This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/gJQzhId802-YJNx0WWaWWkM-fD4.roa File: gJQzhId802-YJNx0WWaWWkM-fD4.roa (raw, json) Hash identifier: Lrav2MOtvej8ZsEdP9SgEjv5mWkDtP7CfAPS8l/cHkI= Subject key identifier: 80:94:33:84:87:7C:D3:6F:98:24:DC:74:59:66:96:5A:43:3E:7C:3E Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388 Certificate serial: 019B7A5B9155215F8E0EDEBAA60953C1BBAF Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/gJQzhId802-YJNx0WWaWWkM-fD4.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8771 IP address blocks: 78.30.128.0/18 maxlen: 18 109.121.64.0/19 maxlen: 19 109.121.96.0/20 maxlen: 20 194.247.192.0/19 maxlen: 19 213.198.192.0/18 maxlen: 18 213.240.0.0/19 maxlen: 19 213.240.36.0/22 maxlen: 22 213.240.40.0/21 maxlen: 21 213.240.40.0/23 maxlen: 23 213.240.48.0/20 maxlen: 20 2a00:1108::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:91:55:21:5f:8e:0e:de:ba:a6:09:53:c1:bb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80943384877cd36f9824dc745966965a433e7c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:0f:73:75:29:77:a7:23:8a:63:6d:5d:6c: bd:7f:cd:6f:3c:9b:fe:14:9b:d2:e9:07:33:b4:62: 14:a0:cf:46:a9:03:5a:08:7b:2c:30:a8:2e:54:6a: d8:78:d5:d7:7e:60:fe:97:59:81:59:9e:d2:f4:0c: ec:f9:2a:7f:d2:c8:12:6e:35:c8:55:88:ff:b9:30: 63:01:53:78:3f:e9:2b:f8:4a:97:5f:22:35:7f:76: 70:f8:f0:ee:8b:43:2f:e8:43:9e:ad:fa:e6:9b:49: 6c:dc:75:de:4f:7c:4f:d7:b5:04:23:a5:65:0f:26: 3f:dc:fe:39:06:7d:e8:e0:3d:81:ff:08:fc:47:bb: 39:5d:2d:9b:ee:d1:c0:1d:c4:5d:a4:f7:98:90:19: 6f:e3:d5:ab:6a:d6:d1:15:7d:c7:b3:68:3d:6f:fd: 5c:83:91:40:34:bc:17:84:08:93:5f:b3:06:ed:6a: a0:55:f9:fe:be:60:5b:b3:21:9d:ee:4d:82:38:0e: 5c:5b:25:82:9a:e2:de:5d:c1:9e:f3:02:85:7b:cd: 4b:88:00:cf:b7:5c:b9:2b:6e:f2:b5:0f:3d:5b:89: db:41:c1:59:89:78:88:66:fb:0d:7e:de:6b:45:47: e8:d2:28:98:e4:b2:48:cc:5c:b0:37:80:80:5b:d5: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:94:33:84:87:7C:D3:6F:98:24:DC:74:59:66:96:5A:43:3E:7C:3E X509v3 Authority Key Identifier: keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/gJQzhId802-YJNx0WWaWWkM-fD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.30.128.0/18 109.121.64.0-109.121.111.255 194.247.192.0/19 213.198.192.0/18 213.240.0.0/19 213.240.36.0-213.240.63.255 IPv6: 2a00:1108::/32 Signature Algorithm: sha256WithRSAEncryption 1f:43:d9:13:d9:c6:67:58:03:c1:94:36:06:12:42:dd:10:9a: