This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa File: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (raw, json) Hash identifier: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc= Subject key identifier: 18:59:6B:F2:E1:76:AF:C7:15:AA:60:C9:D8:95:E2:37:1C:18:F7:59 Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa Certificate serial: 019B7F8304003F4BB98915F51910C5196D3A Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa Signing time: Fri 02 Jan 2026 16:20:51 +0000 ROA not before: Fri 02 Jan 2026 16:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1267 IP address blocks: 31.190.0.0/16 maxlen: 16 31.191.0.0/16 maxlen: 16 37.100.0.0/16 maxlen: 16 37.101.0.0/16 maxlen: 16 37.102.0.0/16 maxlen: 16 37.103.0.0/16 maxlen: 16 91.254.0.0/16 maxlen: 16 91.255.0.0/16 maxlen: 16 91.255.0.0/19 maxlen: 19 94.160.0.0/16 maxlen: 16 94.161.0.0/16 maxlen: 16 94.162.0.0/16 maxlen: 16 94.163.0.0/16 maxlen: 16 94.164.0.0/16 maxlen: 16 94.164.0.0/17 maxlen: 17 94.164.128.0/17 maxlen: 17 94.165.0.0/16 maxlen: 16 94.165.128.0/17 maxlen: 17 94.166.0.0/16 maxlen: 16 94.167.0.0/16 maxlen: 16 94.167.0.0/17 maxlen: 17 94.167.128.0/17 maxlen: 17 176.206.0.0/16 maxlen: 16 176.207.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:04:00:3f:4b:b9:89:15:f5:19:10:c5:19:6d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa Validity Not Before: Jan 2 16:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18596bf2e176afc715aa60c9d895e2371c18f759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:2b:9b:21:b1:22:5b:7f:c6:91:64:07:ea: 5a:6f:aa:da:a3:df:15:83:e3:4b:68:c6:6b:f4:20: e8:e6:ba:a4:8a:cd:61:60:30:13:a5:ee:ff:48:e6: 1e:e4:82:2e:7f:68:6b:66:55:be:9d:ed:14:fd:76: 4b:1d:1a:8e:ed:50:6e:87:50:27:c5:2a:54:73:a4: f7:aa:a4:30:70:2d:4f:61:b8:e7:e7:34:1a:91:70: 63:e6:4c:b0:24:fa:09:5e:04:60:67:7d:74:a3:31: 67:8b:32:99:85:c1:7c:3d:2d:7c:55:6d:ca:3b:a0: e4:b0:2e:58:7c:09:db:24:ed:b6:c8:99:9c:22:f2: 44:77:ca:20:59:ab:be:74:5b:0c:a1:ce:50:b7:5b: 70:e3:8d:f2:4b:1f:49:7b:68:69:91:eb:a6:0c:4d: d3:5b:b9:6d:85:4b:50:6f:03:10:4d:86:16:b7:4e: 68:6b:b6:0d:6e:d2:76:e9:b7:bc:e0:f9:cd:7d:29: 50:66:8f:88:60:c3:6d:de:a5:4c:3c:b3:c3:62:b0: bc:f7:b9:5c:92:96:58:7c:2b:23:b4:66:f2:4d:f9: 60:e4:f1:13:f7:13:e4:3b:b3:c2:11:59:dd:12:2a: 04:53:fc:bb:b2:c9:b5:db:41:4e:2c:1a:01:5e:d3: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:6B:F2:E1:76:AF:C7:15:AA:60:C9:D8:95:E2:37:1C:18:F7:59 X509v3 Authority Key Identifier: keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.190.0.0/15 37.100.0.0/14 91.254.0.0/15 94.160.0.0/13 176.206.