This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/gDu74A_Z1ksatoKHQD455fxsAx0.roa File: gDu74A_Z1ksatoKHQD455fxsAx0.roa (raw, json) Hash identifier: 5WTnm+h2P7sppTWJRlxxAJMWxqtBVlvtcy2GltVnQig= Subject key identifier: 80:3B:BB:E0:0F:D9:D6:4B:1A:B6:82:87:40:3E:39:E5:FC:6C:03:1D Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019B79102DD14EE8E847AE568A224A8BE28F Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/gDu74A_Z1ksatoKHQD455fxsAx0.roa Signing time: Thu 01 Jan 2026 10:17:41 +0000 ROA not before: Thu 01 Jan 2026 10:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15924 IP address blocks: 31.177.191.0/24 maxlen: 24 46.221.0.0/18 maxlen: 18 46.221.2.0/24 maxlen: 24 46.221.4.0/24 maxlen: 24 46.221.6.0/24 maxlen: 24 46.221.7.0/24 maxlen: 24 46.221.9.0/24 maxlen: 24 46.221.12.0/24 maxlen: 24 46.221.14.0/24 maxlen: 24 46.221.15.0/24 maxlen: 24 46.221.16.0/24 maxlen: 24 46.221.18.0/24 maxlen: 24 46.221.19.0/24 maxlen: 24 46.221.24.0/24 maxlen: 24 46.221.25.0/24 maxlen: 24 46.221.26.0/24 maxlen: 24 46.221.27.0/24 maxlen: 24 46.221.28.0/24 maxlen: 24 46.221.29.0/24 maxlen: 24 46.221.30.0/24 maxlen: 24 46.221.31.0/24 maxlen: 24 46.221.32.0/24 maxlen: 24 46.221.33.0/24 maxlen: 24 46.221.34.0/24 maxlen: 24 46.221.35.0/24 maxlen: 24 46.221.36.0/24 maxlen: 24 46.221.37.0/24 maxlen: 24 46.221.38.0/24 maxlen: 24 46.221.39.0/24 maxlen: 24 46.221.40.0/24 maxlen: 24 46.221.45.0/24 maxlen: 24 46.221.47.0/24 maxlen: 24 46.221.48.0/24 maxlen: 24 46.221.49.0/24 maxlen: 24 46.221.51.0/24 maxlen: 24 46.221.56.0/24 maxlen: 24 46.221.57.0/24 maxlen: 24 46.221.59.0/24 maxlen: 24 46.221.60.0/24 maxlen: 24 46.221.61.0/24 maxlen: 24 46.221.62.0/24 maxlen: 24 46.221.63.0/24 maxlen: 24 149.0.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2d:d1:4e:e8:e8:47:ae:56:8a:22:4a:8b:e2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=803bbbe00fd9d64b1ab68287403e39e5fc6c031d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:71:93:ea:df:f3:51:9e:a4:cc:a1:ae:1c: 34:87:ba:07:04:1d:eb:6d:90:a3:f1:72:06:62:b9: c5:31:3b:f8:47:7a:f4:51:2a:fe:db:5d:b8:9e:52: 67:bf:17:d9:61:9a:4a:a3:14:58:c0:bb:aa:2f:05: a6:4c:d0:ee:a1:bd:a7:7c:d7:8b:c8:89:ed:e0:3b: 00:57:98:26:43:6e:08:31:c6:4d:0e:8d:7e:52:37: f2:89:2f:d3:6f:27:09:dc:94:7b:07:ea:92:1b:a0: 0e:da:ae:7e:25:5c:72:06:94:1c:5e:67:86:6c:26: fe:b7:63:d1:49:49:22:a9:26:16:aa:af:ef:42:c4: db:a7:79:a9:3c:ad:49:44:de:06:ef:fc:9c:1d:33: ff:1c:ec:ee:25:93:2e:f9:9a:b6:4d:aa:b5:1a:c8: 22:ce:bd:b5:14:84:d5:0d:10:8a:ec:b4:86:76:bd: ca:b1:79:12:f4:04:1d:ff:1a:d2:8e:a6:34:b4:f4: 