This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/goauVICOFKFE1porgUT28qkrY40.roa File: goauVICOFKFE1porgUT28qkrY40.roa (raw, json) Hash identifier: FzUBYAt3u7B+H1TQuJndqSy/KOs9unqwMiMZuvpu6gk= Subject key identifier: 82:86:AE:54:80:8E:14:A1:44:D6:9A:2B:81:44:F6:F2:A9:2B:63:8D Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974 Certificate serial: 019B7758A1B5EF1CACA853116ACFB9814FB0 Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/goauVICOFKFE1porgUT28qkrY40.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57293 IP address blocks: 5.197.0.0/16 maxlen: 21 5.197.0.0/17 maxlen: 17 5.197.116.0/22 maxlen: 22 5.197.128.0/17 maxlen: 17 5.197.128.0/20 maxlen: 20 5.197.128.0/21 maxlen: 21 5.197.136.0/21 maxlen: 21 5.197.144.0/20 maxlen: 20 5.197.160.0/20 maxlen: 20 5.197.176.0/20 maxlen: 20 5.197.176.0/21 maxlen: 21 5.197.184.0/21 maxlen: 21 5.197.192.0/20 maxlen: 20 5.197.192.0/21 maxlen: 21 5.197.200.0/21 maxlen: 21 5.197.208.0/20 maxlen: 20 5.197.208.0/21 maxlen: 21 5.197.216.0/21 maxlen: 21 5.197.224.0/20 maxlen: 20 5.197.224.0/21 maxlen: 21 5.197.232.0/21 maxlen: 21 5.197.240.0/20 maxlen: 20 5.197.240.0/21 maxlen: 21 5.197.248.0/21 maxlen: 21 149.255.144.0/20 maxlen: 24 149.255.144.0/21 maxlen: 21 149.255.152.0/21 maxlen: 21 149.255.152.0/24 maxlen: 24 149.255.153.0/24 maxlen: 24 149.255.154.0/24 maxlen: 24 149.255.155.0/24 maxlen: 24 185.146.112.0/22 maxlen: 24 185.146.112.0/24 maxlen: 24 185.146.113.0/24 maxlen: 24 185.146.114.0/24 maxlen: 24 185.146.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a1:b5:ef:1c:ac:a8:53:11:6a:cf:b9:81:4f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8286ae54808e14a144d69a2b8144f6f2a92b638d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:8a:7f:af:1b:62:67:49:5b:73:b3:60:21: 03:c3:ea:1b:98:61:b1:3b:85:ce:3f:82:e9:2a:37: 20:66:82:df:ea:c5:ea:57:51:b2:e5:7d:be:ce:84: d8:6c:cc:e5:74:8e:dd:8b:50:55:d8:5d:1f:72:cb: 3e:64:66:be:d6:93:5d:86:6a:f5:d1:2e:84:eb:d2: 51:70:9a:99:7c:13:2f:ba:18:3d:1a:6b:e1:b2:09: 73:75:63:48:f2:c6:33:90:cb:dd:7b:f5:e8:89:66: 5f:e0:7c:2a:77:76:64:d0:a5:9a:57:1e:b7:b3:dd: 6f:fc:fe:ff:cc:67:d7:d3:a7:38:0e:e7:87:02:53: 5c:c6:61:81:dd:a1:99:a1:f6:cf:11:d0:d6:12:ca: 35:a0:55:6d:6e:23:1b:ff:e3:ce:af:da:7d:46:1b: 7a:f0:44:98:f8:a7:9d:5e:46:d8:cc:54:d4:13:2a: 9a:7f:d6:64:6a:45:e0:f8:18:09:03:7e:e1:33:a8: 1a:65:40:44:8f:ba:c3:6a:76:39:26:22:75:e5:e3: 5c:b5:19:66:0e:2e:ec:53:0a:c6:5d:82:aa:33:e2: 58:38:70:73:0a:be:89:34:11:37:0c:07:86:fe:7c: 8a:35:1a:f7:41:fd:c5:49:40:84:43:67:31:f2:7c: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:86:AE:54:80:8E:14:A1:44:D6:9A:2B:81:44:F6:F2:A9:2B:63:8D X509v3 Authority Key Identifier: keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/goauVICOFKFE1porgUT28qkrY40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.197.0.0/16 149.255.144.0/20 185.146.112.