This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa File: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (raw, json) Hash identifier: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E= Subject key identifier: 29:DF:8F:24:C1:B4:23:A8:0F:DD:E5:3E:21:55:00:2A:DF:E0:71:C8 Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Certificate serial: 019B78A320AD752FCF0C4626EFBFA43F6901 Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31631 IP address blocks: 45.150.140.0/22 maxlen: 22 79.99.88.0/22 maxlen: 22 80.252.120.0/22 maxlen: 22 103.110.208.0/22 maxlen: 22 109.224.248.0/21 maxlen: 21 185.108.168.0/22 maxlen: 22 185.205.172.0/22 maxlen: 22 193.178.54.0/23 maxlen: 23 193.178.112.0/23 maxlen: 23 195.167.138.0/24 maxlen: 24 195.167.181.0/24 maxlen: 24 195.167.182.0/24 maxlen: 24 195.167.184.0/24 maxlen: 24 195.167.187.0/24 maxlen: 24 209.42.4.0/22 maxlen: 22 209.42.8.0/21 maxlen: 21 2a06:e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:20:ad:75:2f:cf:0c:46:26:ef:bf:a4:3f:69:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873 Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29df8f24c1b423a80fdde53e2155002adfe071c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:d0:7d:da:da:da:56:12:9e:2f:f8:1e:c4: d5:04:e7:6b:54:38:57:af:64:d8:c0:fc:7e:18:2e: 27:a1:9c:53:b6:65:ec:4e:48:da:b3:43:bc:c6:db: 33:f6:50:f6:6c:03:2f:f7:25:70:5a:24:54:ab:31: 8e:c5:3a:63:12:c7:85:75:9f:03:42:ac:e1:44:af: c8:9e:f7:be:ac:6d:f9:4d:6e:b5:ed:a4:b5:f0:2c: 6f:49:db:52:31:76:5b:a4:c4:cd:2b:e9:34:6e:c4: 52:57:2c:d7:ce:0a:cd:94:65:02:04:d1:6a:1f:16: 64:55:ff:aa:f2:07:00:3f:35:1c:c2:bf:d2:05:09: f0:f8:c5:6a:4e:02:af:f8:d8:2a:3b:f0:f4:42:2f: 97:40:87:98:f9:94:a4:e2:18:93:13:eb:74:65:0e: f8:1f:92:85:f0:1d:5a:bf:f6:32:09:44:95:b3:fb: d4:56:6c:5e:01:c5:7a:65:5d:bd:d8:93:8f:e5:a9: ef:84:2f:0f:7e:68:23:c6:c5:fc:bf:cc:8e:8d:4b: 25:3b:30:1b:86:4f:4b:79:2e:a4:51:14:0a:8d:08: 3a:80:5a:f6:71:2a:1b:3c:7f:d9:76:b8:0e:ef:0f: c7:97:ba:ad:4b:74:38:a2:d1:13:dd:12:e1:4f:ce: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DF:8F:24:C1:B4:23:A8:0F:DD:E5:3E:21:55:00:2A:DF:E0:71:C8 X509v3 Authority Key Identifier: keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.140.0/22 79.99.88.0/22 80.252.120.0/22 103.110.208.0/22 109.224.248.0/21 185.108.168.0/22 185.205.172.0/22 193.178.54.0/23 193.178.112.0/23 195.167.138.0/24 195.167.181.0-195.167.182.255 195.167.184.0/24 195.167.187.0/24 209.42.4.0-209.42.15.255 