This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gZtg_MDg7U_9YxcpljwnuIyUhqM.roa File: gZtg_MDg7U_9YxcpljwnuIyUhqM.roa (raw, json) Hash identifier: jHewOm49wVW4fvno6jYv6CwHUX/j4MlAWi9l9F1uvH8= Subject key identifier: 81:9B:60:FC:C0:E0:ED:4F:FD:63:17:29:96:3C:27:B8:8C:94:86:A3 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3602EBBBB74CC78F8BCF54323D3D30 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gZtg_MDg7U_9YxcpljwnuIyUhqM.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31362 IP address blocks: 31.14.43.0/24 maxlen: 24 31.14.53.0/24 maxlen: 24 31.14.54.0/24 maxlen: 24 37.156.245.0/24 maxlen: 24 86.104.124.0/24 maxlen: 24 89.34.5.0/24 maxlen: 24 89.34.93.0/24 maxlen: 24 89.35.55.0/24 maxlen: 24 89.36.19.0/24 maxlen: 24 89.36.92.0/24 maxlen: 24 89.41.63.0/24 maxlen: 24 89.42.14.0/24 maxlen: 24 89.42.35.0/24 maxlen: 24 89.42.214.0/24 maxlen: 24 89.44.104.0/24 maxlen: 24 185.99.91.0/24 maxlen: 24 188.240.12.0/24 maxlen: 24 217.19.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:02:eb:bb:b7:4c:c7:8f:8b:cf:54:32:3d:3d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=819b60fcc0e0ed4ffd631729963c27b88c9486a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:ad:b1:1f:ff:ee:ff:97:c4:d7:ee:a5:d9: 48:6a:a6:44:fe:87:8d:d2:cb:8e:4b:d6:8f:32:5c: 50:89:b0:78:bd:8a:6c:d0:f1:be:dd:81:4d:38:8b: 2e:c4:e6:08:54:5d:3d:ac:83:df:8c:d0:bb:04:20: 1b:b9:e9:7e:75:df:c2:34:d5:a0:a1:1a:d6:28:00: 25:75:5c:65:66:b4:66:58:1e:a9:ec:8e:79:81:10: e5:51:28:bd:09:4e:4a:13:b6:d2:fb:31:11:65:e4: 82:4b:88:3c:f7:aa:10:4c:e8:8b:2e:d1:95:5d:4f: 12:0b:04:ba:b0:91:d4:a8:f0:21:e2:d8:a2:d8:9d: a2:c5:cd:10:de:61:2a:3e:e8:1f:3d:2f:b2:1e:fa: 29:bf:e6:d7:24:5f:a0:84:fb:7f:8a:a9:78:f0:dd: 99:2a:07:83:e9:64:0f:6e:54:9d:22:96:f8:1e:ba: 12:9b:1d:4b:96:cf:8f:78:d1:fb:64:fa:39:e7:13: 5d:99:5a:b4:13:ed:fa:4c:2f:67:20:66:79:f8:5f: bb:5c:bf:82:5a:d9:0c:48:49:bd:8d:2b:be:b6:14: 9c:57:cf:ef:78:ae:c9:d9:e8:55:7b:e7:37:d6:d4: 13:8f:0a:b4:d7:1d:d2:93:e9:98:81:a1:7b:76:47: 38:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9B:60:FC:C0:E0:ED:4F:FD:63:17:29:96:3C:27:B8:8C:94:86:A3 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/gZtg_MDg7U_9YxcpljwnuIyUhqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.43.0/24 31.14.53.0-31.14.54.255 37.156.245.0/24 86.104.124.0/24 89.34.5.0/24 89.34.93.0/24 89.35.55.0/24 89.36.19.0/24 89.36.92.0/24 89.41.63.0/24 89.42.14.0/24 89.42.35.0/24 89.42.214.0/24 89.44.104.0/24 185.99.91.0/24 188.240.12.0/24 217.19.9.