This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/GGzXnUZi-pwDsaW-CAYPNCucjHg.roa File: GGzXnUZi-pwDsaW-CAYPNCucjHg.roa (raw, json) Hash identifier: 6y7HFqLJugwRK/0lqfhfN2XaigbBSmlSA/pbA4dg4rA= Subject key identifier: 18:6C:D7:9D:46:62:FA:9C:03:B1:A5:BE:08:06:0F:34:2B:9C:8C:78 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019BC092B6D22B058A7F24E7E2C155402FED Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/GGzXnUZi-pwDsaW-CAYPNCucjHg.roa Signing time: Thu 15 Jan 2026 07:33:19 +0000 ROA not before: Thu 15 Jan 2026 07:33:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 46.248.128.0/19 maxlen: 19 57.133.0.0/16 maxlen: 16 58.0.0.0/16 maxlen: 16 58.1.128.0/17 maxlen: 17 62.23.0.0/16 maxlen: 16 62.23.14.0/24 maxlen: 24 62.23.23.0/24 maxlen: 24 62.23.43.0/24 maxlen: 24 62.23.61.0/24 maxlen: 24 62.23.70.0/24 maxlen: 24 62.23.254.0/24 maxlen: 24 62.23.255.0/24 maxlen: 24 62.72.96.0/19 maxlen: 19 62.84.192.0/19 maxlen: 19 62.96.0.0/16 maxlen: 16 62.97.64.0/18 maxlen: 18 62.152.96.0/19 maxlen: 19 62.192.0.0/19 maxlen: 19 78.143.0.0/18 maxlen: 18 78.156.64.0/19 maxlen: 19 78.156.64.0/20 maxlen: 20 78.156.80.0/21 maxlen: 21 80.80.0.0/19 maxlen: 19 80.169.0.0/16 maxlen: 16 80.251.160.0/19 maxlen: 19 82.112.192.0/19 maxlen: 19 84.14.0.0/16 maxlen: 16 84.14.63.0/24 maxlen: 24 84.14.217.0/24 maxlen: 24 84.16.160.0/19 maxlen: 19 85.88.128.0/19 maxlen: 19 87.241.0.0/18 maxlen: 18 116.83.0.0/17 maxlen: 17 118.67.224.0/19 maxlen: 19 134.128.128.0/18 maxlen: 18 136.225.0.0/16 maxlen: 16 157.120.224.0/21 maxlen: 21 157.120.236.0/22 maxlen: 22 157.120.240.0/20 maxlen: 20 178.159.176.0/20 maxlen: 20 193.82.32.0/19 maxlen: 19 193.93.80.0/22 maxlen: 22 193.114.160.0/19 maxlen: 19 193.118.160.0/19 maxlen: 19 193.118.224.0/19 maxlen: 19 193.188.132.0/23 maxlen: 23 194.223.128.0/21 maxlen: 21 194.223.136.0/22 maxlen: 22 195.68.0.0/17 maxlen: 17 195.68.74.0/24 maxlen: 24 195.110.64.0/19 maxlen: 19 212.0.96.0/19 maxlen: 19 212.23.224.0/19 maxlen: 19 212.31.224.0/19 maxlen: 19 212.35.96.0/19 maxlen: 19 212.36.128.0/18 maxlen: 18 212.36.144.0/20 maxlen: 20 212.36.160.0/20 maxlen: 20 212.36.184.0/21 maxlen: 21 212.74.64.0/19 maxlen: 19 212.74.77.0/24 maxlen: 24 212.74.78.0/24 maxlen: 24 212.74.79.0/24 maxlen: 24 212.78.160.0/19 maxlen: 19 212.121.128.0/19 maxlen: 19 212.123.192.0/18 maxlen: 18 212.161.0.0/17 maxlen: 17 212.203.64.0/18 maxlen: 18 213.27.128.0/17 maxlen: 17 213.41.0.0/17 maxlen: 17 213.41.39.0/27 maxlen: 27 213.41.39.32/27 maxlen: 27 213.61.0.0/16 maxlen: 16 213.86.0.0/16 maxlen: 16 213.164.0.0/19 maxlen: 19 213.173.160.0/19 maxlen: 19 213.185.160.0/19 maxlen: 19 213.208.192.0/18 maxlen: 18 213.215.128.0/17 