This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/gQf5G9Hw0jqLTco8BzanoYJkr0s.roa File: gQf5G9Hw0jqLTco8BzanoYJkr0s.roa (raw, json) Hash identifier: PQEokUiOnX9Qj/TyQO7GSAnGjYkROWa561oyoy92YWw= Subject key identifier: 81:07:F9:1B:D1:F0:D2:3A:8B:4D:CA:3C:07:36:A7:A1:82:64:AF:4B Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d Certificate serial: 019B7FF22E32F027DEE143D7C5508169EA75 Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/gQf5G9Hw0jqLTco8BzanoYJkr0s.roa Signing time: Fri 02 Jan 2026 18:22:16 +0000 ROA not before: Fri 02 Jan 2026 18:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.75.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:2e:32:f0:27:de:e1:43:d7:c5:50:81:69:ea:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d Validity Not Before: Jan 2 18:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8107f91bd1f0d23a8b4dca3c0736a7a18264af4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:68:76:80:31:7f:0f:df:c6:63:fc:98:87: 8a:c9:91:96:55:76:c5:f7:4d:8f:3b:b0:3f:d0:b0: 39:97:58:56:2b:62:30:7a:60:ca:a4:bd:10:a1:2a: c7:2e:44:51:e9:73:88:af:18:ee:85:71:a8:96:a5: c3:0c:31:bd:1b:72:73:92:d1:86:7c:65:d2:19:14: cf:83:0d:ec:45:5e:2d:43:9b:39:89:9c:e7:0f:2d: 27:4b:44:8e:98:08:9a:48:b4:bb:8c:f2:07:b8:46: d7:64:2a:48:9a:1a:d5:dc:96:d7:b9:fc:f3:0d:3a: f4:74:04:5c:c4:8c:ef:ec:4e:2c:8c:ae:c2:17:f3: a8:c0:46:cb:02:fe:fb:f8:47:d6:12:a6:90:05:a7: 5b:7b:91:92:f0:19:ad:c4:42:a3:3e:4c:bf:b8:48: ea:d5:b8:3b:91:8d:68:ab:54:e1:f6:47:eb:b0:d9: 06:0b:fa:3b:4b:a3:e1:ec:8c:0c:1a:02:b1:fc:c7: b3:52:1a:d4:63:17:a6:85:c3:e5:2a:5e:7f:df:ae: 46:50:43:1d:3b:29:04:d2:ff:ee:d9:1e:bf:44:a7: 59:2b:3d:19:a5:0e:5d:6b:1f:de:d1:3b:28:41:fb: 85:29:57:b8:20:dc:73:c5:ce:50:dc:d0:c8:c2:52: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:F9:1B:D1:F0:D2:3A:8B:4D:CA:3C:07:36:A7:A1:82:64:AF:4B X509v3 Authority Key Identifier: keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/gQf5G9Hw0jqLTco8BzanoYJkr0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.60.0/22 Signature Algorithm: sha256WithRSAEncryption 45:77:09:fc:ad:5d:9e:bb:e5:d7:64:2f:17:ab:bf:9f:c2:4f: de:4e:60:18:4c:1c:08:89:20:f0:5f:32:67:44:b3:0b:9f:73: 66:0d:59:ce:22:31:5c:49:21:ce:0d:6a:55:83:a3:26:77:7e: c2:60:b7:52:c5:bc:5a:e0:f7:02:7c:a9:85:26:a8:c1:f8:a9: 12:ea:77:28:39:b7:93:44:e3:fc:72:39:00:2b:73:4f:d9:90: 40:9e:3e:c0:4b:9a:19:7d:b5:12:a7:80:27:e3:61:0f:5a:f5: b2:db:b9:b9:5d:b6:10:19:f8:e1:9c:82:d5:5f:f1:7f:f4:ac: 8e:b4:6f:87:58:d0:83:86:a3:03:ce:93:ff:53:b4:6c:14:9b: 40:cd:57:74:56:4f:21:4d:d6:be:c3:5b:49:a0:dd:7b:7b:ff: 37:5a:35:07:a5:52:98:5c:82:75:cb:d3:f2:c3:4d:43:13:a2: 61:65:60:1d:10:37:6a:a2:ca:83:72:1b:72:80:05:38:aa:93: 44:15:f4:44:f1:c7:57:60:f6:42:de:66:69:40:35:7c:93:a1: da:16:5e:23:5c:87:21:81:04:8f:ab:4d:4b:c7:2b:c1:11:c7: 4b:af:f1:91:84:0f:e1:de:19:7b:bb:3d:bd:54:92:c6:ca:8d: 7e:8e:99:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8i4y8Cfe4UPXxVCBaep1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTBiZmJmNzk4ZmFlYWE3ZDZhMzYwNThkMDEzZTI0ZDRi YjFkOWQwHhcNMjYwMTAyMTgyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA3ZjkxYmQxZjBkMjNhOGI0ZGNhM2MwNzM2YTdhMTgyNjRhZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwylodoAxfw/fxmP8mIeKyZGWVXbF 902PO7A/0LA5l1hWK2IwemDKpL0QoSrHLkRR6XOIrxjuhXGolqXDDDG9G3JzktGG fGXSGRTPgw3sRV4tQ5s5iZznDy0nS0SOmAiaSLS7jPIHuEbXZCpImhrV3JbXufzz DTr0dARcxIzv7E4sjK7CF/OowEbLAv77+EfWEqaQBadbe5GS8BmtxEKjPky/uEjq 1bg7kY1oq1Th9kfrsNkGC/o7S6Ph7IwMGgKx/MezUhrUYxemhcPlKl5/365GUEMd OykE0v/u2R6/RKdZKz0ZpQ5dax/e0TsoQfuFKVe4INxzxc5Q3NDIwlKcywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEH+RvR8NI6i03KPAc2p6GCZK9LMB8GA1UdIwQY MBaAFCRQv795j66qfWo2BY0BPiTUux2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUt ZGQ1NDlmM2I4M2JmLzEvZ1FmNUc5SHcwanFMVGNvOEJ6YW5vWUprcjBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xOWM3NmYtMmY2Ny00MjFjLTg0YWUtZGQ1NDlmM2I4M2Jm LzEvSkZDX3YzbVBycXA5YWpZRmpRRS1KTlM3SFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUs8MA0G CSqGSIb3DQEBCwUAA4IBAQBFdwn8rV2eu+XXZC8Xq7+fwk/eTmAYTBwIiSDwXzJn RLMLn3NmDVnOIjFcSSHODWpVg6Mmd37CYLdSxbxa4PcCfKmFJqjB+KkS6ncoObeT ROP8cjkAK3NP2ZBAnj7AS5oZfbUSp4An42EPWvWy27m5XbYQGfjhnILVX/F/9KyO tG+HWNCDhqMDzpP/U7RsFJtAzVd0Vk8hTda+w1tJoN17e/83WjUHpVKYXIJ1y9Py w01DE6JhZWAdEDdqosqDchtygAU4qpNEFfRE8cdXYPZC3mZpQDV8k6HaFl4jXIch gQSPq01LxyvBEcdLr/GRhA/h3hl7uz29VJLGyo1+jpnU -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:22 2026 by rpki-client