This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/GvVv96JrRLH22YKSK9VfEbCaaP0.roa File: GvVv96JrRLH22YKSK9VfEbCaaP0.roa (raw, json) Hash identifier: Qk3itIJYOZGxOb9KSpcwss8K3JcW4s+BHAT7y+BPQUI= Subject key identifier: 1A:F5:6F:F7:A2:6B:44:B1:F6:D9:82:92:2B:D5:5F:11:B0:9A:68:FD Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9 Certificate serial: 019B7D5CE54E3F94B2AC64BE70B15633AC6D Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/GvVv96JrRLH22YKSK9VfEbCaaP0.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3212 IP address blocks: 31.15.128.0/17 maxlen: 17 46.150.32.0/19 maxlen: 19 46.182.224.0/21 maxlen: 21 77.38.0.0/17 maxlen: 17 77.73.104.0/22 maxlen: 22 77.111.0.0/18 maxlen: 18 78.153.32.0/19 maxlen: 19 82.149.0.0/19 maxlen: 19 82.192.32.0/19 maxlen: 19 84.20.224.0/19 maxlen: 19 84.52.128.0/18 maxlen: 18 86.58.0.0/17 maxlen: 17 87.119.128.0/19 maxlen: 19 91.132.208.0/22 maxlen: 22 91.185.192.0/19 maxlen: 19 91.237.132.0/22 maxlen: 22 92.53.128.0/19 maxlen: 19 92.63.16.0/20 maxlen: 20 94.140.64.0/19 maxlen: 19 95.143.144.0/20 maxlen: 20 176.57.92.0/22 maxlen: 22 176.76.0.0/16 maxlen: 16 178.79.64.0/18 maxlen: 18 185.30.136.0/22 maxlen: 22 185.65.228.0/22 maxlen: 22 185.66.148.0/22 maxlen: 22 185.72.60.0/22 maxlen: 22 185.72.60.0/24 maxlen: 24 185.79.228.0/22 maxlen: 22 185.85.148.0/22 maxlen: 22 185.97.68.0/22 maxlen: 22 193.111.220.0/22 maxlen: 22 194.152.0.0/19 maxlen: 19 195.47.228.0/24 maxlen: 24 212.85.160.0/19 maxlen: 19 213.143.64.0/19 maxlen: 19 213.161.0.0/19 maxlen: 19 213.172.224.0/19 maxlen: 19 217.72.64.0/19 maxlen: 19 2001:1688::/29 maxlen: 29 2a00:fc0::/32 maxlen: 32 2a00:13d8::/29 maxlen: 29 2a02:840::/32 maxlen: 32 2a05:acc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e5:4e:3f:94:b2:ac:64:be:70:b1:56:33:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1af56ff7a26b44b1f6d982922bd55f11b09a68fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:4a:7f:f4:fb:d8:07:57:96:da:36:ee:b8: bf:89:c9:6a:4a:01:f5:87:e0:ac:78:50:d0:af:3c: d9:b8:48:b2:a6:0d:a2:0f:f4:c0:65:3f:d1:bc:d3: 99:cb:01:e2:3c:bf:e6:78:30:1a:97:08:3c:cc:cb: b4:7f:59:db:fe:45:a3:ad:0f:ac:32:09:bd:cc:1a: 21:22:e2:01:30:39:94:3c:3e:cf:0d:70:9e:4f:5c: 34:ea:99:02:e7:6e:cc:ca:3b:17:a2:61:02:6e:b5: 65:46:98:41:e4:3f:e5:73:50:ca:e0:c9:62:11:f4: 5d:24:f7:79:87:ab:23:ab:f4:70:de:2e:71:06:2d: 6c:3d:14:8a:80:fc:cc:1e:72:5c:e6:99:4e:06:06: 8c:d6:35:f4:4f:56:be:58:e8:09:fa:14:be:02:a0: e8:30:64:fb:51:82:cf:50:36:3a:c6:71:f1:6b:1f: eb:d7:ad:27:64:0e:20:78:13:ac:7b:08:70:b8:7a: b6:68:ba:db:f1:ba:80:66:87:ac:13:95:b4:70:e7: c4:de:77:e6:f0:90:8d:16:92:df:d1:48:b1:7c:2a: 2c:18:54:64:2f:69:78:2a:ce:62:7f:c9:6c:2e:cf: b0:17:07:e3:05:2e:6d:75:6e:61:30:d0:24:96:fa: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F5:6F:F7:A2:6B:44:B1:F6:D9:82:92:2B:D5:5F:11:B0:9A:68:FD X509v3 Authority Key Identifier: keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/GvVv96JrRLH22YKSK9VfEbCaaP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.128.0/17 46.150.32.0/19 46.182.224.0/21 77.38.0.0/17 77.73.104.0/22 77.111.0.0/18 78.153.32.0/19 82.149.0.0/19 82.192.32.0/19 84.20.224.0/19 84.52.128.0/18 86.58.0.0/17 87.119.128.0/19 91.132.208.0/22 91.185.192.0/19 91.237.132.0/22 