maxlen: 17 213.229.128.0/18 maxlen: 18 213.246.192.0/18 maxlen: 18 217.110.0.0/15 maxlen: 15 217.110.222.0/27 maxlen: 27 217.110.222.32/27 maxlen: 27 217.173.96.0/20 maxlen: 20 2001:920::/29 maxlen: 29 2001:920::/32 maxlen: 32 2001:921::/32 maxlen: 32 2001:924::/32 maxlen: 32 2001:925::/32 maxlen: 32 2001:926::/32 maxlen: 32 2001:926:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:92:b6:d2:2b:05:8a:7f:24:e7:e2:c1:55:40:2f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 15 07:33:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=186cd79d4662fa9c03b1a5be08060f342b9c8c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:26:5c:fa:6e:a4:d2:de:91:32:b7:70:b7: 18:46:4b:58:01:c5:52:a9:da:2e:b8:47:ad:53:49: 6a:56:4f:5d:27:6b:dd:3d:f8:e7:22:b6:67:e4:be: 65:c8:9e:0f:07:80:b4:81:4d:a6:25:2a:07:24:88: b1:75:6c:ef:a1:cf:98:e8:46:9d:8b:c2:08:5e:00: ff:e2:ec:e7:37:dc:27:fb:84:fe:df:13:b2:65:82: 8f:07:08:20:46:9f:d5:43:0c:72:eb:25:69:fe:2b: c7:0b:45:1f:18:a9:4e:bb:47:8c:73:1b:35:d0:42: cb:69:5a:01:1d:43:72:de:6f:d5:ee:83:41:af:4e: a2:3c:4d:1b:20:67:48:b4:d3:71:15:b7:4d:8a:1b: 7c:93:7c:d5:61:47:5d:61:18:5e:8b:c2:24:dd:47: b6:16:5a:f4:42:a9:89:4b:4f:51:20:45:69:ff:b8: 49:2c:3a:f1:ed:ae:49:42:d2:ec:84:d6:bc:73:4a: 37:ba:72:82:fa:64:95:a2:f5:b3:16:81:4e:45:4a: 73:05:31:8e:f0:e9:da:c4:2f:92:08:45:c8:b0:2c: 89:af:25:2c:12:85:3b:59:a6:83:b5:0a:79:7e:9d: 0a:b1:39:fa:8e:ae:2f:c1:5c:18:19:1f:b2:a0:71: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6C:D7:9D:46:62:FA:9C:03:B1:A5:BE:08:06:0F:34:2B:9C:8C:78 X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/GGzXnUZi-pwDsaW-CAYPNCucjHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.128.0/19 57.133.0.0/16 58.0.0.0/16 58.1.128.0/17 62.23.0.0/16 62.72.96.0/19 62.84.192.0/19 62.96.0.0/16 62.97.64.0/18 62.152.96.0/19 62.192.0.0/19 78.143.0.0/18 78.156.64.0/19 80.80.0.0/19 80.169.0.0/16 80.251.160.0/19 82.112.192.0/19 84.14.0.0/16 84.16.160.0/19 85.88.128.0/19 87.241.0.0/18 116.83.0.0/17 118.67.224.0/19 134.128.128.0/18 136.225.0.0/16 157.120.224.0/21 157.120.236.0-157.120.255.255 178.159.176.0/20 193.82.32.0/19 193.93.80.0/22 193.114.160.0/19 193.118.160.0/19 193.118.224.0/19 193.188.132.0/23 194.223.128.0-194.223.139.255 195.68.0.0/17 195.110.64.0/19 212.0.96.0/19 212.23.224.0/19 212.31.224.0/19 212.35.96.0/19 212.36.128.0/18 212.74.64.0/19 212.78.160.0/19 212.121.128.0/19 212.123.192.0/18 212.161.0.0/17 212.203.64.0/18 213.27.128.0/17 213.41.0.0/17 213.61.0.0/16 213.86.0.0/16 213.164.0.0/19 213.173.160.0/19 213.185.160.0/19 213.208.192.0/18 213.215.128.0/17 213.229.128.0/18 213.246.192.0/18 217.110.0.0/15 217.173.96.0/20 IPv6: 2001:920::/29 Signature Algorithm: