This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/gC8xECPXIz3izz_wPFR4--x3dfA.roa File: gC8xECPXIz3izz_wPFR4--x3dfA.roa (raw, json) Hash identifier: 8tJModKEf7OvBOeGVxRABAMXSwEYcpcHv0L6opRUwuw= Subject key identifier: 80:2F:31:10:23:D7:23:3D:E2:CF:3F:F0:3C:54:78:FB:EC:77:75:F0 Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df Certificate serial: 019B7C7F1243623D044B72E922B22AC1745B Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/gC8xECPXIz3izz_wPFR4--x3dfA.roa Signing time: Fri 02 Jan 2026 02:17:41 +0000 ROA not before: Fri 02 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48944 IP address blocks: 5.23.112.0/21 maxlen: 21 5.23.112.0/22 maxlen: 22 5.23.116.0/22 maxlen: 22 95.130.56.0/21 maxlen: 21 95.130.56.0/24 maxlen: 24 95.130.57.0/24 maxlen: 24 95.130.58.0/24 maxlen: 24 95.130.59.0/24 maxlen: 24 95.130.60.0/24 maxlen: 24 95.130.61.0/24 maxlen: 24 95.130.62.0/24 maxlen: 24 95.130.63.0/24 maxlen: 24 109.72.192.0/20 maxlen: 20 109.72.192.0/21 maxlen: 21 109.72.192.0/24 maxlen: 24 109.72.193.0/24 maxlen: 24 109.72.194.0/24 maxlen: 24 109.72.195.0/24 maxlen: 24 109.72.196.0/24 maxlen: 24 109.72.197.0/24 maxlen: 24 109.72.198.0/24 maxlen: 24 109.72.199.0/24 maxlen: 24 109.72.200.0/21 maxlen: 21 109.72.200.0/24 maxlen: 24 109.72.201.0/24 maxlen: 24 109.72.202.0/24 maxlen: 24 109.72.203.0/24 maxlen: 24 109.72.204.0/24 maxlen: 24 109.72.205.0/24 maxlen: 24 109.72.206.0/24 maxlen: 24 109.72.207.0/24 maxlen: 24 109.238.176.0/20 maxlen: 20 109.238.176.0/21 maxlen: 21 109.238.184.0/21 maxlen: 21 109.238.184.0/24 maxlen: 24 176.67.64.0/20 maxlen: 20 176.67.64.0/21 maxlen: 21 176.67.64.0/22 maxlen: 22 176.67.64.0/23 maxlen: 23 176.67.64.0/24 maxlen: 24 176.67.65.0/24 maxlen: 24 176.67.66.0/23 maxlen: 23 176.67.66.0/24 maxlen: 24 176.67.67.0/24 maxlen: 24 176.67.68.0/22 maxlen: 22 176.67.68.0/23 maxlen: 23 176.67.68.0/24 maxlen: 24 176.67.69.0/24 maxlen: 24 176.67.70.0/23 maxlen: 23 176.67.70.0/24 maxlen: 24 176.67.71.0/24 maxlen: 24 176.67.72.0/21 maxlen: 21 176.67.72.0/22 maxlen: 22 176.67.72.0/23 maxlen: 23 176.67.72.0/24 maxlen: 24 176.67.73.0/24 maxlen: 24 176.67.74.0/23 maxlen: 23 176.67.74.0/24 maxlen: 24 176.67.75.0/24 maxlen: 24 176.67.76.0/22 maxlen: 22 176.67.76.0/23 maxlen: 23 176.67.76.0/24 maxlen: 24 176.67.77.0/24 maxlen: 24 176.67.78.0/23 maxlen: 23 176.67.78.0/24 maxlen: 24 176.67.79.0/24 maxlen: 24 185.11.176.0/22 maxlen: 22 