This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ggV7rBXwprR59jciPQhDDTZxxmQ.roa
File: ggV7rBXwprR59jciPQhDDTZxxmQ.roa (raw, json)
Hash identifier: I4MtXY7ClGvNcIjMAoHA2mKMcNbnijfTuvNa/n/j6Xw=
Subject key identifier: 82:05:7B:AC:15:F0:A6:B4:79:F6:37:22:3D:08:43:0D:36:71:C6:64
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019B78345A8C0CA4016193E44FCBE3418796
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ggV7rBXwprR59jciPQhDDTZxxmQ.roa
Signing time: Thu 01 Jan 2026 06:17:35 +0000
ROA not before: Thu 01 Jan 2026 06:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15704
IP address blocks: 31.222.80.0/20 maxlen: 20
31.222.88.0/24 maxlen: 24
31.222.89.0/24 maxlen: 24
31.222.90.0/24 maxlen: 24
66.81.160.0/21 maxlen: 21
66.81.168.0/21 maxlen: 21
66.81.176.0/21 maxlen: 21
66.81.184.0/21 maxlen: 21
67.218.224.0/21 maxlen: 21
67.218.232.0/21 maxlen: 21
67.218.240.0/21 maxlen: 21
67.218.248.0/21 maxlen: 21
77.241.48.0/20 maxlen: 20
78.30.0.0/18 maxlen: 21
81.0.0.0/18 maxlen: 20
82.213.192.0/20 maxlen: 20
82.213.208.0/20 maxlen: 20
82.213.224.0/19 maxlen: 19
83.138.40.0/21 maxlen: 21
84.39.176.0/21 maxlen: 21
85.31.128.0/22 maxlen: 22
85.31.132.0/22 maxlen: 22
85.187.52.0/22 maxlen: 22
85.235.68.0/22 maxlen: 22
85.239.128.0/22 maxlen: 22
85.239.132.0/22 maxlen: 22
85.239.136.0/22 maxlen: 22
85.239.140.0/22 maxlen: 22
87.124.128.0/18 maxlen: 18
87.124.176.0/20 maxlen: 20
89.35.62.0/23 maxlen: 23
89.39.32.0/19 maxlen: 19
89.39.52.0/24 maxlen: 24
91.106.16.0/21 maxlen: 21
91.194.62.0/23 maxlen: 23
91.242.152.0/21 maxlen: 21
93.115.37.0/24 maxlen: 24
93.115.128.0/22 maxlen: 22
93.115.132.0/22 maxlen: 22
93.115.152.0/24 maxlen: 24
93.115.202.0/24 maxlen: 24
93.115.242.0/24 maxlen: 24
93.176.128.0/18 maxlen: 21
93.177.120.0/22 maxlen: 23
94.73.32.0/19 maxlen: 19
119.12.224.0/22 maxlen: 22
119.12.228.0/22 maxlen: 22
119.12.228.0/23 maxlen: 23
119.12.230.0/23 maxlen: 23
119.12.232.0/23 maxlen: 23
119.12.234.0/23 maxlen: 23
119.12.236.0/22 maxlen: 22
119.12.240.0/23 maxlen: 23
119.12.242.0/23 maxlen: 23
119.12.244.0/22 maxlen: 22
119.12.248.0/22 maxlen: 22
119.12.252.0/23 maxlen: 23
119.12.254.0/23 maxlen: 23
137.59.58.0/24 maxlen: 24
170.253.0.0/20 maxlen: 20
170.253.16.0/20 maxlen: 20
170.253.32.0/20 maxlen: 20
170.253.48.0/20 maxlen: 20
176.222.64.0/19 maxlen: 19
176.222.75.0/24 maxlen: 24
176.222.82.0/24 maxlen: 24
178.218.194.0/24 maxlen: 24
181.41.128.0/21 maxlen: 21
185.79.20.0/22 maxlen: 22
185.145.64.0/22 maxlen: 22
185.146.56.0/22 maxlen: 22
185.153.164.0/23 maxlen: 23
185.153.166.0/23 maxlen: 23
185.176.4.0/22 maxlen: 22
185.197.240.0/22 maxlen: 22