sha256WithRSAEncryption 28:ad:23:63:e2:92:78:b1:9d:89:bd:b9:f1:af:dc:e4:e6:c1: 79:45:69:b8:f2:54:cf:e5:c7:ed:32:20:0d:c0:6f:fd:db:3b: 81:ae:8e:d1:fc:50:10:fe:35:be:22:2b:6f:b3:03:21:64:dd: 88:1b:2b:6b:ba:5a:d2:df:63:34:a8:2b:8b:cf:df:b6:dc:53: d1:89:60:e8:03:10:15:b2:36:15:4d:30:9e:18:4d:1e:a8:f5: b7:ad:d2:ab:3c:9d:d6:77:dc:75:9e:58:70:80:d1:41:c3:27: f8:d7:e0:43:cf:83:61:26:2d:a5:2f:5e:4d:99:1f:4f:65:e4: 78:f9:e2:1c:09:09:ea:c9:0a:a5:1b:c3:31:6f:46:cc:37:c4: 6b:d5:04:fb:19:74:c6:5d:a2:cf:cf:e2:f5:88:11:55:76:6d: 65:7b:e5:6c:4b:bd:d1:3d:52:f0:40:75:1a:f9:2d:61:22:34: e1:4e:ad:df:37:ac:ab:b9:df:35:70:3d:2b:4a:8a:12:31:93: 72:59:04:59:64:04:62:87:52:0d:52:ac:13:91:c9:98:c6:8c: 77:ee:d5:e8:d0:72:72:3f:26:55:62:61:ca:5c:08:7e:5d:86: 42:43:70:6f:d4:e5:e1:6f:e9:7d:bb:aa:2e:a9:a8:d5:60:a9: 26:ad:50:5c -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgISAZvAkrbSKwWKfyTn4sFVQC/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTE1MDczMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODZjZDc5ZDQ2NjJmYTljMDNiMWE1YmUwODA2MGYzNDJiOWM4Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWUmXPpupNLekTK3cLcYRktYAcVS qdouuEetU0lqVk9dJ2vdPfjnIrZn5L5lyJ4PB4C0gU2mJSoHJIixdWzvoc+Y6Ead i8IIXgD/4uznN9wn+4T+3xOyZYKPBwggRp/VQwxy6yVp/ivHC0UfGKlOu0eMcxs1 0ELLaVoBHUNy3m/V7oNBr06iPE0bIGdItNNxFbdNiht8k3zVYUddYRhei8Ik3Ue2 Flr0QqmJS09RIEVp/7hJLDrx7a5JQtLshNa8c0o3unKC+mSVovWzFoFORUpzBTGO 8OnaxC+SCEXIsCyJryUsEoU7WaaDtQp5fp0KsTn6jq4vwVwYGR+yoHFs/wIDAQAB o4IDjzCCA4swHQYDVR0OBBYEFBhs151GYvqcA7GlvggGDzQrnIx4MB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvR0d6WG5VWmktcHdEc2FXLUNBWVBOQ3VjakhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBowYIKwYBBQUHAQcBAf8EggGSMIIBjjCCAXsEAgABMIIB cwMEBS74gAMDADmFAwMAOgADBAc6AYADAwA+FwMEBT5IYAMEBT5UwAMDAD5gAwQG PmFAAwQFPphgAwQFPsAAAwQGTo8AAwQFTpxAAwQFUFAAAwMAUKkDBAVQ+6ADBAVS cMADAwBUDgMEBVQQoAMEBVVYgAMEBlfxAAMEB3RTAAMEBXZD4AMEBoaAgAMDAIjh AwQDnXjgMAsDBAKdeOwDAwCdeAMEBLKfsAMEBcFSIAMEAsFdUAMEBcFyoAMEBcF2 oAMEBcF24AMEAcG8hDAMAwQHwt+AAwQCwt+IAwQHw0QAAwQFw25AAwQF1ABgAwQF 1BfgAwQF1B/gAwQF1CNgAwQG1CSAAwQF1EpAAwQF1E6gAwQF1HmAAwQG1HvAAwQH 1KEAAwQG1MtAAwQH1RuAAwQH1SkAAwMA1T0DAwDVVgMEBdWkAAMEBdWtoAMEBdW5 oAMEBtXQwAMEB9XXgAMEBtXlgAMEBtX2wAMDAdluAwQE2a1gMA0EAgACMAcDBQMg AQkgMA0GCSqGSIb3DQEBCwUAA4IBAQAorSNj4pJ4sZ2Jvbnxr9zk5sF5RWm48lTP 5cftMiANwG/92zuBro7R/FAQ/jW+IitvswMhZN2IGytrulrS32M0qCuLz9+23FPR iWDoAxAVsjYVTTCeGE0eqPW3rdKrPJ3Wd9x1nlhwgNFBwyf41+BDz4NhJi2lL15N mR9PZeR4+eIcCQnqyQqlG8Mxb0bMN8Rr1QT7GXTGXaLPz+L1iBFVdm1le+VsS73R PVLwQHUa+S1hIjThTq3fN6yrud81cD0rSooSMZNyWQRZZARih1INUqwTkcmYxox3 7tXo0HJyPyZVYmHKXAh+XYZCQ3Bv1OXhb+l9u6ouqajVYKkmrVBc -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:01 2026 by rpki-client