185.11.176.0/23 maxlen: 23 185.11.176.0/24 maxlen: 24 185.11.177.0/24 maxlen: 24 185.11.178.0/23 maxlen: 23 185.11.178.0/24 maxlen: 24 185.11.179.0/24 maxlen: 24 185.193.208.0/22 maxlen: 22 185.193.208.0/23 maxlen: 23 185.193.208.0/24 maxlen: 24 185.193.209.0/24 maxlen: 24 185.193.210.0/23 maxlen: 23 185.193.210.0/24 maxlen: 24 185.193.211.0/24 maxlen: 24 185.214.36.0/24 maxlen: 24 185.214.37.0/24 maxlen: 24 185.214.38.0/24 maxlen: 24 185.214.39.0/24 maxlen: 24 185.226.132.0/22 maxlen: 22 185.226.132.0/23 maxlen: 23 185.226.132.0/24 maxlen: 24 185.226.133.0/24 maxlen: 24 185.226.134.0/23 maxlen: 23 185.226.134.0/24 maxlen: 24 185.226.135.0/24 maxlen: 24 185.246.4.0/22 maxlen: 22 185.246.4.0/23 maxlen: 23 185.246.4.0/24 maxlen: 24 185.246.5.0/24 maxlen: 24 185.246.6.0/23 maxlen: 23 185.246.6.0/24 maxlen: 24 185.246.7.0/24 maxlen: 24 2a02:d2c0::/29 maxlen: 29 2a02:d2c0::/30 maxlen: 30 2a02:d2c4::/30 maxlen: 30 2a02:d2c4::/31 maxlen: 31 2a02:d2c6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:12:43:62:3d:04:4b:72:e9:22:b2:2a:c1:74:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df Validity Not Before: Jan 2 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=802f311023d7233de2cf3ff03c5478fbec7775f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:1e:36:a8:7a:ed:1e:28:55:f0:0b:61:80: 76:c4:8a:44:74:b5:53:0e:53:3e:49:cd:94:65:de: 04:6e:f4:71:4e:7b:5e:bb:cc:94:31:d3:47:7d:06: 65:be:1d:2e:1a:c6:1f:e6:0a:a2:76:35:25:1b:67: a5:29:5e:7d:7f:47:7b:99:89:81:5f:52:4e:10:08: 23:b1:e0:7d:41:78:73:33:83:7b:0c:0f:21:dc:62: d9:c3:c5:fc:a9:e0:59:fd:4e:b7:69:15:b3:9a:c0: cd:7d:21:b6:b1:42:86:09:94:5f:15:87:c8:ff:f3: c4:9b:d6:c7:44:3a:3d:ef:59:31:8b:ff:a3:c3:cf: ed:2e:f5:e1:e2:ac:be:f1:8f:e3:28:f2:fb:fa:53: fe:8d:da:39:64:29:0d:f6:d1:60:b0:37:e3:63:c2: b7:31:0c:45:b1:5a:f8:37:26:1a:c3:fd:0b:5d:fb: 16:7b:84:ed:ab:fa:c7:ed:e7:85:10:5c:fd:5f:47: 31:f7:0c:60:ec:71:64:91:17:d2:f8:4f:10:75:56: 60:31:52:64:52:8a:45:66:b0:15:84:6b:84:57:e5: d6:b5:d7:26:d8:74:27:54:bc:44:41:e6:54:61:e1: 74:ff:f0:af:4c:9e:ee:82:2d:64:3a:1e:f6:4b:6e: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2F:31:10:23:D7:23:3D:E2:CF:3F:F0:3C:54:78:FB:EC:77:75:F0 X509v3 Authority Key Identifier: keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/gC8xECPXIz3izz_wPFR4--x3dfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.112.0/21 95.130.56.0/21 109.72.192.0/20 109.238.176.0/20 