This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/GouOZzqtvm5n6Mf6GERm7SmKJik.roa File: GouOZzqtvm5n6Mf6GERm7SmKJik.roa (raw, json) Hash identifier: DnkVplXCGtIXUxBO+/VYhx1ClIvPTPEOEg8ff9BpzWI= Subject key identifier: 1A:8B:8E:67:3A:AD:BE:6E:67:E8:C7:FA:18:44:66:ED:29:8A:26:29 Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Certificate serial: 019B7BA46024FE943B31286F8923DF3B4144 Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/GouOZzqtvm5n6Mf6GERm7SmKJik.roa Signing time: Thu 01 Jan 2026 22:18:48 +0000 ROA not before: Thu 01 Jan 2026 22:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30823 IP address blocks: 5.249.160.0/24 maxlen: 24 5.249.161.0/24 maxlen: 24 5.249.162.0/24 maxlen: 24 5.249.163.0/24 maxlen: 24 5.249.164.0/24 maxlen: 24 5.249.165.0/24 maxlen: 24 45.141.36.0/24 maxlen: 24 45.141.37.0/24 maxlen: 24 45.146.252.0/24 maxlen: 24 45.146.253.0/24 maxlen: 24 45.146.254.0/24 maxlen: 24 45.146.255.0/24 maxlen: 24 88.214.56.0/24 maxlen: 24 88.214.57.0/24 maxlen: 24 88.214.58.0/24 maxlen: 24 88.214.59.0/24 maxlen: 24 92.42.44.0/22 maxlen: 22 92.42.44.0/24 maxlen: 24 92.42.45.0/24 maxlen: 24 92.42.46.0/24 maxlen: 24 92.42.47.0/24 maxlen: 24 134.255.216.0/24 maxlen: 24 134.255.217.0/24 maxlen: 24 134.255.218.0/24 maxlen: 24 134.255.219.0/24 maxlen: 24 134.255.231.0/24 maxlen: 24 134.255.232.0/24 maxlen: 24 134.255.233.0/24 maxlen: 24 134.255.234.0/24 maxlen: 24 147.189.168.0/24 maxlen: 24 147.189.169.0/24 maxlen: 24 147.189.170.0/24 maxlen: 24 147.189.171.0/24 maxlen: 24 147.189.172.0/24 maxlen: 24 147.189.173.0/24 maxlen: 24 147.189.174.0/24 maxlen: 24 147.189.175.0/24 maxlen: 24 185.223.28.0/24 maxlen: 24 185.223.29.0/24 maxlen: 24 185.223.30.0/24 maxlen: 24 185.223.31.0/24 maxlen: 24 185.239.236.0/24 maxlen: 24 185.239.237.0/24 maxlen: 24 185.239.238.0/24 maxlen: 24 185.239.239.0/24 maxlen: 24 185.249.197.0/24 maxlen: 24 185.249.198.0/24 maxlen: 24 185.249.199.0/24 maxlen: 24 193.23.126.0/24 maxlen: 24 193.23.127.0/24 maxlen: 24 193.23.160.0/24 maxlen: 24 193.23.161.0/24 maxlen: 24 193.34.69.0/24 maxlen: 24 193.203.238.0/24 maxlen: 24 194.156.88.0/24 maxlen: 24 194.156.90.0/24 maxlen: 24 194.156.91.0/24 maxlen: 24 2a0c:3580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:60:24:fe:94:3b:31:28:6f:89:23:df:3b:41:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Validity Not Before: Jan 1 22:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a8b8e673aadbe6e67e8c7fa184466ed298a2629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:43:b8:b5:13:12:08:07:cc:5c:58:4f:26: 81:cb:5f:05:4c:7b:c3:d3:d4:2a:5f:56:1b:f9:47: 41:dc:1d:75:f2:e9:8e:79:a3:a4:b1:81:e9:69:d7: 5c:fa:46:30:68:54:63:3e:db:a2:0a:04:5f:2f:c9: fe:ca:14:5c:53:e2:be:39:2f:b1:59:82:08:aa:e8: c3:89:ee:10:d3:fc:14:43:27:a5:99:fe:dd:15:5f: 6c:c7:ed:09:f8:ab:00:e4:29:ea:08:2b:25:dc:ee: 70:8d:19:7a:b4:29:39:76:6e:d5:ee:69:50:cd:3e: 2a:c8:86:b1:36:75:cb:95:20:de:fb:8d:7e:72:2c: 53:4f:85:b2:df:b0:cb:5d:73:cc:ce:0c:a6:26:bb: b3:36:94:d4:2d:e4:a4:ad:ff:14:0b:78:0c:25:2d: 27:42:69:ad:8f:27:62:fc:80:4c:cb:9c:c5:f3:03: 26:0c:61:cf:56:c0:5e:d0:56:08:7b:54:0c:a5:fa: 5a:17:07:ed:2d:e2:16:a1:30:9d:7c:2c:d5:9f:ea: 