This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/K0GZfO50qL-CkzTgvj6rdikY-es.roa File: K0GZfO50qL-CkzTgvj6rdikY-es.roa (raw, json) Hash identifier: 4i1E6RRA2bP05oORMGF0rgiNltnM9ErpRc53Lr5MThI= Subject key identifier: 2B:41:99:7C:EE:74:A8:BF:82:93:34:E0:BE:3E:AB:76:29:18:F9:EB Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb Certificate serial: 019B76EB2FE9254F3A1C12815EB3F4B326EB Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/K0GZfO50qL-CkzTgvj6rdikY-es.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207375 IP address blocks: 45.145.108.0/22 maxlen: 25 80.64.232.0/21 maxlen: 25 91.236.231.0/24 maxlen: 24 93.88.24.0/22 maxlen: 25 146.19.16.0/24 maxlen: 24 178.211.143.0/24 maxlen: 24 185.11.60.0/24 maxlen: 24 185.80.88.0/24 maxlen: 24 185.145.53.0/24 maxlen: 24 185.205.201.0/24 maxlen: 24 185.234.217.0/24 maxlen: 24 193.33.34.0/24 maxlen: 24 193.178.114.0/24 maxlen: 24 193.243.146.0/24 maxlen: 24 194.31.110.0/24 maxlen: 24 2a0e:fdc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2f:e9:25:4f:3a:1c:12:81:5e:b3:f4:b3:26:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b41997cee74a8bf829334e0be3eab762918f9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:8d:9e:2c:54:ad:65:4a:c5:90:f4:55:ed: f3:3e:e4:1b:ca:6e:86:77:4b:b8:e3:56:b8:31:3a: 96:02:47:ec:08:7b:f0:c2:5a:5a:9c:96:6f:aa:60: b3:68:c8:5c:bf:4f:b9:91:2f:b1:74:e8:c4:aa:38: e5:7a:57:95:27:f6:3e:df:9a:b4:34:34:53:4d:e1: 7c:6a:b3:d1:34:ab:99:21:f8:f9:5b:ab:b0:d8:c7: 78:ed:32:00:33:ac:b6:78:bd:9d:26:a5:2b:91:7e: e0:91:ac:00:ca:47:ce:a1:06:2f:72:6e:55:3c:a2: 55:8c:e9:47:a8:98:e7:30:02:99:c8:3b:23:ba:16: bf:50:a0:41:de:1d:63:de:6f:f8:ef:7b:95:c2:28: a5:fc:31:73:db:d2:86:d5:7f:67:4c:91:b4:ba:b8: 23:9a:aa:2b:f2:dd:85:ed:77:1a:fd:f6:1d:2b:8a: 89:f8:eb:5b:47:58:ed:18:7b:ce:38:56:99:d4:22: cc:1d:b9:50:f8:0d:7f:da:68:23:a9:58:7b:92:13: 6c:58:e9:26:94:ab:e0:21:90:40:4d:41:b7:4e:8c: d8:c4:61:cf:04:87:e0:38:65:9b:ed:6d:60:42:16: 32:b3:1b:44:3a:f9:1e:4e:9e:44:78:8f:80:b1:dd: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:41:99:7C:EE:74:A8:BF:82:93:34:E0:BE:3E:AB:76:29:18:F9:EB X509v3 Authority Key Identifier: keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/K0GZfO50qL-CkzTgvj6rdikY-es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.108.0/22 80.64.232.0/21 91.236.231.0/24 93.88.24.0/22 146.19.16.0/24 178.211.143.0/24 185.11.60.0/24 185.80.88.0/24 185.145.53.0/24 185.205.201.0/24 185.234.217.0/24 193.33.34.0/24 193.178.114.0/24 193.243.146.0/24 194.31.110.0/24 IPv6: 2a0e:fdc0::/29 Signature