This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/GcXx7V4h4z9qV0rR6xIoEuG5UPs.roa File: GcXx7V4h4z9qV0rR6xIoEuG5UPs.roa (raw, json) Hash identifier: y19juCHJkLHTZDZWVjPEXZFfP2PTvjivfjDw/XeOEOc= Subject key identifier: 19:C5:F1:ED:5E:21:E3:3F:6A:57:4A:D1:EB:12:28:12:E1:B9:50:FB Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019BFA8E544AE111B4E28A04998AE9EEB310 Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/GcXx7V4h4z9qV0rR6xIoEuG5UPs.roa Signing time: Mon 26 Jan 2026 13:46:30 +0000 ROA not before: Mon 26 Jan 2026 13:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9002 IP address blocks: 2.58.98.0/24 maxlen: 24 31.128.32.0/22 maxlen: 24 37.233.82.0/23 maxlen: 24 37.233.84.0/23 maxlen: 24 37.233.86.0/24 maxlen: 24 45.92.174.0/24 maxlen: 24 45.130.212.0/22 maxlen: 24 45.137.188.0/24 maxlen: 24 45.145.5.0/24 maxlen: 24 45.145.6.0/24 maxlen: 24 45.145.163.0/24 maxlen: 24 45.145.168.0/24 maxlen: 24 45.152.87.0/24 maxlen: 24 45.156.20.0/24 maxlen: 24 46.173.20.0/24 maxlen: 24 77.73.233.0/24 maxlen: 24 77.73.235.0/24 maxlen: 24 77.73.238.0/24 maxlen: 24 83.222.20.0/23 maxlen: 24 89.40.204.0/24 maxlen: 24 90.156.254.0/23 maxlen: 24 91.193.25.0/24 maxlen: 24 91.218.142.0/23 maxlen: 24 155.212.224.0/21 maxlen: 24 185.77.231.0/24 maxlen: 24 193.22.244.0/24 maxlen: 24 193.23.3.0/24 maxlen: 24 193.28.186.0/24 maxlen: 24 193.242.106.0/24 maxlen: 24 193.242.109.0/24 maxlen: 24 194.36.208.0/24 maxlen: 24 194.113.209.0/24 maxlen: 24 212.74.231.0/24 maxlen: 24 213.139.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:8e:54:4a:e1:11:b4:e2:8a:04:99:8a:e9:ee:b3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Jan 26 13:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19c5f1ed5e21e33f6a574ad1eb122812e1b950fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:d6:8b:04:68:c8:a3:d7:9b:81:dc:f3:10: 54:21:88:14:47:cf:6d:38:eb:62:5b:06:ed:8e:b4: 78:d2:26:87:be:43:d6:cc:9b:1d:75:a7:c6:41:0b: 47:42:6c:12:b4:32:e1:04:f2:d0:85:7b:67:ba:93: 9b:e8:c9:6d:5b:87:d8:bf:f8:9d:90:be:f5:cc:5e: 6b:af:ed:ff:32:cd:68:f2:f0:94:32:e1:ab:5d:07: 28:90:c7:73:40:26:00:ba:b3:ee:79:81:63:0e:cc: 78:b1:f4:c4:09:fd:52:4c:ef:06:05:ab:c8:6e:29: c5:5f:57:46:c6:97:73:c2:4d:69:06:6b:6b:3b:ab: 01:95:ad:79:d8:c3:99:27:5f:91:37:dd:dc:59:17: 02:98:54:f2:7a:ec:19:6a:b3:00:e3:11:de:04:2e: ca:97:f9:45:c8:8d:10:9b:42:f5:fe:45:e6:2d:6f: 20:22:56:ac:cf:3c:ce:a5:16:d5:68:29:64:86:42: ee:77:46:a1:0e:55:b2:5c:b1:24:d8:5d:d2:81:82: b7:e2:f7:a0:0d:58:bd:22:f0:41:f2:f5:29:7f:0d: 43:42:8e:97:10:0c:9b:47:09:2b:8f:d2:bf:9a:b3: cc:8d:72:22:3e:a1:ea:87:60:19:fd:5f:35:dc:cb: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C5:F1:ED:5E:21:E3:3F:6A:57:4A:D1:EB:12:28:12:E1:B9:50:FB X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/GcXx7V4h4z9qV0rR6xIoEuG5UPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.98.0/24 31.128.32.0/22 37.233.82.0-37.233.86.255 