This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/2gkwwMuVvfJRFfWXMXZVOw9C7I0.roa File: 2gkwwMuVvfJRFfWXMXZVOw9C7I0.roa (raw, json) Hash identifier: zKEb8T3b/d6Ct0G1vwdk9qlfmlRr8HLuip+ohtf+Qsk= Subject key identifier: DA:09:30:C0:CB:95:BD:F2:51:15:F5:97:31:76:55:3B:0F:42:EC:8D Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA66C07C2C6535FA7A80D9B44F65AAD Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/2gkwwMuVvfJRFfWXMXZVOw9C7I0.roa Signing time: Fri 02 Jan 2026 12:19:54 +0000 ROA not before: Fri 02 Jan 2026 12:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15774 IP address blocks: 31.216.170.0/24 maxlen: 24 37.61.176.0/21 maxlen: 32 46.20.64.0/20 maxlen: 32 46.166.65.0/24 maxlen: 24 46.166.79.0/24 maxlen: 24 46.166.80.0/23 maxlen: 24 46.166.80.0/24 maxlen: 24 46.166.81.0/24 maxlen: 24 46.166.82.0/24 maxlen: 24 46.166.83.0/24 maxlen: 24 46.166.84.0/22 maxlen: 23 46.166.88.0/23 maxlen: 23 46.166.91.0/24 maxlen: 24 46.166.93.0/24 maxlen: 24 46.166.94.0/24 maxlen: 24 46.166.95.0/24 maxlen: 24 46.182.128.0/22 maxlen: 22 46.182.131.0/24 maxlen: 24 46.226.240.0/21 maxlen: 32 62.33.122.0/23 maxlen: 32 62.249.131.0/24 maxlen: 24 79.132.96.0/19 maxlen: 32 81.4.192.0/18 maxlen: 32 81.18.128.0/19 maxlen: 32 83.234.10.0/24 maxlen: 24 83.234.54.0/24 maxlen: 32 83.234.136.0/23 maxlen: 23 83.234.168.0/23 maxlen: 32 83.234.240.0/21 maxlen: 21 89.186.234.0/24 maxlen: 24 91.204.96.0/22 maxlen: 32 94.251.20.0/24 maxlen: 24 109.74.208.0/20 maxlen: 32 109.233.172.0/22 maxlen: 32 164.177.176.0/21 maxlen: 32 176.104.128.0/21 maxlen: 21 176.104.152.0/22 maxlen: 22 176.104.156.0/22 maxlen: 22 176.104.160.0/21 maxlen: 32 176.125.64.0/18 maxlen: 18 178.76.194.0/23 maxlen: 23 178.76.196.0/22 maxlen: 22 178.76.205.0/24 maxlen: 24 178.76.207.0/24 maxlen: 24 178.76.208.0/23 maxlen: 23 178.76.210.0/23 maxlen: 23 178.76.212.0/24 maxlen: 24 178.76.214.0/24 maxlen: 24 178.76.216.0/21 maxlen: 21 178.76.224.0/19 maxlen: 24 178.76.234.0/24 maxlen: 24 185.6.236.0/22 maxlen: 32 185.43.84.0/23 maxlen: 32 185.43.86.0/23 maxlen: 32 185.61.24.0/22 maxlen: 32 2a00:1138::/32 maxlen: 128 2a03:3700::/36 maxlen: 128 2a03:3700:1000::/36 maxlen: 128 2a03:3700:2000::/36 maxlen: 128 2a03:3700:3000::/36 maxlen: 128 2a03:3700:4000::/36 maxlen: 