This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/gf0jS7_pKrH3CkoJOEF0fG_pcww.roa File: gf0jS7_pKrH3CkoJOEF0fG_pcww.roa (raw, json) Hash identifier: YGQGmvhgKTHf7zHvqIYo/CO+yqi60gThwgYVuqq8+lk= Subject key identifier: 81:FD:23:4B:BF:E9:2A:B1:F7:0A:4A:09:38:41:74:7C:6F:E9:73:0C Certificate issuer: /CN=a724383490a105bdc0d21597bfb1478ef04630b1 Certificate serial: 019B7DCA3F35ADD71986CED377CE57EBDDBB Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/gf0jS7_pKrH3CkoJOEF0fG_pcww.roa Signing time: Fri 02 Jan 2026 08:19:24 +0000 ROA not before: Fri 02 Jan 2026 08:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50588 IP address blocks: 45.145.120.0/23 maxlen: 23 185.149.12.0/23 maxlen: 23 193.109.63.0/24 maxlen: 24 2a12:f7c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:3f:35:ad:d7:19:86:ce:d3:77:ce:57:eb:dd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1 Validity Not Before: Jan 2 08:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81fd234bbfe92ab1f70a4a093841747c6fe9730c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:79:bc:fb:92:6b:f3:87:6e:c5:38:41:3e: 66:6c:bd:69:3a:41:ac:e8:a6:99:3d:00:a2:39:17: ce:6f:4a:10:db:57:5f:fa:42:e2:02:1c:5f:71:af: e8:64:19:59:8f:b1:d5:e4:7a:db:f5:b5:34:f1:bf: 45:85:85:0a:73:12:cb:92:08:c9:ab:d8:37:2c:56: c8:ee:4b:ac:d4:f0:db:44:a3:34:cb:7a:c5:4b:7f: 39:9b:4d:f8:0d:29:f9:89:d8:0b:ec:77:ce:fa:30: c2:70:72:e2:97:4f:a2:ad:05:2a:43:b9:d7:ef:00: b7:ff:7e:5c:3f:87:e4:4b:1a:08:43:62:2a:e0:66: 9e:4f:cf:0f:42:3a:5c:1b:d5:82:cb:c2:ec:9e:85: 89:8d:3f:65:62:fe:3f:ec:21:db:34:fc:ab:51:f0: 16:ed:ed:89:7e:a3:e4:53:ba:e0:b1:5f:c6:b3:a9: 97:2b:27:cc:5f:a5:b4:8f:54:01:a9:48:da:65:e0: 39:c9:c1:ae:3f:c8:8d:26:b4:aa:7f:0b:ac:d8:a0: 28:9a:8f:77:8a:e4:8a:27:2b:db:b1:ce:cb:55:3e: e6:cc:fa:9b:2e:18:16:4b:30:e9:c9:7d:8d:a1:ee: 20:3b:8d:84:f6:17:66:e7:92:d3:c9:f5:3a:f4:c5: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FD:23:4B:BF:E9:2A:B1:F7:0A:4A:09:38:41:74:7C:6F:E9:73:0C X509v3 Authority Key Identifier: keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/gf0jS7_pKrH3CkoJOEF0fG_pcww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.120.0/23 185.149.12.0/23 193.109.63.0/24 IPv6: 2a12:f7c0::/29 Signature Algorithm: sha256WithRSAEncryption 8f:b6:1c:9e:a5:53:e6:45:11:e4:a5:55:80:1c:b1:03:8f:f9: 50:31:81:ca:17:9a:df:aa:9e:6c:1c:01:11:9f:d1:a8:60:a9: 7c:04:13:29:a9:61:a4:a9:ce:3a:76:10:69:93:ff:6a:dc:cd: 1c:21:d1:c7:4f:e9:25:63:5a:8b:27:22:cb:d1:3a:ed:ba:b6: 61:7c:68:18:56:f0:b7:53:fb:8d:0a:84:b2:96:3e:5a:a7:23: c6:5f:b1:a2:a4:fd:a2:3d:30:2b:81:82:fd:06:17:40:bc:33: 0f:47:9b:b1:67:5c:f8:43:37:77:7b:53:66:a1:8f:bf:d7:d7: 45:ce:48:e5:75:18:dd:60:f0:85:39:7d:9c:6b:df:c7:5d:56: 55:e6:16:43:97:f4:ff:4d:b2:44:ef:9c:43:6b:29:24:55:cc: 68:af:68:f5:70:0a:39:14:fe:9f:4c:99:37:d8:92:42:66:60: 41:85:d2:41:7f:6b:c6:b1:ca:66:b6:de:9d:eb:a5:58:14:49: 78:29:8c:cb:f3:5c:9b:4e:94:bb:c9:09:5a:5a:f2:f0:c0:23: 68:84:8f:42:08:4f:23:f7:5b:bb:57:9e:55:79:b1:41:7a:9b: 42:c1:03:3c:74:6e:27:7c:7d:79:e7:2e:36:2e:ab:fa:fd:32: b9:75:c4:d7 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yj81rdcZhs7Td85X6927MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjQzODM0OTBhMTA1YmRjMGQyMTU5N2JmYjE0NzhlZjA0 NjMwYjEwHhcNMjYwMTAyMDgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWZkMjM0YmJmZTkyYWIxZjcwYTRhMDkzODQxNzQ3YzZmZTk3MzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXR5vPuSa/OHbsU4QT5mbL1pOkGs 6KaZPQCiORfOb0oQ21df+kLiAhxfca/oZBlZj7HV5Hrb9bU08b9FhYUKcxLLkgjJ q9g3LFbI7kus1PDbRKM0y3rFS385m034DSn5idgL7HfO+jDCcHLil0+irQUqQ7nX 7wC3/35cP4fkSxoIQ2Iq4GaeT88PQjpcG9WCy8LsnoWJjT9lYv4/7CHbNPyrUfAW 7e2JfqPkU7rgsV/Gs6mXKyfMX6W0j1QBqUjaZeA5ycGuP8iNJrSqfwus2KAomo93 iuSKJyvbsc7LVT7mzPqbLhgWSzDpyX2Noe4gO42E9hdm55LTyfU69MW6EQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIH9I0u/6Sqx9wpKCThBdHxv6XMMMB8GA1UdIwQY MBaAFKckODSQoQW9wNIVl7+xR47wRjCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQt OTFlODU5OWRkYmY3LzEvZ2YwalM3X3BLckgzQ2tvSk9FRjBmR19wY3d3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQtOTFlODU5OWRkYmY3 LzEvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBLZF4AwQB uZUMAwQAwW0/MA0EAgACMAcDBQMqEvfAMA0GCSqGSIb3DQEBCwUAA4IBAQCPthye pVPmRRHkpVWAHLEDj/lQMYHKF5rfqp5sHAERn9GoYKl8BBMpqWGkqc46dhBpk/9q 3M0cIdHHT+klY1qLJyLL0TrturZhfGgYVvC3U/uNCoSylj5apyPGX7GipP2iPTAr gYL9BhdAvDMPR5uxZ1z4Qzd3e1NmoY+/19dFzkjldRjdYPCFOX2ca9/HXVZV5hZD l/T/TbJE75xDaykkVcxor2j1cAo5FP6fTJk32JJCZmBBhdJBf2vGscpmtt6d66VY FEl4KYzL81ybTpS7yQlaWvLwwCNohI9CCE8j91u7V55VebFBeptCwQM8dG4nfH15 5y42Lqv6/TK5dcTX -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:29 2026 by rpki-client