45.92.174.0/24 45.130.212.0/22 45.137.188.0/24 45.145.5.0-45.145.6.255 45.145.163.0/24 45.145.168.0/24 45.152.87.0/24 45.156.20.0/24 46.173.20.0/24 77.73.233.0/24 77.73.235.0/24 77.73.238.0/24 83.222.20.0/23 89.40.204.0/24 90.156.254.0/23 91.193.25.0/24 91.218.142.0/23 155.212.224.0/21 185.77.231.0/24 193.22.244.0/24 193.23.3.0/24 193.28.186.0/24 193.242.106.0/24 193.242.109.0/24 194.36.208.0/24 194.113.209.0/24 212.74.231.0/24 213.139.229.0/24 Signature Algorithm: sha256WithRSAEncryption 20:8c:e5:5e:ef:f1:de:00:e1:e7:be:8e:7b:bc:ec:60:73:80: a7:34:cc:5b:99:62:d3:42:d7:b0:55:14:af:dd:cc:bc:8d:dd: f4:08:79:e7:ff:20:d4:5f:22:d5:1e:cd:fc:e2:9a:72:54:b9: 3d:f1:bc:a5:ac:9d:94:ac:fe:57:f1:6a:31:b4:13:97:38:11: 4f:97:5f:0e:8a:a8:42:16:20:bd:0b:e5:7d:c5:54:cd:28:85: 9e:e0:15:fd:16:29:74:c4:c4:57:9c:aa:f3:db:5a:15:e8:31: b0:72:35:42:10:c6:4a:dc:0c:6c:a1:52:9b:84:6a:e0:79:a8: e5:c2:f4:60:60:a6:59:ff:c7:f8:45:a5:07:63:e3:e9:65:ad: 0b:3d:6a:0c:5e:fe:06:1a:42:16:4b:e6:26:d7:81:61:3d:b4: e0:86:40:6a:41:00:96:6e:f5:9c:17:bd:11:ce:26:c7:ee:ea: d3:14:f9:da:53:0a:9e:36:14:43:07:01:1c:c4:62:f3:a3:fb: e9:fd:a7:e7:80:22:c8:48:0a:6d:5e:de:0d:a9:15:86:b3:1c: a0:e6:d2:6a:8a:96:88:8a:7f:da:91:45:98:d1:b3:c5:26:36: 52:bd:38:c7:33:11:be:f6:29:61:9b:72:87:c2:19:b4:20:97: f7:4e:90:08 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZv6jlRK4RG04ooEmYrp7rMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjYwMTI2MTM0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWM1ZjFlZDVlMjFlMzNmNmE1NzRhZDFlYjEyMjgxMmUxYjk1MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumLWiwRoyKPXm4Hc8xBUIYgUR89t OOtiWwbtjrR40iaHvkPWzJsddafGQQtHQmwStDLhBPLQhXtnupOb6MltW4fYv/id kL71zF5rr+3/Ms1o8vCUMuGrXQcokMdzQCYAurPueYFjDsx4sfTECf1STO8GBavI binFX1dGxpdzwk1pBmtrO6sBla152MOZJ1+RN93cWRcCmFTyeuwZarMA4xHeBC7K l/lFyI0Qm0L1/kXmLW8gIlaszzzOpRbVaClkhkLud0ahDlWyXLEk2F3SgYK34veg DVi9IvBB8vUpfw1DQo6XEAybRwkrj9K/mrPMjXIiPqHqh2AZ/V813Mt5TQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFBnF8e1eIeM/aldK0esSKBLhuVD7MB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvR2NYeDdWNGg0ejlxVjByUjZ4SW9FdUc1VVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCB0QQCAAEwgcoDBAAC OmIDBAIfgCAwDAMEASXpUgMEACXpVgMEAC1crgMEAi2C1AMEAC2JvDAMAwQALZEF AwQALZEGAwQALZGjAwQALZGoAwQALZhXAwQALZwUAwQALq0UAwQATUnpAwQATUnr AwQATUnuAwQBU94UAwQAWSjMAwQBWpz+AwQAW8EZAwQBW9qOAwQDm9TgAwQAuU3n AwQAwRb0AwQAwRcDAwQAwRy6AwQAwfJqAwQAwfJtAwQAwiTQAwQAwnHRAwQA1Ern AwQA1YvlMA0GCSqGSIb3DQEBCwUAA4IBAQAgjOVe7/HeAOHnvo57vOxgc4CnNMxb mWLTQtewVRSv3cy8jd30CHnn/yDUXyLVHs384ppyVLk98bylrJ2UrP5X8WoxtBOX OBFPl18OiqhCFiC9C+V9xVTNKIWe4BX9Fil0xMRXnKrz21oV6DGwcjVCEMZK3Axs oVKbhGrgeajlwvRgYKZZ/8f4RaUHY+PpZa0LPWoMXv4GGkIWS+Ym14FhPbTghkBq QQCWbvWcF70RzibH7urTFPnaUwqeNhRDBwEcxGLzo/vp/afngCLISAptXt4NqRWG sxyg5tJqipaIin/akUWY0bPFJjZSvTjHMxG+9ilhm3KHwhm0IJf3TpAI -----END CERTIFICATE-----Generated at Tue Jan 27 10:19:01 2026 by rpki-client