This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/ggggHoWexQd_x29XdkxpzklvtBY.roa File: ggggHoWexQd_x29XdkxpzklvtBY.roa (raw, json) Hash identifier: RItnLwTh1P5BCA6CWkDZt99HLo5gT+F8X2TYgXTwevA= Subject key identifier: 82:08:20:1E:85:9E:C5:07:7F:C7:6F:57:76:4C:69:CE:49:6F:B4:16 Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Certificate serial: 019B78A2E39D58E1F647667C141473FD6745 Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/ggggHoWexQd_x29XdkxpzklvtBY.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211381 IP address blocks: 5.8.248.0/24 maxlen: 24 62.233.53.0/24 maxlen: 24 77.220.212.0/24 maxlen: 24 77.220.213.0/24 maxlen: 24 109.107.157.0/24 maxlen: 24 178.159.43.0/24 maxlen: 24 185.93.6.0/24 maxlen: 24 185.201.252.0/24 maxlen: 24 185.229.251.0/24 maxlen: 24 185.235.128.0/24 maxlen: 24 185.237.165.0/24 maxlen: 24 185.241.61.0/24 maxlen: 24 185.244.218.0/24 maxlen: 24 185.244.219.0/24 maxlen: 24 185.250.207.0/24 maxlen: 24 185.251.25.0/24 maxlen: 24 193.3.168.0/24 maxlen: 24 193.169.105.0/24 maxlen: 24 194.15.46.0/24 maxlen: 24 194.26.232.0/24 maxlen: 24 194.62.105.0/24 maxlen: 24 212.86.114.0/24 maxlen: 24 212.86.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e3:9d:58:e1:f6:47:66:7c:14:14:73:fd:67:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8208201e859ec5077fc76f57764c69ce496fb416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:88:02:46:3f:63:d6:6d:02:8c:5a:7b:1d: 6d:0c:d8:6a:5e:8e:dd:b0:df:4f:c0:fe:c9:0b:c9: 33:1b:81:6d:95:c5:cf:e6:98:eb:6e:13:fe:9e:84: a9:ef:cf:f4:bf:2d:57:79:c4:2c:c9:87:ad:7b:99: cb:a7:a4:be:9b:7d:5f:11:12:f0:c9:89:4a:1d:8e: ae:49:c4:33:33:c8:15:2d:fa:29:4f:3b:14:30:6e: 58:cc:36:c0:da:8e:e0:2f:00:a9:6f:7b:eb:e4:f8: ab:a0:dc:41:75:82:7f:e3:22:53:24:f7:5a:15:35: bd:d3:91:f5:8d:f7:61:db:2b:cd:16:44:b9:f9:9c: a8:e2:a5:31:a6:fd:37:75:d8:2d:a5:97:62:f5:f5: 1b:01:dc:16:8a:85:c2:56:31:46:42:28:26:ed:e1: 08:a8:37:be:28:27:17:75:92:2a:57:dc:be:7a:89: 8c:f9:e6:bf:df:2c:e4:90:70:a7:f4:e3:1f:c9:53: 2b:dd:ec:6c:c4:57:0d:3d:f2:ab:c8:9f:02:9f:2b: d6:a6:12:f4:c5:07:d1:6b:8d:26:c8:41:56:f4:e2: 73:aa:0e:9b:10:b6:01:1a:1f:84:91:48:6d:e7:fc: e0:c5:5e:00:81:4d:43:d0:7f:84:c1:c0:13:54:17: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:08:20:1E:85:9E:C5:07:7F:C7:6F:57:76:4C:69:CE:49:6F:B4:16 X509v3 Authority Key Identifier: keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/ggggHoWexQd_x29XdkxpzklvtBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.248.0/24 62.233.53.0/24 77.220.212.0/23 109.107.157.0/24 178.159.43.0/24 185.93.6.0/24 185.201.252.0/24 