This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa File: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (raw, json) Hash identifier: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI= Subject key identifier: 70:6B:37:51:A0:EF:18:B4:35:43:F4:D0:A5:90:0F:68:83:6D:E0:4B Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019B78A3330074FA36408F84CC6B98E53456 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48159 IP address blocks: 5.232.64.0/18 maxlen: 18 5.232.128.0/19 maxlen: 19 5.232.160.0/20 maxlen: 20 5.233.82.0/23 maxlen: 23 5.233.84.0/24 maxlen: 24 5.233.94.0/24 maxlen: 24 5.233.95.0/24 maxlen: 24 5.233.240.0/20 maxlen: 20 5.234.36.0/22 maxlen: 22 5.234.40.0/21 maxlen: 21 5.235.188.0/22 maxlen: 22 5.235.188.0/23 maxlen: 23 5.235.192.0/19 maxlen: 19 5.235.224.0/19 maxlen: 19 5.236.0.0/18 maxlen: 18 5.236.64.0/19 maxlen: 19 5.236.96.0/21 maxlen: 21 5.238.0.0/16 maxlen: 16 5.239.0.0/16 maxlen: 16 5.239.144.0/20 maxlen: 20 5.239.160.0/20 maxlen: 20 5.239.176.0/22 maxlen: 22 5.239.192.0/21 maxlen: 21 5.239.200.0/21 maxlen: 21 5.239.244.0/23 maxlen: 23 46.100.0.0/16 maxlen: 16 46.100.164.0/22 maxlen: 22 85.204.80.0/20 maxlen: 20 85.204.208.0/20 maxlen: 20 86.104.240.0/21 maxlen: 21 89.35.64.0/21 maxlen: 21 89.37.144.0/23 maxlen: 23 89.40.152.0/21 maxlen: 21 89.40.240.0/20 maxlen: 20 91.92.220.0/22 maxlen: 22 93.88.64.0/21 maxlen: 21 93.88.72.0/23 maxlen: 23 93.117.96.0/20 maxlen: 20 93.117.112.0/20 maxlen: 20 185.105.100.0/23 maxlen: 23 185.105.102.0/23 maxlen: 23 188.211.128.0/19 maxlen: 19 188.215.176.0/20 maxlen: 20 195.181.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:33:00:74:fa:36:40:8f:84:cc:6b:98:e5:34:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=706b3751a0ef18b43543f4d0a5900f68836de04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:67:0a:e0:61:d6:5a:05:fa:af:8a:6e:a4: 85:d9:33:df:77:b4:57:48:b9:b6:93:96:a3:f9:f6: ad:4f:27:2a:29:0b:b5:88:95:51:1b:d9:70:08:f4: e6:1d:93:24:09:2c:82:fd:69:d8:ee:a8:b7:07:f0: f3:97:c6:0f:e8:7d:b8:d9:60:77:a9:9b:c5:f3:d9: f8:f1:e3:ed:37:08:43:f8:78:1e:34:6a:59:6e:b5: 49:89:5c:fe:47:ed:0f:44:7f:a4:bc:a9:19:8a:2e: 1a:e6:62:2c:1a:f3:60:c4:e9:2d:a2:1c:58:3e:4f: de:0d:07:3c:70:76:3e:d1:6c:cb:89:c8:35:b8:0f: a3:4e:b1:ee:d1:5b:ed:28:a4:e4:26:53:64:3a:ce: 0a:48:72:fb:58:84:ac:86:d9:b1:11:b0:84:ff:db: 0b:60:94:ce:72:42:20:61:54:00:50:bd:70:fa:5b: 42:30:09:c1:fd:2b:0d:1e:0a:64:20:22:fc:96:19: 7c:4f:e6:d5:ee:e0:8d:c9:97:52:b1:ba:9b:57:62: ff:f0:f8:99:22:87:f3:f3:3b:83:68:79:c5:49:4a: 55:59:19:a7:49:e5:51:a9:41:4d:db:1d:ec:51:b6: ca:45:ef:30:9a:e1:a5:3e:e2:f4:9d:cf:80:ca:ab: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6B:37:51:A0:EF:18:B4:35:43:F4:D0:A5:90:0F:68:83:6D:E0:4B