This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/rng8GtvhW_7ZteA0FnuaZ2OXfUE.roa File: rng8GtvhW_7ZteA0FnuaZ2OXfUE.roa (raw, json) Hash identifier: kHUVVB4FBTKzzPlqingwFv/L2jPUQKZj58gnh5dBOiQ= Subject key identifier: AE:78:3C:1A:DB:E1:5B:FE:D9:B5:E0:34:16:7B:9A:67:63:97:7D:41 Certificate issuer: /CN=80f23f429504203c189737a2074e53f2efc64fc7 Certificate serial: 019B7BA51163BCE99F91713BD3D356869827 Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/rng8GtvhW_7ZteA0FnuaZ2OXfUE.roa Signing time: Thu 01 Jan 2026 22:19:33 +0000 ROA not before: Thu 01 Jan 2026 22:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211143 IP address blocks: 109.104.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:11:63:bc:e9:9f:91:71:3b:d3:d3:56:86:98:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae783c1adbe15bfed9b5e034167b9a6763977d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:07:ad:57:c6:02:ea:20:2c:aa:2b:9c:e7: fc:f7:24:47:dc:1b:af:1f:03:01:84:33:37:4c:7a: 21:bc:e1:03:54:50:6e:ce:c3:48:6f:bb:24:e0:98: fc:5f:c4:db:68:67:0b:9a:20:e6:92:f1:40:a1:96: de:9c:25:a3:10:5f:02:b9:e8:6e:52:c0:31:3e:19: 54:68:78:22:31:82:ab:6e:6e:d6:96:d6:3c:ac:d6: 60:cd:76:b2:d7:89:d5:10:10:72:fd:6c:82:92:4d: 48:a3:24:8d:db:b2:f8:5c:c2:4a:49:cc:b2:88:4f: 9b:c8:ff:16:f0:30:33:25:ec:29:1c:56:c4:55:50: 17:e3:3b:44:fb:9a:27:81:ca:ea:f4:c0:8b:12:da: d0:b5:63:0e:ab:6e:34:11:30:bd:40:9f:f2:8f:74: c5:9d:ac:77:44:ca:36:27:a8:2b:c4:19:db:9f:48: 32:98:82:37:0b:8b:53:89:7c:15:45:2c:f7:ea:df: e7:0d:41:56:63:4b:10:58:3b:01:86:8e:23:7d:30: 96:ef:52:a6:a7:6a:7e:02:ef:09:fd:09:37:63:82: 19:36:33:94:85:b8:9d:be:d2:1b:3d:56:44:0b:7a: 31:d2:ed:62:84:e1:47:a8:a2:61:a9:4d:d4:62:f3: 1f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:3C:1A:DB:E1:5B:FE:D9:B5:E0:34:16:7B:9A:67:63:97:7D:41 X509v3 Authority Key Identifier: keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/rng8GtvhW_7ZteA0FnuaZ2OXfUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.102.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:e3:66:c3:e1:df:6b:9e:69:9d:20:92:77:a8:04:07:72:02: 29:58:4a:15:51:fb:55:70:54:cc:62:25:cd:f8:a3:80:b1:d5: cc:f3:3e:b4:0a:55:d6:92:ce:48:93:97:d3:a3:4a:65:07:02: 4c:66:9c:49:e4:fd:2e:13:70:9f:13:4d:c3:5d:92:9f:d1:32: 75:88:a6:4f:a0:01:18:74:22:8b:0c:82:53:f5:61:2b:07:8c: 72:4d:f5:f7:e9:1a:18:36:f5:a5:41:e3:ab:d5:d1:1a:74:f3: 90:8d:55:06:9e:bf:94:6a:7b:70:68:45:ab:e2:a5:48:83:61: 91:09:55:35:13:75:d7:06:31:af:6d:49:38:12:0b:ba:ce:e4: 89:e3:91:fb:d2:44:bc:ce:7f:a2:ad:c8:de:98:96:90:e2:57: 81:04:41:a2:ca:a2:b1:ab:9c:90:a9:49:5d:64:8e:6e:b6:52: 3e:58:fe:d4:b1:0c:42:b4:6b:a8:ca:2f:37:51:83:48:e6:bd: ab:21:28:04:a7:c6:10:5c:79:66:71:6b:63:a6:5c:fa:68:c4: 1f:ab:37:43:1e:0a:9c:b2:66:a9:d7:2f:35:4c:da:39:e9:eb: a3:88:c0:24:83:63:07:e8:9b:d1:7c:73:54:28:dd:3f:ff:bd: 27:2b:78:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRFjvOmfkXE709NWhpgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZjIzZjQyOTUwNDIwM2MxODk3MzdhMjA3NGU1M2YyZWZj NjRmYzcwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTc4M2MxYWRiZTE1YmZlZDliNWUwMzQxNjdiOWE2NzYzOTc3ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupkHrVfGAuogLKornOf89yRH3Buv HwMBhDM3THohvOEDVFBuzsNIb7sk4Jj8X8TbaGcLmiDmkvFAoZbenCWjEF8Cuehu UsAxPhlUaHgiMYKrbm7WltY8rNZgzXay14nVEBBy/WyCkk1IoySN27L4XMJKScyy iE+byP8W8DAzJewpHFbEVVAX4ztE+5ongcrq9MCLEtrQtWMOq240ETC9QJ/yj3TF nax3RMo2J6grxBnbn0gymII3C4tTiXwVRSz36t/nDUFWY0sQWDsBho4jfTCW71Km p2p+Au8J/Qk3Y4IZNjOUhbidvtIbPVZEC3ox0u1ihOFHqKJhqU3UYvMfMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK54PBrb4Vv+2bXgNBZ7mmdjl31BMB8GA1UdIwQY MBaAFIDyP0KVBCA8GJc3ogdOU/Lvxk/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEt ZDUxMTQxY2NkYzA2LzEvcm5nOEd0dmhXXzdadGVBMEZudWFaMk9YZlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEtZDUxMTQxY2NkYzA2 LzEvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbWhmMA0G CSqGSIb3DQEBCwUAA4IBAQCN42bD4d9rnmmdIJJ3qAQHcgIpWEoVUftVcFTMYiXN +KOAsdXM8z60ClXWks5Ik5fTo0plBwJMZpxJ5P0uE3CfE03DXZKf0TJ1iKZPoAEY dCKLDIJT9WErB4xyTfX36RoYNvWlQeOr1dEadPOQjVUGnr+UantwaEWr4qVIg2GR CVU1E3XXBjGvbUk4Egu6zuSJ45H70kS8zn+ircjemJaQ4leBBEGiyqKxq5yQqUld ZI5utlI+WP7UsQxCtGuoyi83UYNI5r2rISgEp8YQXHlmcWtjplz6aMQfqzdDHgqc smap1y81TNo56eujiMAkg2MH6JvRfHNUKN0//70nK3jC -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:56 2026 by rpki-client