This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/gK03dOMIheA0WW00ZsTlFQAdkqE.roa File: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (raw, json) Hash identifier: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8= Subject key identifier: 80:AD:37:74:E3:08:85:E0:34:59:6D:34:66:C4:E5:15:00:1D:92:A1 Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Certificate serial: 019B7F385872DE550AF4A463DC3CB0904992 Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/gK03dOMIheA0WW00ZsTlFQAdkqE.roa Signing time: Fri 02 Jan 2026 14:59:17 +0000 ROA not before: Fri 02 Jan 2026 14:59:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 45.149.76.0/24 maxlen: 24 45.149.77.0/24 maxlen: 24 45.149.78.0/24 maxlen: 24 45.149.79.0/24 maxlen: 24 130.185.72.0/24 maxlen: 24 130.185.73.0/24 maxlen: 24 130.185.74.0/24 maxlen: 24 130.185.75.0/24 maxlen: 24 130.185.76.0/24 maxlen: 24 130.185.77.0/24 maxlen: 24 130.185.78.0/24 maxlen: 24 130.185.79.0/24 maxlen: 24 158.255.74.0/24 maxlen: 24 171.22.24.0/24 maxlen: 24 171.22.25.0/24 maxlen: 24 171.22.26.0/24 maxlen: 24 171.22.27.0/24 maxlen: 24 176.97.218.0/24 maxlen: 24 178.211.145.0/24 maxlen: 24 185.8.172.0/24 maxlen: 24 185.8.173.0/24 maxlen: 24 185.8.174.0/24 maxlen: 24 185.8.175.0/24 maxlen: 24 185.190.39.0/24 maxlen: 24 185.204.197.0/24 maxlen: 24 185.208.174.0/24 maxlen: 24 185.208.175.0/24 maxlen: 24 185.252.86.0/24 maxlen: 24 193.105.234.0/24 maxlen: 24 193.242.125.0/24 maxlen: 24 194.5.175.0/24 maxlen: 24 194.5.188.0/24 maxlen: 24 194.5.195.0/24 maxlen: 24 194.5.205.0/24 maxlen: 24 194.62.43.0/24 maxlen: 24 195.88.208.0/24 maxlen: 24 195.177.255.0/24 maxlen: 24 212.23.201.0/24 maxlen: 24 2a03:2dc0::/36 maxlen: 36 2a03:2dc0:1000::/36 maxlen: 36 2a03:2dc0:2000::/36 maxlen: 36 2a0e:b080::/32 maxlen: 32 2a0e:b081::/32 maxlen: 32 2a0e:b082::/32 maxlen: 32 2a0e:b083::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:38:58:72:de:55:0a:f4:a4:63:dc:3c:b0:90:49:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Validity Not Before: Jan 2 14:59:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80ad3774e30885e034596d3466c4e515001d92a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:45:13:00:89:fc:48:4c:8b:68:9f:dc:73: 47:d1:ed:30:a4:7b:f3:7b:89:df:cf:c7:b2:0c:5b: a7:e2:15:09:e6:8d:88:3d:98:10:8b:2e:90:3d:e9: 6d:e2:3e:fa:c6:bf:70:7f:d5:b5:bc:7b:93:60:73: df:9f:c0:78:1f:98:1e:d8:30:81:d3:86:fb:42:54: f9:a5:c6:c8:fe:ce:63:5f:59:0d:a7:16:42:41:fb: a6:d8:c0:82:b0:8d:c7:96:83:e8:83:a5:e4:cd:1f: 84:b4:42:6a:17:f6:10:f5:dc:fa:17:23:e2:a4:a3: 7d:7a:4a:2a:88:f4:41:1d:84:64:2c:6e:3c:44:55: a3:52:95:78:1f:b5:16:41:a6:75:fc:19:11:fc:e2: 81:6e:e8:bd:60:ef:8b:40:5b:e2:7b:e2:b8:49:f2: 8c:2e:aa:b4:69:d6:9e:6a:4b:98:01:c9:46:9d:68: e0:65:2b:e9:df:59:1c:2e:3a:8e:57:80:18:c9:75: b0:3c:da:88:d8:28:f3:2d:33:2a:4b:84:5a:54:ba: 4d:94:87:5d:32:62:fa:c1:29:97:ce:21:2a:76:78: ea:b0:39:32:5f:be:43:44:59:b1:10:3a:8f:62:e3: 20:be:0a:64:36:31:17:0b:02:d5:55:bb:94:d9:b2: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AD:37:74:E3:08:85:E0:34:59:6D:34:66:C4:E5:15:00:1D:92:A1 