128 2a03:3700:5000::/36 maxlen: 128 2a03:3700:6000::/36 maxlen: 128 2a03:3700:7000::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:6c:07:c2:c6:53:5f:a7:a8:0d:9b:44:f6:5a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da0930c0cb95bdf25115f5973176553b0f42ec8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:fd:ba:23:15:58:11:0c:fc:5e:39:ba:e3: ba:79:32:16:ca:2b:7b:7d:ca:81:cb:ea:da:ce:92: 29:52:57:39:76:3a:7a:ef:d7:5c:21:f6:e2:32:7d: aa:77:9e:a7:8d:e6:95:18:76:26:29:ba:0c:f7:e9: da:c7:35:ac:69:b8:17:26:eb:bd:13:5d:2c:c5:95: 45:f1:1c:cb:bb:9e:20:8a:0a:35:49:84:12:f0:4d: f2:27:e0:74:80:de:32:4a:a7:1c:a5:c4:2f:0d:eb: 13:62:6c:11:e6:65:b9:27:8f:a5:49:bd:b2:5a:a5: d3:e3:c3:34:79:a7:8a:12:f7:57:dd:4e:4d:36:63: 1f:af:b6:4d:4f:5e:5c:29:5d:ec:a8:fd:6a:cb:2f: f5:6f:39:74:bd:49:b3:aa:d6:cb:3d:2c:8f:6c:d7: e8:c6:bc:47:ac:2b:08:65:67:ba:aa:ea:5d:23:05: 5c:f6:76:43:b1:bd:7c:9f:02:74:d7:1f:0a:09:e0: 0a:0d:5b:52:e4:77:18:f6:cd:6d:c0:1d:01:17:d0: 6f:b3:d9:4f:b9:35:88:df:19:fa:ff:f0:d7:de:04: 8c:1d:74:c9:92:eb:19:06:57:83:8c:7e:4d:a9:64: 09:d7:23:85:3e:63:03:dc:ff:a8:f0:a2:12:73:4c: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:09:30:C0:CB:95:BD:F2:51:15:F5:97:31:76:55:3B:0F:42:EC:8D X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/2gkwwMuVvfJRFfWXMXZVOw9C7I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.170.0/24 37.61.176.0/21 46.20.64.0/20 46.166.65.0/24 46.166.79.0-46.166.89.255 46.166.91.0/24 46.166.93.0-46.166.95.255 46.182.128.0/22 46.226.240.0/21 62.33.122.0/23 62.249.131.0/24 79.132.96.0/19 81.4.192.0/18 81.18.128.0/19 83.234.10.0/24 83.234.54.0/24 83.234.136.0/23 83.234.168.0/23 83.234.240.0/21 89.186.234.0/24 91.204.96.0/22 94.251.20.0/24 109.74.208.0/20 109.233.172.0/22 164.177.176.0/21 176.104.128.0/21 176.104.152.0-176.104.167.255 176.125.64.0/18 178.76.194.0-178.76.199.255 178.76.205.0/24 178.76.207.0-178.76.212.255 178.76.214.0/24 178.76.216.0-178.76.255.255 185.6.236.0/22 185.43.84.0/22 185.61.24.0/22 IPv6: 2a00:1138::/32 2a03:3700::/33 Signature Algorithm: sha256WithRSAEncryption 6a:82:83:1a:3a:1b:f5:3e:32:a6:6d:bf:a2:d3:eb:eb:c4:0b: 72:73:37:51:17:12:c1:e2:85:5b:07:f8:22:f7:9d:80:b5:e3: 5c:ee:44:f5:d0:a3:11:35:bc:90:c7:5d:8d:16:af:10:7a:d8: d2:75:a5:c6:66:a3:c0:aa:b0:eb:21:8d:d4:9d:a5:cc:b1:0e: 