This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/G7P5xjim4eTMoRRzAQWbCuFziOs.roa File: G7P5xjim4eTMoRRzAQWbCuFziOs.roa (raw, json) Hash identifier: IIH5NXPwQ/ovUCMgVan0C3IIn9oNt9u4RQZAPf2DvCI= Subject key identifier: 1B:B3:F9:C6:38:A6:E1:E4:CC:A1:14:73:01:05:9B:0A:E1:73:88:EB Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019BBC4F68493770A5F673E53246AFCE213E Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/G7P5xjim4eTMoRRzAQWbCuFziOs.roa Signing time: Wed 14 Jan 2026 11:41:19 +0000 ROA not before: Wed 14 Jan 2026 11:41:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 31.40.194.0/24 maxlen: 24 45.154.120.0/22 maxlen: 24 77.83.48.0/24 maxlen: 24 77.83.49.0/24 maxlen: 24 77.83.50.0/23 maxlen: 24 86.62.53.0/24 maxlen: 24 86.62.54.0/24 maxlen: 24 88.218.81.0/24 maxlen: 24 88.218.82.0/23 maxlen: 24 91.132.126.0/24 maxlen: 24 91.132.127.0/24 maxlen: 24 91.245.238.0/24 maxlen: 24 93.177.92.0/24 maxlen: 24 93.177.93.0/24 maxlen: 24 95.214.244.0/22 maxlen: 24 185.155.100.0/24 maxlen: 24 193.9.56.0/24 maxlen: 24 193.31.124.0/23 maxlen: 24 193.47.36.0/22 maxlen: 24 193.160.74.0/24 maxlen: 24 193.160.75.0/24 maxlen: 24 194.53.188.0/22 maxlen: 24 194.124.41.0/24 maxlen: 24 213.109.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:4f:68:49:37:70:a5:f6:73:e5:32:46:af:ce:21:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 14 11:41:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bb3f9c638a6e1e4cca1147301059b0ae17388eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:30:3f:07:45:f1:e3:28:c0:a8:63:af:f3: 44:6a:ad:ef:52:a4:51:89:99:ba:fa:cd:b3:ea:3d: ee:3c:9b:f5:e7:01:59:c7:b8:f0:37:30:6b:37:28: a8:a0:a8:78:47:c2:7a:8b:78:ef:dd:62:c5:5b:df: 82:59:cd:19:97:0c:21:8c:be:38:84:dc:7f:6b:62: 59:8d:22:c9:88:84:2e:35:b0:3b:7c:c3:d2:30:6d: f6:ca:9f:4e:5e:74:b0:dc:7b:aa:72:66:3e:89:58: 24:c7:88:c3:53:20:83:ca:71:35:72:db:c0:4c:f6: af:45:fe:47:63:6d:95:fe:52:37:de:8b:f8:8c:88: 75:4b:b0:b6:f0:d8:06:65:1a:6f:61:25:73:19:ef: 8c:d3:4c:67:68:71:3a:27:c4:1a:c1:4c:65:bc:6f: ce:b1:6d:3e:ac:5a:9f:c2:da:ff:bd:34:dd:57:71: 0b:c5:c7:93:8c:b5:63:ce:68:b6:99:fb:f5:8d:ef: ac:14:81:04:04:08:67:ea:7d:6f:77:ba:2d:a7:58: 09:68:e0:7c:dc:b9:2d:2d:95:97:9f:97:5c:a8:9c: ce:a5:30:2d:ee:01:50:a0:cf:5c:a7:7e:c9:70:b4: f3:4a:aa:24:cb:db:81:5c:57:37:d8:79:27:8b:81: e6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:F9:C6:38:A6:E1:E4:CC:A1:14:73:01:05:9B:0A:E1:73:88:EB X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/G7P5xjim4eTMoRRzAQWbCuFziOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.194.0/24 45.154.120.0/22 77.83.48.0/22 86.62.53.0-86.62.54.255 88.218.81.0-88.218.83.255 91.132.126.0/23 91.245.238.0/24 93.177.92.0/23 95.214.244.0/22 185.155.100.0/24 193.9.56.0/24 193.31.124.0/23 193.47.36.0/22 193.160.74.0/23 194.53.188.0/22 194.124.41.0/24 213.109.188.