This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/GBAhttd4F0Zv53G29r_-8ZCwX5Y.roa File: GBAhttd4F0Zv53G29r_-8ZCwX5Y.roa (raw, json) Hash identifier: fhe78RBRWYDeN37rFd2/eXy1YBmhcNmP4VfcJTi5VnY= Subject key identifier: 18:10:21:B6:D7:78:17:46:6F:E7:71:B6:F6:BF:FE:F1:90:B0:5F:96 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B289237BE9EF74DFBFC91DA4913360F89 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/GBAhttd4F0Zv53G29r_-8ZCwX5Y.roa Signing time: Tue 16 Dec 2025 19:10:29 +0000 ROA not before: Tue 16 Dec 2025 19:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49367 IP address blocks: 31.193.188.0/24 maxlen: 24 37.156.174.0/24 maxlen: 24 45.83.56.0/22 maxlen: 22 45.86.144.0/22 maxlen: 22 77.81.103.0/24 maxlen: 24 85.204.255.0/24 maxlen: 24 86.107.110.0/24 maxlen: 24 89.34.236.0/23 maxlen: 23 89.34.239.0/24 maxlen: 24 89.39.254.0/24 maxlen: 24 89.40.142.0/23 maxlen: 23 89.40.227.0/24 maxlen: 24 89.42.134.0/24 maxlen: 24 89.43.34.0/24 maxlen: 24 89.43.52.0/24 maxlen: 24 91.212.52.0/24 maxlen: 24 91.229.186.0/24 maxlen: 24 93.113.144.0/21 maxlen: 21 93.113.144.0/22 maxlen: 22 93.113.144.0/24 maxlen: 24 93.113.145.0/24 maxlen: 24 93.113.150.0/24 maxlen: 24 93.113.151.0/24 maxlen: 24 94.176.108.0/24 maxlen: 24 94.176.212.0/24 maxlen: 24 94.177.48.0/23 maxlen: 23 185.184.240.0/22 maxlen: 22 185.184.240.0/24 maxlen: 24 185.184.241.0/24 maxlen: 24 185.184.242.0/24 maxlen: 24 185.184.243.0/24 maxlen: 24 185.198.244.0/24 maxlen: 24 185.198.245.0/24 maxlen: 24 185.198.246.0/24 maxlen: 24 185.198.247.0/24 maxlen: 24 188.208.16.0/23 maxlen: 23 188.208.16.0/24 maxlen: 24 188.211.248.0/24 maxlen: 24 188.215.6.0/23 maxlen: 23 188.215.6.0/24 maxlen: 24 188.215.7.0/24 maxlen: 24 188.240.228.0/23 maxlen: 23 188.240.228.0/24 maxlen: 24 188.240.229.0/24 maxlen: 24 193.239.140.0/23 maxlen: 23 217.198.177.0/24 maxlen: 24 2a04:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:92:37:be:9e:f7:4d:fb:fc:91:da:49:13:36:0f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 16 19:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=181021b6d77817466fe771b6f6bffef190b05f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:02:ac:0c:98:c5:03:95:ea:ed:41:0e:01: ce:f5:d8:18:39:ba:5d:f4:e3:10:51:b3:31:de:1f: 07:5b:85:14:a7:88:47:25:83:ea:40:dc:71:5b:e4: 7f:1e:9e:e3:f0:ab:42:a9:f5:43:72:e6:33:b9:9e: de:ca:5b:98:23:da:e7:38:0a:f8:41:7b:34:02:a0: 53:ed:9d:cb:0d:94:a5:9e:04:a8:87:c5:7e:f4:89: 12:16:3f:43:69:a1:47:17:15:86:8d:f4:53:8e:f7: f8:80:93:0d:ce:e1:c5:a8:c8:9f:a5:7a:aa:2c:9e: a8:c5:88:d7:e9:d9:1e:18:a1:80:7a:0b:49:6d:dd: ff:8f:af:5d:40:15:33:91:3a:dd:dc:dc:cf:34:26: 3d:f3:e4:31:72:4c:07:c9:c2:6f:7f:02:72:28:0f: 9e:d9:46:68:1e:db:19:dd:63:d5:d4:98:82:49:79: a1:21:78:9a:3a:2a:9a:00:2d:ad:34:d4:64:3c:d0: c4:18:5f:a6:7a:07:e9:86:43:f7:f8:eb:0d:33:1d: db:bf:01:16:74:15:e7:a9:4a:b3:f0:ed:2c:2a:34: 6e:c9:b0:1e:6e:7f:f4:9b:2e:f9:00:b6:d7:45:62: 18:77:da:b0:af:d1:ac:75:10:e2:9f:5d:42:0b:b4: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:10:21:B6:D7:78:17:46:6F:E7:71:B6:F6:BF:FE:F1:90:B0:5F:96 