118.0.0/15 46.185.0.0/17 46.211.0.0/16 62.64.64.0/18 77.247.216.0/21 81.23.16.0/20 83.170.192.0/18 85.223.128.0/17 89.162.128.0/17 94.27.0.0/17 94.153.0.0/16 109.162.0.0/17 134.249.0.0/16 176.8.0.0/16 178.137.0.0/16 188.163.0.0/16 193.41.60.0/22 193.239.128.0/23 212.82.192.0/19 212.109.32.0/19 IPv6: 2a02:8a8::/32 2a02:2378::/32 Signature Algorithm: sha256WithRSAEncryption 12:1c:7b:b3:58:12:ed:df:3d:12:cc:19:dd:3d:24:60:4f:fd: 71:7b:22:b4:e6:78:24:de:df:49:94:b9:e9:13:03:55:f0:ef: cb:a0:2f:42:c4:6b:d7:44:7c:cd:29:e1:e2:d2:bf:41:e3:e4: e3:d6:d9:aa:81:0b:e6:65:90:22:3f:38:70:fc:c6:72:2a:c0: 4a:31:cb:9b:14:51:7a:d9:bb:6b:2d:63:c8:9b:25:12:6c:73: 5f:a1:87:9b:e1:fa:23:bd:e8:98:ae:be:55:ac:44:d9:aa:3e: 48:8e:8e:f6:17:8e:0a:ec:c7:d2:6f:a8:34:da:77:c6:ff:bb: 7e:88:b5:ae:7b:ca:d9:c5:bb:7e:29:50:33:6f:9c:7f:f5:31: 22:40:c8:f2:cf:ab:5b:c3:d8:6f:19:ce:42:b5:40:e0:ae:da: 5e:5b:36:6f:30:42:6d:1d:03:e8:3a:16:fc:8e:ea:87:af:f6: 5a:a9:d2:a8:6f:9c:3f:3d:f9:76:1e:74:22:fb:4a:a3:8e:e1: 43:76:e9:d5:c1:db:8e:26:d3:2f:dd:de:1c:5b:e6:25:7e:d4: 25:ed:9a:a2:f2:4d:37:bb:43:6a:af:d9:7f:f5:47:42:a7:6a: 65:bf:6a:49:a1:90:58:fa:e5:a8:8d:9c:f9:23:70:17:6a:62: ad:b3:45:2b -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt4opbENC1tGUXkoUj6u1CoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm ZGQ1MGIwHhcNMjYwMTAxMDgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODkyNzlmMDUyMjViMzU5NDc4ZDU1NGIyZWI3ZjYyNDM0MDNkZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA24d1vyTtWD6cb4nKSxC4Hu3hMZ JqTS/dxuYZ80v+czCljAEiNWe44d8IImmbmUZBkBb2ZM4QBrJKjeGrAvyeknmccE qIL6V23u6augLoZXGDQfahIkPy+/Dq9t3YexYsyh/04S2GE33jNn6v9pH5KV+JT4 /uqixsLDPRPAV+cAeRSC9a4hyuro1V6iFrbQ4ylO10mMTRpesYErpiopynYnGyut gaadTydkFGAU4BEtsLsaBljV2bwXZxu+Xm03RZK5LjMRYgRgNFpwmvhaWDULPKHb dnGr4KBEeWELhX9B9vPwm3ZGMaVHaw9xYtr5uspTCQG5QA0xhPK0Ea9NKQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFBiSefBSJbNZR41VSy639iQ0A91uMB8GA1UdIwQY MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt ZGUwNWM1NDA0NWJiLzEvR0pKNThGSWxzMWxIalZWTExyZjJKRFFEM1c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBhwQCAAEwgYADAwAF +AMDACVzAwMAJeUDAwEudgMEBy65AAMDAC7TAwQGPkBAAwQDTffYAwQEURcQAwQG U6rAAwQHVd+AAwQHWaKAAwQHXhsAAwMAXpkDBAdtogADAwCG+QMDALAIAwMAsokD AwC8owMEAsEpPAMEAcHvgAMEBdRSwAMEBdRtIDAUBAIAAjAOAwUAKgIIqAMFACoC I3gwDQYJKoZIhvcNAQELBQADggEBABIce7NYEu3fPRLMGd09JGBP/XF7IrTmeCTe 30mUuekTA1Xw78ugL0LEa9dEfM0p4eLSv0Hj5OPW2aqBC+ZlkCI/OHD8xnIqwEox y5sUUXrZu2stY8ibJRJsc1+hh5vh+iO96JiuvlWsRNmqPkiOjvYXjgrsx9JvqDTa d8b/u36Ita57ytnFu34pUDNvnH/1MSJAyPLPq1vD2G8ZzkK1QOCu2l5bNm8wQm0d A+g6FvyO6oev9lqp0qhvnD89+XYedCL7SqOO4UN26dXB244m0y/d3hxb5iV+1CXt mqLyTTe7Q2qv2X/1R0KnamW/akmhkFj65aiNnPkjcBdqYq2zRSs= -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:35 2026 by rpki-client