This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/GMkb7Nfp3e1xwCHzIvQMW8YGBD8.roa File: GMkb7Nfp3e1xwCHzIvQMW8YGBD8.roa (raw, json) Hash identifier: 9tBjV2F1lcd6x85zAmu4+gOihfEhBFtC/fl/CG4h/+o= Subject key identifier: 18:C9:1B:EC:D7:E9:DD:ED:71:C0:21:F3:22:F4:0C:5B:C6:06:04:3F Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Certificate serial: 019B7E38A7E68C451655B709F9F7BEAAF6DB Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/GMkb7Nfp3e1xwCHzIvQMW8YGBD8.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43612 IP address blocks: 31.3.93.0/24 maxlen: 24 31.3.94.0/24 maxlen: 24 31.11.64.0/21 maxlen: 21 31.11.80.0/21 maxlen: 21 31.11.120.0/21 maxlen: 21 78.157.0.0/19 maxlen: 22 78.157.16.0/22 maxlen: 22 92.53.0.0/18 maxlen: 23 94.100.96.0/20 maxlen: 20 109.69.40.0/21 maxlen: 21 146.255.73.0/24 maxlen: 24 146.255.74.0/24 maxlen: 24 146.255.75.0/24 maxlen: 24 146.255.94.0/23 maxlen: 23 178.249.112.0/21 maxlen: 21 185.5.4.0/22 maxlen: 22 185.80.164.0/22 maxlen: 22 185.89.244.0/22 maxlen: 22 185.89.246.0/23 maxlen: 24 185.100.244.0/24 maxlen: 24 185.100.245.0/24 maxlen: 24 188.44.2.0/24 maxlen: 24 188.44.6.0/24 maxlen: 24 188.44.7.0/24 maxlen: 24 212.110.92.0/23 maxlen: 23 217.16.88.0/22 maxlen: 22 217.16.92.0/23 maxlen: 23 217.16.94.0/24 maxlen: 24 217.196.192.0/20 maxlen: 20 2a01:b780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a7:e6:8c:45:16:55:b7:09:f9:f7:be:aa:f6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18c91becd7e9dded71c021f322f40c5bc606043f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:9d:2b:91:d0:c4:a2:23:35:de:47:ac:52: 78:be:60:9b:fc:aa:35:5f:0f:b9:3c:1e:b3:31:53: 42:5a:00:c3:48:90:fc:54:22:9b:d1:8c:22:8c:2d: 1a:6f:65:6e:a3:55:5d:f1:b6:ee:00:ff:2e:1e:6c: 50:bd:66:d6:02:35:3e:ea:b9:1c:bd:a8:34:16:fa: 85:5d:36:4d:ea:45:5e:a4:41:32:d7:31:f4:f2:02: fd:aa:ef:96:6b:e9:44:e6:c0:c5:01:d2:17:85:cb: 50:f7:46:ac:55:44:a5:d0:48:55:48:2c:49:02:63: 39:7f:e5:1f:90:26:f9:80:b4:f5:e5:29:df:2a:fb: 8e:21:90:e9:3c:5f:93:c0:d5:89:c2:52:bc:ec:e7: 0b:a8:1a:d1:05:d6:ce:2e:1b:c5:39:a6:70:b7:c4: bc:39:39:4f:c0:05:9e:55:4d:04:d7:0a:f8:78:23: 19:1d:fd:08:aa:6f:57:80:71:b2:3b:6c:c9:c9:31: e2:3f:0c:e5:fb:2b:37:dc:a5:70:74:ba:c7:98:23: a2:ed:14:eb:be:ff:7f:92:47:4d:6c:87:e2:7a:26: 39:c7:7b:87:54:d2:d5:fb:e0:8d:95:c0:ca:40:38: a5:3a:6e:a0:f9:85:4b:e4:de:bc:d9:03:fe:a2:9d: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C9:1B:EC:D7:E9:DD:ED:71:C0:21:F3:22:F4:0C:5B:C6:06:04:3F X509v3 Authority Key Identifier: keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/GMkb7Nfp3e1xwCHzIvQMW8YGBD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.93.0-31.3.94.255 31.11.64.0/21 31.11.80.0/21 31.11.120.0/21 78.157.0.0/19 92.53.0.0/18 94.100.96.0/20 109.69.40.0/21 146.255.73.0-146.255.75.255 146.255.94.0/23 178.249.112.0/21 