This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/GnHUOYxXZ19HKt89IGxPNl5ZUl4.roa File: GnHUOYxXZ19HKt89IGxPNl5ZUl4.roa (raw, json) Hash identifier: J4wjORRB0qLoosCni8JzExIQySLhD1kGD/t7VkdvfQU= Subject key identifier: 1A:71:D4:39:8C:57:67:5F:47:2A:DF:3D:20:6C:4F:36:5E:59:52:5E Certificate issuer: /CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8 Certificate serial: 019B7BA3F3B686E41FF861A635F050A602ED Authority key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/GnHUOYxXZ19HKt89IGxPNl5ZUl4.roa Signing time: Thu 01 Jan 2026 22:18:20 +0000 ROA not before: Thu 01 Jan 2026 22:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6752 IP address blocks: 46.172.224.0/19 maxlen: 19 46.172.232.0/22 maxlen: 22 46.175.156.0/22 maxlen: 22 46.175.156.0/24 maxlen: 24 46.175.157.0/24 maxlen: 24 46.175.158.0/24 maxlen: 24 46.175.159.0/24 maxlen: 24 80.80.84.0/22 maxlen: 22 80.80.84.0/24 maxlen: 24 80.80.85.0/24 maxlen: 24 80.80.92.0/22 maxlen: 22 85.94.160.0/19 maxlen: 19 85.94.160.0/22 maxlen: 22 85.94.164.0/22 maxlen: 22 85.94.168.0/22 maxlen: 22 85.94.172.0/22 maxlen: 22 85.94.176.0/22 maxlen: 22 85.94.180.0/22 maxlen: 22 85.94.184.0/22 maxlen: 22 85.94.188.0/22 maxlen: 22 89.150.2.0/23 maxlen: 23 89.150.4.0/22 maxlen: 22 89.150.8.0/22 maxlen: 22 89.150.12.0/22 maxlen: 22 91.187.64.0/19 maxlen: 19 91.187.64.0/22 maxlen: 22 91.187.68.0/22 maxlen: 22 91.187.72.0/22 maxlen: 22 91.187.76.0/22 maxlen: 22 91.187.80.0/22 maxlen: 22 91.187.83.0/24 maxlen: 24 91.187.84.0/22 maxlen: 22 91.187.88.0/22 maxlen: 22 91.187.92.0/22 maxlen: 22 91.187.93.0/24 maxlen: 24 94.125.138.0/23 maxlen: 23 94.125.140.0/23 maxlen: 23 109.111.96.0/19 maxlen: 19 109.111.96.0/22 maxlen: 22 109.111.96.0/24 maxlen: 24 109.111.100.0/22 maxlen: 22 109.111.104.0/22 maxlen: 22 109.111.108.0/22 maxlen: 22 109.111.111.0/24 maxlen: 24 109.111.112.0/22 maxlen: 22 109.111.116.0/22 maxlen: 22 109.111.120.0/22 maxlen: 22 109.111.124.0/22 maxlen: 22 185.4.52.0/22 maxlen: 22 185.33.0.0/22 maxlen: 22 185.87.36.0/22 maxlen: 22 185.87.40.0/22 maxlen: 22 185.87.44.0/22 maxlen: 22 185.87.46.0/23 maxlen: 23 185.132.200.0/22 maxlen: 22 185.194.56.0/22 maxlen: 22 185.194.59.0/24 maxlen: 24 185.247.24.0/22 maxlen: 22 188.241.26.0/23 maxlen: 23 194.158.64.0/19 maxlen: 19 194.158.64.0/22 maxlen: 22 194.158.64.0/24 maxlen: 24 194.158.68.0/22 