This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/GfudqaXCGAnzf5UM4tjEaiMqpTg.roa File: GfudqaXCGAnzf5UM4tjEaiMqpTg.roa (raw, json) Hash identifier: ++grS5tBSYFsZ6VlpAvw9mKJW4WJ4ROEzneK+4J3ekU= Subject key identifier: 19:FB:9D:A9:A5:C2:18:09:F3:7F:95:0C:E2:D8:C4:6A:23:2A:A5:38 Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c Certificate serial: 019B77592359E05F6D884FC061C941BDA063 Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/GfudqaXCGAnzf5UM4tjEaiMqpTg.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39120 IP address blocks: 5.56.8.0/22 maxlen: 22 5.56.12.0/22 maxlen: 22 5.83.120.0/22 maxlen: 22 5.83.124.0/22 maxlen: 22 31.7.144.0/20 maxlen: 20 45.80.172.0/23 maxlen: 23 45.90.232.0/22 maxlen: 22 78.138.32.0/22 maxlen: 24 78.138.32.0/24 maxlen: 24 78.138.33.0/24 maxlen: 24 78.138.35.0/24 maxlen: 24 83.229.8.0/22 maxlen: 22 89.21.192.0/23 maxlen: 23 89.21.194.0/23 maxlen: 23 89.21.196.0/23 maxlen: 23 89.21.198.0/23 maxlen: 23 89.21.200.0/21 maxlen: 21 89.21.208.0/20 maxlen: 20 91.214.72.0/22 maxlen: 22 93.88.96.0/20 maxlen: 20 94.101.48.0/22 maxlen: 22 94.101.52.0/22 maxlen: 22 94.101.56.0/22 maxlen: 22 94.101.60.0/22 maxlen: 22 185.9.208.0/22 maxlen: 22 185.29.248.0/22 maxlen: 22 185.104.124.0/22 maxlen: 22 185.105.92.0/22 maxlen: 22 185.105.104.0/22 maxlen: 22 185.105.128.0/22 maxlen: 22 185.105.212.0/22 maxlen: 22 185.195.8.0/22 maxlen: 22 185.217.228.0/22 maxlen: 22 195.60.190.0/23 maxlen: 23 213.167.232.0/21 maxlen: 21 217.28.68.0/22 maxlen: 22 2a01:9a80::/32 maxlen: 32 2a01:9a81::/32 maxlen: 32 2a01:9a82::/32 maxlen: 32 2a01:9a83::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:23:59:e0:5f:6d:88:4f:c0:61:c9:41:bd:a0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19fb9da9a5c21809f37f950ce2d8c46a232aa538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:d4:e2:d0:b2:f6:c1:71:aa:be:b6:85:2b: a4:8c:7b:4e:32:02:aa:6b:70:cb:ca:91:fb:7b:f5: 06:6b:45:98:0f:85:e4:1b:49:e8:ee:7b:62:38:24: c1:3e:0c:e8:a2:8b:37:ae:55:fd:9f:7b:50:b4:58: 59:6e:b1:7a:03:86:2c:2d:f2:21:a4:ac:be:c8:57: 37:2d:4c:fa:72:93:5a:ca:8e:08:46:02:d9:35:4d: 60:e9:f0:23:9e:2f:05:08:6d:84:2d:d2:cb:49:d7: 75:ad:c2:03:84:9f:27:20:be:d5:03:36:58:89:1a: 9a:b6:60:8c:c7:63:88:83:54:f9:5d:6a:a3:bf:10: a2:d5:38:63:64:8b:4b:66:a9:f4:82:69:15:c4:fc: 14:ce:07:37:c4:bb:5f:7f:76:5e:37:fc:d6:6a:7e: 79:e2:a5:91:6c:26:fb:67:e1:43:d1:db:a1:1b:7c: 0f:72:95:58:e5:89:4f:f1:98:0e:f3:01:e1:2b:7f: fa:17:52:7e:59:25:83:73:bc:4a:db:28:70:ec:e0: 08:2a:79:ca:58:25:c7:5b:c7:67:de:f2:2a:f9:7c: 88:75:c5:0a:ea:66:3f:8e:9c:51:08:0c:5f:e4:b7: 7c:4d:c6:be:b8:6d:43:66:f7:4e:c4:88:e1:6c:e2: 0f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:9D:A9:A5:C2:18:09:F3:7F:95:0C:E2:D8:C4:6A:23:2A:A5:38 X509v3 Authority Key Identifier: keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/GfudqaXCGAnzf5UM4tjEaiMqpTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.8.0/21 5.83.120.0/21 31.7.144.0/20 