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5b:27:b7:fe:ad:c4:42:01:b6:dc:34:bb:60:7a:d5:36:47:6c: 23:54:bc:ab:25:a3:af:0a:46:f7:db:06:8e:79:cb:c2:5e:4a: 61:2e:22:b0:2a:f7:03:e1:d1:0b:69:3c:2d:d3:87:18:bc:09: a4:92:ff:1a:19:d5:43:60:49:63:bb:b2:6a:f7:e3:79:e2:8f: d4:d1:ee:8b:7a:e3:0e:9a:da:80:48:b8:45:d1:28:bd:86:66: b8:85:03:21:b8:bd:dc:a7:d8:d6:d9:e8:f3:3a:b0:36:46:b0: 51:9b:40:a7:7c:66:8e:28:20:01:91:d7:43:8f:17:37:12:d7: 47:28:63:37:dc:9d:43:37:5e:ec:f1:73:2f:b1:c7:24:c5:d6: 52:38:90:5d:73:6d:80:e0:88:9d:71:c7:66:40:6c:9d:f8:3c: 39:87:03:44:4b:af:f8:7e:fb:fe:01:d8:81:73:2f:fb:3e:bf: 0a:10:ef:c4:bb:02:20:e4:f1:29:06:8a:b4:85:42:25:f0:c9: d9:b9:f7:a9:98:c6:ca:37:da:89:c9:1b:81:a2:70:95:70:db: d1:17:bb:c6:d6:90:1a:ac:37:db:f2:58:78:0f:16:b8:7a:e8: 81:fe:c3:5b:f0:c5:b3:c6:a5:84:86:82:8d:07:01:5f:dc:3f: 5e:07:d3:5f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/gwQAP0u5iRX1GRDFGW06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNmNDlkNmNjNjUwY2Q2ZDY1NDgyMzQ4ZTFkNmQwYjhm ZDdlYWEwHhcNMjYwMTAyMTYyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODU5NmJmMmUxNzZhZmM3MTVhYTYwYzlkODk1ZTIzNzFjMThmNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzErmyGxIlt/xpFkB+pab6rao98V g+NLaMZr9CDo5rqkis1hYDATpe7/SOYe5IIuf2hrZlW+ne0U/XZLHRqO7VBuh1An xSpUc6T3qqQwcC1PYbjn5zQakXBj5kywJPoJXgRgZ310ozFnizKZhcF8PS18VW3K O6DksC5YfAnbJO22yJmcIvJEd8ogWau+dFsMoc5Qt1tw443ySx9Je2hpkeumDE3T W7lthUtQbwMQTYYWt05oa7YNbtJ26be84PnNfSlQZo+IYMNt3qVMPLPDYrC897lc kpZYfCsjtGbyTflg5PET9xPkO7PCEVndEioEU/y7ssm120FOLBoBXtOAawIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFBhZa/Lhdq/HFapgydiV4jccGPdZMB8GA1UdIwQY MBaAFIMj9J1sxlDNbWVII0jh1tC4/X6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYt NWNmOTE5NGQxNzAyLzEvR0Zscjh1RjJyOGNWcW1ESjJKWGlOeHdZOTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYtNWNmOTE5NGQxNzAy LzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwMBH74DAwIl ZAMDAVv+AwMDXqADAwGwzjANBgkqhkiG9w0BAQsFAAOCAQEAWye3/q3EQgG23DS7 YHrVNkdsI1S8qyWjrwpG99sGjnnLwl5KYS4isCr3A+HRC2k8LdOHGLwJpJL/GhnV Q2BJY7uyavfjeeKP1NHui3rjDpragEi4RdEovYZmuIUDIbi93KfY1tno8zqwNkaw UZtAp3xmjiggAZHXQ48XNxLXRyhjN9ydQzde7PFzL7HHJMXWUjiQXXNtgOCInXHH ZkBsnfg8OYcDREuv+H77/gHYgXMv+z6/ChDvxLsCIOTxKQaKtIVCJfDJ2bn3qZjG yjfaickbgaJwlXDb0Re7xtaQGqw32/JYeA8WuHrogf7DW/DFs8alhIaCjQcBX9w/ XgfTXw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:18 2026 by rpki-client