X509v3 Authority Key Identifier: keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/gK03dOMIheA0WW00ZsTlFQAdkqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.76.0/22 130.185.72.0/21 158.255.74.0/24 171.22.24.0/22 176.97.218.0/24 178.211.145.0/24 185.8.172.0/22 185.190.39.0/24 185.204.197.0/24 185.208.174.0/23 185.252.86.0/24 193.105.234.0/24 193.242.125.0/24 194.5.175.0/24 194.5.188.0/24 194.5.195.0/24 194.5.205.0/24 194.62.43.0/24 195.88.208.0/24 195.177.255.0/24 212.23.201.0/24 IPv6: 2a03:2dc0::-2a03:2dc0:2fff:ffff:ffff:ffff:ffff:ffff 2a0e:b080::/30 Signature Algorithm: sha256WithRSAEncryption 8c:4b:7b:6d:61:c1:28:61:2e:f4:b4:b2:f0:2e:a1:99:fa:50: 17:64:3f:32:1f:1a:a2:3c:47:cf:3e:9a:fc:d4:2c:7e:5f:89: bb:16:cc:4d:2b:3c:af:2a:dc:3c:93:90:44:c7:9e:c5:74:26: 51:c3:5f:7c:b9:ac:cc:4a:24:82:1a:bc:5a:c0:46:40:12:07: 97:19:61:69:0c:45:cd:dc:d6:64:b7:42:b6:7c:a1:2f:33:4d: 7f:a6:90:e7:83:04:88:f0:cb:82:e9:0c:3a:82:8a:dc:0f:1d: a8:3c:b1:09:66:9e:96:da:38:c0:78:01:2c:11:ac:dc:d3:d5: c2:c7:fc:d5:e7:86:95:28:db:ef:58:d4:ae:73:33:5d:2f:eb: 17:7c:ca:2b:2e:86:0b:ac:bf:0c:2b:35:9a:60:87:92:34:41: 53:79:04:46:75:f5:1a:c0:81:12:6a:fb:2d:6c:46:06:dc:1d: 88:04:47:3e:0c:05:57:33:87:fc:d4:71:aa:71:34:18:aa:fd: b5:63:91:07:b3:a7:93:16:77:7e:a2:65:f7:83:53:06:4f:ba: 21:ea:5c:fe:04:f6:41:7d:46:8a:3c:59:f6:01:d8:eb:9c:ec: 36:eb:3b:94:d3:05:07:44:09:0b:c0:41:b0:19:4b:ea:d2:a0: 9c:51:ae:56 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/OFhy3lUK9KRj3DywkEmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk ZDE2ZWIwHhcNMjYwMTAyMTQ1OTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGFkMzc3NGUzMDg4NWUwMzQ1OTZkMzQ2NmM0ZTUxNTAwMWQ5MmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKhFEwCJ/EhMi2if3HNH0e0wpHvz e4nfz8eyDFun4hUJ5o2IPZgQiy6QPelt4j76xr9wf9W1vHuTYHPfn8B4H5ge2DCB 04b7QlT5pcbI/s5jX1kNpxZCQfum2MCCsI3HloPog6XkzR+EtEJqF/YQ9dz6FyPi pKN9ekoqiPRBHYRkLG48RFWjUpV4H7UWQaZ1/BkR/OKBbui9YO+LQFvie+K4SfKM Lqq0adaeakuYAclGnWjgZSvp31kcLjqOV4AYyXWwPNqI2CjzLTMqS4RaVLpNlIdd MmL6wSmXziEqdnjqsDkyX75DRFmxEDqPYuMgvgpkNjEXCwLVVbuU2bJBZwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFICtN3TjCIXgNFltNGbE5RUAHZKhMB8GA1UdIwQY MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt YzdhYzI2YmNjMmRhLzEvZ0swM2RPTUloZUEwV1cwMFpzVGxGUUFka3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBhAQCAAEwfgMEAi2V TAMEA4K5SAMEAJ7/SgMEAqsWGAMEALBh2gMEALLTkQMEArkIrAMEALm+JwMEALnM xQMEAbnQrgMEALn8VgMEAMFp6gMEAMHyfQMEAMIFrwMEAMIFvAMEAMIFwwMEAMIF zQMEAMI+KwMEAMNY0AMEAMOx/wMEANQXyTAeBAIAAjAYMA8DBQYqAy3AAwYEKgMt wCADBQIqDrCAMA0GCSqGSIb3DQEBCwUAA4IBAQCMS3ttYcEoYS70tLLwLqGZ+lAX ZD8yHxqiPEfPPpr81Cx+X4m7FsxNKzyvKtw8k5BEx57FdCZRw198uazMSiSCGrxa wEZAEgeXGWFpDEXN3NZkt0K2fKEvM01/ppDngwSI8MuC6Qw6gorcDx2oPLEJZp6W 2jjAeAEsEazc09XCx/zV54aVKNvvWNSuczNdL+sXfMorLoYLrL8MKzWaYIeSNEFT eQRGdfUawIESavstbEYG3B2IBEc+DAVXM4f81HGqcTQYqv21Y5EHs6eTFnd+omX3 g1MGT7oh6lz+BPZBfUaKPFn2AdjrnOw26zuU0wUHRAkLwEGwGUvq0qCcUa5W -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:22 2026 by rpki-client