185.227.212.0/23 maxlen: 23
185.227.214.0/23 maxlen: 23
185.228.152.0/22 maxlen: 22
185.252.12.0/22 maxlen: 22
188.65.88.0/21 maxlen: 21
188.208.219.0/24 maxlen: 24
188.212.23.0/24 maxlen: 24
193.17.66.0/24 maxlen: 24
193.53.160.0/22 maxlen: 22
193.177.208.0/22 maxlen: 22
195.160.224.0/22 maxlen: 22
206.204.128.0/23 maxlen: 23
206.204.130.0/23 maxlen: 23
206.204.132.0/23 maxlen: 23
206.204.134.0/24 maxlen: 24
206.204.135.0/24 maxlen: 24
206.204.136.0/23 maxlen: 23
206.204.138.0/23 maxlen: 23
206.204.140.0/22 maxlen: 22
206.204.148.0/23 maxlen: 23
206.204.150.0/23 maxlen: 23
206.204.152.0/22 maxlen: 22
206.204.156.0/22 maxlen: 22
207.188.128.0/21 maxlen: 21
207.188.136.0/21 maxlen: 21
207.188.144.0/21 maxlen: 21
207.188.152.0/21 maxlen: 21
207.188.160.0/21 maxlen: 21
207.188.168.0/21 maxlen: 21
207.188.176.0/21 maxlen: 21
207.188.184.0/21 maxlen: 21
212.7.32.0/20 maxlen: 20
212.7.63.0/24 maxlen: 24
212.14.96.0/19 maxlen: 23
212.14.96.0/22 maxlen: 22
212.14.100.0/22 maxlen: 22
212.14.104.0/23 maxlen: 23
212.14.108.0/22 maxlen: 22
212.14.118.0/23 maxlen: 23
212.166.66.0/24 maxlen: 24
212.166.67.0/24 maxlen: 24
212.166.68.0/24 maxlen: 24
212.166.69.0/24 maxlen: 24
212.166.70.0/24 maxlen: 24
212.166.71.0/24 maxlen: 24
212.166.74.0/24 maxlen: 24
212.166.76.0/24 maxlen: 24
212.230.0.0/15 maxlen: 15
212.230.22.0/24 maxlen: 24
212.230.136.0/24 maxlen: 24
212.230.156.0/24 maxlen: 24
212.230.157.0/24 maxlen: 24
212.230.159.0/24 maxlen: 24
212.230.178.0/24 maxlen: 24
212.230.233.0/24 maxlen: 24
212.231.112.0/21 maxlen: 21
212.231.120.0/22 maxlen: 22
212.231.124.0/22 maxlen: 22
213.94.0.0/18 maxlen: 23
213.94.0.0/21 maxlen: 21
213.94.16.0/22 maxlen: 22
213.94.40.0/22 maxlen: 22
213.177.192.0/19 maxlen: 21
213.177.208.0/21 maxlen: 21
217.113.240.0/20 maxlen: 22
2a00:d100::/29 maxlen: 37
2a01:8480::/32 maxlen: 32
2a01:8480:2001::/48 maxlen: 48
2a01:8480:2002::/48 maxlen: 48
2a01:8480:2003::/48 maxlen: 48
2a01:8480:2004::/48 maxlen: 48
2a01:8480:2008::/47 maxlen: 47
2a01:8480:200a::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:5a:8c:0c:a4:01:61:93:e4:4f:cb:e3:41:87:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 1 06:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82057bac15f0a6b479f637223d08430d3671c664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:f0:f6:02:85:27:2c:2a:f4:2c:99:7b:07:
d2:fe:7a:05:87:4e:30:ae:80:c8:84:16:90:2a:ce:
f0:06:76:24:8f:c0:bc:f4:5f:cf:e0:7b:cf:f9:f4:
61:34:d1:2e:7e:bb:bd:71:02:98:79:1b:de:9d:40:
5a:f5:4e:39:7c:e7:05:17:56:0c:8b:46:2e:ce:17:
1f:90:5d:b4:c9:d3:6a:20:df:61:a2:82:08:76:50:
fd:4b:5b:1b:e8:b8:1c:92:5a:30:22:1a:4a:25:f0:
