This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/Gt42LNyKpJtcqVRywZEAUF7VLT4.roa File: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (raw, json) Hash identifier: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I= Subject key identifier: 1A:DE:36:2C:DC:8A:A4:9B:5C:A9:54:72:C1:91:00:50:5E:D5:2D:3E Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019B7BA52D83B1E126D5BB741ACE939820BF Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/Gt42LNyKpJtcqVRywZEAUF7VLT4.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25447 IP address blocks: 62.93.64.0/19 maxlen: 19 62.93.68.0/24 maxlen: 24 62.93.73.0/24 maxlen: 24 62.93.74.0/24 maxlen: 24 62.93.76.0/24 maxlen: 24 62.93.88.0/24 maxlen: 24 62.93.96.0/20 maxlen: 20 62.93.96.0/21 maxlen: 21 62.93.104.0/21 maxlen: 24 62.93.112.0/22 maxlen: 22 62.93.120.0/21 maxlen: 21 82.192.0.0/19 maxlen: 19 82.192.0.0/23 maxlen: 23 82.192.5.0/24 maxlen: 24 82.192.6.0/24 maxlen: 24 82.192.18.0/24 maxlen: 24 85.13.0.0/18 maxlen: 18 85.13.2.0/24 maxlen: 24 85.13.8.0/24 maxlen: 24 85.13.14.0/24 maxlen: 24 85.13.16.0/24 maxlen: 24 176.61.160.0/19 maxlen: 19 176.61.168.0/21 maxlen: 24 176.61.176.0/21 maxlen: 24 176.61.184.0/21 maxlen: 24 185.51.222.0/23 maxlen: 24 188.117.192.0/18 maxlen: 18 188.117.200.0/22 maxlen: 22 188.117.208.0/22 maxlen: 22 188.117.220.0/22 maxlen: 22 188.117.240.0/20 maxlen: 20 217.16.112.0/20 maxlen: 20 217.16.113.0/24 maxlen: 24 217.16.114.0/24 maxlen: 24 217.16.124.0/24 maxlen: 24 217.16.127.0/24 maxlen: 24 217.199.80.0/20 maxlen: 20 217.199.83.0/24 maxlen: 24 217.199.90.0/24 maxlen: 24 2a03:4e40::/29 maxlen: 29 2a03:4e40::/32 maxlen: 32 2a03:4e47::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2d:83:b1:e1:26:d5:bb:74:1a:ce:93:98:20:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ade362cdc8aa49b5ca95472c19100505ed52d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:17:73:8a:9d:14:53:4e:d3:a4:43:8a:ef:3a: bd:b0:7c:bb:d4:bc:04:28:02:28:c7:52:6d:cb:22: dd:85:c5:c6:a0:81:1d:23:c2:6e:f6:78:b4:98:a0: b5:59:aa:68:8d:42:09:63:f4:3c:c9:aa:98:ea:24: ae:d7:70:64:fe:8b:f5:a0:14:cc:04:ae:5f:99:2b: 1c:6e:f8:31:78:07:88:7f:e8:d7:11:5f:4e:23:cc: 59:fb:25:19:2b:ec:aa:bc:c9:83:96:9a:51:94:49: 39:24:87:3b:3a:8a:2e:83:b6:a5:a7:8b:86:67:c3: 57:c7:76:54:b0:01:fe:fd:6d:fe:e4:3c:89:2e:d1: 33:bc:ca:69:f8:f6:39:50:a3:72:e9:b9:f4:26:d0: 45:e3:73:ab:37:64:62:1b:18:27:eb:c1:3a:51:9b: c5:a8:ac:36:ab:e7:1f:f9:f7:37:b9:f9:f1:2c:70: d2:d4:33:e6:a2:1b:97:77:f3:7e:75:2a:e8:5c:aa: 40:79:a8:3c:db:91:65:28:f9:4c:bd:6a:f7:74:b6: 34:8d:fa:b6:aa:57:a2:c0:b2:ff:16:ba:67:2e:ab: 2b:ac:c2:74:ac:a3:03:4d:07:a9:f8:98:4c:c6:ed: