This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/_gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa File: _gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa (raw, json) Hash identifier: fbP0Eisnj7ta1eL91x/ykjZ4/I+oNZYVlLK/j2viYek= Subject key identifier: FE:01:DD:73:FA:35:4A:0E:1B:3E:66:A3:39:99:9A:19:3E:99:5C:D5 Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc Certificate serial: 019B7C7FFBF9E1FBBC654348E52D0E260481 Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/_gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa Signing time: Fri 02 Jan 2026 02:18:40 +0000 ROA not before: Fri 02 Jan 2026 02:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3243 IP address blocks: 2.80.0.0/14 maxlen: 24 37.189.0.0/16 maxlen: 24 81.193.0.0/16 maxlen: 24 82.154.0.0/15 maxlen: 24 85.240.0.0/13 maxlen: 24 144.64.0.0/16 maxlen: 24 168.182.128.0/17 maxlen: 24 176.78.0.0/15 maxlen: 24 185.2.84.0/22 maxlen: 24 188.80.0.0/14 maxlen: 24 188.250.0.0/15 maxlen: 24 194.65.0.0/16 maxlen: 24 198.56.128.0/17 maxlen: 24 212.55.128.0/19 maxlen: 24 213.13.0.0/16 maxlen: 24 2001:8a0::/32 maxlen: 32 2001:8a0:4000::/34 maxlen: 34 2001:8a0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.mft rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fb:f9:e1:fb:bc:65:43:48:e5:2d:0e:26:04:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe01dd73fa354a0e1b3e66a339999a193e995cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:94:7f:25:8c:1b:a9:4e:8d:8d:6c:7e:b1: 5c:87:45:65:af:d9:ca:cd:ac:8b:a1:76:d7:b6:db: 4a:21:f9:ca:a1:bd:c8:5f:6b:13:88:15:2e:ed:de: 82:54:9e:2f:37:88:f1:28:27:3d:2a:fe:72:56:f0: 25:c4:ca:8d:74:33:6b:76:0d:8b:29:68:e3:61:52: 68:e4:3d:8e:ae:0e:8a:b1:93:67:ef:81:f6:d2:81: 21:bd:71:ab:2c:9f:83:61:f2:ea:ff:ee:a6:98:2e: b2:ed:45:d9:1b:75:b2:c7:3a:d1:85:9b:1c:92:f3: 62:60:55:49:c7:4f:65:49:8d:d3:b9:f5:5f:8e:c3: 9c:32:44:47:6e:95:ff:ed:42:0a:f4:88:b9:2e:81: 69:ba:b9:b3:e0:59:71:6a:26:bb:b4:a7:43:70:6a: 22:0d:a1:ab:3b:82:3b:62:4c:94:ba:0d:11:6b:49: 8f:0b:a4:f0:92:be:80:c0:00:a3:a8:2e:bb:3c:b2: d4:5e:72:03:71:32:ca:0e:4c:c2:f5:22:d5:46:73: 15:ef:a4:97:fe:7e:c2:ce:87:09:98:a6:18:a0:87: 0b:c9:a9:27:38:90:5f:13:43:40:c2:1c:88:82:a3: 20:d6:c9:87:28:ba:c3:4c:7e:e3:63:37:54:b1:b9: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:01:DD:73:FA:35:4A:0E:1B:3E:66:A3:39:99:9A:19:3E:99:5C:D5 X509v3 Authority Key Identifier: keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/_gHdc_o1Sg4bPmajOZmaGT6ZXNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.80.0.0/14 37.189.0.0/16 81.193.0.0/16 82.154.0.0/15 85.240.0.0/13 144.64.0.0/16 168.182.128.0/17 176.78.0.0/15 185.2.84.0/22 