This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/gw7haS9Eo4v-nJwtV0iha6TGNxg.roa File: gw7haS9Eo4v-nJwtV0iha6TGNxg.roa (raw, json) Hash identifier: kfj7TXq3aFYsD7hG7bIHLfXoq8dEC7iq1n7sdP2Bfpw= Subject key identifier: 83:0E:E1:69:2F:44:A3:8B:FE:9C:9C:2D:57:48:A1:6B:A4:C6:37:18 Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Certificate serial: 019B77C6C4A116E30B242A1A64A6B58C3268 Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/gw7haS9Eo4v-nJwtV0iha6TGNxg.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57704 IP address blocks: 5.133.24.0/21 maxlen: 24 5.253.68.0/22 maxlen: 22 5.253.68.0/24 maxlen: 24 5.253.69.0/24 maxlen: 24 5.253.70.0/24 maxlen: 24 5.253.71.0/24 maxlen: 24 45.146.12.0/24 maxlen: 24 45.146.13.0/24 maxlen: 24 45.146.14.0/24 maxlen: 24 45.146.15.0/24 maxlen: 24 185.132.248.0/22 maxlen: 24 193.7.220.0/24 maxlen: 32 193.7.221.0/24 maxlen: 24 193.7.222.0/24 maxlen: 24 193.7.223.0/24 maxlen: 24 2a09:9900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c4:a1:16:e3:0b:24:2a:1a:64:a6:b5:8c:32:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=830ee1692f44a38bfe9c9c2d5748a16ba4c63718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:d5:51:ed:c3:26:9c:45:68:24:37:3d:15: 08:30:3d:37:3c:c4:4f:75:46:9a:28:df:20:3e:80: 57:c4:be:e5:15:e8:9f:35:99:ce:5f:1e:c0:d2:e7: 08:2d:7c:19:6a:2c:e7:6a:a1:e5:19:5d:50:79:c0: 8b:ce:ea:0f:2b:9e:ac:da:b6:b2:e5:b9:21:c5:7f: cd:e1:da:86:98:05:5b:af:26:87:12:de:97:f6:77: 28:59:e1:3a:26:19:7a:25:59:d3:c6:56:a8:71:f8: 9b:79:3f:21:71:80:f1:57:ae:1c:16:39:16:03:95: f1:37:01:f4:ea:5b:cc:3a:3e:d0:fe:d7:d8:73:2a: ee:06:b4:01:9a:8d:50:2b:2f:86:eb:5b:32:46:c1: fa:62:f9:ab:f1:25:d7:03:4d:8e:32:28:15:a4:a2: 34:25:4e:b0:8d:9b:20:aa:65:39:c6:2f:9a:42:56: f1:61:b2:2a:08:6d:69:51:d2:dd:49:a6:c4:2b:db: 48:18:86:25:26:e5:d5:c1:0e:ca:e4:d0:e2:88:a4: eb:e2:97:6f:97:d0:2d:2a:66:ec:74:98:3a:6e:7e: cb:7a:d1:ed:ac:55:53:8d:ff:69:83:d5:1b:86:bb: 06:57:47:97:7e:63:af:c0:3a:4d:b5:55:c8:86:5e: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0E:E1:69:2F:44:A3:8B:FE:9C:9C:2D:57:48:A1:6B:A4:C6:37:18 X509v3 Authority Key Identifier: keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/gw7haS9Eo4v-nJwtV0iha6TGNxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.24.0/21 5.253.68.0/22 45.146.12.0/22 185.132.248.0/22 193.7.220.0/22 IPv6: 2a09:9900::/32 Signature Algorithm: sha256WithRSAEncryption 19:88:51:3a:d6:56:44:a1:30:2e:98:f0:14:20:49:34:f4:ee: 7a:0d:4a:21:df:85:a9:a1:8c:7c:61:24:c7:26:69:42:1d:5e: 6b:5a:69:1c:bd:a9:e1:70:ac:98:82:5f:48:05:e3:9d:fd:44: fd:4e:16:8b:4f:90:aa:b6:43:24:8d:00:49:7e:97:85:55:9f: ee:e7:ec:12:bc:05:a6:c6:b3:59:d2:f7:e1:da:00:61:f6:67: 52:78:67:70:7f:00:35:c8:e6:b1:60:62:6f:89:96:f7:6f:c9: b8:f0:e0:7d:ff:5f:c6:c6:ec:2d:11:1f:12:0c:71:f3:8a:a9: e3:d3:9d:f3:68:c6:e5:83:39:91:3f:57:ee:57:15:5b:49:11: 45:36:2b:4b:94:ea:06:32:6c:82:21:c9:de:36:3c:91:a3:07: a4:56:4e:4a:ab:da:20:13:f5:cd:54:2e:65:cb:9c:50:8c:2e: a0:a7:53:ab:bc:f9:a9:c1:b3:0a:a5:d9:2d:17:da:7a:bf:6a: 3a:99:4a:fd:4a:82:51:3a:20:27:66:a9:19:45:b2:14:a7:b7: fc:ce:d7:f3:2f:db:a7:b7:4f:52:9a:ef:bc:7f:7b:a1:16:12: c9:4c:80:95:7b:e5:79:cf:78:f9:eb:91:83:ad:c7:0d:d5:1a: 07:bb:6b:d3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3xsShFuMLJCoaZKa1jDJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw YjI1OTgwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzBlZTE2OTJmNDRhMzhiZmU5YzljMmQ1NzQ4YTE2YmE0YzYzNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgbVUe3DJpxFaCQ3PRUIMD03PMRP dUaaKN8gPoBXxL7lFeifNZnOXx7A0ucILXwZaiznaqHlGV1QecCLzuoPK56s2ray 5bkhxX/N4dqGmAVbryaHEt6X9ncoWeE6Jhl6JVnTxlaocfibeT8hcYDxV64cFjkW A5XxNwH06lvMOj7Q/tfYcyruBrQBmo1QKy+G61syRsH6Yvmr8SXXA02OMigVpKI0 JU6wjZsgqmU5xi+aQlbxYbIqCG1pUdLdSabEK9tIGIYlJuXVwQ7K5NDiiKTr4pdv l9AtKmbsdJg6bn7LetHtrFVTjf9pg9UbhrsGV0eXfmOvwDpNtVXIhl4WdwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIMO4WkvRKOL/pycLVdIoWukxjcYMB8GA1UdIwQY MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt NzU2ZjNjYzNlYzMzLzEvZ3c3aGFTOUVvNHYtbkp3dFYwaWhhNlRHTnhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBYUYAwQC Bf1EAwQCLZIMAwQCuYT4AwQCwQfcMA0EAgACMAcDBQAqCZkAMA0GCSqGSIb3DQEB CwUAA4IBAQAZiFE61lZEoTAumPAUIEk09O56DUoh34WpoYx8YSTHJmlCHV5rWmkc vanhcKyYgl9IBeOd/UT9ThaLT5CqtkMkjQBJfpeFVZ/u5+wSvAWmxrNZ0vfh2gBh 9mdSeGdwfwA1yOaxYGJviZb3b8m48OB9/1/GxuwtER8SDHHziqnj053zaMblgzmR P1fuVxVbSRFFNitLlOoGMmyCIcneNjyRowekVk5Kq9ogE/XNVC5ly5xQjC6gp1Or vPmpwbMKpdktF9p6v2o6mUr9SoJROiAnZqkZRbIUp7f8ztfzL9unt09Smu+8f3uh FhLJTICVe+V5z3j565GDrccN1RoHu2vT -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:03 2026 by rpki-client