This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/gSax7OXH-iNOvXWvL1n7wzpYk_A.roa File: gSax7OXH-iNOvXWvL1n7wzpYk_A.roa (raw, json) Hash identifier: 1itI78/MFf8nZzpbrs5mEB4VVmo+weMxJkNLYAmF8A4= Subject key identifier: 81:26:B1:EC:E5:C7:FA:23:4E:BD:75:AF:2F:59:FB:C3:3A:58:93:F0 Certificate issuer: /CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2 Certificate serial: 019BC71F0C0A5E0566683C09CFA9D6CCD434 Authority key identifier: EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/gSax7OXH-iNOvXWvL1n7wzpYk_A.roa Signing time: Fri 16 Jan 2026 14:04:19 +0000 ROA not before: Fri 16 Jan 2026 14:04:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8247 IP address blocks: 213.232.131.0/24 maxlen: 24 213.232.132.0/24 maxlen: 24 213.232.133.0/24 maxlen: 24 213.232.134.0/24 maxlen: 24 213.232.135.0/24 maxlen: 24 213.232.150.0/24 maxlen: 24 213.232.160.0/24 maxlen: 24 213.232.161.0/24 maxlen: 24 213.232.162.0/24 maxlen: 24 213.232.163.0/24 maxlen: 24 213.232.172.0/24 maxlen: 24 213.232.173.0/24 maxlen: 24 213.232.174.0/24 maxlen: 24 213.232.175.0/24 maxlen: 24 213.232.180.0/24 maxlen: 24 213.232.181.0/24 maxlen: 24 213.232.182.0/24 maxlen: 24 213.232.183.0/24 maxlen: 24 213.232.190.0/24 maxlen: 24 213.232.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:1f:0c:0a:5e:05:66:68:3c:09:cf:a9:d6:cc:d4:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2 Validity Not Before: Jan 16 14:04:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8126b1ece5c7fa234ebd75af2f59fbc33a5893f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:f9:4c:5a:6c:43:e8:33:ed:98:bd:d9:4e: fb:41:4a:43:3c:2f:dc:db:ec:32:59:9a:7a:9f:92: c7:09:af:6b:8c:a6:e1:2b:71:a0:88:c1:a9:89:d8: 4a:85:33:fa:f8:d3:e5:ff:15:07:44:d5:04:7c:9b: 46:c0:90:5d:4b:eb:91:74:a4:50:80:d1:d3:3c:fe: ff:c7:d8:19:eb:40:d7:06:2b:1b:5f:55:64:99:c7: 24:80:79:c3:a7:b3:c1:14:8d:14:9a:3f:c5:d1:78: 53:03:d7:f3:d7:f6:08:18:94:d1:69:71:8d:76:c1: 6c:13:a6:07:77:a6:c1:a2:99:fc:20:46:35:01:f2: 8e:6d:fc:4c:b1:15:ce:fe:5a:ea:25:b8:53:54:b4: 5a:31:68:1d:33:f1:d5:4e:66:3f:1c:43:ae:a9:54: c3:e6:a4:7a:69:a1:06:c8:bf:ec:da:43:ad:99:ba: 98:4d:db:14:32:b9:85:22:4e:82:a5:da:df:e4:d4: 53:51:ff:04:05:42:8c:84:51:2c:78:38:b0:59:2a: 76:24:52:0c:b9:f4:b4:01:a5:74:72:18:19:93:0f: 09:c6:ed:41:ea:24:74:df:7b:51:6a:67:31:0d:58: 9a:ad:3a:b2:4a:2c:fa:75:27:d1:02:bd:1c:2b:1d: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:26:B1:EC:E5:C7:FA:23:4E:BD:75:AF:2F:59:FB:C3:3A:58:93:F0 X509v3 Authority Key Identifier: keyid:EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/gSax7OXH-iNOvXWvL1n7wzpYk_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.232.131.0-213.232.135.255 213.232.150.0/24 213.232.160.0/22 213.232.172.0/22 213.232.180.0/22 213.232.190.