92.53.128.0/19 92.63.16.0/20 94.140.64.0/19 95.143.144.0/20 176.57.92.0/22 176.76.0.0/16 178.79.64.0/18 185.30.136.0/22 185.65.228.0/22 185.66.148.0/22 185.72.60.0/22 185.79.228.0/22 185.85.148.0/22 185.97.68.0/22 193.111.220.0/22 194.152.0.0/19 195.47.228.0/24 212.85.160.0/19 213.143.64.0/19 213.161.0.0/19 213.172.224.0/19 217.72.64.0/19 IPv6: 2001:1688::/29 2a00:fc0::/32 2a00:13d8::/29 2a02:840::/32 2a05:acc0::/29 Signature Algorithm: sha256WithRSAEncryption 83:21:52:f1:fb:d0:42:b5:23:69:d7:d8:5f:f6:19:fe:7d:f3: 02:82:5c:d9:bf:5e:fa:32:0e:96:d9:24:4d:fc:42:a2:38:19: 9a:58:2e:e7:bc:5f:58:aa:dd:4b:11:f9:ca:15:6f:45:cb:fc: 88:a0:7f:2e:28:c0:31:52:ad:58:dc:40:4c:62:a4:76:4e:3c: 1d:74:57:71:08:c2:bd:94:b6:1b:8e:a9:5c:61:c0:7b:06:ba: ec:89:56:a1:79:7b:6c:00:c8:85:cb:e1:b8:f0:7d:f2:c0:b3: 33:df:b3:e4:c3:c8:7e:f6:0b:39:6e:ec:c4:27:b1:10:73:08: 76:81:c8:e3:5a:99:17:82:07:0a:53:94:b5:4b:61:f2:b6:27: a7:e9:b4:9d:d7:24:4f:a5:92:1a:a2:7f:34:c8:4d:ac:79:f4: 19:6c:09:8b:06:80:59:65:89:69:38:ba:84:69:aa:1b:55:6b: 63:ea:c9:ba:95:28:29:65:41:ae:c4:31:2c:cf:4c:db:61:ce: 8a:81:01:c0:0b:67:79:38:c5:6d:b4:95:21:45:8e:06:e9:79: 5e:6b:9f:3b:f3:60:b5:dd:54:ac:bc:6f:0d:8e:e1:bf:1d:ea: 7d:f6:12:a8:4e:bd:59:61:24:8c:c3:99:1b:77:28:60:0a:80: 33:a5:43:ea -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISAZt9XOVOP5SyrGS+cLFWM6xtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjlhMjRiZDI2Y2M4MjE3NTE4YTExZjU5OGU2MzcyMDI1 ZThhZTkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWY1NmZmN2EyNmI0NGIxZjZkOTgyOTIyYmQ1NWYxMWIwOWE2OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp09Kf/T72AdXlto27ri/iclqSgH1 h+CseFDQrzzZuEiypg2iD/TAZT/RvNOZywHiPL/meDAalwg8zMu0f1nb/kWjrQ+s Mgm9zBohIuIBMDmUPD7PDXCeT1w06pkC527MyjsXomECbrVlRphB5D/lc1DK4Mli EfRdJPd5h6sjq/Rw3i5xBi1sPRSKgPzMHnJc5plOBgaM1jX0T1a+WOgJ+hS+AqDo MGT7UYLPUDY6xnHxax/r160nZA4geBOsewhwuHq2aLrb8bqAZoesE5W0cOfE3nfm 8JCNFpLf0UixfCosGFRkL2l4Ks5if8lsLs+wFwfjBS5tdW5hMNAklvqJLwIDAQAB o4IDGTCCAxUwHQYDVR0OBBYEFBr1b/eia0Sx9tmCkivVXxGwmmj9MB8GA1UdIwQY MBaAFID5okvSbMghdRihH1mOY3ICXorpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODkt OTY1NTI5ZjIwZDExLzEvR3ZWdjk2SnJSTEgyMllLU0s5VmZFYkNhYVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9mYjIxMmEtN2E3Ni00MmUyLTg5ODktOTY1NTI5ZjIwZDEx LzEvZ1BtaVM5SnN5Q0YxR0tFZldZNWpjZ0plaXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBLQYIKwYBBQUHAQcBAf8EggEcMIIBGDCB6gQCAAEwgeMD BAcfD4ADBAUuliADBAMutuADBAdNJgADBAJNSWgDBAZNbwADBAVOmSADBAVSlQAD BAVSwCADBAVUFOADBAZUNIADBAdWOgADBAVXd4ADBAJbhNADBAVbucADBAJb7YQD BAVcNYADBARcPxADBAVejEADBARfj5ADBAKwOVwDAwCwTAMEBrJPQAMEArkeiAME ArlB5AMEArlClAMEArlIPAMEArlP5AMEArlVlAMEArlhRAMEAsFv3AMEBcKYAAME AMMv5AMEBdRVoAMEBdWPQAMEBdWhAAMEBdWs4AMEBdlIQDApBAIAAjAjAwUDIAEW iAMFACoAD8ADBQMqABPYAwUAKgIIQAMFAyoFrMAwDQYJKoZIhvcNAQELBQADggEB AIMhUvH70EK1I2nX2F/2Gf598wKCXNm/XvoyDpbZJE38QqI4GZpYLue8X1iq3UsR +coVb0XL/Iigfy4owDFSrVjcQExipHZOPB10V3EIwr2UthuOqVxhwHsGuuyJVqF5 e2wAyIXL4bjwffLAszPfs+TDyH72Czlu7MQnsRBzCHaByONamReCBwpTlLVLYfK2 J6fptJ3XJE+lkhqifzTITax59BlsCYsGgFlliWk4uoRpqhtVa2PqybqVKCllQa7E MSzPTNthzoqBAcALZ3k4xW20lSFFjgbpeV5rnzvzYLXdVKy8bw2O4b8d6n32EqhO vVlhJIzDmRt3KGAKgDOlQ+o= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:05 2026 by rpki-client