maxlen: 22 194.158.72.0/22 maxlen: 22 194.158.72.0/23 maxlen: 23 194.158.76.0/22 maxlen: 22 194.158.78.0/24 maxlen: 24 194.158.80.0/22 maxlen: 22 194.158.84.0/22 maxlen: 22 194.158.84.0/24 maxlen: 24 194.158.85.0/24 maxlen: 24 194.158.88.0/22 maxlen: 22 194.158.92.0/22 maxlen: 22 194.158.95.0/24 maxlen: 24 213.236.8.0/24 maxlen: 24 2a02:8060::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f3:b6:86:e4:1f:f8:61:a6:35:f0:50:a6:02:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8 Validity Not Before: Jan 1 22:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a71d4398c57675f472adf3d206c4f365e59525e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:02:55:b4:aa:0c:55:8b:6a:7a:04:c0:38: 41:a0:b0:44:08:47:09:83:80:cc:0e:0c:7f:f2:48: 9b:59:1c:5e:2f:98:ce:31:02:66:17:38:8c:de:40: df:c3:33:5a:3b:46:e7:7a:b9:15:ba:fb:a9:e6:7c: 8d:d0:fd:95:34:5e:23:b1:17:74:b9:83:63:08:0a: 14:52:82:1c:b3:25:06:3a:d4:68:e7:96:64:07:a1: 56:09:f5:48:9e:36:95:85:61:ee:7d:05:87:6c:df: e0:c1:fd:45:41:81:ee:7a:51:7d:2d:f4:b1:e3:e0: 29:28:73:b4:d5:ed:88:e9:16:7f:87:19:7e:07:53: da:29:7c:7f:aa:d5:25:19:7a:f0:43:fc:bf:04:21: 0f:51:84:8c:c1:cb:0e:15:0d:c5:0f:ed:a5:a4:c7: a3:7d:f9:4d:db:03:f3:06:ef:fd:c7:09:85:4a:d4: 26:b8:69:10:63:f2:80:7d:ff:81:19:2b:df:56:a3: 8c:12:89:b7:c6:31:f0:d5:7a:00:5a:85:30:0e:56: 7a:28:0b:0a:1b:5c:63:52:4a:7b:65:c6:6f:57:21: 90:e5:6a:18:51:a3:15:5b:21:17:01:6a:20:4a:1e: a4:e1:9f:df:3d:d7:0a:2d:63:dc:bb:d0:4a:9d:4c: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:D4:39:8C:57:67:5F:47:2A:DF:3D:20:6C:4F:36:5E:59:52:5E X509v3 Authority Key Identifier: keyid:68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/GnHUOYxXZ19HKt89IGxPNl5ZUl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.224.0/19 46.175.156.0/22 80.80.84.0/22 80.80.92.0/22 85.94.160.0/19 89.150.2.0-89.150.15.255 91.187.64.0/19 94.125.138.0-94.125.141.255 109.111.96.0/19 185.4.52.0/22 185.33.0.0/22 185.87.36.0-185.87.47.255 185.132.200.0/22 185.194.56.0/22 185.247.24.0/22 188.241.26.0/23 194.158.64.0/19 213.236.8.0/24 IPv6: 2a02:8060::/31 Signature Algorithm: sha256WithRSAEncryption 0f:1e:c5:d3:9d:74:66:2b:24:92:4f:5f:77:5c:4f:5d:a3:3a: d7:67:8d:63:d3:3c:2d:86:fc:7a:2d:31:4a:94:9e:da:f3:c5: 1a:b7:57:10:f5:33:a7:52:e2:44:6a:b2:3e:d5:28:92:ac:99: d8:45:c1:40:08:de:e6:a7:1e:92:79:b9:0b:cd:4a:eb:95:98: 