185.229.251.0/24 185.235.128.0/24 185.237.165.0/24 185.241.61.0/24 185.244.218.0/23 185.250.207.0/24 185.251.25.0/24 193.3.168.0/24 193.169.105.0/24 194.15.46.0/24 194.26.232.0/24 194.62.105.0/24 212.86.114.0/23 Signature Algorithm: sha256WithRSAEncryption 40:3f:e3:66:23:24:fc:b4:8c:34:af:1c:f0:6d:8c:96:74:81: e1:9e:ac:a8:8f:68:d3:87:c7:46:97:e6:37:18:95:54:e3:b3: ac:5d:e4:b6:ef:e0:c9:66:48:a1:6e:96:0f:9f:11:9b:68:ee: e7:17:5d:ae:a4:52:0c:bd:4b:88:c2:d5:cf:39:78:5f:4a:87: 57:2b:20:ef:ec:e3:0e:f6:61:a8:94:95:a1:83:6e:1c:05:4c: e9:6f:2e:a1:bd:4e:31:b0:4c:bf:15:21:ac:1a:13:d8:7c:81: ba:a5:55:8a:c0:3a:8f:6d:79:05:06:22:95:e1:7b:51:65:ba: 31:d9:0f:02:32:7d:4d:7f:48:d4:00:ab:ea:a0:4f:6e:da:26: a1:cc:81:4f:83:1d:53:19:68:d6:84:84:22:68:97:b9:59:fa: 10:92:d5:16:b8:de:06:15:c7:1f:2a:99:65:e3:22:d7:44:c0: 68:69:4b:42:fa:82:4e:f0:d6:71:20:b8:d8:54:31:d4:4c:97: 0c:e5:d9:41:a5:e2:1c:8e:1c:f9:c4:b2:02:dd:fa:f5:ad:d5: 57:8c:72:82:dc:55:f8:2b:e3:d0:1a:ab:fc:92:16:9c:e6:ba: dc:fa:3a:0b:5a:02:f0:78:32:e3:23:7c:9a:74:23:72:90:09: d2:95:94:a8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt4ouOdWOH2R2Z8FBRz/WdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw Mjc1MzMwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjA4MjAxZTg1OWVjNTA3N2ZjNzZmNTc3NjRjNjljZTQ5NmZiNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM6IAkY/Y9ZtAoxaex1tDNhqXo7d sN9PwP7JC8kzG4FtlcXP5pjrbhP+noSp78/0vy1XecQsyYete5nLp6S+m31fERLw yYlKHY6uScQzM8gVLfopTzsUMG5YzDbA2o7gLwCpb3vr5PiroNxBdYJ/4yJTJPda FTW905H1jfdh2yvNFkS5+Zyo4qUxpv03ddgtpZdi9fUbAdwWioXCVjFGQigm7eEI qDe+KCcXdZIqV9y+eomM+ea/3yzkkHCn9OMfyVMr3exsxFcNPfKryJ8CnyvWphL0 xQfRa40myEFW9OJzqg6bELYBGh+EkUht5/zgxV4AgU1D0H+EwcATVBdt3wIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFIIIIB6FnsUHf8dvV3ZMac5Jb7QWMB8GA1UdIwQY MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt MDE1ZDlmMWI0YjUwLzEvZ2dnZ0hvV2V4UWRfeDI5WGRreHB6a2x2dEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQABQj4 AwQAPuk1AwQBTdzUAwQAbWudAwQAsp8rAwQAuV0GAwQAucn8AwQAueX7AwQAueuA AwQAue2lAwQAufE9AwQBufTaAwQAufrPAwQAufsZAwQAwQOoAwQAwalpAwQAwg8u AwQAwhroAwQAwj5pAwQB1FZyMA0GCSqGSIb3DQEBCwUAA4IBAQBAP+NmIyT8tIw0 rxzwbYyWdIHhnqyoj2jTh8dGl+Y3GJVU47OsXeS27+DJZkihbpYPnxGbaO7nF12u pFIMvUuIwtXPOXhfSodXKyDv7OMO9mGolJWhg24cBUzpby6hvU4xsEy/FSGsGhPY fIG6pVWKwDqPbXkFBiKV4XtRZbox2Q8CMn1Nf0jUAKvqoE9u2iahzIFPgx1TGWjW hIQiaJe5WfoQktUWuN4GFccfKpll4yLXRMBoaUtC+oJO8NZxILjYVDHUTJcM5dlB peIcjhz5xLIC3fr1rdVXjHKC3FX4K+PQGqv8khac5rrc+joLWgLweDLjI3yadCNy kAnSlZSo -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:21 2026 by rpki-client