IPv6: 2a06:e40::/29 Signature Algorithm: sha256WithRSAEncryption d4:16:05:03:23:02:b5:b0:c4:57:69:78:0b:8f:69:ad:ac:71: 19:9e:23:00:61:5b:f5:14:2f:e4:fc:01:9d:96:36:d7:f1:83: a6:70:a3:13:67:b0:ce:1b:25:a9:7e:0d:8e:cd:22:ad:8e:f5: 61:6c:ef:f7:a6:98:05:e7:fc:82:8b:1d:27:8a:c7:52:78:d8: ba:5a:f5:04:b4:6f:6a:a3:0c:de:f2:76:dc:95:8c:56:68:f6: 6a:f9:45:70:a7:0e:c9:77:e6:6f:73:00:f3:0d:c5:ed:44:80: 8c:af:09:d1:01:59:b2:26:d1:35:b2:49:54:d7:49:c4:ba:45: f8:10:26:b6:82:e3:80:67:73:bb:b1:75:c2:9b:26:d3:f4:42: b9:79:02:53:f9:a6:41:6c:1d:3d:36:da:4f:b1:45:f4:1d:c3: 34:86:50:83:7e:e6:b4:71:0e:d8:31:79:05:9c:4c:e1:f1:64: 71:ad:8a:0d:fd:34:a5:63:fe:9b:6c:81:60:2f:d4:ec:25:b6: d1:87:24:4a:2c:31:95:b6:a7:ef:26:e0:1a:81:c5:5c:ad:be: 3f:a4:2b:64:1b:e2:72:51:35:e2:5e:4e:98:da:83:2a:1a:e6: 9c:14:fa:1b:35:fa:cc:8e:e6:4f:f2:86:30:33:c6:87:3c:1d: 01:3b:64:16 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgISAZt4oyCtdS/PDEYm77+kP2kBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2 YWU4NzMwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWRmOGYyNGMxYjQyM2E4MGZkZGU1M2UyMTU1MDAyYWRmZTA3MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/nQfdra2lYSni/4HsTVBOdrVDhX r2TYwPx+GC4noZxTtmXsTkjas0O8xtsz9lD2bAMv9yVwWiRUqzGOxTpjEseFdZ8D QqzhRK/Inve+rG35TW617aS18CxvSdtSMXZbpMTNK+k0bsRSVyzXzgrNlGUCBNFq HxZkVf+q8gcAPzUcwr/SBQnw+MVqTgKv+NgqO/D0Qi+XQIeY+ZSk4hiTE+t0ZQ74 H5KF8B1av/YyCUSVs/vUVmxeAcV6ZV292JOP5anvhC8PfmgjxsX8v8yOjUslOzAb hk9LeS6kURQKjQg6gFr2cSobPH/ZdrgO7w/Hl7qtS3Q4otET3RLhT84RmQIDAQAB o4ICdzCCAnMwHQYDVR0OBBYEFCnfjyTBtCOoD93lPiFVACrf4HHIMB8GA1UdIwQY MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt NDlhNjU0NTc4NmU2LzEvS2QtUEpNRzBJNmdQM2VVLUlWVUFLdF9nY2NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2 LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGMBggrBgEFBQcBBwEB/wR9MHswagQCAAEwZAMEAi2WjAME Ak9jWAMEAlD8eAMEAmdu0AMEA23g+AMEArlsqAMEArnNrAMEAcGyNgMEAcGycAME AMOnijAMAwQAw6e1AwQAw6e2AwQAw6e4AwQAw6e7MAwDBALRKgQDBATRKgAwDQQC AAIwBwMFAyoGDkAwDQYJKoZIhvcNAQELBQADggEBANQWBQMjArWwxFdpeAuPaa2s cRmeIwBhW/UUL+T8AZ2WNtfxg6ZwoxNnsM4bJal+DY7NIq2O9WFs7/emmAXn/IKL HSeKx1J42Lpa9QS0b2qjDN7ydtyVjFZo9mr5RXCnDsl35m9zAPMNxe1EgIyvCdEB WbIm0TWySVTXScS6RfgQJraC44Bnc7uxdcKbJtP0Qrl5AlP5pkFsHT022k+xRfQd wzSGUIN+5rRxDtgxeQWcTOHxZHGtig39NKVj/ptsgWAv1OwlttGHJEosMZW2p+8m 4BqBxVytvj+kK2Qb4nJRNeJeTpjagyoa5pwU+hs1+syO5k/yhjAzxoc8HQE7ZBY= -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:46 2026 by rpki-client