This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/GiKH9gL8ye93yrUhAFVdFya-unI.roa File: GiKH9gL8ye93yrUhAFVdFya-unI.roa (raw, json) Hash identifier: g8FT8QsMqpi65wH/WW7aR7HdjKyCnBwRtXcglUHLc58= Subject key identifier: 1A:22:87:F6:02:FC:C9:EF:77:CA:B5:21:00:55:5D:17:26:BE:BA:72 Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Certificate serial: 019ACAC34D37B497C03A526839F32005AB79 Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/GiKH9gL8ye93yrUhAFVdFya-unI.roa Signing time: Fri 28 Nov 2025 13:59:48 +0000 ROA not before: Fri 28 Nov 2025 13:59:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42910 IP address blocks: 31.210.32.0/24 maxlen: 24 31.210.33.0/24 maxlen: 24 31.210.56.0/24 maxlen: 24 31.210.57.0/24 maxlen: 24 31.210.58.0/24 maxlen: 24 31.210.59.0/24 maxlen: 24 31.210.60.0/24 maxlen: 24 31.210.61.0/24 maxlen: 32 77.92.128.0/24 maxlen: 24 77.92.129.0/24 maxlen: 24 77.92.132.0/24 maxlen: 24 77.92.133.0/24 maxlen: 32 77.92.134.0/24 maxlen: 24 77.92.135.0/24 maxlen: 24 77.92.136.0/24 maxlen: 24 77.92.137.0/24 maxlen: 24 77.92.138.0/24 maxlen: 24 77.92.139.0/24 maxlen: 24 77.92.140.0/24 maxlen: 32 77.92.141.0/24 maxlen: 24 77.92.149.0/24 maxlen: 24 77.92.155.0/24 maxlen: 32 77.92.156.0/24 maxlen: 24 77.92.157.0/24 maxlen: 32 77.92.158.0/24 maxlen: 24 77.92.159.0/24 maxlen: 24 78.135.79.0/24 maxlen: 24 78.135.108.0/24 maxlen: 32 78.135.113.0/24 maxlen: 32 78.135.114.0/24 maxlen: 32 78.135.116.0/24 maxlen: 24 188.132.134.0/24 maxlen: 24 188.132.135.0/24 maxlen: 32 188.132.142.0/24 maxlen: 24 188.132.147.0/24 maxlen: 32 188.132.148.0/24 maxlen: 24 188.132.157.0/24 maxlen: 24 188.132.158.0/24 maxlen: 32 188.132.172.0/24 maxlen: 24 188.132.175.0/24 maxlen: 24 188.132.176.0/24 maxlen: 32 188.132.180.0/24 maxlen: 24 188.132.194.0/24 maxlen: 24 188.132.195.0/24 maxlen: 24 188.132.204.0/24 maxlen: 32 188.132.205.0/24 maxlen: 32 188.132.244.0/24 maxlen: 32 188.132.245.0/24 maxlen: 24 188.132.246.0/24 maxlen: 24 188.132.252.0/24 maxlen: 24 188.132.253.0/24 maxlen: 24 188.132.254.0/24 maxlen: 24 188.132.255.0/24 maxlen: 24 212.68.32.0/24 maxlen: 24 212.68.33.0/24 maxlen: 32 212.68.40.0/24 maxlen: 32 212.68.41.0/24 maxlen: 32 212.68.42.0/24 maxlen: 32 212.68.43.0/24 maxlen: 32 212.68.44.0/24 maxlen: 24 212.68.45.0/24 maxlen: 32 212.68.46.0/24 maxlen: 32 212.68.50.0/24 maxlen: 32 