22:a2:91:c8:88:2f:4c:15:e1:95:ea:2c:e4:d4:83: 4f:d7:f0:73:67:61:32:97:b4:7e:63:67:c1:9b:da: 75:31:97:b7:76:d9:68:5e:04:00:a7:79:a2:e8:fc: 50:c8:5d:a3:50:ab:72:7a:56:24:f3:cd:b4:86:20: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3B:BB:E0:0F:D9:D6:4B:1A:B6:82:87:40:3E:39:E5:FC:6C:03:1D X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/gDu74A_Z1ksatoKHQD455fxsAx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.191.0/24 46.221.0.0/18 149.0.76.0/24 Signature Algorithm: sha256WithRSAEncryption 83:7e:0d:72:6b:bd:5d:17:d6:1a:b5:18:91:7e:f8:45:9b:6e: d1:5f:36:6d:32:83:f2:f6:8e:a1:1a:40:4c:c9:d8:fb:bf:d9: 49:3f:c7:f9:ba:9b:83:78:58:fd:8c:ab:0d:03:1f:ba:fa:c3: cd:3a:46:57:d8:79:97:23:8f:68:b9:8e:e2:bd:53:ee:62:9e: 2c:bf:71:5f:26:fc:8d:34:7c:cd:82:d5:59:3a:08:1f:26:d0: 96:9c:d0:8c:59:d4:58:c5:61:1f:c1:39:32:8b:46:5d:81:f8: 55:99:bf:af:23:68:1d:25:a1:e6:34:71:77:1c:4d:ec:52:2a: 55:12:eb:01:e4:b2:46:b2:a2:30:1c:1d:94:dc:a9:39:2f:4a: 55:c2:f9:57:22:d6:cd:6b:ee:5b:35:89:85:78:f0:b8:a6:d7: 81:b5:76:ef:5d:57:be:8a:4b:53:83:9a:0e:c8:a2:2a:e1:c1: 3e:35:d7:41:fa:f6:b8:33:cc:95:cf:4f:a2:f0:20:12:3c:2b: 14:3e:7a:1c:a6:8c:42:f2:37:dd:a5:9b:34:8e:5e:7e:bf:27: 8b:14:8f:8b:0a:24:48:c2:b6:ab:34:d7:51:d2:dd:13:bc:d9: 18:bc:99:62:25:31:6b:a7:8d:4c:f1:a1:76:63:54:1d:db:df: f6:5a:8d:bd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EC3RTujoR65WiiJKi+KPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDNiYmJlMDBmZDlkNjRiMWFiNjgyODc0MDNlMzllNWZjNmMwMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArytxk+rf81GepMyhrhw0h7oHBB3r bZCj8XIGYrnFMTv4R3r0USr+2124nlJnvxfZYZpKoxRYwLuqLwWmTNDuob2nfNeL yInt4DsAV5gmQ24IMcZNDo1+UjfyiS/TbycJ3JR7B+qSG6AO2q5+JVxyBpQcXmeG bCb+t2PRSUkiqSYWqq/vQsTbp3mpPK1JRN4G7/ycHTP/HOzuJZMu+Zq2Taq1Gsgi zr21FITVDRCK7LSGdr3KsXkS9AQd/xrSjqY0tPQiopHIiC9MFeGV6izk1INP1/Bz Z2Eyl7R+Y2fBm9p1MZe3dtloXgQAp3mi6PxQyF2jUKtyelYk8820hiDq9QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIA7u+AP2dZLGraCh0A+OeX8bAMdMB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvZ0R1NzRBX1oxa3NhdG9LSFFENDU1ZnhzQXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH7G/AwQG Lt0AAwQAlQBMMA0GCSqGSIb3DQEBCwUAA4IBAQCDfg1ya71dF9YatRiRfvhFm27R XzZtMoPy9o6hGkBMydj7v9lJP8f5upuDeFj9jKsNAx+6+sPNOkZX2HmXI49ouY7i vVPuYp4sv3FfJvyNNHzNgtVZOggfJtCWnNCMWdRYxWEfwTkyi0ZdgfhVmb+vI2gd JaHmNHF3HE3sUipVEusB5LJGsqIwHB2U3Kk5L0pVwvlXItbNa+5bNYmFePC4pteB tXbvXVe+iktTg5oOyKIq4cE+NddB+va4M8yVz0+i8CASPCsUPnocpoxC8jfdpZs0 jl5+vyeLFI+LCiRIwrarNNdR0t0TvNkYvJliJTFrp41M8aF2Y1Qd29/2Wo29 -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:14 2026 by rpki-client