This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/GtpKgdaeFU21cYAiH834XTsLTNM.roa File: GtpKgdaeFU21cYAiH834XTsLTNM.roa (raw, json) Hash identifier: SnDDgGiNxYjGSAFWKqXypmXMJ+mVdXUrwjXYdGfozy8= Subject key identifier: 1A:DA:4A:81:D6:9E:15:4D:B5:71:80:22:1F:CD:F8:5D:3B:0B:4C:D3 Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f Certificate serial: 019B7DCA39925C23ED8A85A1169C3E20BD2A Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/GtpKgdaeFU21cYAiH834XTsLTNM.roa Signing time: Fri 02 Jan 2026 08:19:23 +0000 ROA not before: Fri 02 Jan 2026 08:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43996 IP address blocks: 5.57.16.0/21 maxlen: 21 5.57.16.0/22 maxlen: 22 5.57.16.0/24 maxlen: 24 5.57.17.0/24 maxlen: 24 5.57.18.0/24 maxlen: 24 5.57.19.0/24 maxlen: 24 5.57.22.0/24 maxlen: 24 5.57.23.0/24 maxlen: 24 37.10.0.0/24 maxlen: 24 37.10.4.0/22 maxlen: 22 37.10.4.0/24 maxlen: 24 37.10.5.0/24 maxlen: 24 37.10.6.0/24 maxlen: 24 37.10.7.0/24 maxlen: 24 37.10.24.0/23 maxlen: 23 37.10.24.0/24 maxlen: 24 37.10.25.0/24 maxlen: 24 37.10.26.0/24 maxlen: 24 37.10.27.0/24 maxlen: 24 37.10.28.0/24 maxlen: 24 37.10.32.0/24 maxlen: 24 37.10.33.0/24 maxlen: 24 37.10.34.0/24 maxlen: 24 37.10.35.0/24 maxlen: 24 37.10.36.0/24 maxlen: 24 37.10.37.0/24 maxlen: 24 37.10.38.0/24 maxlen: 24 37.10.56.0/23 maxlen: 23 37.10.56.0/24 maxlen: 24 37.10.57.0/24 maxlen: 24 37.10.58.0/24 maxlen: 24 37.10.60.0/23 maxlen: 23 37.10.60.0/24 maxlen: 24 37.10.61.0/24 maxlen: 24 37.10.63.0/24 maxlen: 24 91.195.236.0/24 maxlen: 24 91.195.237.0/24 maxlen: 24 91.206.232.0/23 maxlen: 23 91.206.232.0/24 maxlen: 24 91.206.233.0/24 maxlen: 24 185.28.220.0/23 maxlen: 23 185.28.220.0/24 maxlen: 24 185.28.221.0/24 maxlen: 24 185.28.222.0/24 maxlen: 24 185.28.223.0/24 maxlen: 24 2a01:5040::/36 maxlen: 36 2a01:5040::/48 maxlen: 48 2a01:5040:20::/48 maxlen: 48 2a01:5040:40::/48 maxlen: 48 2a01:5040:1000::/36 maxlen: 36 2a01:5040:1000::/48 maxlen: 48 2a01:5040:1020::/48 maxlen: 48 2a01:5040:2000::/36 maxlen: 36 2a01:5040:2000::/48 maxlen: 48 2a01:5040:2020::/48 maxlen: 48 2a01:5040:6000::/36 maxlen: 36 2a01:5040:a000::/36 maxlen: 36 2a01:5040:a000::/48 maxlen: 48 2a01:5040:a100::/48 maxlen: 48 2a01:5041:2::/48 maxlen: 48 2a01:5041:5::/48 maxlen: 48 2a01:5041:9::/48 maxlen: 48 2a01:5041:d::/48 maxlen: 48 2a01:5041:13::/48 maxlen: 48 2a01:5041:100::/40 maxlen: 40 2a01:5041:200::/40 maxlen: 40 2a01:5041:2001::/48 maxlen: 48 