212.68.51.0/24 maxlen: 24 212.68.57.0/24 maxlen: 32 212.68.61.0/24 maxlen: 32 2a02:26b0::/32 maxlen: 32 2a02:26b0:8000::/48 maxlen: 48 2a02:26b0:8001::/48 maxlen: 48 2a02:26b0:800e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:c3:4d:37:b4:97:c0:3a:52:68:39:f3:20:05:ab:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Validity Not Before: Nov 28 13:59:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a2287f602fcc9ef77cab52100555d1726beba72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:35:78:67:28:1d:ff:f8:30:5a:a1:10:5c: ab:a2:82:2f:40:5e:82:c9:3a:58:c5:7b:6b:36:b5: b7:75:bd:f1:fb:84:ac:73:2b:9c:9b:ce:c7:b3:b5: 24:b0:ce:ec:95:2d:82:42:ec:5a:ce:17:21:89:e7: 5d:5d:80:68:87:dc:7f:1e:41:e8:fc:07:c0:e6:6b: 1d:95:c9:5a:ae:9a:fa:34:ca:1f:0a:da:24:46:1d: af:90:ca:33:81:e0:ec:0e:bb:b3:da:f1:0c:d3:7f: 89:9c:a3:47:2e:8e:30:41:20:cb:f8:57:4a:e5:df: d1:01:db:09:d7:32:28:5d:ec:63:0f:8c:99:14:01: 8a:0c:55:5d:68:9a:86:81:d0:e6:34:8a:09:37:23: 74:5d:21:24:86:a3:a3:5d:e1:93:8d:92:1c:9c:d8: 99:22:fd:eb:0e:31:a2:42:28:ae:11:16:10:08:55: 62:e3:37:2d:88:b1:c7:e6:b2:15:bc:ac:54:a6:de: 57:1c:62:df:e2:8c:ea:6d:60:74:05:0d:e4:ef:7a: e5:45:bc:ea:a2:99:98:0f:c1:b4:4e:3e:2b:d1:60: d6:62:c0:f0:35:67:42:a5:d2:68:d6:6f:2e:ec:bf: 6e:bc:9f:99:f4:c8:43:a0:fe:72:8a:91:c5:65:91: c4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:22:87:F6:02:FC:C9:EF:77:CA:B5:21:00:55:5D:17:26:BE:BA:72 X509v3 Authority Key Identifier: keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/GiKH9gL8ye93yrUhAFVdFya-unI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.32.0/23 31.210.56.0-31.210.61.255 77.92.128.0/23 77.92.132.0-77.92.141.255 77.92.149.0/24 77.92.155.0-77.92.159.255 78.135.79.0/24 78.135.108.0/24 78.135.113.0-78.135.114.255 78.135.116.0/24 188.132.134.0/23 188.132.142.0/24 188.132.147.0-188.132.148.255 188.132.157.0-188.132.158.255 188.132.172.0/24 188.132.175.0-188.132.176.255 188.132.180.0/24 188.132.194.0/23 188.132.204.0/23 188.132.244.0-188.132.246.255 188.132.252.0/22 212.68.32.0/23 212.68.40.0-212.68.46.255 212.68.50.0/23 212.68.57.0/24 212.68.61.0/24 IPv6: 2a02:26b0::/32 Signature Algorithm: sha256WithRSAEncryption 16:99:60:a1:23:b8:f3:22:0d:b9:b2:fe:7d:91:17:1d:0f:3c: 64:e4:3e:f0:ae:fa:0a:78:73:22:d0:a3:6a:a9:e1:6a:2f:6f: 2f:65:f4:ee:89:f8:81:73:f1:d9:0e:01:55:30:fa:93:c2:8b: