This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/g0w0gW5IMuXa9QuyDN22I9fajeg.roa File: g0w0gW5IMuXa9QuyDN22I9fajeg.roa (raw, json) Hash identifier: XnCM+m5DLyfzTRDuAC+Z5x9dwEbV1mW0N9CtTlchKC8= Subject key identifier: 83:4C:34:81:6E:48:32:E5:DA:F5:0B:B2:0C:DD:B6:23:D7:DA:8D:E8 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B7EA5908AD520C788F72BD6B67F887EA6 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/g0w0gW5IMuXa9QuyDN22I9fajeg.roa Signing time: Fri 02 Jan 2026 12:18:58 +0000 ROA not before: Fri 02 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 131.222.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:90:8a:d5:20:c7:88:f7:2b:d6:b6:7f:88:7e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 2 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=834c34816e4832e5daf50bb20cddb623d7da8de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:39:73:e2:b5:47:9c:7b:8a:78:b5:6d:54: 30:5b:4f:88:e5:3d:fa:58:0b:ad:db:28:28:31:6d: d8:9a:3c:bb:a0:54:9e:78:0b:7a:f6:ba:e3:fd:22: 52:f1:3c:b4:e0:5c:3b:29:66:56:d7:10:9b:a8:58: 4f:6d:de:7f:2f:26:07:37:2b:e4:95:14:91:31:a2: db:4b:39:b2:31:15:0a:23:67:78:4e:bb:66:f8:2b: c0:91:47:b6:b5:6e:ac:e7:68:0e:a0:97:dd:26:9f: 06:4d:42:60:da:e6:7c:ac:6a:00:89:60:d5:27:97: 44:28:43:1d:60:dd:c7:dc:5e:e2:dd:7e:3b:56:2f: ba:c6:ce:4d:2c:a4:04:3a:20:92:d2:65:e4:1a:12: 39:8b:05:ea:79:94:56:f7:c3:3c:77:d8:c5:9b:8d: ed:13:15:11:47:83:3f:f8:c7:1f:98:ac:01:d4:c6: 92:b0:a3:83:95:be:8d:c1:11:ce:76:b9:40:7e:2f: b0:a0:a2:0d:04:91:f8:c3:1c:2e:2b:52:f7:ff:36: 58:74:99:9d:68:fc:22:dc:d5:09:e5:b8:20:1f:00: c6:51:de:39:43:3c:bb:93:01:e4:21:60:35:80:fe: f0:ba:b1:08:24:09:32:f4:f2:75:2e:f1:d9:9d:7e: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4C:34:81:6E:48:32:E5:DA:F5:0B:B2:0C:DD:B6:23:D7:DA:8D:E8 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/g0w0gW5IMuXa9QuyDN22I9fajeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.222.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9f:a0:f3:f0:48:b3:0e:20:31:e3:f8:ed:86:ae:91:a7:06:c8: b1:3f:87:b8:70:19:b5:ba:b6:be:1d:aa:6b:9c:7a:8a:52:3f: dc:bd:78:78:b9:72:c8:86:af:92:b3:07:bd:cf:8d:4a:72:58: a3:78:1d:dc:8e:aa:ab:d3:33:0e:b4:be:fc:ab:62:d6:7d:69: 9b:0f:d4:7a:a8:09:65:21:92:a7:61:55:3c:e7:1a:d3:ba:22: cd:7e:03:7e:43:d3:ba:08:3b:a3:b8:6b:e1:c6:7b:3e:ac:d4: bd:81:74:43:b3:ea:1e:02:f7:ea:f0:2d:cd:42:47:c3:51:3c: fa:3e:38:05:ef:0f:20:9b:83:87:3b:d9:0b:3d:87:93:d3:b6: ee:39:57:a3:19:8c:ca:bf:52:65:4e:e4:c3:18:05:d6:8a:2e: af:2b:04:cf:6f:a6:17:e4:bb:78:8e:02:75:df:1c:99:cb:da: 3e:11:93:67:49:6a:e2:31:0e:3c:b4:6f:31:17:fb:fa:77:c3: a9:75:a2:c6:2e:02:10:ae:21:f2:5e:4b:2f:b9:ee:35:fe:aa: 64:f4:6a:e8:b6:c4:88:3c:c1:dd:c0:1b:60:66:ee:49:90:5f: aa:f4:ac:59:4c:53:33:30:c6:eb:2d:61:25:13:b5:af:81:c1: 6c:ef:b9:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pZCK1SDHiPcr1rZ/iH6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTAyMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzRjMzQ4MTZlNDgzMmU1ZGFmNTBiYjIwY2RkYjYyM2Q3ZGE4ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrY5c+K1R5x7ini1bVQwW0+I5T36 WAut2ygoMW3Ymjy7oFSeeAt69rrj/SJS8Ty04Fw7KWZW1xCbqFhPbd5/LyYHNyvk lRSRMaLbSzmyMRUKI2d4Trtm+CvAkUe2tW6s52gOoJfdJp8GTUJg2uZ8rGoAiWDV J5dEKEMdYN3H3F7i3X47Vi+6xs5NLKQEOiCS0mXkGhI5iwXqeZRW98M8d9jFm43t ExURR4M/+McfmKwB1MaSsKODlb6NwRHOdrlAfi+woKINBJH4wxwuK1L3/zZYdJmd aPwi3NUJ5bggHwDGUd45Qzy7kwHkIWA1gP7wurEIJAky9PJ1LvHZnX540wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFINMNIFuSDLl2vULsgzdtiPX2o3oMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvZzB3MGdXNUlNdVhhOVF1eUROMjJJOWZhamVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHg96AMA0G CSqGSIb3DQEBCwUAA4IBAQCfoPPwSLMOIDHj+O2GrpGnBsixP4e4cBm1ura+Hapr nHqKUj/cvXh4uXLIhq+Sswe9z41KclijeB3cjqqr0zMOtL78q2LWfWmbD9R6qAll IZKnYVU85xrTuiLNfgN+Q9O6CDujuGvhxns+rNS9gXRDs+oeAvfq8C3NQkfDUTz6 PjgF7w8gm4OHO9kLPYeT07buOVejGYzKv1JlTuTDGAXWii6vKwTPb6YX5Lt4jgJ1 3xyZy9o+EZNnSWriMQ48tG8xF/v6d8OpdaLGLgIQriHyXksvue41/qpk9GrotsSI PMHdwBtgZu5JkF+q9KxZTFMzMMbrLWElE7WvgcFs77lh -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:10 2026 by rpki-client