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:21:52:be:af:90:fc:46:82:1c:01:6c:e6:2d:89:d0:03:2e: f0:b9:0a:ae:f9:44:b7:41:77:ad:c1:eb:a8:71:8a:21:61:23: 53:ca:fb:43:b6:4e:c7:d2:17:0c:60:88:97:1f:d6:e6:06:2b: 0d:e8:c0:78:20:73:b5:48:4f:0c:68:79:e9:a3:ba:68:63:e1: af:3d:fb:4b:ea:2f:f5:37:52:d2:b8:7a:ed:8e:91:85:c3:3c: 5d:d1:08:98:1a:e9:9f:e2:5a:cf:30:36:a1:46:7f:eb:bc:66: f1:88:24:61:5f:1f:c6:62:b6:28:63:bc:e7:ad:7e:49:dc:87: 08:fc:76:e6:62:54:3c:da:8c:37:ee:a8:ba:dc:01:01:ba:c8: eb:ce:e2:71:73:e1:f8:6e:eb:1a:6c:97:e2:da:41:db:59:1e: 4c:91:bf:68:24:88:34:56:7b:48:e4:5b:6c:fd:a6:45:eb:2d: 56:4f:95:3c:9a:5e:c4:90:24:12:7f:cb:cd:a4:7c:a1:c1:11: db:8f:ce:55:6f:a8:a2:d2:af:c2:5b:96:4d:04:39:da:31:0a: e9:a8:ee:71:36:32:82:c9:14:a1:32:2f:43:1e:86:16:30:ba: 45:5f:26:6d:bb:6a:cb:93:9d:8b:be:38:54:de:2b:c6:8a:36: 62:2a:bc:03 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZvHHwwKXgVmaDwJz6nWzNQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjMDlmMGU4ODY2M2Y4M2E1YjZmODRmMWZlZTZiNDJjMzVj MGY4ZjIwHhcNMjYwMTE2MTQwNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTI2YjFlY2U1YzdmYTIzNGViZDc1YWYyZjU5ZmJjMzNhNTg5M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzn5TFpsQ+gz7Zi92U77QUpDPC/c 2+wyWZp6n5LHCa9rjKbhK3GgiMGpidhKhTP6+NPl/xUHRNUEfJtGwJBdS+uRdKRQ gNHTPP7/x9gZ60DXBisbX1VkmcckgHnDp7PBFI0Umj/F0XhTA9fz1/YIGJTRaXGN dsFsE6YHd6bBopn8IEY1AfKObfxMsRXO/lrqJbhTVLRaMWgdM/HVTmY/HEOuqVTD 5qR6aaEGyL/s2kOtmbqYTdsUMrmFIk6Cpdrf5NRTUf8EBUKMhFEseDiwWSp2JFIM ufS0AaV0chgZkw8Jxu1B6iR033tRamcxDViarTqySiz6dSfRAr0cKx27NwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFIEmsezlx/ojTr11ry9Z+8M6WJPwMB8GA1UdIwQY MBaAFOwJ8OiGY/g6W2+E8f7mtCw1wPjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQt MzZiNTY4MGFjMzY4LzEvZ1NheDdPWEgtaU5PdlhXdkwxbjd3enBZa19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC85NmMwNDAtNjEwOS00MjIxLThjYWQtMzZiNTY4MGFjMzY4 LzEvN0FudzZJWmotRHBiYjRUeF91YTBMRFhBLVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBADV6IMD BAPV6IADBADV6JYDBALV6KADBALV6KwDBALV6LQDBAHV6L4wDQYJKoZIhvcNAQEL BQADggEBAJ8hUr6vkPxGghwBbOYtidADLvC5Cq75RLdBd63B66hxiiFhI1PK+0O2 TsfSFwxgiJcf1uYGKw3owHggc7VITwxoeemjumhj4a89+0vqL/U3UtK4eu2OkYXD PF3RCJga6Z/iWs8wNqFGf+u8ZvGIJGFfH8ZitihjvOetfknchwj8duZiVDzajDfu qLrcAQG6yOvO4nFz4fhu6xpsl+LaQdtZHkyRv2gkiDRWe0jkW2z9pkXrLVZPlTya XsSQJBJ/y82kfKHBEduPzlVvqKLSr8Jblk0EOdoxCumo7nE2MoLJFKEyL0MehhYw ukVfJm27asuTnYu+OFTeK8aKNmIqvAM= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:44 2026 by rpki-client