d5:ef:67:21:2d:ac:20:f2:9b:b9:dc:10:0c:8e:13:22:49:26: 5d:f5:61:4d:0a:98:b1:e4:2e:7c:de:58:07:81:58:5e:c3:7c: 18:43:6c:ef:27:64:50:4b:40:0d:9f:6b:02:86:64:49:88:82: f3:5f:6a:c0:06:d2:08:b0:a9:fa:c7:ab:11:33:d2:15:42:2c: f4:1d:57:2b:58:0d:65:5d:86:e2:ab:fc:6d:4d:bb:f4:89:28: 15:bd:cb:b8:1d:4d:ad:de:19:18:9d:7b:ed:a8:24:46:75:17: fb:77:92:be:6b:d0:43:40:3c:e4:0e:f3:f7:81:3b:4c:ed:d5: 4c:32:40:6c:79:21:6b:cf:44:75:1a:9e:e9:d1:ab:d6:07:b4: fd:eb:c1:cd:a1:ab:87:0a:b7:5e:6f:68:7e:e0:c7:51:0d:c2: 0c:19:27:9e:9d:b1:b7:db:a9:47:2a:28:00:9b:30:c9:34:2b: 5b:db:b5:39:21:c6:22:5f:ad:6f:c3:58:51:87:43:c0:90:71: 96:c4:27:f8:7b:b8:52:4d:7a:f9:a0:15:12:02:4a:ec:b5:dd: f2:35:86:41:1b:d6:ad:5f:78:dd:a5:74:1d:64:41:6e:2c:c9: 49:bc:03:5c -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt6W5FVIV+ODt66pglTwbuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjU4ZDVlZmEyYTBhM2MzNmM5MjM5Mzc0MjU4YTk4Zjdm ZGEzODgwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDk0MzM4NDg3N2NkMzZmOTgyNGRjNzQ1OTY2OTY1YTQzM2U3YzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HsPc3Upd6cjimNtXWy9f81vPJv+ FJvS6QcztGIUoM9GqQNaCHssMKguVGrYeNXXfmD+l1mBWZ7S9Azs+Sp/0sgSbjXI VYj/uTBjAVN4P+kr+EqXXyI1f3Zw+PDui0Mv6EOerfrmm0ls3HXeT3xP17UEI6Vl DyY/3P45Bn3o4D2B/wj8R7s5XS2b7tHAHcRdpPeYkBlv49WratbRFX3Hs2g9b/1c g5FANLwXhAiTX7MG7WqgVfn+vmBbsyGd7k2COA5cWyWCmuLeXcGe8wKFe81LiADP t1y5K27ytQ89W4nbQcFZiXiIZvsNft5rRUfo0iiY5LJIzFywN4CAW9XZMwIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFICUM4SHfNNvmCTcdFlmllpDPnw+MB8GA1UdIwQY MBaAFGFljV76Kgo8Nskjk3Qlipj3/aOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAt ZGZlNmM1ZWIxZjdjLzEvZ0pRemhJZDgwMi1ZSk54MFdXYVdXa00tZkQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAtZGZlNmM1ZWIxZjdj LzEvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQGTh6AMAwD BAZteUADBARteWADBAXC98ADBAbVxsADBAXV8AAwDAMEAtXwJAMEBtXwADANBAIA AjAHAwUAKgARCDANBgkqhkiG9w0BAQsFAAOCAQEAH0PZE9nGZ1gDwZQ2BhJC3RCa 1e9nIS2sIPKbudwQDI4TIkkmXfVhTQqYseQufN5YB4FYXsN8GENs7ydkUEtADZ9r AoZkSYiC819qwAbSCLCp+serETPSFUIs9B1XK1gNZV2G4qv8bU279IkoFb3LuB1N rd4ZGJ177agkRnUX+3eSvmvQQ0A85A7z94E7TO3VTDJAbHkha89EdRqe6dGr1ge0 /evBzaGrhwq3Xm9ofuDHUQ3CDBknnp2xt9upRyooAJswyTQrW9u1OSHGIl+tb8NY UYdDwJBxlsQn+Hu4Uk16+aAVEgJK7LXd8jWGQRvWrV943aV0HWRBbizJSbwDXA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:26 2026 by rpki-client