This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/GOKl_HgtHfM22hM8HA5SESUac7k.roa File: GOKl_HgtHfM22hM8HA5SESUac7k.roa (raw, json) Hash identifier: 9WYCow1eFtG0OZYI4lYrZV4DtE2HmFDni29YhIkALTY= Subject key identifier: 18:E2:A5:FC:78:2D:1D:F3:36:DA:13:3C:1C:0E:52:11:25:1A:73:B9 Certificate issuer: /CN=4ab6d7c468d092c921314d66473cfa53851cd686 Certificate serial: 019B78354A54BE660A0EB21872CD07C93848 Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/GOKl_HgtHfM22hM8HA5SESUac7k.roa Signing time: Thu 01 Jan 2026 06:18:36 +0000 ROA not before: Thu 01 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35047 IP address blocks: 31.44.64.0/20 maxlen: 20 31.44.68.0/22 maxlen: 22 31.44.72.0/22 maxlen: 22 77.242.16.0/20 maxlen: 20 77.242.18.0/23 maxlen: 23 77.242.20.0/24 maxlen: 24 77.242.21.0/24 maxlen: 24 77.242.22.0/23 maxlen: 23 77.242.24.0/24 maxlen: 24 77.242.25.0/24 maxlen: 24 77.242.26.0/24 maxlen: 24 77.242.28.0/22 maxlen: 22 77.242.29.0/24 maxlen: 24 77.242.30.0/24 maxlen: 24 77.242.31.0/24 maxlen: 24 80.91.112.0/20 maxlen: 24 80.91.116.0/24 maxlen: 24 80.91.117.0/24 maxlen: 24 80.91.120.0/21 maxlen: 24 80.91.122.0/24 maxlen: 24 80.91.123.0/24 maxlen: 24 80.91.126.0/24 maxlen: 24 80.91.127.0/24 maxlen: 24 92.60.16.0/20 maxlen: 20 109.236.32.0/20 maxlen: 20 185.9.44.0/22 maxlen: 24 185.55.148.0/22 maxlen: 24 185.55.150.0/24 maxlen: 24 2a01:4f00::/32 maxlen: 32 2a01:4f00::/48 maxlen: 48 2a01:4f00:2233::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4a:54:be:66:0a:0e:b2:18:72:cd:07:c9:38:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e2a5fc782d1df336da133c1c0e5211251a73b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:6b:d8:c9:99:c6:8c:b6:57:e8:f4:f3:bd: ef:0b:35:90:0c:fe:22:e5:51:08:bd:fd:0b:f7:6b: 9d:00:e1:c0:ad:8b:2d:83:dd:b1:fe:6c:7a:46:93: 06:86:e4:3c:d8:a4:d4:7d:45:e3:10:b1:24:17:fe: 24:66:9e:ca:55:3d:09:0b:ba:72:9d:ea:b9:be:22: e1:12:9c:34:84:5f:5a:f2:08:dc:66:11:54:76:61: ad:b9:b3:68:b6:7f:c9:3d:8d:76:55:c3:e5:a9:59: be:a1:f2:4e:a4:9d:e0:b5:1d:e6:60:d0:fb:39:dd: 1f:37:1d:5e:80:50:09:df:c1:ba:f7:62:ec:c1:e7: 1a:18:38:c1:f0:dc:69:31:22:9d:94:ef:31:4a:fc: 45:7e:03:d6:98:0b:2d:8c:c4:2f:50:60:b5:af:f5: e1:96:73:bc:c2:87:7a:43:85:03:61:65:e5:d6:e7: be:3f:6e:54:9d:08:ec:f6:a8:c6:68:14:19:75:30: 25:25:1f:b3:11:35:b8:96:4d:c5:4a:e6:23:7c:bd: 1f:ad:3c:b6:a3:d2:fd:e4:26:71:e6:c1:98:38:4d: a8:c5:28:56:ea:56:c5:db:ef:8d:ed:74:b6:fe:eb: 2d:c3:0a:c2:17:22:97:35:2f:15:c7:63:a1:f6:37: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E2:A5:FC:78:2D:1D:F3:36:DA:13:3C:1C:0E:52:11:25:1A:73:B9 X509v3 Authority Key Identifier: keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/GOKl_HgtHfM22hM8HA5SESUac7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.64.0/20 77.242.16.0/20 80.91.112.0/20 92.60.16.0/20 109.236.32.0/20 185.9.44.0/22 185.55.148.0/22 IPv6: 2a01:4f00::/32 Signature Algorithm: sha256WithRSAEncryption 61:71:40:7a:36:6a:b5:16:de:ef:f2:60:9e:eb:9e:81:30:f0: 92:84:c3:7b:b6:3e:cc:d7:7d:47:b4:9e:d4:1b:a2:c5:ed:42: 54:f4:51:ef:28:42:68:1c:b9:0c:bd:e5:70:bb:cc:18:59:60: b3:dc:56:0e:03:ad:99:e5:6c:eb:18:ae:6d:77:e8:f8:07:1e: 34:73:81:31:c9:c9:a3:06:38:65:65:ff:84:60:5a:36:04:5b: 97:da:7f:6c:78:f7:ed:85:f2:89:29:f3:21:e8:a4:ba:48:f1: 61:4e:03:73:50:b4:c4:da:74:9c:84:6a:99:a4:c8:46:45:c2: 44:03:ce:f7:f7:04:10:ca:0f:ad:27:2c:f2:bf:e7:c5:e5:84: d5:23:ca:45:5d:2d:43:df:49:4b:6f:12:75:fa:d1:63:17:a6: f1:27:f5:a5:84:d6:e4:90:6b:c7:27:a7:1a:a5:dd:ba:86:ee: 7c:f2:a9:b2:66:ab:20:95:7d:98:0f:49:a4:27:32:8e:1b:7d: 48:70:10:20:83:ef:01:2d:9f:e8:bb:a3:fa:ae:ee:66:47:e0: 3a:9c:07:d4:0d:8b:20:13:b7:2c:eb:26:7f:22:eb:03:ba:77: 7f:91:10:99:f1:cd:cc:84:5a:ef:30:1b:80:89:d2:80:27:9c: 90:48:dc:f1 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt4NUpUvmYKDrIYcs0HyThIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYjZkN2M0NjhkMDkyYzkyMTMxNGQ2NjQ3M2NmYTUzODUx Y2Q2ODYwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGUyYTVmYzc4MmQxZGYzMzZkYTEzM2MxYzBlNTIxMTI1MWE3M2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyilr2MmZxoy2V+j0873vCzWQDP4i 5VEIvf0L92udAOHArYstg92x/mx6RpMGhuQ82KTUfUXjELEkF/4kZp7KVT0JC7py neq5viLhEpw0hF9a8gjcZhFUdmGtubNotn/JPY12VcPlqVm+ofJOpJ3gtR3mYND7 Od0fNx1egFAJ38G692LswecaGDjB8NxpMSKdlO8xSvxFfgPWmAstjMQvUGC1r/Xh lnO8wod6Q4UDYWXl1ue+P25UnQjs9qjGaBQZdTAlJR+zETW4lk3FSuYjfL0frTy2 o9L95CZx5sGYOE2oxShW6lbF2++N7XS2/ustwwrCFyKXNS8Vx2Oh9jePlQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFBjipfx4LR3zNtoTPBwOUhElGnO5MB8GA1UdIwQY MBaAFEq218Ro0JLJITFNZkc8+lOFHNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQt MDU3NjRjN2VkYWE3LzEvR09LbF9IZ3RIZk0yMmhNOEhBNVNFU1VhYzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQtMDU3NjRjN2VkYWE3 LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEHyxAAwQE TfIQAwQEUFtwAwQEXDwQAwQEbewgAwQCuQksAwQCuTeUMA0EAgACMAcDBQAqAU8A MA0GCSqGSIb3DQEBCwUAA4IBAQBhcUB6Nmq1Ft7v8mCe656BMPCShMN7tj7M131H tJ7UG6LF7UJU9FHvKEJoHLkMveVwu8wYWWCz3FYOA62Z5WzrGK5td+j4Bx40c4Ex ycmjBjhlZf+EYFo2BFuX2n9sePfthfKJKfMh6KS6SPFhTgNzULTE2nSchGqZpMhG RcJEA8739wQQyg+tJyzyv+fF5YTVI8pFXS1D30lLbxJ1+tFjF6bxJ/WlhNbkkGvH J6capd26hu588qmyZqsglX2YD0mkJzKOG31IcBAgg+8BLZ/ou6P6ru5mR+A6nAfU DYsgE7cs6yZ/IusDund/kRCZ8c3MhFrvMBuAidKAJ5yQSNzx -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:42 2026 by rpki-client