This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/gbp6iOfei7hEPDEdinLokXxWs2s.roa File: gbp6iOfei7hEPDEdinLokXxWs2s.roa (raw, json) Hash identifier: G2slnlwUdUEpu2ieOsRYLInvVHszrpyRr4yu7J67evc= Subject key identifier: 81:BA:7A:88:E7:DE:8B:B8:44:3C:31:1D:8A:72:E8:91:7C:56:B3:6B Certificate issuer: /CN=78da3f739ca082ffe887f70306e7fc7484606ce2 Certificate serial: 019B76EB12AECDA2F2F089C81508B30DBB9C Authority key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/gbp6iOfei7hEPDEdinLokXxWs2s.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15879 IP address blocks: 5.226.40.0/21 maxlen: 24 46.255.104.0/21 maxlen: 24 77.245.80.0/20 maxlen: 24 80.246.176.0/20 maxlen: 24 81.24.48.0/20 maxlen: 24 82.201.0.0/17 maxlen: 24 83.219.64.0/19 maxlen: 24 87.250.128.0/19 maxlen: 24 93.188.248.0/21 maxlen: 24 94.247.192.0/21 maxlen: 24 185.28.148.0/22 maxlen: 24 185.55.128.0/22 maxlen: 24 193.91.48.0/20 maxlen: 24 193.189.134.0/24 maxlen: 24 194.105.138.0/23 maxlen: 24 212.204.192.0/18 maxlen: 24 213.130.160.0/19 maxlen: 24 213.133.32.0/19 maxlen: 24 213.197.192.0/18 maxlen: 24 213.206.64.0/18 maxlen: 24 217.115.192.0/20 maxlen: 24 217.148.80.0/20 maxlen: 24 217.149.64.0/20 maxlen: 24 217.194.96.0/19 maxlen: 24 2001:67c:1a4::/48 maxlen: 48 2001:898::/29 maxlen: 48 2001:9a0::/32 maxlen: 48 2001:14a0::/32 maxlen: 48 2001:40e0::/32 maxlen: 48 2a02:f18::/32 maxlen: 48 2a02:f30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:12:ae:cd:a2:f2:f0:89:c8:15:08:b3:0d:bb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78da3f739ca082ffe887f70306e7fc7484606ce2 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81ba7a88e7de8bb8443c311d8a72e8917c56b36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:15:eb:64:fb:00:a1:c2:7d:0a:48:dd:b2: 01:f7:9b:b2:d9:a9:0a:0d:0a:4f:64:9c:b8:bf:84: 8d:5d:2f:8a:f3:2f:78:3a:d5:e8:03:d2:fa:25:0e: 3e:13:bd:70:69:9d:49:9a:a4:cb:2e:60:5b:67:cf: 6a:80:1a:a6:80:86:58:40:13:33:02:a0:84:2e:9a: b5:c5:f0:5d:7a:31:78:37:18:8b:33:ac:b1:91:29: 1a:46:24:2f:9d:6b:f5:fd:03:67:f2:a2:25:6c:f0: da:1d:f0:4f:55:56:87:15:0e:ac:61:43:e3:51:33: 0a:00:da:44:69:fd:30:dc:3f:a1:aa:d0:61:77:de: 84:6d:ea:fe:d7:12:59:9c:59:09:ee:40:8e:55:d2: 03:7b:99:58:55:fe:69:89:07:d4:61:2b:a5:e9:49: 6a:5e:c2:8e:62:05:2c:30:24:cf:a8:f4:78:ed:c1: a7:d5:de:68:96:d6:6e:03:5c:2d:d3:ae:b5:b4:cb: 56:ee:76:5d:e5:d7:59:d4:86:03:d9:ee:4f:f2:20: d0:3d:16:03:47:e7:97:53:8f:7f:a2:75:5f:8c:68: 0c:98:ef:bd:87:e3:fa:a5:3e:ca:c4:33:e8:e0:36: a9:c6:6f:72:4b:3b:55:cc:63:f6:fc:99:ff:f4:fb: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BA:7A:88:E7:DE:8B:B8:44:3C:31:1D:8A:72:E8:91:7C:56:B3:6B X509v3 Authority Key Identifier: keyid:78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/gbp6iOfei7hEPDEdinLokXxWs2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.40.0/21 46.255.104.0/21 77.245.80.0/20 80.246.176.0/20 81.24.48.0/20 82.201.0.0/17 83.219.64.0/19 87.250.128.0/19 93.188.248.0/21 94.247.192.0/21 185.28.148.0/22 185.55.128.0/22 193.91.48.0/20 