45.80.172.0/23 45.90.232.0/22 78.138.32.0/22 83.229.8.0/22 89.21.192.0/19 91.214.72.0/22 93.88.96.0/20 94.101.48.0/20 185.9.208.0/22 185.29.248.0/22 185.104.124.0/22 185.105.92.0/22 185.105.104.0/22 185.105.128.0/22 185.105.212.0/22 185.195.8.0/22 185.217.228.0/22 195.60.190.0/23 213.167.232.0/21 217.28.68.0/22 IPv6: 2a01:9a80::/30 Signature Algorithm: sha256WithRSAEncryption 1b:d5:e1:50:63:65:5e:ec:0b:78:dc:87:cb:0a:94:e5:fd:93: 02:80:80:fd:ed:21:b1:31:94:98:e3:51:12:e6:3c:28:03:bf: c6:7e:b2:f1:76:65:74:b0:f0:93:61:0b:ad:92:c1:8b:c3:ca: a3:5c:9c:f5:57:bb:1c:dc:92:cf:12:e6:3a:de:a5:91:f4:d4: 47:b0:b4:e8:0a:df:48:3c:c4:91:ca:98:c3:70:1f:47:5e:4f: d8:dc:40:cb:fe:d9:ac:1e:09:33:cd:19:85:18:51:68:6d:55: 7e:20:de:99:29:f4:eb:43:1e:dc:51:01:58:22:e2:17:8f:9b: df:12:65:1d:c2:f3:06:8c:4b:a1:9d:d5:c5:e0:0a:f3:6a:59: 64:24:30:4c:29:18:6b:f2:c0:c8:72:df:42:ed:80:bc:fe:b7: cc:1a:38:3c:9e:e2:3c:e0:40:7b:9d:34:ba:38:11:42:ba:0e: 1b:17:e1:68:cb:c9:ad:db:4f:de:c2:27:b5:e9:85:62:b8:57: de:71:da:0f:b2:7a:e4:aa:0d:87:71:14:66:29:c0:25:05:dd: 9c:67:26:7d:2f:cc:89:f8:cb:6c:bd:0d:95:58:ef:48:ee:c5: b7:32:fb:a8:8a:d4:db:70:3c:71:c7:87:3a:e4:f7:ff:f8:b5: 7f:73:ab:1a -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt3WSNZ4F9tiE/AYclBvaBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzg3NWE4MGFkMjMzZTljMjg3MTU5ODgzNzFmNzdlZWMz ZjYyMGMwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWZiOWRhOWE1YzIxODA5ZjM3Zjk1MGNlMmQ4YzQ2YTIzMmFhNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg7U4tCy9sFxqr62hSukjHtOMgKq a3DLypH7e/UGa0WYD4XkG0no7ntiOCTBPgzooos3rlX9n3tQtFhZbrF6A4YsLfIh pKy+yFc3LUz6cpNayo4IRgLZNU1g6fAjni8FCG2ELdLLSdd1rcIDhJ8nIL7VAzZY iRqatmCMx2OIg1T5XWqjvxCi1ThjZItLZqn0gmkVxPwUzgc3xLtff3ZeN/zWan55 4qWRbCb7Z+FD0duhG3wPcpVY5YlP8ZgO8wHhK3/6F1J+WSWDc7xK2yhw7OAIKnnK WCXHW8dn3vIq+XyIdcUK6mY/jpxRCAxf5Ld8Tca+uG1DZvdOxIjhbOIPmQIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFBn7namlwhgJ83+VDOLYxGojKqU4MB8GA1UdIwQY MBaAFI44dagK0jPpwocVmINx937sP2IMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEt MTljNGZmMTg3N2JiLzEvR2Z1ZHFhWENHQW56ZjVVTTR0akVhaU1xcFRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEtMTljNGZmMTg3N2Ji LzEvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG2BggrBgEFBQcBBwEB/wSBpjCBozCBkQQCAAEwgYoDBAMF OAgDBAMFU3gDBAQfB5ADBAEtUKwDBAItWugDBAJOiiADBAJT5QgDBAVZFcADBAJb 1kgDBARdWGADBAReZTADBAK5CdADBAK5HfgDBAK5aHwDBAK5aVwDBAK5aWgDBAK5 aYADBAK5adQDBAK5wwgDBAK52eQDBAHDPL4DBAPVp+gDBALZHEQwDQQCAAIwBwMF AioBmoAwDQYJKoZIhvcNAQELBQADggEBABvV4VBjZV7sC3jch8sKlOX9kwKAgP3t IbExlJjjURLmPCgDv8Z+svF2ZXSw8JNhC62SwYvDyqNcnPVXuxzcks8S5jrepZH0 1EewtOgK30g8xJHKmMNwH0deT9jcQMv+2aweCTPNGYUYUWhtVX4g3pkp9OtDHtxR AVgi4hePm98SZR3C8waMS6Gd1cXgCvNqWWQkMEwpGGvywMhy30LtgLz+t8waODye 4jzgQHudNLo4EUK6DhsX4WjLya3bT97CJ7XphWK4V95x2g+yeuSqDYdxFGYpwCUF 3ZxnJn0vzIn4y2y9DZVY70juxbcy+6iK1NtwPHHHhzrk9//4tX9zqxo= -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:45 2026 by rpki-client