This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/G0WDXCuEIEXc7NAbhhZ7Rz24urw.roa File: G0WDXCuEIEXc7NAbhhZ7Rz24urw.roa (raw, json) Hash identifier: uHhInE/T7EbQJoLQ4R9hWz9JNjRz8sWcB0d4KKh2tEk= Subject key identifier: 1B:45:83:5C:2B:84:20:45:DC:EC:D0:1B:86:16:7B:47:3D:B8:BA:BC Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B797F46A28B97E251F468D861C16F7A36 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/G0WDXCuEIEXc7NAbhhZ7Rz24urw.roa Signing time: Thu 01 Jan 2026 12:19:02 +0000 ROA not before: Thu 01 Jan 2026 12:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60707 IP address blocks: 213.238.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:46:a2:8b:97:e2:51:f4:68:d8:61:c1:6f:7a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Jan 1 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b45835c2b842045dcecd01b86167b473db8babc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:29:2b:fe:f1:38:a4:dc:8d:41:c8:d4:c7: a2:7c:e4:14:25:aa:11:42:98:9c:40:64:aa:ea:92: b2:1e:92:50:3c:a1:a4:2b:b7:a5:b8:3f:fe:51:92: 11:f4:ab:ee:11:a7:a0:8e:60:27:b7:82:33:a4:1c: 3f:8c:d2:89:e3:33:aa:bf:c6:e2:29:18:0e:be:42: 62:31:44:8d:8d:52:1e:84:50:c3:e1:ab:92:7f:55: 49:11:5a:14:0a:6d:72:f4:00:a5:d2:d8:5d:d2:0a: 60:c4:69:9b:3f:40:53:a8:1a:21:88:41:eb:1f:cd: 80:e5:8f:3c:5a:1f:30:1b:69:7c:f4:e9:06:5e:03: f7:51:ad:e7:69:24:8e:59:5a:3e:ea:82:b1:ed:cb: 25:c1:19:85:26:f4:0e:2b:99:be:18:5e:5c:a8:65: a4:19:d0:a3:e8:0f:a8:88:8f:fa:8b:16:df:1a:70: df:07:de:f0:d1:72:a0:bf:ef:2b:21:57:92:41:29: f5:4e:5f:c7:c5:4a:03:5a:c6:f9:d6:08:90:fd:d0: 18:4e:cd:d0:56:d1:2e:55:f7:dc:cb:0c:68:6f:ab: 58:32:0f:07:a5:4e:86:f5:99:9f:5e:ba:9d:86:41: 5d:09:df:b5:f5:2d:c5:c1:95:9d:f5:d0:14:55:30: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:45:83:5C:2B:84:20:45:DC:EC:D0:1B:86:16:7B:47:3D:B8:BA:BC X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/G0WDXCuEIEXc7NAbhhZ7Rz24urw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.172.0/24 Signature Algorithm: sha256WithRSAEncryption 79:65:9b:f5:bc:45:9c:68:39:9c:c9:cf:55:21:44:04:d7:51: d4:67:99:78:c8:72:49:cf:0d:1b:bb:dd:30:eb:8c:94:bf:c8: 4b:87:95:47:49:f7:30:de:7b:30:0a:15:f2:9a:3b:99:91:e7: 61:f7:2f:dd:0a:2a:48:86:4b:c9:47:4f:86:66:3a:43:12:c8: 26:0c:7f:e7:0d:23:6d:68:9f:d7:9d:89:1d:75:d6:ba:ff:8c: 22:d9:e4:8d:a6:99:42:3e:22:31:53:71:59:57:81:40:22:73: 9b:5e:a2:a3:c4:4f:7f:a6:87:d9:7c:08:e8:df:47:5e:b4:0c: e2:5d:81:dc:68:cf:46:49:01:0d:9c:d8:b8:15:5c:84:ce:45: a3:25:1a:f1:01:de:8c:3c:b9:d6:6e:7f:bb:e3:e3:29:32:fd: 1e:8d:c6:e2:ca:bd:fc:d8:f1:48:30:a6:2e:ae:ac:e4:a2:8d: 89:6c:6c:03:8d:9a:b0:91:23:19:51:5b:fe:20:ee:92:d7:7a: 40:c4:93:b5:67:c8:45:a9:b0:5f:14:8a:f6:00:51:bc:99:98: 60:a8:d6:69:e8:0b:88:9a:b2:5d:f7:7c:ff:04:27:61:28:4a: 3f:0a:af:50:2d:10:3f:89:fa:bd:f7:6b:73:32:c9:62:9f:78: b6:35:1a:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0aii5fiUfRo2GHBb3o2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjQ1ODM1YzJiODQyMDQ1ZGNlY2QwMWI4NjE2N2I0NzNkYjhiYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW4pK/7xOKTcjUHI1MeifOQUJaoR QpicQGSq6pKyHpJQPKGkK7eluD/+UZIR9KvuEaegjmAnt4IzpBw/jNKJ4zOqv8bi KRgOvkJiMUSNjVIehFDD4auSf1VJEVoUCm1y9ACl0thd0gpgxGmbP0BTqBohiEHr H82A5Y88Wh8wG2l89OkGXgP3Ua3naSSOWVo+6oKx7cslwRmFJvQOK5m+GF5cqGWk GdCj6A+oiI/6ixbfGnDfB97w0XKgv+8rIVeSQSn1Tl/HxUoDWsb51giQ/dAYTs3Q VtEuVffcywxob6tYMg8HpU6G9ZmfXrqdhkFdCd+19S3FwZWd9dAUVTDCGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtFg1wrhCBF3OzQG4YWe0c9uLq8MB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvRzBXRFhDdUVJRVhjN05BYmhoWjdSejI0dXJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6sMA0G CSqGSIb3DQEBCwUAA4IBAQB5ZZv1vEWcaDmcyc9VIUQE11HUZ5l4yHJJzw0bu90w 64yUv8hLh5VHSfcw3nswChXymjuZkedh9y/dCipIhkvJR0+GZjpDEsgmDH/nDSNt aJ/XnYkddda6/4wi2eSNpplCPiIxU3FZV4FAInObXqKjxE9/pofZfAjo30detAzi XYHcaM9GSQENnNi4FVyEzkWjJRrxAd6MPLnWbn+74+MpMv0ejcbiyr382PFIMKYu rqzkoo2JbGwDjZqwkSMZUVv+IO6S13pAxJO1Z8hFqbBfFIr2AFG8mZhgqNZp6AuI mrJd93z/BCdhKEo/Cq9QLRA/ifq992tzMslin3i2NRqs -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:58 2026 by rpki-client