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/GBAhttd4F0Zv53G29r_-8ZCwX5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.188.0/24 37.156.174.0/24 45.83.56.0/22 45.86.144.0/22 77.81.103.0/24 85.204.255.0/24 86.107.110.0/24 89.34.236.0/23 89.34.239.0/24 89.39.254.0/24 89.40.142.0/23 89.40.227.0/24 89.42.134.0/24 89.43.34.0/24 89.43.52.0/24 91.212.52.0/24 91.229.186.0/24 93.113.144.0/21 94.176.108.0/24 94.176.212.0/24 94.177.48.0/23 185.184.240.0/22 185.198.244.0/22 188.208.16.0/23 188.211.248.0/24 188.215.6.0/23 188.240.228.0/23 193.239.140.0/23 217.198.177.0/24 IPv6: 2a04:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 98:31:e2:73:d6:39:f3:66:61:10:e0:ed:65:cd:40:f9:1d:cd: c6:ab:20:4a:55:d0:d2:94:60:89:88:5f:71:36:d4:88:92:92: 66:3a:ce:db:43:c5:ce:5c:4e:de:6f:22:51:42:e9:93:be:5a: 25:92:17:0b:93:ee:37:90:31:97:18:21:7c:f0:72:6f:cc:ec: 76:86:41:7f:cc:f7:64:41:bd:bc:20:74:44:91:57:a1:71:1f: 03:2d:79:d9:53:c1:b2:df:7f:5e:27:d6:53:91:a1:1a:57:50: 9b:e3:22:14:64:b4:c1:09:35:be:df:7e:4e:a0:c6:c5:93:9e: d6:57:d0:c9:23:b8:07:56:58:2c:78:1b:86:9b:fe:7c:dc:50: ed:e1:2a:18:f9:bb:75:31:04:b4:31:54:01:de:a2:1b:e7:30: 82:d1:17:6f:41:cf:a8:5f:ca:34:24:f9:7c:9a:2c:30:32:bf: 1c:20:6e:5e:69:d4:01:29:2e:09:ef:ad:61:68:61:f6:6a:46: b7:e9:ce:a9:ee:8f:e4:45:af:b4:68:0b:f9:01:a6:f2:f0:c7: 94:3c:6d:e7:b7:e6:3c:1f:2e:ca:f2:79:5f:dc:c0:34:d1:7d: b7:e5:ee:4a:32:f0:fc:3e:89:a6:11:a0:d4:c6:0e:21:9e:6c: 57:f8:33:cd -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZsokje+nvdN+/yR2kkTNg+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjE2MTkxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODEwMjFiNmQ3NzgxNzQ2NmZlNzcxYjZmNmJmZmVmMTkwYjA1Zjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxYCrAyYxQOV6u1BDgHO9dgYObpd 9OMQUbMx3h8HW4UUp4hHJYPqQNxxW+R/Hp7j8KtCqfVDcuYzuZ7eyluYI9rnOAr4 QXs0AqBT7Z3LDZSlngSoh8V+9IkSFj9DaaFHFxWGjfRTjvf4gJMNzuHFqMifpXqq LJ6oxYjX6dkeGKGAegtJbd3/j69dQBUzkTrd3NzPNCY98+QxckwHycJvfwJyKA+e 2UZoHtsZ3WPV1JiCSXmhIXiaOiqaAC2tNNRkPNDEGF+megfphkP3+OsNMx3bvwEW dBXnqUqz8O0sKjRuybAebn/0my75ALbXRWIYd9qwr9GsdRDin11CC7S6cwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFBgQIbbXeBdGb+dxtva//vGQsF+WMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvR0JBaHR0ZDRGMFp2NTNHMjlyXy04WkN3WDVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBtQQCAAEwga4DBAAf wbwDBAAlnK4DBAItUzgDBAItVpADBABNUWcDBABVzP8DBABWa24DBAFZIuwDBABZ Iu8DBABZJ/4DBAFZKI4DBABZKOMDBABZKoYDBABZKyIDBABZKzQDBABb1DQDBABb 5boDBANdcZADBABesGwDBABesNQDBAFesTADBAK5uPADBAK5xvQDBAG80BADBAC8 0/gDBAG81wYDBAG88OQDBAHB74wDBADZxrEwDQQCAAIwBwMFACoEaMAwDQYJKoZI hvcNAQELBQADggEBAJgx4nPWOfNmYRDg7WXNQPkdzcarIEpV0NKUYImIX3E21IiS kmY6zttDxc5cTt5vIlFC6ZO+WiWSFwuT7jeQMZcYIXzwcm/M7HaGQX/M92RBvbwg dESRV6FxHwMtedlTwbLff14n1lORoRpXUJvjIhRktMEJNb7ffk6gxsWTntZX0Mkj uAdWWCx4G4ab/nzcUO3hKhj5u3UxBLQxVAHeohvnMILRF29Bz6hfyjQk+XyaLDAy vxwgbl5p1AEpLgnvrWFoYfZqRrfpzqnuj+RFr7RoC/kBpvLwx5Q8bee35jwfLsry eV/cwDTRfbfl7koy8Pw+iaYRoNTGDiGebFf4M80= -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:55 2025 by rpki-client