a0:1d:a8:74:f5:c7:51:e9:e8:4b:7a:c9:0f:20:b5:
2f:64:72:46:0c:7d:7e:e1:39:1e:36:7d:7c:23:44:
9e:e3:91:aa:39:7b:49:58:68:e4:6a:84:5a:55:59:
56:d3:60:47:e8:f2:1e:7a:fd:d7:f4:90:37:4b:51:
7a:e2:84:ab:bc:00:8f:dd:14:d1:a9:42:57:81:df:
20:90:c9:42:fa:13:22:60:98:11:d2:62:1a:35:e7:
45:ec:07:6e:c6:87:90:13:12:a6:74:a4:07:50:9b:
b8:a8:c8:bb:fe:e2:95:af:50:0d:a5:80:7b:88:71:
0a:7f:f1:d6:95:38:dc:22:a8:6f:0f:e2:bc:a9:53:
94:eb:4b:fa:fd:96:8e:77:45:c3:9c:8d:9b:78:61:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:7B:AC:15:F0:A6:B4:79:F6:37:22:3D:08:43:0D:36:71:C6:64
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/ggV7rBXwprR59jciPQhDDTZxxmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.80.0/20
66.81.160.0/19
67.218.224.0/19
77.241.48.0/20
78.30.0.0/18
81.0.0.0/18
82.213.192.0/18
83.138.40.0/21
84.39.176.0/21
85.31.128.0/21
85.187.52.0/22
85.235.68.0/22
85.239.128.0/20
87.124.128.0/18
89.35.62.0/23
89.39.32.0/19
91.106.16.0/21
91.194.62.0/23
91.242.152.0/21
93.115.37.0/24
93.115.128.0/21
93.115.152.0/24
93.115.202.0/24
93.115.242.0/24
93.176.128.0/18
93.177.120.0/22
94.73.32.0/19
119.12.224.0/19
137.59.58.0/24
170.253.0.0/18
176.222.64.0/19
178.218.194.0/24
181.41.128.0/21
185.79.20.0/22
185.145.64.0/22
185.146.56.0/22
185.153.164.0/22
185.176.4.0/22
185.197.240.0/22
185.227.212.0/22
185.228.152.0/22
185.252.12.0/22
188.65.88.0/21
188.208.219.0/24
188.212.23.0/24
193.17.66.0/24
193.53.160.0/22
193.177.208.0/22
195.160.224.0/22
206.204.128.0/20
206.204.148.0-206.204.159.255
207.188.128.0/18
212.7.32.0/20
212.7.63.0/24
212.14.96.0/19
212.166.66.0-212.166.71.255
212.166.74.0/24
212.166.76.0/24
212.230.0.0/15
213.94.0.0/18
213.177.192.0/19
217.113.240.0/20
IPv6:
2a00:d100::/29
2a01:8480::/32
Signature Algorithm: sha256WithRSAEncryption
39:03:51:e2:23:94:a0:ac:82:7a:8b:d5:ee:0b:0e:d1:06:83:
e2:72:84:83:1d:f1:5b:a5:7b:a0:04:3b:ec:be:f6:8e:2f:b6:
ce:92:53:b8:81:22:ea:78:de:87:a9:99:52:00:0f:22:04:db:
66:d9:03:08:b2:cb:d5:4e:3a:c8:8e:32:9a:df:4a:d1:27:8a:
57:4e:71:6d:f9:28:89:e6:10:8c:71:9c:f9:0b:56:1c:60:52:
7b:b6:7f:ba:b4:fc:83:b9:8b:d7:46:88:03:a1:67:30:2e:46:
33:1e:c3:17:14:66:cf:f9:57:b0:d8:31:87:20:7d:0a:50:51:
1f:e6:9a:31:41:67:1b:e4:e4:ae:d0:55:9e:25:0b:a0:55:fb:
8f:a7:6a:52:fc:52:76:83:20:f9:b8:06:5f:1d:9b:4a:9f:61:
11:40:6d:b0:72:37:83:78:09:76:f7:01:c1:d3:59:f1:b7:5e:
07:dc:be:e8:25:90:45:4a:4f:f8:33:6a:cb:5f:7b:05:2c:67:
cc:ef:1f:e1:b7:72:93:0b:da:a7:46:b9:f3:14:70:cc:c1:8e:
c5:8b:56:b0:d1:ad:35:f1:f3:fa:80:03:3d:2e:d7:4b:68:4f:
e1:ce:b5:6b:36:94:48:f4:04:18:54:ba:9e:37:ff:f8:5f:2e:
37:27:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:09 2026 by rpki-client