This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa File: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (raw, json) Hash identifier: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0= Subject key identifier: 18:0A:4D:28:15:82:E5:47:BE:34:05:39:4A:0D:44:C0:FF:0C:63:A9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019B78A2FC789396E1781805E5AB595E21B4 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7393 IP address blocks: 5.57.213.0/24 maxlen: 24 46.31.66.0/24 maxlen: 24 46.253.136.0/24 maxlen: 24 62.3.51.0/24 maxlen: 24 62.106.80.0/24 maxlen: 24 77.72.82.0/24 maxlen: 24 84.246.83.0/24 maxlen: 24 91.246.57.0/24 maxlen: 24 146.19.229.0/24 maxlen: 24 178.22.29.0/24 maxlen: 24 193.163.95.0/24 maxlen: 24 212.18.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fc:78:93:96:e1:78:18:05:e5:ab:59:5e:21:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=180a4d281582e547be3405394a0d44c0ff0c63a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:ca:bb:1e:53:11:e5:b4:3e:cb:75:9f:53: 11:39:81:9b:95:16:71:b2:64:37:59:2f:d4:c9:eb: b1:d9:21:62:94:30:e6:57:f5:79:11:3e:77:df:a7: 4d:e4:17:47:b8:52:94:06:06:80:ec:9c:66:af:e7: 04:4b:71:18:f9:16:91:e9:d9:ff:51:0c:e1:65:9b: ed:dc:0c:c5:5d:df:1a:3a:ff:81:0e:cd:35:b3:1a: 17:8f:20:ae:79:5f:54:18:89:8b:28:f0:15:df:4b: 97:0c:c1:2d:4e:84:14:ad:e4:f8:e4:2a:57:91:e3: 40:f4:b0:7b:b7:c4:5b:5c:98:4c:ff:5c:e4:ed:d9: c5:2e:60:d4:bf:e6:e8:2b:f8:cf:6b:8e:21:9c:28: 02:16:0a:79:6f:e2:65:97:57:53:13:77:2f:92:ba: 17:ea:b7:18:77:b1:d5:d4:87:fe:d5:28:10:3a:43: 7c:3f:31:d8:d9:ef:7b:31:9b:fd:3a:1b:d2:59:e8: af:c0:ce:83:a7:3d:5d:71:c1:bc:56:4c:8f:43:38: 74:54:37:fa:d4:e0:52:3c:ab:de:2e:d7:37:34:6e: 6d:f8:52:db:1a:75:29:82:dc:05:ea:95:b9:c1:70: 33:84:d3:ac:1a:6f:6b:3d:60:fa:0b:52:f3:25:b7: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0A:4D:28:15:82:E5:47:BE:34:05:39:4A:0D:44:C0:FF:0C:63:A9 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.213.0/24 46.31.66.0/24 46.253.136.0/24 62.3.51.0/24 62.106.80.0/24 77.72.82.0/24 84.246.83.0/24 91.246.57.0/24 146.19.229.0/24 178.22.29.0/24 193.163.95.0/24 212.18.107.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:f2:cb:ba:68:cc:ee:d3:46:0f:8e:2b:da:83:31:4f:02:db: f0:cd:21:92:59:7a:49:0c:9b:b8:04:75:dd:f6:1c:78:9c:21: d6:ad:fc:8a:e3:3a:6e:59:5f:66:8c:5f:71:c3:df:48:b6:13: 97:81:77:a3:3c:56:6a:20:35:a3:44:5e:ca:5b:57:b4:ae:6a: 78:4b:7a:a8:21:ca:68:1a:90:39:f9:e5:39:7f:b4:08:ec:79: 35:91:7d:12:bd:bd:ef:80:1f:4a:7b:9e:ed:01:f5:f6:fa:98: d1:f3:ba:b6:03:3e:49:34:4b:97:15:56:84:61:85:6b:45:c4: 4f:08:20:22:0c:0c:dc:22:be:4a:14:40:cd:e4:a1:f5:a4:ae: 2a:51:c9:05:cc:f6:4d:2d:ea:ec:e3:2f:fe:24:f3:dc:15:fc: e7:16:9f:06:49:66:14:ef:5d:29:e0:09:6f:70:ed:37:1b:1f: 93:59:32:6a:ad:cf:b5:fc:a1:65:d4:db:5f:e9:24:18:96:8b: 8b:34:a3:8b:0e:61:6a:46:25:94:19:55:1a:cd:39:ea:d0:37: bf:68:4a:4e:de:50:98:c2:8f:56:30:20:8b:09:19:de:fb:f8: 4b:25:c2:20:ee:7d:7a:9b:5c:34:18:3c:ee:b1:40:ca:25:99: a8:93:62:8c -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt4ovx4k5bheBgF5atZXiG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODBhNGQyODE1ODJlNTQ3YmUzNDA1Mzk0YTBkNDRjMGZmMGM2M2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphvKux5TEeW0Pst1n1MROYGblRZx smQ3WS/Uyeux2SFilDDmV/V5ET5336dN5BdHuFKUBgaA7Jxmr+cES3EY+RaR6dn/ UQzhZZvt3AzFXd8aOv+BDs01sxoXjyCueV9UGImLKPAV30uXDMEtToQUreT45CpX keNA9LB7t8RbXJhM/1zk7dnFLmDUv+boK/jPa44hnCgCFgp5b+Jll1dTE3cvkroX 6rcYd7HV1If+1SgQOkN8PzHY2e97MZv9OhvSWeivwM6Dpz1dccG8VkyPQzh0VDf6 1OBSPKveLtc3NG5t+FLbGnUpgtwF6pW5wXAzhNOsGm9rPWD6C1LzJbfK2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBgKTSgVguVHvjQFOUoNRMD/DGOpMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvR0FwTktCV0M1VWUtTkFVNVNnMUV3UDhNWTZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABTnVAwQA Lh9CAwQALv2IAwQAPgMzAwQAPmpQAwQATUhSAwQAVPZTAwQAW/Y5AwQAkhPlAwQA shYdAwQAwaNfAwQA1BJrMA0GCSqGSIb3DQEBCwUAA4IBAQA+8su6aMzu00YPjiva gzFPAtvwzSGSWXpJDJu4BHXd9hx4nCHWrfyK4zpuWV9mjF9xw99IthOXgXejPFZq IDWjRF7KW1e0rmp4S3qoIcpoGpA5+eU5f7QI7Hk1kX0Svb3vgB9Ke57tAfX2+pjR 87q2Az5JNEuXFVaEYYVrRcRPCCAiDAzcIr5KFEDN5KH1pK4qUckFzPZNLers4y/+ JPPcFfznFp8GSWYU710p4AlvcO03Gx+TWTJqrc+1/KFl1Ntf6SQYlouLNKOLDmFq RiWUGVUazTnq0De/aEpO3lCYwo9WMCCLCRne+/hLJcIg7n16m1w0GDzusUDKJZmo k2KM -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:42 2026 by rpki-client