X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.232.64.0-5.232.175.255 5.233.82.0-5.233.84.255 5.233.94.0/23 5.233.240.0/20 5.234.36.0-5.234.47.255 5.235.188.0-5.236.103.255 5.238.0.0/15 46.100.0.0/16 85.204.80.0/20 85.204.208.0/20 86.104.240.0/21 89.35.64.0/21 89.37.144.0/23 89.40.152.0/21 89.40.240.0/20 91.92.220.0/22 93.88.64.0-93.88.73.255 93.117.96.0/19 185.105.100.0/22 188.211.128.0/19 188.215.176.0/20 195.181.32.0/20 Signature Algorithm: sha256WithRSAEncryption 61:6f:ea:d2:ed:8a:ff:29:6f:e6:23:7d:e6:71:f8:a1:81:75: e4:2e:87:22:9e:71:02:07:16:c7:c9:24:24:48:88:dd:02:8a: 71:30:77:b9:af:1b:59:88:73:5a:37:dd:3f:9c:98:c3:39:f4: 2b:5d:23:34:1a:1f:2b:2a:90:eb:b1:b2:6e:95:85:35:48:fa: 2f:ec:95:0e:19:00:28:52:cf:ab:f1:3e:3e:98:97:72:b0:78: 25:f9:e6:fc:a7:11:e5:f6:e2:ff:ea:70:29:88:20:d9:f8:c5: 09:a9:3d:0c:b6:8d:f6:c5:8c:98:cd:63:df:e5:15:4c:39:bb: d4:54:87:43:68:90:f6:e2:ff:38:5d:56:77:4a:71:6b:0f:33: 60:78:25:4d:b3:93:00:24:7b:14:0c:76:2d:d9:54:39:69:89: ac:94:3d:cc:25:77:85:81:11:2a:55:09:ee:7d:cc:3e:0f:b5: c3:35:6d:fe:cb:4d:81:80:c1:7d:a3:ef:e3:eb:83:35:fd:4d: c3:51:47:5a:39:fe:69:8d:7d:7a:9b:ff:82:d3:db:9e:44:e7: 65:c4:6d:7a:71:74:72:b8:34:5e:fb:ff:7b:5a:07:a8:0b:81: 23:07:27:73:e3:fd:c2:17:3c:62:ef:e3:66:2b:92:d2:00:e6: 18:d3:e1:ef -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt4ozMAdPo2QI+EzGuY5TRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDZiMzc1MWEwZWYxOGI0MzU0M2Y0ZDBhNTkwMGY2ODgzNmRlMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4RnCuBh1loF+q+KbqSF2TPfd7RX SLm2k5aj+fatTycqKQu1iJVRG9lwCPTmHZMkCSyC/WnY7qi3B/Dzl8YP6H242WB3 qZvF89n48ePtNwhD+HgeNGpZbrVJiVz+R+0PRH+kvKkZii4a5mIsGvNgxOktohxY Pk/eDQc8cHY+0WzLicg1uA+jTrHu0VvtKKTkJlNkOs4KSHL7WISshtmxEbCE/9sL YJTOckIgYVQAUL1w+ltCMAnB/SsNHgpkICL8lhl8T+bV7uCNyZdSsbqbV2L/8PiZ Iofz8zuDaHnFSUpVWRmnSeVRqUFN2x3sUbbKRe8wmuGlPuL0nc+AyqvclQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFHBrN1Gg7xi0NUP00KWQD2iDbeBLMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvY0dzM1VhRHZHTFExUV9UUXBaQVBhSU50NEVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaowDAME BgXoQAMEBAXooDAMAwQBBelSAwQABelUAwQBBeleAwQEBenwMAwDBAIF6iQDBAQF 6iAwDAMEAgXrvAMEAwXsYAMDAQXuAwMALmQDBARVzFADBARVzNADBANWaPADBANZ I0ADBAFZJZADBANZKJgDBARZKPADBAJbXNwwDAMEBl1YQAMEAV1YSAMEBV11YAME ArlpZAMEBbzTgAMEBLzXsAMEBMO1IDANBgkqhkiG9w0BAQsFAAOCAQEAYW/q0u2K /ylv5iN95nH4oYF15C6HIp5xAgcWx8kkJEiI3QKKcTB3ua8bWYhzWjfdP5yYwzn0 K10jNBofKyqQ67GybpWFNUj6L+yVDhkAKFLPq/E+PpiXcrB4Jfnm/KcR5fbi/+pw KYgg2fjFCak9DLaN9sWMmM1j3+UVTDm71FSHQ2iQ9uL/OF1Wd0pxaw8zYHglTbOT ACR7FAx2LdlUOWmJrJQ9zCV3hYERKlUJ7n3MPg+1wzVt/stNgYDBfaPv4+uDNf1N w1FHWjn+aY19epv/gtPbnkTnZcRtenF0crg0Xvv/e1oHqAuBIwcnc+P9whc8Yu/j ZiuS0gDmGNPh7w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:30 2026 by rpki-client