87:c2:76:7c:32:20:91:42:5c:98:65:a4:39:68:e5:7e:50:8b: b8:1c:67:c0:dc:21:a4:b3:6e:97:0d:84:c7:e7:56:99:1d:d3: b4:c3:3d:03:64:68:27:64:17:00:41:6f:ad:37:b5:17:18:1c: 28:16:3f:38:df:7a:ee:78:02:f8:d9:b8:f8:87:6a:25:a2:c1: 20:56:7c:ef:ff:e7:e7:92:18:0f:53:7e:0a:4d:33:56:ae:7a: e4:8e:40:97:54:2a:56:42:64:20:3c:b3:1f:80:43:df:83:2c: c3:d7:c0:37:dd:91:12:f6:a6:a4:7f:8c:72:65:29:4f:93:ff: 5b:2d:1a:97:f3:c2:d9:dd:cb:da:53:53:d5:52:46:55:38:ba: e5:ca:8f:31:71:e8:84:c7:9a:c3:cd:70:ad:d1:28:40:11:5a: b0:ff:63:e8:fe:1a:73:80:39:77:f2:b1:90:eb:ff:db:ca:e2: 94:33:3e:cf -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt7o/O2huQf+GGmNfBQpgLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MWNlNGQ5OWJhOGViYjkxYTc5NGFiZmNiZGQxNWJkZTA5 Yzk5ZjgwHhcNMjYwMTAxMjIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTcxZDQzOThjNTc2NzVmNDcyYWRmM2QyMDZjNGYzNjVlNTk1MjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05wCVbSqDFWLanoEwDhBoLBECEcJ g4DMDgx/8kibWRxeL5jOMQJmFziM3kDfwzNaO0bnerkVuvup5nyN0P2VNF4jsRd0 uYNjCAoUUoIcsyUGOtRo55ZkB6FWCfVInjaVhWHufQWHbN/gwf1FQYHuelF9LfSx 4+ApKHO01e2I6RZ/hxl+B1PaKXx/qtUlGXrwQ/y/BCEPUYSMwcsOFQ3FD+2lpMej fflN2wPzBu/9xwmFStQmuGkQY/KAff+BGSvfVqOMEom3xjHw1XoAWoUwDlZ6KAsK G1xjUkp7ZcZvVyGQ5WoYUaMVWyEXAWogSh6k4Z/fPdcKLWPcu9BKnUzg5wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFBpx1DmMV2dfRyrfPSBsTzZeWVJeMB8GA1UdIwQY MBaAFGgc5NmbqOu5GnlKv8vdFb3gnJn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQt OWY5OWMxNDc3ZmJlLzEvR25IVU9ZeFhaMTlIS3Q4OUlHeFBObDVaVWw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82YjllZTgtOTI0Yi00YTMxLWE0NjQtOWY5OWMxNDc3ZmJl LzEvYUJ6azJadW82N2thZVVxX3k5MFZ2ZUNjbWZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBiwQCAAEwgYQDBAUu rOADBAIur5wDBAJQUFQDBAJQUFwDBAVVXqAwDAMEAVmWAgMEBFmWAAMEBVu7QDAM AwQBXn2KAwQBXn2MAwQFbW9gAwQCuQQ0AwQCuSEAMAwDBAK5VyQDBAS5VyADBAK5 hMgDBAK5wjgDBAK59xgDBAG88RoDBAXCnkADBADV7AgwDQQCAAIwBwMFASoCgGAw DQYJKoZIhvcNAQELBQADggEBAA8exdOddGYrJJJPX3dcT12jOtdnjWPTPC2G/Hot MUqUntrzxRq3VxD1M6dS4kRqsj7VKJKsmdhFwUAI3uanHpJ5uQvNSuuVmIfCdnwy IJFCXJhlpDlo5X5Qi7gcZ8DcIaSzbpcNhMfnVpkd07TDPQNkaCdkFwBBb603tRcY HCgWPzjfeu54AvjZuPiHaiWiwSBWfO//5+eSGA9TfgpNM1aueuSOQJdUKlZCZCA8 sx+AQ9+DLMPXwDfdkRL2pqR/jHJlKU+T/1stGpfzwtndy9pTU9VSRlU4uuXKjzFx 6ITHmsPNcK3RKEARWrD/Y+j+GnOAOXfysZDr/9vK4pQzPs8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:03 2026 by rpki-client