e6:af:6f:f5:e9:a0:bc:c5:02:70:a7:76:fd:76:1c: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DE:36:2C:DC:8A:A4:9B:5C:A9:54:72:C1:91:00:50:5E:D5:2D:3E X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/Gt42LNyKpJtcqVRywZEAUF7VLT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.64.0-62.93.115.255 62.93.120.0/21 82.192.0.0/19 85.13.0.0/18 176.61.160.0/19 185.51.222.0/23 188.117.192.0/18 217.16.112.0/20 217.199.80.0/20 IPv6: 2a03:4e40::/29 Signature Algorithm: sha256WithRSAEncryption 4b:22:6b:e0:6b:04:45:f9:e4:ca:96:9a:e9:5e:24:0b:bc:f1: 13:42:a5:8e:af:9f:cd:a0:d9:e0:31:fe:b7:e5:4a:af:01:b9: 8c:50:ee:56:2d:f8:e9:77:09:66:aa:7f:40:4b:3c:6e:7a:f4: 95:65:96:d4:05:b1:5b:92:ab:da:9b:a6:6a:75:19:3d:90:90: f6:c9:85:b5:8b:c5:5a:37:cc:25:1a:87:9a:64:36:c4:78:38: 34:08:57:8b:f2:1f:36:2d:04:bc:ed:41:10:09:9f:75:c7:e4: 7b:b8:1c:af:77:f1:23:98:ee:f8:a2:86:89:7d:15:69:01:26: 73:f2:88:ba:d4:2d:f1:d9:eb:a0:26:9f:7c:99:1a:1c:90:0e: 5f:ba:ed:4e:48:e0:1a:b5:25:c5:09:23:af:fa:71:50:52:44: 1b:4e:48:f0:34:bd:8d:83:0e:37:e4:1d:2b:e8:c0:37:ec:b1: c2:48:80:0c:3f:b8:27:21:a0:45:7b:f7:78:75:ec:99:1b:1a: 90:99:36:a4:5e:85:c2:88:d3:11:7b:5e:3f:ae:e1:c7:23:3d: 64:38:88:66:b4:fd:be:4e:96:3e:47:59:ea:14:a6:95:33:f1: 41:57:32:aa:f5:8b:21:e6:f4:ae:0d:86:88:d5:7b:cb:3b:8c: 93:0d:50:46 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt7pS2DseEm1bt0Gs6TmCC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWRlMzYyY2RjOGFhNDliNWNhOTU0NzJjMTkxMDA1MDVlZDUyZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Rdzip0UU07TpEOK7zq9sHy71LwE KAIox1JtyyLdhcXGoIEdI8Ju9ni0mKC1WapojUIJY/Q8yaqY6iSu13Bk/ov1oBTM BK5fmSscbvgxeAeIf+jXEV9OI8xZ+yUZK+yqvMmDlppRlEk5JIc7Oooug7alp4uG Z8NXx3ZUsAH+/W3+5DyJLtEzvMpp+PY5UKNy6bn0JtBF43OrN2RiGxgn68E6UZvF qKw2q+cf+fc3ufnxLHDS1DPmohuXd/N+dSroXKpAeag825FlKPlMvWr3dLY0jfq2 qleiwLL/FrpnLqsrrMJ0rKMDTQep+JhMxu3mr2/16aC8xQJwp3b9dhxMzQIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFBreNizciqSbXKlUcsGRAFBe1S0+MB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvR3Q0MkxOeUtwSnRjcVZSeXdaRUFVRjdWTFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+MAwDBAY+XUAD BAI+XXADBAM+XXgDBAVSwAADBAZVDQADBAWwPaADBAG5M94DBAa8dcADBATZEHAD BATZx1AwDQQCAAIwBwMFAyoDTkAwDQYJKoZIhvcNAQELBQADggEBAEsia+BrBEX5 5MqWmuleJAu88RNCpY6vn82g2eAx/rflSq8BuYxQ7lYt+Ol3CWaqf0BLPG569JVl ltQFsVuSq9qbpmp1GT2QkPbJhbWLxVo3zCUah5pkNsR4ODQIV4vyHzYtBLztQRAJ n3XH5Hu4HK938SOY7viihol9FWkBJnPyiLrULfHZ66Amn3yZGhyQDl+67U5I4Bq1 JcUJI6/6cVBSRBtOSPA0vY2DDjfkHSvowDfsscJIgAw/uCchoEV793h17JkbGpCZ NqRehcKI0xF7Xj+u4ccjPWQ4iGa0/b5Olj5HWeoUppUz8UFXMqr1iyHm9K4NhojV e8s7jJMNUEY= -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:37 2026 by rpki-client