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:34:63:b8:23:0d:85:69:a6:0c:98:72:4c:a9:68:18:7f:69: 9c:7c:04:77:95:bc:9d:29:70:3a:b2:30:36:ad:84:25:a3:77: 16:fd:6b:e1:f8:3b:56:ed:d7:23:75:b2:8f:e0:79:44:91:34: ac:9c:73:1e:9f:d5:f3:e2:a7:f0:a4:6f:b7:7d:f5:45:ba:17: 92:6e:0c:58:b6:d0:16:6b:00:60:79:19:92:e1:1f:ef:c0:4d: 9a:d7:ad:33:f0:08:82:db:33:2c:46:1c:32:b9:17:3e:00:67: e9:e2:89:87:89:8f:2f:20:9f:a2:ea:36:bd:53:3e:2c:1b:ac: 0d:0b:d0:17:f5:33:86:39:d7:18:80:35:69:31:84:ed:d0:e3: db:36:92:73:4e:5f:94:0d:80:96:ad:08:cc:b0:2b:da:7e:98: 7a:8c:48:e7:8f:f8:bd:97:8d:54:60:e0:47:bc:b5:c5:9b:58: 72:d4:0c:5f:e5:1f:e3:71:e4:60:0d:35:cc:33:dd:0d:23:79: 26:a0:dd:06:5b:f1:5f:17:db:5f:db:4f:b6:da:4b:49:94:da: 37:03:49:68:9b:5a:1f:4b:cd:ee:d6:f5:b1:91:b4:5e:a4:d9: 10:4d:eb:b7:17:c6:83:cb:45:53:3a:5e:1c:51:89:81:7d:12: 84:f4:92:2f -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZu8T2hJN3Cl9nPlMkavziE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTE0MTE0MTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmIzZjljNjM4YTZlMWU0Y2NhMTE0NzMwMTA1OWIwYWUxNzM4OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslcwPwdF8eMowKhjr/NEaq3vUqRR iZm6+s2z6j3uPJv15wFZx7jwNzBrNyiooKh4R8J6i3jv3WLFW9+CWc0ZlwwhjL44 hNx/a2JZjSLJiIQuNbA7fMPSMG32yp9OXnSw3HuqcmY+iVgkx4jDUyCDynE1ctvA TPavRf5HY22V/lI33ov4jIh1S7C28NgGZRpvYSVzGe+M00xnaHE6J8QawUxlvG/O sW0+rFqfwtr/vTTdV3ELxceTjLVjzmi2mfv1je+sFIEEBAhn6n1vd7otp1gJaOB8 3LktLZWXn5dcqJzOpTAt7gFQoM9cp37JcLTzSqoky9uBXFc32Hkni4Hm6QIDAQAB o4ICezCCAncwHQYDVR0OBBYEFBuz+cY4puHkzKEUcwEFmwrhc4jrMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvRzdQNXhqaW00ZVRNb1JSekFRV2JDdUZ6aU9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAAfKMID BAItmngDBAJNUzAwDAMEAFY+NQMEAFY+NjAMAwQAWNpRAwQCWNpQAwQBW4R+AwQA W/XuAwQBXbFcAwQCX9b0AwQAuZtkAwQAwQk4AwQBwR98AwQCwS8kAwQBwaBKAwQC wjW8AwQAwnwpAwQC1W28MA0GCSqGSIb3DQEBCwUAA4IBAQAuNGO4Iw2FaaYMmHJM qWgYf2mcfAR3lbydKXA6sjA2rYQlo3cW/Wvh+DtW7dcjdbKP4HlEkTSsnHMen9Xz 4qfwpG+3ffVFuheSbgxYttAWawBgeRmS4R/vwE2a160z8AiC2zMsRhwyuRc+AGfp 4omHiY8vIJ+i6ja9Uz4sG6wNC9AX9TOGOdcYgDVpMYTt0OPbNpJzTl+UDYCWrQjM sCvafph6jEjnj/i9l41UYOBHvLXFm1hy1Axf5R/jceRgDTXMM90NI3kmoN0GW/Ff F9tf20+22ktJlNo3A0lom1ofS83u1vWxkbRepNkQTeu3F8aDy0VTOl4cUYmBfRKE 9JIv -----END CERTIFICATE-----Generated at Mon Jan 19 21:24:05 2026 by rpki-client