98:59:8b:17:0b:43:02:67:91:d6:59:95:03:69:6a: dc:db:9e:0a:7c:03:e9:8a:65:8c:1d:d3:80:be:2e: 06:7c:0e:65:62:d9:29:2e:57:b2:9b:be:6b:c4:4b: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8B:8E:67:3A:AD:BE:6E:67:E8:C7:FA:18:44:66:ED:29:8A:26:29 X509v3 Authority Key Identifier: keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/GouOZzqtvm5n6Mf6GERm7SmKJik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.160.0-5.249.165.255 45.141.36.0/23 45.146.252.0/22 88.214.56.0/22 92.42.44.0/22 134.255.216.0/22 134.255.231.0-134.255.234.255 147.189.168.0/21 185.223.28.0/22 185.239.236.0/22 185.249.197.0-185.249.199.255 193.23.126.0/23 193.23.160.0/23 193.34.69.0/24 193.203.238.0/24 194.156.88.0/24 194.156.90.0/23 IPv6: 2a0c:3580::/29 Signature Algorithm: sha256WithRSAEncryption 6e:7c:c5:d8:6f:a8:15:a7:1a:1d:39:79:fb:cf:0b:3b:ea:4c: 12:71:d5:56:ff:46:1d:28:4f:11:5f:5c:ed:2b:9d:bf:06:29: 5b:72:57:7c:0d:50:bd:96:67:46:0a:9a:94:50:6f:b1:16:0c: e5:8d:e9:b9:74:2b:19:b0:f4:32:5d:d1:12:a0:63:e9:6d:b1: 99:14:b0:e4:d7:35:0c:9a:55:af:67:37:7e:17:c7:01:67:17: 5d:8c:1e:42:89:86:f3:45:a1:b8:d6:21:fd:f2:ae:e2:9b:4e: ee:7c:80:2a:55:ee:8d:8e:93:ec:e2:cd:f0:2a:20:19:89:8f: eb:e4:25:9a:b8:bb:fa:9f:b9:b4:22:53:ac:51:f7:db:1b:21: 2b:56:30:e1:56:85:4f:f4:6e:7d:43:82:ac:84:18:ef:81:09: 97:a4:30:26:d5:ce:61:32:28:49:f2:30:13:6a:1a:04:a7:44: 2d:7c:ba:be:6f:2a:e9:11:27:50:2d:b2:b5:dc:9f:4d:15:b6: 76:0c:c3:b5:31:bb:fc:fe:38:be:2e:38:0c:d7:d9:d7:4c:11: e9:98:7b:e3:e7:c5:3c:c7:e6:0f:e1:97:8e:4c:53:7e:dd:f0: 09:98:dd:72:cb:41:3a:f5:bf:ec:35:67:9b:a5:75:1a:e3:3d: 1c:b9:4a:e9 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZt7pGAk/pQ7MShviSPfO0FEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz ZWNiNjAwHhcNMjYwMTAxMjIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYThiOGU2NzNhYWRiZTZlNjdlOGM3ZmExODQ0NjZlZDI5OGEyNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosFDuLUTEggHzFxYTyaBy18FTHvD 09QqX1Yb+UdB3B118umOeaOksYHpaddc+kYwaFRjPtuiCgRfL8n+yhRcU+K+OS+x WYIIqujDie4Q0/wUQyelmf7dFV9sx+0J+KsA5CnqCCsl3O5wjRl6tCk5dm7V7mlQ zT4qyIaxNnXLlSDe+41+cixTT4Wy37DLXXPMzgymJruzNpTULeSkrf8UC3gMJS0n Qmmtjydi/IBMy5zF8wMmDGHPVsBe0FYIe1QMpfpaFwftLeIWoTCdfCzVn+qYWYsX C0MCZ5HWWZUDaWrc254KfAPpimWMHdOAvi4GfA5lYtkpLleym75rxEsouQIDAQAB o4IClDCCApAwHQYDVR0OBBYEFBqLjmc6rb5uZ+jH+hhEZu0piiYpMB8GA1UdIwQY MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct ZTBkN2RkNWUyZTZmLzEvR291T1p6cXR2bTVuNk1mNkdFUm03U21LSmlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBhAQCAAEwfjAMAwQF BfmgAwQBBfmkAwQBLY0kAwQCLZL8AwQCWNY4AwQCXCosAwQChv/YMAwDBACG/+cD BACG/+oDBAOTvagDBAK53xwDBAK57+wwDAMEALn5xQMEA7n5wAMEAcEXfgMEAcEX oAMEAMEiRQMEAMHL7gMEAMKcWAMEAcKcWjANBAIAAjAHAwUDKgw1gDANBgkqhkiG 9w0BAQsFAAOCAQEAbnzF2G+oFacaHTl5+88LO+pMEnHVVv9GHShPEV9c7SudvwYp W3JXfA1QvZZnRgqalFBvsRYM5Y3puXQrGbD0Ml3REqBj6W2xmRSw5Nc1DJpVr2c3 fhfHAWcXXYweQomG80WhuNYh/fKu4ptO7nyAKlXujY6T7OLN8CogGYmP6+Qlmri7 +p+5tCJTrFH32xshK1Yw4VaFT/RufUOCrIQY74EJl6QwJtXOYTIoSfIwE2oaBKdE LXy6vm8q6REnUC2ytdyfTRW2dgzDtTG7/P44vi44DNfZ10wR6Zh74+fFPMfmD+GX jkxTft3wCZjdcstBOvW/7DVnm6V1GuM9HLlK6Q== -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:35 2026 by rpki-client