This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/gxBj4mi9DTD-XtJhh92wnnFfI0c.roa File: gxBj4mi9DTD-XtJhh92wnnFfI0c.roa (raw, json) Hash identifier: aSdTaRESDnJDn6dr8aVPGxKTLYVHaS0mrAqCtrDcgZs= Subject key identifier: 83:10:63:E2:68:BD:0D:30:FE:5E:D2:61:87:DD:B0:9E:71:5F:23:47 Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Certificate serial: 019B7A5A8267504F716A57E0E23A226718DC Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/gxBj4mi9DTD-XtJhh92wnnFfI0c.roa Signing time: Thu 01 Jan 2026 16:18:30 +0000 ROA not before: Thu 01 Jan 2026 16:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209799 IP address blocks: 92.243.85.0/24 maxlen: 24 194.15.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:82:67:50:4f:71:6a:57:e0:e2:3a:22:67:18:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=831063e268bd0d30fe5ed26187ddb09e715f2347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:81:aa:b9:6b:01:3a:4b:9e:b1:a4:a7:02: 94:06:6a:a8:49:1d:ab:f2:76:dd:80:2a:56:d7:d6: 59:3b:9e:17:6b:20:36:9c:83:e9:5a:e7:05:a9:44: e9:04:9e:66:4c:ba:50:a4:1f:bb:15:9f:0b:52:96: 10:f2:c5:56:6b:e9:0d:7a:af:80:a7:c5:c0:3c:ef: 15:c0:19:e5:10:95:62:fd:2f:c1:9c:74:4a:f2:fe: f0:c4:cc:d4:4b:f8:ab:8c:bf:c1:c9:1b:a4:ca:d5: 89:b9:cc:8e:cc:11:7e:ed:e9:81:89:e2:49:44:d1: bb:3c:ce:59:3b:0a:44:8d:29:cf:36:31:4b:9e:23: 63:c3:ec:d8:54:14:8b:51:58:de:33:28:fc:d6:c5: 61:20:36:db:dd:f0:02:ca:ea:64:2b:81:85:5c:10: e0:f9:a0:e4:f0:21:29:b8:ed:3c:71:79:f2:66:2b: 9b:f5:ae:0a:f3:0d:84:3b:91:9f:6d:97:f0:58:b1: 77:0a:97:c6:84:aa:ed:ec:60:3e:18:b5:ea:d1:5c: d6:4e:81:13:d9:93:fa:26:1a:f4:bc:5f:af:63:63: bb:d0:ed:65:a4:4c:49:09:cc:7f:ab:a9:85:a6:8d: f0:99:8e:3b:19:79:2c:0b:99:38:aa:9d:72:d3:f1: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:63:E2:68:BD:0D:30:FE:5E:D2:61:87:DD:B0:9E:71:5F:23:47 X509v3 Authority Key Identifier: keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/gxBj4mi9DTD-XtJhh92wnnFfI0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.85.0/24 194.15.100.0/22 Signature Algorithm: sha256WithRSAEncryption a0:c5:36:f2:f3:10:2b:34:7c:ef:c6:cf:3d:3f:b0:ef:6c:98: 6a:5f:20:4b:f7:aa:70:97:a1:20:22:71:78:25:f9:d8:05:6d: 5a:d9:5a:60:1d:cb:c3:ac:65:9f:4a:2c:92:08:55:6e:4a:3b: 2c:3f:f2:13:59:3a:a1:68:e6:9c:1f:e8:f0:14:70:10:8c:e5: 0c:6b:6d:4d:34:cc:62:06:a2:9c:21:e9:b5:c1:9a:a8:a4:9f: bc:4e:60:89:91:9a:e0:a0:07:eb:53:7b:28:b2:14:7e:a4:ec: d8:45:2a:0f:28:45:a9:08:24:f5:ca:e9:3f:bb:6b:32:ac:e8: 9b:55:27:2c:32:1c:66:20:22:4c:b1:19:9e:33:51:37:7f:b4: ff:05:02:61:0d:e6:b8:1d:1b:b1:b8:ca:f6:2f:ef:c1:bc:71: c8:25:d5:35:63:f5:76:41:e7:03:fc:e8:8d:b5:b8:42:c0:9a: 57:c3:8d:50:34:61:ba:05:03:d7:a5:79:70:4c:99:29:a3:f0: bb:6b:2b:14:7c:7f:52:b6:b7:50:2e:26:9e:79:a3:e4:86:e6: 28:6c:69:ae:40:22:4f:0d:72:f0:f5:92:ae:8c:45:1c:4e:7c: 73:af:89:70:ad:5d:30:16:5f:2e:6a:4f:75:03:4e:ac:3f:d6: 2a:fe:a6:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WoJnUE9xalfg4joiZxjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm NjFlNTIwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzEwNjNlMjY4YmQwZDMwZmU1ZWQyNjE4N2RkYjA5ZTcxNWYyMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLyBqrlrATpLnrGkpwKUBmqoSR2r 8nbdgCpW19ZZO54XayA2nIPpWucFqUTpBJ5mTLpQpB+7FZ8LUpYQ8sVWa+kNeq+A p8XAPO8VwBnlEJVi/S/BnHRK8v7wxMzUS/irjL/ByRukytWJucyOzBF+7emBieJJ RNG7PM5ZOwpEjSnPNjFLniNjw+zYVBSLUVjeMyj81sVhIDbb3fACyupkK4GFXBDg +aDk8CEpuO08cXnyZiub9a4K8w2EO5GfbZfwWLF3CpfGhKrt7GA+GLXq0VzWToET 2ZP6Jhr0vF+vY2O70O1lpExJCcx/q6mFpo3wmY47GXksC5k4qp1y0/En8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIMQY+JovQ0w/l7SYYfdsJ5xXyNHMB8GA1UdIwQY MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt NjY3NTg0Nzk4NjNlLzEvZ3hCajRtaTlEVEQtWHRKaGg5MndubkZmSTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXPNVAwQC wg9kMA0GCSqGSIb3DQEBCwUAA4IBAQCgxTby8xArNHzvxs89P7DvbJhqXyBL96pw l6EgInF4JfnYBW1a2VpgHcvDrGWfSiySCFVuSjssP/ITWTqhaOacH+jwFHAQjOUM a21NNMxiBqKcIem1wZqopJ+8TmCJkZrgoAfrU3soshR+pOzYRSoPKEWpCCT1yuk/ u2syrOibVScsMhxmICJMsRmeM1E3f7T/BQJhDea4HRuxuMr2L+/BvHHIJdU1Y/V2 QecD/OiNtbhCwJpXw41QNGG6BQPXpXlwTJkpo/C7aysUfH9StrdQLiaeeaPkhuYo bGmuQCJPDXLw9ZKujEUcTnxzr4lwrV0wFl8uak91A06sP9Yq/qYH -----END CERTIFICATE-----Generated at Wed Jan 21 15:56:08 2026 by rpki-client