176.67.64.0/20 185.11.176.0/22 185.193.208.0/22 185.214.36.0/22 185.226.132.0/22 185.246.4.0/22 IPv6: 2a02:d2c0::/29 Signature Algorithm: sha256WithRSAEncryption 62:7d:28:ea:15:2d:e9:f2:fb:61:06:8e:07:85:14:ca:a9:13: 68:2c:68:12:aa:af:1a:d0:1f:a7:92:6a:6a:b7:c6:53:02:68: 92:e4:fb:06:86:32:69:1b:e7:78:98:0d:7b:b4:47:55:8d:22: df:93:19:f0:ff:2c:88:ce:fd:1f:f9:8c:72:e8:6f:20:a1:2e: 62:91:80:ba:10:62:f3:81:06:c9:22:e4:8e:70:9c:0e:3d:51: 03:dd:44:b0:bd:9c:ff:96:4c:d4:76:3e:a4:78:1b:f6:1f:83: 11:5c:79:e4:5a:9a:a3:4a:25:1c:0c:83:b3:49:0c:39:46:25: a7:5d:b1:2e:e3:d6:19:1c:ac:80:10:7a:58:14:8d:6e:e7:46: 31:83:3d:d7:21:07:0d:f9:0e:31:62:06:55:8b:92:fc:22:57: c8:c9:e1:7a:f5:76:7e:36:02:a2:98:e1:f6:6e:6d:3a:5a:1b: 6b:f2:df:d4:ab:43:3f:37:f6:ef:a1:c8:9e:79:f5:0b:a1:fc: 6f:ce:04:4f:69:b6:fd:0b:bf:bb:9b:e8:ba:d0:2c:cc:c7:7a: 2a:6b:11:cf:1f:02:26:24:58:ee:98:39:7d:15:84:bf:0d:e2: 2c:ac:3a:40:6c:eb:08:dc:db:ee:ad:ae:52:00:9e:51:5d:20: b9:81:27:f3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt8fxJDYj0ES3LpIrIqwXRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4 NDkyZGYwHhcNMjYwMTAyMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDJmMzExMDIzZDcyMzNkZTJjZjNmZjAzYzU0NzhmYmVjNzc3NWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2UeNqh67R4oVfALYYB2xIpEdLVT DlM+Sc2UZd4EbvRxTnteu8yUMdNHfQZlvh0uGsYf5gqidjUlG2elKV59f0d7mYmB X1JOEAgjseB9QXhzM4N7DA8h3GLZw8X8qeBZ/U63aRWzmsDNfSG2sUKGCZRfFYfI //PEm9bHRDo971kxi/+jw8/tLvXh4qy+8Y/jKPL7+lP+jdo5ZCkN9tFgsDfjY8K3 MQxFsVr4NyYaw/0LXfsWe4Ttq/rH7eeFEFz9X0cx9wxg7HFkkRfS+E8QdVZgMVJk UopFZrAVhGuEV+XWtdcm2HQnVLxEQeZUYeF0//CvTJ7ugi1kOh72S25HbQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFIAvMRAj1yM94s8/8DxUePvsd3XwMB8GA1UdIwQY MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt YTI5ZWIxMzllNzlkLzEvZ0M4eEVDUFhJejNpenpfd1BGUjQtLXgzZGZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDBRdwAwQD X4I4AwQEbUjAAwQEbe6wAwQEsENAAwQCuQuwAwQCucHQAwQCudYkAwQCueKEAwQC ufYEMA0EAgACMAcDBQMqAtLAMA0GCSqGSIb3DQEBCwUAA4IBAQBifSjqFS3p8vth Bo4HhRTKqRNoLGgSqq8a0B+nkmpqt8ZTAmiS5PsGhjJpG+d4mA17tEdVjSLfkxnw /yyIzv0f+Yxy6G8goS5ikYC6EGLzgQbJIuSOcJwOPVED3USwvZz/lkzUdj6keBv2 H4MRXHnkWpqjSiUcDIOzSQw5RiWnXbEu49YZHKyAEHpYFI1u50Yxgz3XIQcN+Q4x YgZVi5L8IlfIyeF69XZ+NgKimOH2bm06Whtr8t/Uq0M/N/bvocieefULofxvzgRP abb9C7+7m+i60CzMx3oqaxHPHwImJFjumDl9FYS/DeIsrDpAbOsI3Nvura5SAJ5R XSC5gSfz -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:53 2026 by rpki-client