This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/gX4fr2dO84R_bFEyyvPy_PuwwnI.roa File: gX4fr2dO84R_bFEyyvPy_PuwwnI.roa (raw, json) Hash identifier: MIT9lsUSVJpy7d5ZGyhdje+kFAGBOc1RGJomeeJfX3k= Subject key identifier: 81:7E:1F:AF:67:4E:F3:84:7F:6C:51:32:CA:F3:F2:FC:FB:B0:C2:72 Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc Certificate serial: 019B7E376981C6B5953355629F9A5D053F21 Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/gX4fr2dO84R_bFEyyvPy_PuwwnI.roa Signing time: Fri 02 Jan 2026 10:18:39 +0000 ROA not before: Fri 02 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13208 IP address blocks: 81.20.176.0/20 maxlen: 24 185.57.212.0/22 maxlen: 22 213.133.194.0/24 maxlen: 24 213.133.195.0/24 maxlen: 24 213.133.196.0/24 maxlen: 24 213.133.197.0/24 maxlen: 24 213.133.198.0/24 maxlen: 24 213.133.199.0/24 maxlen: 24 213.133.201.0/24 maxlen: 24 213.133.202.0/24 maxlen: 24 213.133.203.0/24 maxlen: 24 213.133.207.0/24 maxlen: 24 213.133.208.0/22 maxlen: 22 213.133.213.0/24 maxlen: 24 213.133.214.0/24 maxlen: 24 213.133.215.0/24 maxlen: 24 213.133.216.0/24 maxlen: 24 213.133.217.0/24 maxlen: 24 213.133.218.0/24 maxlen: 24 213.133.219.0/24 maxlen: 24 213.133.220.0/24 maxlen: 24 213.133.221.0/24 maxlen: 24 213.133.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:69:81:c6:b5:95:33:55:62:9f:9a:5d:05:3f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=817e1faf674ef3847f6c5132caf3f2fcfbb0c272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:04:d7:b5:99:28:2e:f8:14:50:8e:f3:7a: b3:e6:a2:ab:f6:af:03:3f:13:0d:96:59:b8:b8:e5: 33:7d:af:0b:ab:90:2f:8e:00:21:fb:97:34:52:ef: 0c:44:fe:18:49:61:86:bb:62:85:3e:5d:b1:a8:a7: 86:a5:04:c2:3d:48:49:25:fb:18:44:ac:79:ca:23: 9d:9a:b0:45:01:2d:ca:0d:16:11:54:b3:d7:42:c4: 33:b5:a7:67:c3:2c:7d:21:70:2f:20:3a:26:c7:6d: 17:12:18:7c:fe:58:89:a6:60:55:40:91:e7:f8:71: ef:eb:8e:64:be:46:46:55:c5:ca:5e:c9:6a:7f:6e: 0a:ba:76:a3:95:ee:82:b0:c9:d6:16:93:7d:62:5f: 93:05:fd:8b:d2:56:49:dc:c6:fc:e8:db:ad:ce:54: d0:27:2b:19:2e:6b:38:10:ab:7e:87:5d:8a:d0:a3: c1:f6:1b:a5:4b:8a:34:0d:9b:1c:f8:6f:c3:c3:e6: d4:02:86:5a:24:58:52:7b:5f:1c:5d:5e:16:71:2e: 1f:c3:75:2e:bc:a9:27:61:38:ff:e8:be:4c:c1:1a: 9b:41:74:08:f8:9f:53:03:af:e9:fd:84:33:bd:e0: f6:02:d1:3e:82:f2:ad:00:96:cd:09:53:b0:2d:f9: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7E:1F:AF:67:4E:F3:84:7F:6C:51:32:CA:F3:F2:FC:FB:B0:C2:72 X509v3 Authority Key Identifier: keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/gX4fr2dO84R_bFEyyvPy_PuwwnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.20.176.0/20 185.57.212.0/22 213.133.194.0-213.133.199.255 