Algorithm: sha256WithRSAEncryption 7d:99:69:3f:ac:eb:72:2c:a1:7e:08:61:0b:21:15:de:63:5e: 4e:69:0d:c2:be:db:22:06:41:a9:89:6f:39:ef:eb:d0:85:38: 8e:7d:06:46:06:50:65:78:3c:22:e1:bd:82:ce:1b:16:0e:bd: 58:3d:26:18:e6:0a:89:81:38:0f:af:2d:2b:d7:94:bc:b5:a8: 2e:62:f3:80:82:c9:00:99:cc:d4:4f:97:2c:a8:37:ff:a7:da: 5e:e2:e3:8e:e2:32:c6:bb:b5:49:f6:1f:d5:79:df:32:d6:83: ef:20:1d:4e:da:bd:71:a2:04:08:f1:d9:4a:6b:ae:42:3b:1e: 51:ff:11:60:70:4d:78:e8:8d:3d:34:6e:20:91:82:4d:0d:99: 72:e5:81:a2:bf:1e:59:4e:c2:a4:89:90:e6:ec:24:3a:13:54: 09:e9:d7:c7:e0:9c:e8:49:97:a7:17:a9:4d:86:f3:c1:84:3d: 58:71:23:6b:a6:9d:97:b4:1a:21:f5:be:fd:3b:2a:1a:3f:35: 21:86:df:d2:b5:9e:ae:61:da:31:6a:fe:4c:dd:e1:b9:63:1b: 68:0e:5b:37:6f:a7:97:2d:ca:cc:90:40:1c:75:96:c0:d1:b0: 80:40:53:4b:0f:10:6d:e0:2e:c7:54:08:cb:14:70:43:3c:e8: ae:88:f2:32 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt26y/pJU86HBKBXrP0sybrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YTQzZDgxNjU3YTNjMzhjMTUwZGU1NTc5N2YxYzdiNWYw YzJlYmIwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjQxOTk3Y2VlNzRhOGJmODI5MzM0ZTBiZTNlYWI3NjI5MThmOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0teNnixUrWVKxZD0Ve3zPuQbym6G d0u441a4MTqWAkfsCHvwwlpanJZvqmCzaMhcv0+5kS+xdOjEqjjleleVJ/Y+35q0 NDRTTeF8arPRNKuZIfj5W6uw2Md47TIAM6y2eL2dJqUrkX7gkawAykfOoQYvcm5V PKJVjOlHqJjnMAKZyDsjuha/UKBB3h1j3m/473uVwiil/DFz29KG1X9nTJG0urgj mqor8t2F7Xca/fYdK4qJ+OtbR1jtGHvOOFaZ1CLMHblQ+A1/2mgjqVh7khNsWOkm lKvgIZBATUG3TozYxGHPBIfgOGWb7W1gQhYysxtEOvkeTp5EeI+Asd3FtQIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFCtBmXzudKi/gpM04L4+q3YpGPnrMB8GA1UdIwQY MBaAFBmkPYFlejw4wVDeVXl/HHtfDC67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2Yt MDdmNzRjMDE5NzMyLzEvSzBHWmZPNTBxTC1Da3pUZ3ZqNnJkaWtZLWVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wZjNjNjEtMDJkZi00YWY3LWI5M2YtMDdmNzRjMDE5NzMy LzEvR2FROWdXVjZQRGpCVU41VmVYOGNlMThNTHJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEAi2RbAME A1BA6AMEAFvs5wMEAl1YGAMEAJITEAMEALLTjwMEALkLPAMEALlQWAMEALmRNQME ALnNyQMEALnq2QMEAMEhIgMEAMGycgMEAMHzkgMEAMIfbjANBAIAAjAHAwUDKg79 wDANBgkqhkiG9w0BAQsFAAOCAQEAfZlpP6zrciyhfghhCyEV3mNeTmkNwr7bIgZB qYlvOe/r0IU4jn0GRgZQZXg8IuG9gs4bFg69WD0mGOYKiYE4D68tK9eUvLWoLmLz gILJAJnM1E+XLKg3/6faXuLjjuIyxru1SfYf1XnfMtaD7yAdTtq9caIECPHZSmuu QjseUf8RYHBNeOiNPTRuIJGCTQ2ZcuWBor8eWU7CpImQ5uwkOhNUCenXx+Cc6EmX pxepTYbzwYQ9WHEja6adl7QaIfW+/TsqGj81IYbf0rWermHaMWr+TN3huWMbaA5b N2+nly3KzJBAHHWWwNGwgEBTSw8QbeAux1QIyxRwQzzorojyMg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:04 2026 by rpki-client