185.5.4.0/22 185.80.164.0/22 185.89.244.0/22 185.100.244.0/23 188.44.2.0/24 188.44.6.0/23 212.110.92.0/23 217.16.88.0-217.16.94.255 217.196.192.0/20 IPv6: 2a01:b780::/32 Signature Algorithm: sha256WithRSAEncryption 66:72:73:e2:6f:3d:47:0f:d3:f1:2a:92:51:bc:ec:1e:ef:65: 3e:36:ae:a6:f4:cb:5c:4e:cb:83:16:bd:1e:11:1b:7a:33:40: 16:d4:e6:60:c9:30:59:44:d4:5b:4a:de:0b:e6:c1:25:57:be: ab:f4:36:cd:2f:3a:02:67:be:d9:5e:07:9d:38:bc:fa:f7:b6: 0d:c2:bf:b1:73:43:57:92:ca:b8:fd:97:ea:83:b1:de:c2:1f: 4c:11:a2:80:bb:9a:1c:39:a7:e0:fb:fa:e2:6b:fc:00:4e:b8: 4c:00:b8:df:84:8d:52:e1:a8:ca:d5:87:21:e9:05:fc:1b:2d: ff:d0:28:89:3f:fd:d7:d3:dd:14:03:32:0a:17:c2:f4:39:70: 34:69:da:a5:d1:dd:56:6c:6e:d3:38:33:3a:f1:1f:8e:a8:53: 18:9f:89:4d:35:2d:4b:c5:01:a6:16:be:48:b4:ba:82:f1:ef: 03:00:49:71:af:57:0a:c1:7d:62:4a:27:e2:66:ce:c8:f8:47: 1e:fb:40:53:17:d3:3d:97:01:5b:d3:0b:d8:60:19:79:d4:8b: 60:ae:e4:49:e8:b3:f1:b6:4e:4d:b3:59:4e:0e:fc:59:02:1a: a0:d6:98:7b:fb:7e:0f:e2:16:cf:3c:0a:8d:ed:dd:70:7a:81: ba:b0:9a:7e -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt+OKfmjEUWVbcJ+fe+qvbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZTcyMDlhOGM5YjE3NmZiZjYyM2VkZjNlZTBiODIwMDdm YzJjNDAwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGM5MWJlY2Q3ZTlkZGVkNzFjMDIxZjMyMmY0MGM1YmM2MDYwNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUudK5HQxKIjNd5HrFJ4vmCb/Ko1 Xw+5PB6zMVNCWgDDSJD8VCKb0YwijC0ab2Vuo1Vd8bbuAP8uHmxQvWbWAjU+6rkc vag0FvqFXTZN6kVepEEy1zH08gL9qu+Wa+lE5sDFAdIXhctQ90asVUSl0EhVSCxJ AmM5f+UfkCb5gLT15SnfKvuOIZDpPF+TwNWJwlK87OcLqBrRBdbOLhvFOaZwt8S8 OTlPwAWeVU0E1wr4eCMZHf0Iqm9XgHGyO2zJyTHiPwzl+ys33KVwdLrHmCOi7RTr vv9/kkdNbIfieiY5x3uHVNLV++CNlcDKQDilOm6g+YVL5N682QP+op20MwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFBjJG+zX6d3tccAh8yL0DFvGBgQ/MB8GA1UdIwQY MBaAFJnnIJqMmxdvv2I+3z7guCAH/CxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUt YjJkY2MxODYzZThiLzEvR01rYjdOZnAzZTF4d0NIekl2UU1XOFlHQkQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lZjU4NTYtYmJjMC00NWE0LTg5MWUtYjJkY2MxODYzZThi LzEvbWVjZ21veWJGMi1fWWo3ZlB1QzRJQWY4TEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBlwQCAAEwgZAwDAME AB8DXQMEAB8DXgMEAx8LQAMEAx8LUAMEAx8LeAMEBU6dAAMEBlw1AAMEBF5kYAME A21FKDAMAwQAkv9JAwQCkv9IAwQBkv9eAwQDsvlwAwQCuQUEAwQCuVCkAwQCuVn0 AwQBuWT0AwQAvCwCAwQBvCwGAwQB1G5cMAwDBAPZEFgDBADZEF4DBATZxMAwDQQC AAIwBwMFACoBt4AwDQYJKoZIhvcNAQELBQADggEBAGZyc+JvPUcP0/EqklG87B7v ZT42rqb0y1xOy4MWvR4RG3ozQBbU5mDJMFlE1FtK3gvmwSVXvqv0Ns0vOgJnvtle B504vPr3tg3Cv7FzQ1eSyrj9l+qDsd7CH0wRooC7mhw5p+D7+uJr/ABOuEwAuN+E jVLhqMrVhyHpBfwbLf/QKIk//dfT3RQDMgoXwvQ5cDRp2qXR3VZsbtM4MzrxH46o UxifiU01LUvFAaYWvki0uoLx7wMASXGvVwrBfWJKJ+Jmzsj4Rx77QFMX0z2XAVvT C9hgGXnUi2Cu5Enos/G2Tk2zWU4O/FkCGqDWmHv7fg/iFs88Co3t3XB6gbqwmn4= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:21 2026 by rpki-client