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:0b:2d:4f:2a:f3:4c:fc:de:95:9c:0b:52:94:ff:af:fc:a7: 18:e9:c8:6b:58:0e:78:52:51:f0:72:41:28:00:44:a3:ac:2d: dd:ea:ab:45:fb:9f:93:df:15:9c:eb:c9:b3:96:42:de:5a:77: c4:53:79:26:85:3f:f0:69:50:25:5b:a5:bc:14:8c:a1:19:cc: 4e:b0:cc:87:f1:36:6e:29:93:13:cf:2f:49:34:ce:ad:9a:08: 90:20:e0:64:7a:eb:a6:e2:cb:1e:ee:9e:56:82:12:3f:d4:74: 79:7b:cf:c4:db:6c:92:ac:29:13:31:f3:ba:eb:66:76:47:21: 07:0e:cd:38:9b:b9:fe:82:98:cc:53:2c:78:ff:d4:51:81:51: 74:9f:70:fe:ec:a6:d3:4b:ee:0f:b0:29:fd:cb:d3:55:52:56: be:6a:6a:a5:c8:91:1e:cd:fc:35:7f:16:69:2a:c4:9e:3c:ec: a1:1f:f5:83:ba:53:56:44:01:b3:20:e0:71:e6:79:bb:99:0a: 3d:0f:21:da:9b:82:3b:2c:b4:f4:db:ac:0b:f8:e8:01:d7:27: 25:85:e7:8a:e5:92:ba:cf:62:47:6d:fc:45:d9:32:05:2c:9c: 73:f7:38:9a:9b:92:60:c4:ae:d1:8f:bc:8b:2b:2a:41:bc:51: 74:c8:9a:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt3WKG17xysqFMRas+5gU+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjA4MThiMTg2YjBiOWNiMDlhZjU0MjBkMWU1YWUzMzRm ZTM5NzQwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjg2YWU1NDgwOGUxNGExNDRkNjlhMmI4MTQ0ZjZmMmE5MmI2MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHCKf68bYmdJW3OzYCEDw+obmGGx O4XOP4LpKjcgZoLf6sXqV1Gy5X2+zoTYbMzldI7di1BV2F0fcss+ZGa+1pNdhmr1 0S6E69JRcJqZfBMvuhg9GmvhsglzdWNI8sYzkMvde/XoiWZf4Hwqd3Zk0KWaVx63 s91v/P7/zGfX06c4DueHAlNcxmGB3aGZofbPEdDWEso1oFVtbiMb/+POr9p9Rht6 8ESY+KedXkbYzFTUEyqaf9ZkakXg+BgJA37hM6gaZUBEj7rDanY5JiJ15eNctRlm Di7sUwrGXYKqM+JYOHBzCr6JNBE3DAeG/nyKNRr3Qf3FSUCEQ2cx8nyALwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFIKGrlSAjhShRNaaK4FE9vKpK2ONMB8GA1UdIwQY MBaAFGsggYsYawucsJr1Qg0eWuM0/jl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlDQml4aHJDNXl3bXZWQ0RSNWE0elQtT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMmY5NWUtNWZlNS00YzlhLTg0ZDct ZTVjOWMyZThlOWJmLzEvZ29hdVZJQ09GS0ZFMXBvcmdVVDI4cWtyWTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wMmY5NWUtNWZlNS00YzlhLTg0ZDctZTVjOWMyZThlOWJm LzEvYXlDQml4aHJDNXl3bXZWQ0RSNWE0elQtT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMABcUDBASV /5ADBAK5knAwDQYJKoZIhvcNAQELBQADggEBABwLLU8q80z83pWcC1KU/6/8pxjp yGtYDnhSUfByQSgARKOsLd3qq0X7n5PfFZzrybOWQt5ad8RTeSaFP/BpUCVbpbwU jKEZzE6wzIfxNm4pkxPPL0k0zq2aCJAg4GR666biyx7unlaCEj/UdHl7z8TbbJKs KRMx87rrZnZHIQcOzTibuf6CmMxTLHj/1FGBUXSfcP7sptNL7g+wKf3L01VSVr5q aqXIkR7N/DV/FmkqxJ487KEf9YO6U1ZEAbMg4HHmebuZCj0PIdqbgjsstPTbrAv4 6AHXJyWF54rlkrrPYkdt/EXZMgUsnHP3OJqbkmDErtGPvIsrKkG8UXTImiE= -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:15 2026 by rpki-client