This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_gqR0WwGA3glTlyF8yiHIFlb8dE.roa File: _gqR0WwGA3glTlyF8yiHIFlb8dE.roa (raw, json) Hash identifier: mFyXN2DxlKKJyDR5JPAfUo4hQrC8BxOn6sp6aAgxtac= Subject key identifier: FE:0A:91:D1:6C:06:03:78:25:4E:5C:85:F3:28:87:20:59:5B:F1:D1 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B79106CB0E34AD7AA206AEF48828FE7BC Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_gqR0WwGA3glTlyF8yiHIFlb8dE.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 5.39.252.0/24 maxlen: 24 5.39.254.0/24 maxlen: 24 5.144.178.0/24 maxlen: 24 31.192.244.0/24 maxlen: 24 103.136.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 23:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6c:b0:e3:4a:d7:aa:20:6a:ef:48:82:8f:e7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe0a91d16c060378254e5c85f3288720595bf1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:54:9d:29:18:07:1b:9b:91:98:c1:af:51: be:05:e2:8c:b3:54:40:31:c6:0b:7a:73:bc:ae:a1: fa:26:d4:99:95:c5:af:39:b6:c3:c4:96:38:32:e1: 97:26:d4:79:5d:f1:1c:7c:d5:8f:cc:b2:fb:7d:1a: 11:67:19:ef:47:06:47:3a:c7:cc:c4:3d:55:b3:2b: 59:34:b4:51:81:ed:1e:aa:70:38:8c:fb:78:a4:eb: 0e:a3:ef:ce:a1:0d:f0:bf:0e:79:41:c9:11:78:aa: 23:82:33:80:d8:f3:7d:e5:57:da:31:71:f9:5e:95: ad:3c:65:86:f2:c9:72:ca:6f:1c:5f:1e:c4:ce:fb: af:0d:01:f0:c8:d8:b6:a2:a5:3e:16:42:fc:44:cd: ee:5f:68:08:ea:55:26:63:3d:b5:04:2d:ac:06:59: fa:e8:93:81:2a:82:4a:34:e6:a1:7c:b9:41:97:4f: 94:71:5e:15:97:ad:a3:75:bc:58:25:51:f2:c6:43: d0:ad:a9:36:38:29:98:a0:8a:2a:de:89:46:18:f9: c2:37:a7:3a:f8:97:1a:c7:69:eb:8f:6c:29:f6:39: 8a:74:00:de:13:62:b1:a7:23:63:b3:67:0d:0a:ae: b4:75:4f:40:af:4f:ee:0e:7e:cc:66:8f:32:3b:4f: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0A:91:D1:6C:06:03:78:25:4E:5C:85:F3:28:87:20:59:5B:F1:D1 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_gqR0WwGA3glTlyF8yiHIFlb8dE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.252.0/24 5.39.254.0/24 5.144.178.0/24 31.192.244.0/24 103.136.68.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ca:51:51:18:26:40:5e:a3:dc:c7:15:11:f9:42:2b:0d:12: a2:25:da:73:db:12:d0:e2:02:8a:db:b8:0d:55:78:8f:ff:a1: 39:02:3f:45:3d:db:56:fe:a3:0e:3a:4e:2b:48:0f:81:50:45: 65:9f:33:c6:9a:c5:98:46:71:b5:ca:47:57:6e:4f:92:35:9c: 4f:66:7e:1f:c1:87:0a:de:c9:0a:db:d1:42:1c:37:8e:16:ce: 21:b3:12:96:29:6e:14:24:3d:7c:0b:57:ff:72:50:f0:55:2e: 98:f2:1a:5e:39:89:14:02:16:1c:89:1c:14:c8:36:f1:79:14: cd:bd:71:93:6a:91:e2:49:1c:eb:b5:71:46:cb:2b:12:b8:af: f1:0a:97:62:e6:f3:af:e9:5d:da:69:62:db:10:d1:26:d3:84: 14:64:5d:f3:a8:82:a6:5e:1a:29:1b:bc:ce:3e:57:3d:14:a0: 0f:4c:25:6a:c9:1d:7e:cf:1d:a1:08:fc:a4:da:4d:63:61:b6: 23:30:c3:64:38:a7:58:7f:66:c0:da:3a:25:3e:58:ee:37:d8: 1b:9e:b0:6a:38:ef:1c:9b:70:c7:a9:6f:37:62:bd:99:d1:3d: 31:9e:4b:4c:51:29:77:9a:e8:c0:39:38:70:3b:cf:a4:49:74: d2:49:5a:17 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EGyw40rXqiBq70iCj+e8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTBhOTFkMTZjMDYwMzc4MjU0ZTVjODVmMzI4ODcyMDU5NWJmMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh1UnSkYBxubkZjBr1G+BeKMs1RA McYLenO8rqH6JtSZlcWvObbDxJY4MuGXJtR5XfEcfNWPzLL7fRoRZxnvRwZHOsfM xD1VsytZNLRRge0eqnA4jPt4pOsOo+/OoQ3wvw55QckReKojgjOA2PN95VfaMXH5 XpWtPGWG8slyym8cXx7EzvuvDQHwyNi2oqU+FkL8RM3uX2gI6lUmYz21BC2sBln6 6JOBKoJKNOahfLlBl0+UcV4Vl62jdbxYJVHyxkPQrak2OCmYoIoq3olGGPnCN6c6 +Jcax2nrj2wp9jmKdADeE2KxpyNjs2cNCq60dU9Ar0/uDn7MZo8yO08uBwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFP4KkdFsBgN4JU5chfMohyBZW/HRMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvX2dxUjBXd0dBM2dsVGx5Rjh5aUhJRmxiOGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABSf8AwQA BSf+AwQABZCyAwQAH8D0AwQAZ4hEMA0GCSqGSIb3DQEBCwUAA4IBAQBvylFRGCZA XqPcxxUR+UIrDRKiJdpz2xLQ4gKK27gNVXiP/6E5Aj9FPdtW/qMOOk4rSA+BUEVl nzPGmsWYRnG1ykdXbk+SNZxPZn4fwYcK3skK29FCHDeOFs4hsxKWKW4UJD18C1f/ clDwVS6Y8hpeOYkUAhYciRwUyDbxeRTNvXGTapHiSRzrtXFGyysSuK/xCpdi5vOv 6V3aaWLbENEm04QUZF3zqIKmXhopG7zOPlc9FKAPTCVqyR1+zx2hCPyk2k1jYbYj MMNkOKdYf2bA2jolPljuN9gbnrBqOO8cm3DHqW83Yr2Z0T0xnktMUSl3mujAOThw O8+kSXTSSVoX -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:21 2026 by rpki-client