213.133.201.0-213.133.203.255 213.133.207.0-213.133.211.255 213.133.213.0-213.133.221.255 213.133.223.0/24 Signature Algorithm: sha256WithRSAEncryption 67:a2:27:a8:bd:73:69:ea:91:90:5b:62:2a:cf:df:2f:04:c4: 46:53:63:07:d7:9a:45:e9:6b:23:7d:85:21:29:57:5e:1a:1b: 9a:f1:dc:81:26:4c:39:7f:5b:ad:a4:39:f0:5c:c9:a4:30:ec: 1f:12:04:f2:7a:db:bd:92:ba:ad:92:fd:fc:57:94:bc:ef:39: 24:4a:bf:d9:d1:bf:da:ed:ff:94:93:55:f5:dd:67:7d:bf:9e: ef:2a:a0:5b:87:42:4c:d3:dc:f3:fc:77:26:12:fd:ce:b3:b5: 3c:5c:e9:02:7b:08:93:31:f0:78:ab:d9:e9:3f:6b:68:23:3f: 8d:f2:d6:b7:44:ad:2c:8b:ce:e2:f7:b0:2a:3c:f8:aa:ed:64: 06:8c:3a:25:cd:54:2a:df:1d:72:b4:e7:77:5c:d7:fc:8f:a7: 78:d3:6b:18:e1:b5:cf:7f:28:ab:58:07:5a:b2:da:dc:3b:79: ef:7a:da:6d:86:fe:07:61:4e:2c:54:29:07:8e:70:65:6b:f7: ad:07:f7:20:7c:b4:43:3d:20:22:3b:13:5a:fd:7e:c7:63:46: 7e:22:72:98:1a:87:56:f7:fb:c1:f0:db:cc:8b:d6:f4:82:65: 31:1d:cf:4d:90:37:c9:c9:2d:98:5c:0a:2f:f6:30:56:d3:c2: 20:2c:ff:16 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt+N2mBxrWVM1Vin5pdBT8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmE3MzQ4ZDZjMWQ3MTg2MzI4MzI4NzIwNzMwZjY4NGZh MjBlZGMwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTdlMWZhZjY3NGVmMzg0N2Y2YzUxMzJjYWYzZjJmY2ZiYjBjMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAE17WZKC74FFCO83qz5qKr9q8D PxMNllm4uOUzfa8Lq5AvjgAh+5c0Uu8MRP4YSWGGu2KFPl2xqKeGpQTCPUhJJfsY RKx5yiOdmrBFAS3KDRYRVLPXQsQztadnwyx9IXAvIDomx20XEhh8/liJpmBVQJHn +HHv645kvkZGVcXKXslqf24Kunajle6CsMnWFpN9Yl+TBf2L0lZJ3Mb86NutzlTQ JysZLms4EKt+h12K0KPB9hulS4o0DZsc+G/Dw+bUAoZaJFhSe18cXV4WcS4fw3Uu vKknYTj/6L5MwRqbQXQI+J9TA6/p/YQzveD2AtE+gvKtAJbNCVOwLfmbzwIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFIF+H69nTvOEf2xRMsrz8vz7sMJyMB8GA1UdIwQY MBaAFAv6c0jWwdcYYygyhyBzD2hPog7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2Qt ODU3MDY2NDVlNzM0LzEvZ1g0ZnIyZE84NFJfYkZFeXl2UHlfUHV3d25JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xZTJhMGUtOTUxNC00ZDcwLTkwM2QtODU3MDY2NDVlNzM0 LzEvQ19welNOYkIxeGhqS0RLSElITVBhRS1pRHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQEURSwAwQC uTnUMAwDBAHVhcIDBAPVhcAwDAMEANWFyQMEAtWFyDAMAwQA1YXPAwQC1YXQMAwD BADVhdUDBAHVhdwDBADVhd8wDQYJKoZIhvcNAQELBQADggEBAGeiJ6i9c2nqkZBb YirP3y8ExEZTYwfXmkXpayN9hSEpV14aG5rx3IEmTDl/W62kOfBcyaQw7B8SBPJ6 272Suq2S/fxXlLzvOSRKv9nRv9rt/5STVfXdZ32/nu8qoFuHQkzT3PP8dyYS/c6z tTxc6QJ7CJMx8Hir2ek/a2gjP43y1rdErSyLzuL3sCo8+KrtZAaMOiXNVCrfHXK0 53dc1/yPp3jTaxjhtc9/KKtYB1qy2tw7ee962m2G/gdhTixUKQeOcGVr960H9yB8 tEM9ICI7E1r9fsdjRn4icpgah1b3+8Hw28yL1vSCZTEdz02QN8nJLZhcCi/2MFbT wiAs/xY= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:13 2026 by rpki-client