This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/G02ElsCqv23-tVgVHTHT6eprH00.roa File: G02ElsCqv23-tVgVHTHT6eprH00.roa (raw, json) Hash identifier: sGk7DbjLrUDoYzqMoh/gSCZnKsTwAK0q0KRJc6B9Pp8= Subject key identifier: 1B:4D:84:96:C0:AA:BF:6D:FE:B5:58:15:1D:31:D3:E9:EA:6B:1F:4D Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82C2E39EC84DEF6325CEB05064301 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/G02ElsCqv23-tVgVHTHT6eprH00.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 2.58.124.0/22 maxlen: 24 5.252.20.0/24 maxlen: 24 5.252.21.0/24 maxlen: 24 5.252.22.0/24 maxlen: 24 5.252.23.0/24 maxlen: 24 92.118.125.0/24 maxlen: 24 92.118.126.0/24 maxlen: 24 92.118.127.0/24 maxlen: 24 146.19.233.0/24 maxlen: 24 2a0b:ec82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2c:2e:39:ec:84:de:f6:32:5c:eb:05:06:43:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b4d8496c0aabf6dfeb558151d31d3e9ea6b1f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:eb:06:7e:43:25:58:54:fb:89:f0:30:94: f0:64:71:c6:bf:33:fa:fe:de:45:38:5d:26:86:ec: 1e:71:5a:e9:a1:98:cf:37:b4:e1:28:bc:6a:d5:40: 42:b9:4b:8a:c3:1e:89:4e:97:8b:15:45:2e:ca:86: d4:72:6b:79:e8:ee:80:fc:cf:4f:d4:65:5d:02:20: 06:96:6f:70:35:45:25:8b:5d:a3:b1:2c:bb:4a:87: 18:c1:48:89:ae:71:cd:6a:a1:d9:db:96:21:64:19: a6:34:b2:9d:b4:72:75:99:00:d9:9b:13:44:56:38: 78:52:03:93:5f:1e:f6:9d:66:73:2b:ab:27:1c:52: 06:5c:32:18:3d:8c:b5:c3:8d:13:e8:2c:b2:d5:0f: 6d:47:3f:26:02:01:44:fb:5e:12:eb:ee:4e:fe:63: 4c:c8:39:95:1e:d4:9e:9a:9e:62:90:80:57:59:82: be:ce:99:05:fd:39:40:3a:9f:50:ab:1d:83:74:74: f3:11:42:b2:ec:05:d0:67:1a:98:9f:01:7b:fe:b5: 83:32:d8:c0:f2:ba:a8:62:87:ec:0b:60:66:df:17: 03:7c:26:77:b9:d1:46:8e:3c:f2:36:fa:0b:0c:16: 59:9c:52:86:d0:ce:52:45:65:f7:c2:ad:e2:35:6b: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4D:84:96:C0:AA:BF:6D:FE:B5:58:15:1D:31:D3:E9:EA:6B:1F:4D X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/G02ElsCqv23-tVgVHTHT6eprH00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.124.0/22 5.252.20.0/22 92.118.125.0-92.118.127.255 146.19.233.0/24 IPv6: 2a0b:ec82::/32 Signature Algorithm: sha256WithRSAEncryption 2d:17:d9:e1:aa:1b:eb:3f:65:4b:75:b1:03:5d:af:8a:b2:8a: ab:0e:69:14:b0:89:5f:bf:06:10:7b:66:c9:03:c4:52:1a:48: c0:67:e4:ed:6c:3f:5f:3f:44:05:39:f9:81:54:86:ab:d1:9d: bb:e5:09:9e:01:a6:ba:b4:8a:cc:f9:5f:af:63:88:07:1d:72: 4a:b4:bb:05:dc:bc:1e:bd:6e:37:cb:e7:dc:94:ed:c8:5e:87: d3:16:34:4c:49:da:8e:0b:bc:37:dd:47:95:cb:d2:20:3e:98: 89:c3:67:ca:a7:e4:bb:4d:f3:71:7d:db:d9:5b:d5:ff:cd:e6: 8b:04:d4:24:d2:01:4e:5b:11:2a:ba:c9:35:63:e2:c9:02:5b: 85:6f:bb:77:d5:41:42:10:27:ec:20:2a:fb:b7:31:2d:e2:4a: 1d:89:47:b5:69:de:2d:28:26:71:72:9e:d7:f4:29:67:8b:92: 8d:b9:81:8f:bc:f4:43:24:d1:6e:34:59:89:83:33:c3:ae:ac: e4:c2:b0:a8:1b:b2:4a:ca:85:ba:de:23:60:cc:33:3d:01:54: e6:0d:2c:34:32:1c:c6:17:ca:f0:6a:2d:5e:d6:70:7a:93:2f: 69:d6:15:2a:9f:45:b8:86:b0:cf:f3:86:53:4e:c7:e0:b4:b6: 30:ed:0d:75 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt6yCwuOeyE3vYyXOsFBkMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjRkODQ5NmMwYWFiZjZkZmViNTU4MTUxZDMxZDNlOWVhNmIxZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoLrBn5DJVhU+4nwMJTwZHHGvzP6 /t5FOF0mhuwecVrpoZjPN7ThKLxq1UBCuUuKwx6JTpeLFUUuyobUcmt56O6A/M9P 1GVdAiAGlm9wNUUli12jsSy7SocYwUiJrnHNaqHZ25YhZBmmNLKdtHJ1mQDZmxNE Vjh4UgOTXx72nWZzK6snHFIGXDIYPYy1w40T6Cyy1Q9tRz8mAgFE+14S6+5O/mNM yDmVHtSemp5ikIBXWYK+zpkF/TlAOp9Qqx2DdHTzEUKy7AXQZxqYnwF7/rWDMtjA 8rqoYofsC2Bm3xcDfCZ3udFGjjzyNvoLDBZZnFKG0M5SRWX3wq3iNWs9QwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFBtNhJbAqr9t/rVYFR0x0+nqax9NMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvRzAyRWxzQ3F2MjMtdFZnVkhUSFQ2ZXBySDAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCAjp8AwQC BfwUMAwDBABcdn0DBAdcdgADBACSE+kwDQQCAAIwBwMFACoL7IIwDQYJKoZIhvcN AQELBQADggEBAC0X2eGqG+s/ZUt1sQNdr4qyiqsOaRSwiV+/BhB7ZskDxFIaSMBn 5O1sP18/RAU5+YFUhqvRnbvlCZ4Bprq0isz5X69jiAcdckq0uwXcvB69bjfL59yU 7cheh9MWNExJ2o4LvDfdR5XL0iA+mInDZ8qn5LtN83F929lb1f/N5osE1CTSAU5b ESq6yTVj4skCW4Vvu3fVQUIQJ+wgKvu3MS3iSh2JR7Vp3i0oJnFyntf0KWeLko25 gY+89EMk0W40WYmDM8OurOTCsKgbskrKhbreI2DMMz0BVOYNLDQyHMYXyvBqLV7W cHqTL2nWFSqfRbiGsM/zhlNOx+C0tjDtDXU= -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:12 2026 by rpki-client