This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/G-LosfPXxnZLjoawTLkLFlJf6Uo.roa File: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (raw, json) Hash identifier: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs= Subject key identifier: 1B:E2:E8:B1:F3:D7:C6:76:4B:8E:86:B0:4C:B9:0B:16:52:5F:E9:4A Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Certificate serial: 019B77C765CB7FA2FB571FE01471DB803E86 Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/G-LosfPXxnZLjoawTLkLFlJf6Uo.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19229 IP address blocks: 77.95.80.0/21 maxlen: 21 77.95.80.0/23 maxlen: 23 77.95.82.0/23 maxlen: 23 77.95.84.0/23 maxlen: 23 77.95.86.0/23 maxlen: 23 176.32.232.0/21 maxlen: 24 176.32.232.0/24 maxlen: 24 176.32.233.0/24 maxlen: 24 176.32.234.0/24 maxlen: 24 176.32.235.0/24 maxlen: 24 176.32.236.0/24 maxlen: 24 176.32.237.0/24 maxlen: 24 176.32.238.0/24 maxlen: 24 176.32.239.0/24 maxlen: 24 185.148.132.0/22 maxlen: 22 185.148.132.0/23 maxlen: 23 185.148.134.0/23 maxlen: 23 217.64.224.0/20 maxlen: 20 217.64.224.0/23 maxlen: 23 217.64.226.0/23 maxlen: 23 217.64.228.0/23 maxlen: 23 217.64.230.0/23 maxlen: 23 217.64.232.0/23 maxlen: 23 217.64.234.0/23 maxlen: 23 217.64.236.0/23 maxlen: 23 217.64.238.0/23 maxlen: 23 217.147.64.0/20 maxlen: 20 217.147.64.0/23 maxlen: 23 217.147.66.0/23 maxlen: 23 217.147.68.0/23 maxlen: 23 217.147.70.0/23 maxlen: 23 217.147.72.0/23 maxlen: 23 217.147.74.0/23 maxlen: 23 217.147.76.0/23 maxlen: 23 217.147.78.0/23 maxlen: 23 2a02:5f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:65:cb:7f:a2:fb:57:1f:e0:14:71:db:80:3e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1be2e8b1f3d7c6764b8e86b04cb90b16525fe94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:2a:27:28:ce:e1:b7:4b:2b:ee:d0:39:ca: 43:69:d7:81:4d:38:ea:9b:63:e2:83:53:e4:97:97: 09:ff:75:3f:b6:8c:8a:e2:46:c8:78:15:bb:0c:fc: 32:f2:32:15:dd:0a:df:f5:d4:67:80:70:79:b9:4d: f2:66:79:b7:79:f9:8a:c9:10:16:9d:6f:a4:de:17: c4:42:cd:ea:f4:03:32:f2:da:52:3b:0a:d1:35:39: 3a:05:46:1f:8c:0c:57:23:54:d6:bd:45:e4:46:e0: bd:3d:fb:5a:b5:50:07:7c:0e:69:6d:84:8d:48:c5: 75:3e:a8:67:8b:9b:86:ca:14:7b:42:0b:d7:8c:ce: db:5d:d6:80:1d:0a:af:ed:eb:81:a2:f9:79:b6:df: d7:22:e1:f4:10:fe:45:18:33:1d:bf:a0:a6:09:4e: 60:ec:9f:9b:98:31:2c:f4:97:12:7a:20:47:46:75: 5b:bc:2c:68:3a:80:6a:d0:d0:a0:7f:6d:7c:56:c3: 0e:f0:d8:ea:6b:90:6c:69:53:2e:1c:a9:3f:9e:fa: 5a:bf:be:6e:82:5c:2c:3d:40:62:7f:19:a9:08:0d: 86:0a:eb:b1:66:ff:c8:74:7c:32:e0:1e:c3:9c:4f: d4:9e:c6:56:ed:34:34:da:44:ea:69:60:77:dc:a7: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E2:E8:B1:F3:D7:C6:76:4B:8E:86:B0:4C:B9:0B:16:52:5F:E9:4A X509v3 Authority Key Identifier: keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/G-LosfPXxnZLjoawTLkLFlJf6Uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.80.0/21 176.32.232.0/21 185.148.132.0/22 217.64.224.0/20 217.147.64.0/20 IPv6: 2a02:5f00::/32 Signature Algorithm: sha256WithRSAEncryption 68:05:6e:49:65:e7:62:8a:0a:36:76:b8:14:61:ba:73:83:61: 66:73:81:40:ed:a1:6e:53:b9:75:72:80:4b:eb:bc:dd:c3:36: 65:43:55:ae:46:a4:d6:2e:d6:dd:68:8b:39:61:ea:cb:1a:c8: 79:dd:8e:56:83:19:24:44:85:62:40:9a:d2:46:57:16:c0:29: bd:54:63:29:c5:38:37:68:71:ed:f1:12:26:51:28:dc:c5:6b: 6e:a5:ef:ec:86:af:21:9b:a8:b9:d6:a1:25:e9:87:35:2b:66: 3a:50:8d:e7:af:20:80:ae:0c:4d:1c:05:e1:40:ed:6e:61:17: 20:c9:08:6f:03:14:8c:82:5f:fd:4c:61:7a:fb:5f:19:34:96: ce:1b:f4:b1:7e:a9:35:f7:24:fe:72:95:ea:58:37:f7:46:00: 77:98:87:17:9c:b7:4b:fb:54:a3:7b:41:c4:a0:a1:54:88:99: c1:aa:03:11:44:fd:f5:a7:85:85:db:b6:2a:66:dd:2e:8e:72: c2:9a:23:76:ab:9a:f1:e4:71:70:6c:17:1e:a0:04:3a:ff:aa: c2:25:5e:4e:c3:7e:44:ea:bb:f0:98:b1:6d:ea:ad:6b:5d:a8: 6d:9d:e6:eb:5f:0f:4a:17:06:85:54:94:e7:73:f1:74:62:b4: f5:16:e6:d3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3x2XLf6L7Vx/gFHHbgD6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlY2I5YmQ1ZWQ5NmU2OWRkYThmYzJhMWZlMDIxNDdhZGFl OGY3MTMwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmUyZThiMWYzZDdjNjc2NGI4ZTg2YjA0Y2I5MGIxNjUyNWZlOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQQqJyjO4bdLK+7QOcpDadeBTTjq m2Pig1Pkl5cJ/3U/toyK4kbIeBW7DPwy8jIV3Qrf9dRngHB5uU3yZnm3efmKyRAW nW+k3hfEQs3q9AMy8tpSOwrRNTk6BUYfjAxXI1TWvUXkRuC9PftatVAHfA5pbYSN SMV1Pqhni5uGyhR7QgvXjM7bXdaAHQqv7euBovl5tt/XIuH0EP5FGDMdv6CmCU5g 7J+bmDEs9JcSeiBHRnVbvCxoOoBq0NCgf218VsMO8Njqa5BsaVMuHKk/nvpav75u glwsPUBifxmpCA2GCuuxZv/IdHwy4B7DnE/UnsZW7TQ02kTqaWB33KfphQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFBvi6LHz18Z2S46GsEy5CxZSX+lKMB8GA1UdIwQY MBaAFB7Lm9Xtluad2o/Cof4CFHra6PcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWIt ZjU0ZmJmNjkxN2JjLzEvRy1Mb3NmUFh4blpMam9hd1RMa0xGbEpmNlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jMzQxNTAtNTkxMi00OTBjLWIzNWItZjU0ZmJmNjkxN2Jj LzEvSHN1YjFlMlc1cDNhajhLaF9nSVVldHJvOXhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDTV9QAwQD sCDoAwQCuZSEAwQE2UDgAwQE2ZNAMA0EAgACMAcDBQAqAl8AMA0GCSqGSIb3DQEB CwUAA4IBAQBoBW5JZediigo2drgUYbpzg2Fmc4FA7aFuU7l1coBL67zdwzZlQ1Wu RqTWLtbdaIs5YerLGsh53Y5WgxkkRIViQJrSRlcWwCm9VGMpxTg3aHHt8RImUSjc xWtupe/shq8hm6i51qEl6Yc1K2Y6UI3nryCArgxNHAXhQO1uYRcgyQhvAxSMgl/9 TGF6+18ZNJbOG/Sxfqk19yT+cpXqWDf3RgB3mIcXnLdL+1Sje0HEoKFUiJnBqgMR RP31p4WF27YqZt0ujnLCmiN2q5rx5HFwbBceoAQ6/6rCJV5Ow35E6rvwmLFt6q1r XahtnebrXw9KFwaFVJTnc/F0YrT1FubT -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:07 2026 by rpki-client