193.189.134.0/24 194.105.138.0/23 212.204.192.0/18 213.130.160.0/19 213.133.32.0/19 213.197.192.0/18 213.206.64.0/18 217.115.192.0/20 217.148.80.0/20 217.149.64.0/20 217.194.96.0/19 IPv6: 2001:67c:1a4::/48 2001:898::/29 2001:9a0::/32 2001:14a0::/32 2001:40e0::/32 2a02:f18::/32 2a02:f30::/32 Signature Algorithm: sha256WithRSAEncryption 8e:3a:76:8d:10:ad:6b:d4:86:20:e8:22:75:93:bb:c7:1b:6e: 48:26:19:b9:12:5d:40:7d:e6:a5:86:53:7a:6d:3b:01:42:4a: 07:52:e5:0f:3e:2c:38:86:66:1e:54:ff:bd:4a:12:b9:6b:96: 83:a5:83:a0:11:4d:27:df:6d:e6:cc:00:00:01:aa:d2:31:02: c3:a4:b4:a8:e8:99:f6:52:4d:87:c6:3a:40:82:3c:bc:a0:02: c6:0c:6b:a6:61:3b:b3:b9:f8:88:7a:40:76:7f:69:bd:c5:1f: 27:b3:dc:d7:a4:d0:3c:f2:59:d9:07:11:ab:14:62:70:e7:24: 73:8b:18:cf:d6:27:19:99:0e:ac:4a:f5:00:56:28:3c:98:41: c1:0a:e5:b9:93:71:3c:c0:d4:52:4d:30:15:7a:31:0c:ec:4e: ee:66:b8:4b:07:f6:9b:6b:9e:31:b6:de:4f:cf:99:95:5e:b4: 4b:6e:52:de:ab:71:58:66:41:75:12:4f:34:f0:66:24:a2:db: 7b:0b:94:bb:46:5e:46:02:6e:db:a7:cc:01:cb:c0:92:d2:4b: 35:52:88:70:67:b3:ee:96:8d:14:77:2f:d3:50:cb:f8:5b:5b: 12:3c:99:66:81:da:e7:33:30:53:8c:da:72:ae:70:58:65:1d: 7e:75:50:09 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt26xKuzaLy8InIFQizDbucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGEzZjczOWNhMDgyZmZlODg3ZjcwMzA2ZTdmYzc0ODQ2 MDZjZTIwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWJhN2E4OGU3ZGU4YmI4NDQzYzMxMWQ4YTcyZTg5MTdjNTZiMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRgV62T7AKHCfQpI3bIB95uy2akK DQpPZJy4v4SNXS+K8y94OtXoA9L6JQ4+E71waZ1JmqTLLmBbZ89qgBqmgIZYQBMz AqCELpq1xfBdejF4NxiLM6yxkSkaRiQvnWv1/QNn8qIlbPDaHfBPVVaHFQ6sYUPj UTMKANpEaf0w3D+hqtBhd96Eber+1xJZnFkJ7kCOVdIDe5lYVf5piQfUYSul6Ulq XsKOYgUsMCTPqPR47cGn1d5oltZuA1wt0661tMtW7nZd5ddZ1IYD2e5P8iDQPRYD R+eXU49/onVfjGgMmO+9h+P6pT7KxDPo4Dapxm9ySztVzGP2/Jn/9Ps+pQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFIG6eojn3ou4RDwxHYpy6JF8VrNrMB8GA1UdIwQY MBaAFHjaP3OcoIL/6If3Awbn/HSEYGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZjhkOGItNGQzZS00ZTBkLThlMmMt MWJmYmUxMGQ0ODQ5LzEvZ2JwNmlPZmVpN2hFUERFZGluTG9rWHhXczJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZjhkOGItNGQzZS00ZTBkLThlMmMtMWJmYmUxMGQ0ODQ5 LzEvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHoBggrBgEFBQcBBwEB/wSB2DCB1TCBlwQCAAEwgZADBAMF 4igDBAMu/2gDBARN9VADBARQ9rADBARRGDADBAdSyQADBAVT20ADBAVX+oADBANd vPgDBANe98ADBAK5HJQDBAK5N4ADBATBWzADBADBvYYDBAHCaYoDBAbUzMADBAXV gqADBAXVhSADBAbVxcADBAbVzkADBATZc8ADBATZlFADBATZlUADBAXZwmAwOQQC AAIwMwMHACABBnwBpAMFAyABCJgDBQAgAQmgAwUAIAEUoAMFACABQOADBQAqAg8Y AwUAKgIPMDANBgkqhkiG9w0BAQsFAAOCAQEAjjp2jRCta9SGIOgidZO7xxtuSCYZ uRJdQH3mpYZTem07AUJKB1LlDz4sOIZmHlT/vUoSuWuWg6WDoBFNJ99t5swAAAGq 0jECw6S0qOiZ9lJNh8Y6QII8vKACxgxrpmE7s7n4iHpAdn9pvcUfJ7Pc16TQPPJZ 2QcRqxRicOckc4sYz9YnGZkOrEr1AFYoPJhBwQrluZNxPMDUUk0wFXoxDOxO7ma4 Swf2m2ueMbbeT8+ZlV60S25S3qtxWGZBdRJPNPBmJKLbewuUu0ZeRgJu26fMAcvA ktJLNVKIcGez7paNFHcv01DL+FtbEjyZZoHa5zMwU4zacq5wWGUdfnVQCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:46 2026 by rpki-client