This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa File: gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa (raw, json) Hash identifier: dm1irguKJX1M1N4BpGlN5fXMYwn1fhmqM78moCK0+Kk= Subject key identifier: 81:73:AA:40:70:96:A4:97:9A:A7:73:9F:E8:C0:A5:D8:9B:DF:E3:E5 Certificate issuer: /CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Certificate serial: 019B7B36C4953A8253D23F50D9C4465FBCCA Authority key identifier: 31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206409 IP address blocks: 89.107.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.mft rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c4:95:3a:82:53:d2:3f:50:d9:c4:46:5f:bc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31184c9e8b6aa407c0d73ed0ba063075f6314e36 Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8173aa407096a4979aa7739fe8c0a5d89bdfe3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:dd:88:67:32:0b:ca:79:8f:29:f1:f8:36: 1b:25:20:d8:df:33:21:aa:6c:15:70:5a:15:e5:4c: 8f:4e:ff:a5:f3:c3:4d:73:14:3d:f9:c7:1d:ef:aa: 2b:4b:7e:6b:b0:b5:e0:51:66:2e:67:88:81:3c:66: b4:ac:f6:a3:b0:32:fd:5f:fa:64:cd:69:9c:21:2e: f8:b9:35:54:10:f7:24:a3:aa:f1:7d:03:f4:2d:61: bb:4e:56:80:de:70:6a:fb:91:74:d2:7f:5c:ce:37: 68:83:3a:19:b7:19:44:3e:33:51:a8:4c:d3:2e:93: f6:27:e7:6d:19:41:cf:d4:a0:9c:96:59:82:bd:67: 11:bc:0a:91:68:4e:53:c7:be:54:a9:6c:51:35:fc: 9d:6a:1a:4b:78:97:ee:a0:7d:02:2b:a9:f2:3a:e9: 82:c7:33:18:65:eb:b4:c6:3b:96:94:8b:fb:f3:19: 2d:b8:74:cd:cb:13:ba:0e:a0:b9:3d:8f:b0:66:6c: ca:27:82:00:b6:5a:52:25:f8:be:26:d4:d1:9a:7c: c3:e0:cc:71:9d:86:e6:93:33:9e:b7:7c:c9:bd:20: bb:b8:8a:d5:6d:35:8c:ef:f3:68:c0:7f:9a:92:af: d1:84:d0:1d:cd:2d:9b:93:6d:e5:00:2e:73:dd:8c: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:73:AA:40:70:96:A4:97:9A:A7:73:9F:E8:C0:A5:D8:9B:DF:E3:E5 X509v3 Authority Key Identifier: keyid:31:18:4C:9E:8B:6A:A4:07:C0:D7:3E:D0:BA:06:30:75:F6:31:4E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhMnotqpAfA1z7QugYwdfYxTjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/gXOqQHCWpJeap3Of6MCl2Jvf4-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6f8f43-1a19-410f-a2f3-e4ac706da148/1/MRhMnotqpAfA1z7QugYwdfYxTjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.13.0/24 Signature Algorithm: sha256WithRSAEncryption 76:45:8d:fc:09:d2:a9:c9:0c:fc:75:61:80:0c:5d:a6:4d:5a: 6d:03:8e:1f:7b:af:bb:e3:6b:ba:07:f3:84:0e:81:2e:17:8d: b1:64:d8:9c:ea:9b:25:f0:26:ec:73:1e:cb:57:55:a1:d3:d1: 6e:03:58:8d:0b:a7:64:b0:e4:1c:39:21:4d:0e:ed:cf:82:d1: 56:57:e6:4e:e0:a0:45:18:56:ca:58:27:96:d3:64:d1:d2:77: 9b:71:5d:b1:59:d9:26:2d:81:50:48:3b:a4:53:0a:28:de:bf: 61:77:da:fc:62:ec:fc:5a:47:ad:4d:62:68:c6:31:7e:ce:93: 98:18:e8:e9:98:69:d1:19:39:d8:4d:ae:3a:fc:aa:0d:d7:aa: a3:75:96:ce:2f:cb:f7:be:4b:f6:09:b9:f0:49:2d:4b:26:e8: 36:1b:c6:b0:8a:25:43:fa:4b:4f:22:eb:5f:75:91:c8:ee:3f: e6:40:0d:f8:08:28:7b:46:73:9c:b8:89:f4:57:5e:5a:48:7a: 4b:fb:90:36:1d:2d:53:be:1e:49:55:80:73:7f:c8:c2:cb:91: 4b:43:21:2c:11:84:c5:c6:18:39:d1:60:4a:ba:17:1a:39:ed: 55:1e:8d:d7:ff:4b:f7:14:6c:6d:d3:60:b3:82:50:6d:60:d5: 73:12:1f:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsSVOoJT0j9Q2cRGX7zKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTg0YzllOGI2YWE0MDdjMGQ3M2VkMGJhMDYzMDc1ZjYz MTRlMzYwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTczYWE0MDcwOTZhNDk3OWFhNzczOWZlOGMwYTVkODliZGZlM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUHdiGcyC8p5jynx+DYbJSDY3zMh qmwVcFoV5UyPTv+l88NNcxQ9+ccd76orS35rsLXgUWYuZ4iBPGa0rPajsDL9X/pk zWmcIS74uTVUEPcko6rxfQP0LWG7TlaA3nBq+5F00n9czjdogzoZtxlEPjNRqEzT LpP2J+dtGUHP1KCcllmCvWcRvAqRaE5Tx75UqWxRNfydahpLeJfuoH0CK6nyOumC xzMYZeu0xjuWlIv78xktuHTNyxO6DqC5PY+wZmzKJ4IAtlpSJfi+JtTRmnzD4Mxx nYbmkzOet3zJvSC7uIrVbTWM7/NowH+akq/RhNAdzS2bk23lAC5z3YwARwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFzqkBwlqSXmqdzn+jApdib3+PlMB8GA1UdIwQY MBaAFDEYTJ6LaqQHwNc+0LoGMHX2MU42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMt ZTRhYzcwNmRhMTQ4LzEvZ1hPcVFIQ1dwSmVhcDNPZjZNQ2wySnZmNC1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82ZjhmNDMtMWExOS00MTBmLWEyZjMtZTRhYzcwNmRhMTQ4 LzEvTVJoTW5vdHFwQWZBMXo3UXVnWXdkZll4VGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWsNMA0G CSqGSIb3DQEBCwUAA4IBAQB2RY38CdKpyQz8dWGADF2mTVptA44fe6+742u6B/OE DoEuF42xZNic6psl8Cbscx7LV1Wh09FuA1iNC6dksOQcOSFNDu3PgtFWV+ZO4KBF GFbKWCeW02TR0nebcV2xWdkmLYFQSDukUwoo3r9hd9r8Yuz8WketTWJoxjF+zpOY GOjpmGnRGTnYTa46/KoN16qjdZbOL8v3vkv2CbnwSS1LJug2G8awiiVD+ktPIutf dZHI7j/mQA34CCh7RnOcuIn0V15aSHpL+5A2HS1Tvh5JVYBzf8jCy5FLQyEsEYTF xhg50WBKuhcaOe1VHo3X/0v3FGxt02CzglBtYNVzEh9j -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:03 2026 by rpki-client