2a01:5041:2002::/48 maxlen: 48 2a01:5041:2005::/48 maxlen: 48 2a01:5041:2009::/48 maxlen: 48 2a01:5041:200d::/48 maxlen: 48 2a01:5041:2013::/48 maxlen: 48 2a01:5042::/32 maxlen: 32 2a01:5042:100::/40 maxlen: 40 2a01:5042:200::/40 maxlen: 40 2a01:5042:202::/48 maxlen: 48 2a01:5043::/32 maxlen: 32 2a01:5043:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:39:92:5c:23:ed:8a:85:a1:16:9c:3e:20:bd:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ada4a81d69e154db57180221fcdf85d3b0b4cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:ea:1a:c9:38:52:04:4e:6b:02:b1:12:3b: d3:a2:0e:57:cb:70:8d:74:91:8a:ee:90:4d:53:cc: 90:b6:c8:33:e8:18:de:01:fc:05:50:0a:38:ab:30: 75:7c:11:b3:d8:d3:4a:3a:4d:21:cf:c4:01:5d:bc: e1:6b:8c:ff:a4:4b:34:1f:9a:53:1f:d2:9f:e2:2e: 03:bd:12:06:35:68:c5:10:ad:8b:5e:5e:c2:55:8d: dc:90:2a:54:30:d2:e7:6e:29:de:1f:a2:09:7f:56: 17:07:ec:68:7a:a7:4a:30:0d:65:c0:40:c2:29:b2: 4f:4e:2d:82:dc:c3:77:a7:8b:e6:fa:2d:7b:08:35: 24:a0:08:e4:8f:36:37:f6:0f:ad:08:48:78:68:6f: a2:9d:f1:0a:3f:d4:84:60:8c:62:c9:71:d2:5c:d7: 72:53:fa:75:8d:7b:50:fa:25:54:b7:15:4b:09:71: ee:81:95:7d:40:e1:81:40:40:e3:0c:7d:83:23:48: 41:be:36:37:bc:c6:d1:1c:02:03:97:6b:b4:b3:b8: fa:4e:fb:ac:11:69:61:7d:f0:1d:4f:3a:19:3e:e2: dd:fc:2f:77:32:ca:26:c8:48:6c:96:c2:42:41:ab: 09:81:e7:19:58:a4:1b:cc:06:57:ce:94:c3:f0:3d: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DA:4A:81:D6:9E:15:4D:B5:71:80:22:1F:CD:F8:5D:3B:0B:4C:D3 X509v3 Authority Key Identifier: keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/GtpKgdaeFU21cYAiH834XTsLTNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.16.0/21 37.10.0.0/24 37.10.4.0/22 37.10.24.0-37.10.28.255 37.10.32.0-37.10.38.255 37.10.56.0-37.10.58.255 37.10.60.0/23 37.10.63.0/24 91.195.236.0/23 91.206.232.0/23 185.28.220.0/22 IPv6: 2a01:5040::-2a01:5040:2fff:ffff:ffff:ffff:ffff:ffff 2a01:5040:6000::/36 2a01:5040:a000::/36 2a01:5041:2::/48 2a01:5041:5::/48 2a01:5041:9::/48 2a01:5041:d::/48 2a01:5041:13::/48 2a01:5041:100::-2a01:5041:2ff:ffff:ffff:ffff:ffff:ffff 2a01:5041:2001::-2a01:5041:2002:ffff:ffff:ffff:ffff:ffff 2a01:5041:2005::/48 2a01:5041:2009::/48 2a01:5041:200d::/48 2a01:5041:2013::/48 2a01:5042::/31 Signature Algorithm: sha256WithRSAEncryption eb:ef:73:f8:33:6f:64:04:33:a3:01:c7:3a:32:4e:b3:5d:10: bf:1f:88:41:8d:c7:7f:31:12:ac:ca:6f:9e:27:33:6e:93:e5: 40:45:c5:7c:1a:4a:05:19:84:76:d2:8d:32:0c:54:bd:62:01: 5c:cf:cf:75:cd:aa:d9:e1:9a:71:32:0e:97:45:62:70:69:c6: 