188.80.0.0/14 188.250.0.0/15 194.65.0.0/16 198.56.128.0/17 212.55.128.0/19 213.13.0.0/16 IPv6: 2001:8a0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:98:77:9b:8d:a5:b9:32:76:a3:95:45:f7:5e:45:c1:21:8d: e0:ad:df:bf:48:ef:93:b0:0f:f5:bb:b0:53:d0:dd:48:17:44: 64:e1:0c:47:ad:f5:6e:a3:df:54:7c:b4:d6:9e:69:44:fd:4d: b3:78:2a:6e:cd:3f:84:9d:07:de:a2:d8:86:66:95:95:9d:98: 9b:0b:bd:99:10:3f:07:c5:89:ae:66:b6:c0:8a:dd:7a:bf:80: 4f:22:4a:36:94:7c:5b:4f:e9:4c:5b:54:d6:97:72:27:eb:84: 8d:72:d4:62:17:e7:31:bd:d5:89:96:2b:8f:8c:45:ff:a2:2d: a0:97:b4:c7:4a:88:10:50:18:5b:1c:f1:04:49:5e:c8:a1:48: 7e:b1:53:49:e5:45:62:0a:2b:9a:2f:2d:85:e5:b7:70:94:c1: a2:b3:ba:1c:17:38:49:a5:de:73:49:bb:47:eb:85:7c:69:95: 50:89:6d:b0:f5:cf:b1:54:9a:a7:03:49:0d:02:ef:96:5d:51: 50:f1:ed:19:1b:a8:4d:ee:96:1e:67:62:0a:8a:53:ca:ef:ad: d8:2f:66:1b:ef:c3:17:22:c6:a1:fe:44:fc:c2:f6:90:5c:11: 7e:1a:ca:58:9b:b6:ba:b4:ce:1a:55:c9:bd:d6:5b:40:76:e7: 2c:a8:ba:1c -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt8f/v54fu8ZUNI5S0OJgSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMmIzMGQ4OWIxYmNmZjY5OWY2NDFmODgwMjY5NDJkMTZh NzJiY2MwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTAxZGQ3M2ZhMzU0YTBlMWIzZTY2YTMzOTk5OWExOTNlOTk1Y2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswaUfyWMG6lOjY1sfrFch0Vlr9nK zayLoXbXtttKIfnKob3IX2sTiBUu7d6CVJ4vN4jxKCc9Kv5yVvAlxMqNdDNrdg2L KWjjYVJo5D2Org6KsZNn74H20oEhvXGrLJ+DYfLq/+6mmC6y7UXZG3WyxzrRhZsc kvNiYFVJx09lSY3TufVfjsOcMkRHbpX/7UIK9Ii5LoFpurmz4Flxaia7tKdDcGoi DaGrO4I7YkyUug0Ra0mPC6Twkr6AwACjqC67PLLUXnIDcTLKDkzC9SLVRnMV76SX /n7CzocJmKYYoIcLyaknOJBfE0NAwhyIgqMg1smHKLrDTH7jYzdUsbkpuQIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFP4B3XP6NUoOGz5mozmZmhk+mVzVMB8GA1UdIwQY MBaAFIIrMNibG8/2mfZB+IAmlC0WpyvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEt OTE0ZDVkYzUxOTdmLzEvX2dIZGNfbzFTZzRiUG1hak9abWFHVDZaWE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lNjg3NzAtZWRmMi00MzU4LWI4MjEtOTE0ZDVkYzUxOTdm LzEvZ2lzdzJKc2J6X2FaOWtINGdDYVVMUmFuSzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBVBAIAATBPAwMCAlADAwAl vQMDAFHBAwMBUpoDAwNV8AMDAJBAAwQHqLaAAwMBsE4DBAK5AlQDAwK8UAMDAbz6 AwMAwkEDBAfGOIADBAXUN4ADAwDVDTANBAIAAjAHAwUAIAEIoDANBgkqhkiG9w0B AQsFAAOCAQEAOph3m42luTJ2o5VF915FwSGN4K3fv0jvk7AP9buwU9DdSBdEZOEM R631bqPfVHy01p5pRP1Ns3gqbs0/hJ0H3qLYhmaVlZ2Ymwu9mRA/B8WJrma2wIrd er+ATyJKNpR8W0/pTFtU1pdyJ+uEjXLUYhfnMb3ViZYrj4xF/6ItoJe0x0qIEFAY WxzxBEleyKFIfrFTSeVFYgormi8theW3cJTBorO6HBc4SaXec0m7R+uFfGmVUIlt sPXPsVSapwNJDQLvll1RUPHtGRuoTe6WHmdiCopTyu+t2C9mG+/DFyLGof5E/ML2 kFwRfhrKWJu2urTOGlXJvdZbQHbnLKi6HA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:41 2026 by rpki-client