c1:c0:10:98:cb:a4:5a:95:f6:dd:d1:cc:31:24:c0:dd:75:d9: 3f:ad:f3:9f:8f:92:26:ef:e0:de:df:08:8a:36:6a:45:09:d7: ff:18:98:6c:60:be:83:ed:d4:79:2d:d7:4f:9b:98:71:27:a1: 96:dd:56:8f:b4:88:1e:de:23:4b:10:df:d8:28:0d:9e:28:97: 45:38:fb:03:cc:9c:d0:b6:73:4e:86:30:b3:b3:19:fb:a8:6d: 0b:05:6a:c0:da:0b:53:53:4a:0c:54:06:7c:ed:c7:ad:82:dc: 73:ff:a1:53:a3:78:88:11:af:bb:26:f0:13:b6:6c:3f:7e:f6: de:24:88:11:ca:3f:30:18:f4:00:87:96:60:d4:3c:d7:7a:5b: 1f:a4:be:77:7d:ce:cb:24:a9:e1:41:3f:da:ab:2e:a9:e1:68: e7:2d:89:48:6f:20:6b:ca:7f:84:f4:e7:e0:de:7f:30:5a:6e: 67:9e:bf:74:bd:a6:b1:74:a8:cb:b4:5b:23:72:77:f3:74:c6: 47:a4:1f:bb -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZrKw003tJfAOlJoOfMgBat5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2 YTUxNGQwHhcNMjUxMTI4MTM1OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTIyODdmNjAyZmNjOWVmNzdjYWI1MjEwMDU1NWQxNzI2YmViYTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nE1eGcoHf/4MFqhEFyrooIvQF6C yTpYxXtrNrW3db3x+4Sscyucm87Hs7UksM7slS2CQuxazhchieddXYBoh9x/HkHo /AfA5msdlclarpr6NMofCtokRh2vkMozgeDsDruz2vEM03+JnKNHLo4wQSDL+FdK 5d/RAdsJ1zIoXexjD4yZFAGKDFVdaJqGgdDmNIoJNyN0XSEkhqOjXeGTjZIcnNiZ Iv3rDjGiQiiuERYQCFVi4zctiLHH5rIVvKxUpt5XHGLf4ozqbWB0BQ3k73rlRbzq opmYD8G0Tj4r0WDWYsDwNWdCpdJo1m8u7L9uvJ+Z9MhDoP5yipHFZZHECwIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFBoih/YC/Mnvd8q1IQBVXRcmvrpyMB8GA1UdIwQY MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct ZGY0YTJlNzYwY2NiLzEvR2lLSDlnTDh5ZTkzeXJVaEFGVmRGeWEtdW5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBEQYIKwYBBQUHAQcBAf8EggEAMIH9MIHrBAIAATCB5AME AR/SIDAMAwQDH9I4AwQBH9I8AwQBTVyAMAwDBAJNXIQDBAFNXIwDBABNXJUwDAME AE1cmwMEBU1cgAMEAE6HTwMEAE6HbDAMAwQATodxAwQATodyAwQATod0AwQBvISG AwQAvISOMAwDBAC8hJMDBAC8hJQwDAMEALyEnQMEALyEngMEALyErDAMAwQAvISv AwQAvISwAwQAvIS0AwQBvITCAwQBvITMMAwDBAK8hPQDBAC8hPYDBAK8hPwDBAHU RCAwDAMEA9REKAMEANRELgMEAdREMgMEANREOQMEANREPTANBAIAAjAHAwUAKgIm sDANBgkqhkiG9w0BAQsFAAOCAQEAFplgoSO48yINubL+fZEXHQ88ZOQ+8K76Cnhz ItCjaqnhai9vL2X07on4gXPx2Q4BVTD6k8KLwcAQmMukWpX23dHMMSTA3XXZP63z n4+SJu/g3t8IijZqRQnX/xiYbGC+g+3UeS3XT5uYcSehlt1Wj7SIHt4jSxDf2CgN niiXRTj7A8yc0LZzToYws7MZ+6htCwVqwNoLU1NKDFQGfO3HrYLcc/+hU6N4iBGv uybwE7ZsP3723iSIEco/MBj0AIeWYNQ813pbH6S+d33OyySp4UE/2qsuqeFo5y2J SG8ga8p/hPTn4N5/MFpuZ56/dL2msXSoy7RbI3J383TGR6Qfuw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:08:25 2025 by rpki-client