16:86:4b:dd:9c:12:16:02:88:9c:b6:18:40:33:85:e7:cc:94: 5d:6e:1c:61:f9:8d:1e:49:23:88:f3:19:fe:3b:c1:58:f9:92: 7d:16:cd:57:57:79:52:22:36:d7:89:ca:e5:58:1d:a2:b0:20: fa:bb:88:01:44:15:a1:57:4f:37:1b:64:a9:59:35:fe:d2:0c: c5:fe:60:23:f8:91:ff:ab:77:93:80:1e:0c:12:55:16:77:ce: f8:61:1d:5a:10:a5:80:66:93:0b:e6:e8:68:40:ed:ec:e3:5e: 3b:08:9c:51:8d:d6:11:ea:94:bc:0e:06:8b:f3:87:86:a2:79: 5e:07:f4:91:d6:6f:51:51:70:1f:47:2b:c0:71:bc:8f:92:5f: bf:90:1e:a1:12:5f:df:a7:1c:f0:88:d4:be:7c:ea:1b:ef:71: 77:9a:3c:8e:18:ed:23:fa:0f:0a:d8:9d:53:01:e4:c7:a0:31: bb:2f:36:fd -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAZt9yjmSXCPtioWhFpw+IL0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTc4NWRlNjJkY2Y5ZTc5MzBiYWJkN2IxZDM5YzU4NTNk MTk0NGYwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWRhNGE4MWQ2OWUxNTRkYjU3MTgwMjIxZmNkZjg1ZDNiMGI0Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCnqGsk4UgROawKxEjvTog5Xy3CN dJGK7pBNU8yQtsgz6BjeAfwFUAo4qzB1fBGz2NNKOk0hz8QBXbzha4z/pEs0H5pT H9Kf4i4DvRIGNWjFEK2LXl7CVY3ckCpUMNLnbineH6IJf1YXB+xoeqdKMA1lwEDC KbJPTi2C3MN3p4vm+i17CDUkoAjkjzY39g+tCEh4aG+infEKP9SEYIxiyXHSXNdy U/p1jXtQ+iVUtxVLCXHugZV9QOGBQEDjDH2DI0hBvjY3vMbRHAIDl2u0s7j6Tvus EWlhffAdTzoZPuLd/C93MsomyEhslsJCQasJgecZWKQbzAZXzpTD8D1B6QIDAQAB o4IDDDCCAwgwHQYDVR0OBBYEFBraSoHWnhVNtXGAIh/N+F07C0zTMB8GA1UdIwQY MBaAFNeXhd5i3Pnnkwur17HTnFhT0ZRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEt NzU4NTVkYjcxNTFmLzEvR3RwS2dkYWVGVTIxY1lBaUg4MzRYVHNMVE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEtNzU4NTVkYjcxNTFm LzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIAYIKwYBBQUHAQcBAf8EggEPMIIBCzBgBAIAATBaAwQD BTkQAwQAJQoAAwQCJQoEMAwDBAMlChgDBAAlChwwDAMEBSUKIAMEACUKJjAMAwQD JQo4AwQAJQo6AwQBJQo8AwQAJQo/AwQBW8PsAwQBW87oAwQCuRzcMIGmBAIAAjCB nzAPAwUGKgFQQAMGBCoBUEAgAwYEKgFQQGADBgQqAVBAoAMHACoBUEEAAgMHACoB UEEABQMHACoBUEEACQMHACoBUEEADQMHACoBUEEAEzAQAwYAKgFQQQEDBgAqAVBB AjASAwcAKgFQQSABAwcAKgFQQSACAwcAKgFQQSAFAwcAKgFQQSAJAwcAKgFQQSAN AwcAKgFQQSATAwUBKgFQQjANBgkqhkiG9w0BAQsFAAOCAQEA6+9z+DNvZAQzowHH OjJOs10Qvx+IQY3HfzESrMpvniczbpPlQEXFfBpKBRmEdtKNMgxUvWIBXM/Pdc2q 2eGacTIOl0VicGnGFoZL3ZwSFgKInLYYQDOF58yUXW4cYfmNHkkjiPMZ/jvBWPmS fRbNV1d5UiI214nK5VgdorAg+ruIAUQVoVdPNxtkqVk1/tIMxf5gI/iR/6t3k4Ae DBJVFnfO+GEdWhClgGaTC+boaEDt7ONeOwicUY3WEeqUvA4Gi/OHhqJ5Xgf0kdZv UVFwH0crwHG8j5Jfv5AeoRJf36cc8IjUvnzqG+9xd5o8jhjtI/oPCtidUwHkx6Ax uy82/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:12 2026 by rpki-client