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:6b:6e:d1:22:61:d3:a5:90:9a:4b:6d:87:9a:2f:89:ff:bb: af:1f:e6:ef:eb:3c:44:99:77:0c:2c:1d:1a:1f:f6:52:98:b6: 10:08:95:96:4d:f4:96:6e:d1:c7:89:eb:59:5b:3e:4a:f2:33: 92:54:e5:82:68:ee:8d:02:0b:5c:e5:25:21:ba:60:4a:e1:4c: f4:5b:de:6a:7c:d5:b3:ae:6b:17:b8:00:26:69:b2:85:41:82: f7:cb:6e:af:0f:d3:86:79:5b:4c:a5:40:49:91:c5:1b:00:38: 03:5c:82:a6:a2:c9:64:7c:89:54:b4:47:98:7e:14:1b:81:dc: 0f:f5:a9:c6:13:07:57:3b:fb:de:3f:0f:c8:71:f8:9d:ef:30: fc:19:02:b8:55:65:ce:a4:0b:bd:9e:56:31:6b:db:e6:23:74: bd:27:fd:c5:24:f2:2c:6c:6c:c5:8e:3a:09:af:08:11:db:ec: 11:f3:c9:89:47:d0:2e:51:80:b2:49:2a:44:73:13:07:77:31: 58:de:d3:a4:0f:fa:f4:91:8b:c1:0d:b6:7b:6c:6a:23:8f:b8: 36:29:bb:17:64:c0:f3:34:65:d1:94:34:5a:9f:02:16:bb:a4: 1a:49:0c:86:d3:34:85:f7:af:0a:9f:73:44:5d:dc:7b:92:c4: 46:cb:96:8b -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt7NgLru7dMx4+Lz1QyPT0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTliNjBmY2MwZTBlZDRmZmQ2MzE3Mjk5NjNjMjdiODhjOTQ4NmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd+tsR//7v+XxNfupdlIaqZE/oeN 0suOS9aPMlxQibB4vYps0PG+3YFNOIsuxOYIVF09rIPfjNC7BCAbuel+dd/CNNWg oRrWKAAldVxlZrRmWB6p7I55gRDlUSi9CU5KE7bS+zERZeSCS4g896oQTOiLLtGV XU8SCwS6sJHUqPAh4tii2J2ixc0Q3mEqPugfPS+yHvopv+bXJF+ghPt/iql48N2Z KgeD6WQPblSdIpb4HroSmx1Lls+PeNH7ZPo55xNdmVq0E+36TC9nIGZ5+F+7XL+C WtkMSEm9jSu+thScV8/veK7J2ehVe+c31tQTjwq01x3Sk+mYgaF7dkc45wIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFIGbYPzA4O1P/WMXKZY8J7iMlIajMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvZ1p0Z19NRGc3VV85WXhjcGxqd251SXlVaHFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAB8OKzAM AwQAHw41AwQAHw42AwQAJZz1AwQAVmh8AwQAWSIFAwQAWSJdAwQAWSM3AwQAWSQT AwQAWSRcAwQAWSk/AwQAWSoOAwQAWSojAwQAWSrWAwQAWSxoAwQAuWNbAwQAvPAM AwQA2RMJMA0GCSqGSIb3DQEBCwUAA4IBAQA9a27RImHTpZCaS22Hmi+J/7uvH+bv 6zxEmXcMLB0aH/ZSmLYQCJWWTfSWbtHHietZWz5K8jOSVOWCaO6NAgtc5SUhumBK 4Uz0W95qfNWzrmsXuAAmabKFQYL3y26vD9OGeVtMpUBJkcUbADgDXIKmoslkfIlU tEeYfhQbgdwP9anGEwdXO/vePw/Icfid7zD8GQK4VWXOpAu9nlYxa9vmI3S9J/3F JPIsbGzFjjoJrwgR2+wR88mJR9AuUYCySSpEcxMHdzFY3tOkD/r0kYvBDbZ7bGoj j7g2KbsXZMDzNGXRlDRanwIWu6QaSQyG0zSF968Kn3NEXdx7ksRGy5aL -----END CERTIFICATE-----Generated at Sun Jan 25 21:20:52 2026 by rpki-client