This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/CGNHFzHbF7-8UJqTLN4QMjGnXyU.roa File: CGNHFzHbF7-8UJqTLN4QMjGnXyU.roa (raw, json) Hash identifier: rE1Gl4R/o9ubCNpESm4El4VIv8yy2mTFqLawhPoXG4E= Subject key identifier: 08:63:47:17:31:DB:17:BF:BC:50:9A:93:2C:DE:10:32:31:A7:5F:25 Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Certificate serial: 019B7D5B535857D2ED313D2455914D28A713 Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/CGNHFzHbF7-8UJqTLN4QMjGnXyU.roa Signing time: Fri 02 Jan 2026 06:18:15 +0000 ROA not before: Fri 02 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48158 IP address blocks: 146.255.208.0/22 maxlen: 24 146.255.212.0/22 maxlen: 24 146.255.216.0/21 maxlen: 24 176.58.38.0/23 maxlen: 24 176.58.39.0/24 maxlen: 24 176.58.40.0/23 maxlen: 24 176.58.41.0/24 maxlen: 24 176.58.42.0/24 maxlen: 24 176.58.43.0/24 maxlen: 24 176.58.45.0/24 maxlen: 24 176.58.46.0/24 maxlen: 24 176.58.47.0/24 maxlen: 24 176.58.48.0/23 maxlen: 23 176.58.50.0/24 maxlen: 24 176.58.52.0/24 maxlen: 24 176.58.53.0/24 maxlen: 24 176.58.54.0/24 maxlen: 24 176.58.55.0/24 maxlen: 24 176.58.56.0/24 maxlen: 24 176.58.57.0/24 maxlen: 24 185.190.190.0/24 maxlen: 24 212.124.96.0/22 maxlen: 24 212.124.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:53:58:57:d2:ed:31:3d:24:55:91:4d:28:a7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Validity Not Before: Jan 2 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0863471731db17bfbc509a932cde103231a75f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:ab:38:2e:64:6a:bb:7f:06:04:d7:d4:ed: 7f:98:3b:82:85:10:2e:84:36:45:50:3e:a4:50:33: 44:de:ee:55:e8:c5:d4:37:be:d9:6b:ce:22:ae:d4: b7:e7:2f:96:b9:cf:84:56:67:8e:7d:cd:26:10:2b: 7c:52:84:b4:ca:e8:2f:0b:1f:6e:3b:c3:11:18:8f: 5a:ad:a8:2c:c5:9e:be:14:df:74:a6:78:43:f2:83: 8f:6c:fb:0a:d5:65:13:9c:64:46:e7:ba:e6:8e:76: 61:88:b9:a7:22:37:f0:18:8f:c1:34:c8:8b:62:c0: 6c:cf:9d:81:93:30:25:f3:ca:f8:8f:91:c1:e7:70: 25:85:c0:49:62:69:7c:0d:e0:40:7a:55:82:bf:90: 22:65:ef:da:3d:b4:82:b5:5e:2f:a2:87:8c:de:87: 77:70:ee:10:2b:e2:ce:e8:4b:51:63:af:e7:17:0b: dd:52:47:2a:07:02:29:b1:1f:d7:b4:2e:00:0c:7d: 95:a5:b3:22:d9:d7:55:7e:a3:b2:c4:88:f2:55:5c: 1c:d9:bd:12:07:aa:5d:cc:bf:f3:05:48:91:0b:a3: 24:12:bc:06:ba:89:db:15:95:0d:5e:78:3e:3f:54: 81:7b:35:37:9b:b8:b0:e8:66:bb:a7:a6:77:3c:b7: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:63:47:17:31:DB:17:BF:BC:50:9A:93:2C:DE:10:32:31:A7:5F:25 X509v3 Authority Key Identifier: keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/CGNHFzHbF7-8UJqTLN4QMjGnXyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.255.208.0/20 176.58.38.0-176.58.43.255 176.58.45.0-176.58.50.255 176.58.52.0-176.58.57.255 185.190.190.0/24 212.124.96.0/21 Signature Algorithm: sha256WithRSAEncryption af:af:5a:a2:0f:de:f5:43:62:b3:c7:8a:0d:de:e8:a9:b1:43: b6:3a:b9:d4:4c:f1:0e:58:76:c0:18:0b:50:d7:e7:49:c0:1e: cf:5f:79:c8:78:a0:17:52:da:65:47:e3:d7:7f:31:d4:45:81: 9e:fb:70:cb:8e:c4:5f:e6:56:b7:2a:21:0e:9b:b3:1a:bb:65: 99:87:f4:ea:bd:87:f5:55:3b:10:d1:51:34:e5:c5:18:d6:2d: 4c:65:a4:e0:d6:10:05:eb:2e:6c:a5:61:65:2d:aa:00:80:be: 05:dd:0f:b7:dc:18:56:fc:97:d3:e7:27:22:d3:eb:a2:c7:8e: ab:dd:61:2c:d7:a3:dc:87:77:f6:b3:6d:f2:86:c7:dc:15:8b: 6b:6e:ea:99:88:58:2a:a8:87:b3:ad:29:f8:65:0f:1e:c1:9b: 85:64:ed:3a:7d:13:8b:bc:c1:8d:db:81:76:d9:58:7a:21:ea: 18:91:50:72:7d:17:e9:1e:2b:bd:b7:e2:13:47:e6:04:28:9c: f3:57:b7:20:c7:48:19:06:c0:a5:c1:73:fc:a9:f2:75:2c:33: 00:00:51:e7:e5:7c:60:45:e9:21:2c:5a:66:3d:c8:74:48:a9: 8d:52:fc:d7:fb:2d:dd:1c:b9:5a:18:92:56:1c:f3:3f:70:30: 12:7e:a6:c9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt9W1NYV9LtMT0kVZFNKKcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj MjAzMmUwHhcNMjYwMTAyMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODYzNDcxNzMxZGIxN2JmYmM1MDlhOTMyY2RlMTAzMjMxYTc1ZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUKrOC5kart/BgTX1O1/mDuChRAu hDZFUD6kUDNE3u5V6MXUN77Za84irtS35y+Wuc+EVmeOfc0mECt8UoS0yugvCx9u O8MRGI9aragsxZ6+FN90pnhD8oOPbPsK1WUTnGRG57rmjnZhiLmnIjfwGI/BNMiL YsBsz52BkzAl88r4j5HB53AlhcBJYml8DeBAelWCv5AiZe/aPbSCtV4vooeM3od3 cO4QK+LO6EtRY6/nFwvdUkcqBwIpsR/XtC4ADH2VpbMi2ddVfqOyxIjyVVwc2b0S B6pdzL/zBUiRC6MkErwGuonbFZUNXng+P1SBezU3m7iw6Ga7p6Z3PLcF5QIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFAhjRxcx2xe/vFCakyzeEDIxp18lMB8GA1UdIwQY MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct OWUyMjBmMDRhOTAxLzEvQ0dOSEZ6SGJGNy04VUpxVExONFFNakduWHlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEkv/QMAwD BAGwOiYDBAKwOigwDAMEALA6LQMEALA6MjAMAwQCsDo0AwQBsDo4AwQAub6+AwQD 1HxgMA0GCSqGSIb3DQEBCwUAA4IBAQCvr1qiD971Q2Kzx4oN3uipsUO2OrnUTPEO WHbAGAtQ1+dJwB7PX3nIeKAXUtplR+PXfzHURYGe+3DLjsRf5la3KiEOm7Mau2WZ h/TqvYf1VTsQ0VE05cUY1i1MZaTg1hAF6y5spWFlLaoAgL4F3Q+33BhW/JfT5yci 0+uix46r3WEs16Pch3f2s23yhsfcFYtrbuqZiFgqqIezrSn4ZQ8ewZuFZO06fROL vMGN24F22Vh6IeoYkVByfRfpHiu9t+ITR+YEKJzzV7cgx0gZBsClwXP8qfJ1LDMA AFHn5XxgRekhLFpmPch0SKmNUvzX+y3dHLlaGJJWHPM/cDASfqbJ -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:40 2026 by rpki-client