98:77:99:b6:95:e7:47:5e:a8:ed:75:e7:1f:ed:66:d6:3d:9c: 91:5b:cb:c6:3a:02:04:61:c5:e8:69:12:3c:ef:e0:2d:43:c1: ee:83:fe:96:a4:f5:2f:03:33:75:70:90:0e:6b:eb:e9:a2:9f: 1c:bc:49:88:82:7f:cc:95:cb:7f:68:c2:d0:3d:30:70:8a:53: 88:64:0b:a3:c8:bd:66:27:7c:3e:1c:f3:5d:31:fb:e7:63:6b: cc:74:61:3d:84:7b:0d:f6:15:2f:2c:b8:d0:64:73:4f:ee:b8: 28:dd:58:d1:e5:2a:05:7c:70:55:a4:d3:d3:21:84:1a:a7:2c: 49:aa:6c:5d:75:aa:de:9f:64:c9:d8:d0:6c:0e:05:4b:f7:51: 09:67:f7:cd:89:47:2b:1b:f0:00:0a:2d:db:91:0c:bc:7d:0b: 66:5a:15:c3:21:57:06:7e:51:57:9d:49:fc:9b:3c:7f:a8:92: a1:5c:fd:e8 -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgISAZt+pmwHwsZTX6eoDZtE9lqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTA5MzBjMGNiOTViZGYyNTExNWY1OTczMTc2NTUzYjBmNDJlYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBj9uiMVWBEM/F45uuO6eTIWyit7 fcqBy+razpIpUlc5djp679dcIfbiMn2qd56njeaVGHYmKboM9+naxzWsabgXJuu9 E10sxZVF8RzLu54gigo1SYQS8E3yJ+B0gN4ySqccpcQvDesTYmwR5mW5J4+lSb2y WqXT48M0eaeKEvdX3U5NNmMfr7ZNT15cKV3sqP1qyy/1bzl0vUmzqtbLPSyPbNfo xrxHrCsIZWe6qupdIwVc9nZDsb18nwJ01x8KCeAKDVtS5HcY9s1twB0BF9Bvs9lP uTWI3xn6//DX3gSMHXTJkusZBleDjH5NqWQJ1yOFPmMD3P+o8KISc0zOZQIDAQAB o4IDKzCCAycwHQYDVR0OBBYEFNoJMMDLlb3yURX1lzF2VTsPQuyNMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvMmdrd3dNdVZ2ZkpSRmZXWE1YWlZPdzlDN0kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPwYIKwYBBQUHAQcBAf8EggEuMIIBKjCCAQ8EAgABMIIB BwMEAB/YqgMEAyU9sAMEBC4UQAMEAC6mQTAMAwQALqZPAwQBLqZYAwQALqZbMAwD BAAupl0DBAUupkADBAIutoADBAMu4vADBAE+IXoDBAA++YMDBAVPhGADBAZRBMAD BAVREoADBABT6goDBABT6jYDBAFT6ogDBAFT6qgDBANT6vADBABZuuoDBAJbzGAD BABe+xQDBARtStADBAJt6awDBAOksbADBAOwaIAwDAMEA7BomAMEA7BooAMEBrB9 QDAMAwQBskzCAwQDskzAAwQAskzNMAwDBACyTM8DBACyTNQDBACyTNYwCwMEA7JM 2AMDALJMAwQCuQbsAwQCuStUAwQCuT0YMBUEAgACMA8DBQAqABE4AwYHKgM3AAAw DQYJKoZIhvcNAQELBQADggEBAGqCgxo6G/U+MqZtv6LT6+vEC3JzN1EXEsHihVsH +CL3nYC141zuRPXQoxE1vJDHXY0WrxB62NJ1pcZmo8CqsOshjdSdpcyxDph3mbaV 50deqO115x/tZtY9nJFby8Y6AgRhxehpEjzv4C1Dwe6D/pak9S8DM3VwkA5r6+mi nxy8SYiCf8yVy39owtA9MHCKU4hkC6PIvWYnfD4c810x++dja8x0YT2Eew32FS8s uNBkc0/uuCjdWNHlKgV8cFWk09MhhBqnLEmqbF11qt6fZMnY0GwOBUv3UQln982J Rysb8AAKLduRDLx9C2ZaFcMhVwZ+UVedSfybPH+okqFc/eg= -----END CERTIFICATE-----Generated at Sat Jan 31 07:24:45 2026 by rpki-client