This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/RG6yqiKkRhz8lYMy2eaNN51T1FA.roa File: RG6yqiKkRhz8lYMy2eaNN51T1FA.roa (raw, json) Hash identifier: lUsy6MxM/FnhLx9vJglsPl+zWcJ7Y2MIMoaSU4GgA5M= Subject key identifier: 44:6E:B2:AA:22:A4:46:1C:FC:95:83:32:D9:E6:8D:37:9D:53:D4:50 Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26 Certificate serial: 019B7BA5006E345C1F10EB07C0CFFB8ACCE1 Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/RG6yqiKkRhz8lYMy2eaNN51T1FA.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198320 IP address blocks: 130.255.117.0/24 maxlen: 24 130.255.118.0/24 maxlen: 24 130.255.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:00:6e:34:5c:1f:10:eb:07:c0:cf:fb:8a:cc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26 Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=446eb2aa22a4461cfc958332d9e68d379d53d450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:26:54:cd:df:a6:8c:f4:e5:99:84:d2:72: a6:69:f8:a3:d7:d1:dd:29:23:d5:36:48:47:75:51: ca:79:fe:51:4b:82:01:a0:26:e4:31:0e:fb:9b:13: bb:14:2e:6d:c2:1c:ad:1c:5d:ce:61:c0:ae:03:5f: 90:d8:8b:92:5b:29:93:23:d9:f1:56:84:8b:3b:05: 06:4e:13:87:66:a3:b4:37:f1:47:3f:64:c7:f0:0b: 0c:38:06:c0:8f:78:2a:9b:e9:32:be:f8:6b:cc:1b: 7a:34:5a:bb:b5:3c:c6:56:e8:8b:af:ae:1b:38:38: c3:3d:6f:df:96:01:81:69:ac:4d:6a:0c:f4:ef:1f: 73:cb:7c:b4:b8:89:35:80:19:c9:20:00:48:94:e1: ae:8e:6a:de:ed:82:65:61:3f:63:7b:fc:b7:51:04: d6:33:8f:30:92:21:4a:7d:0b:38:e6:1a:eb:9b:88: 48:25:29:0c:f5:ed:0a:08:ab:2a:fc:16:4e:63:59: e7:a2:fc:61:1c:c8:2c:51:64:b6:6b:12:c0:66:ed: 3a:17:8b:75:20:b9:e4:5f:c5:41:32:1a:ef:8c:53: 51:af:06:fd:50:6d:43:c6:97:3e:85:b3:b6:cf:f9: d4:04:7e:0f:73:54:2d:37:d2:24:c3:c5:8b:62:d3: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6E:B2:AA:22:A4:46:1C:FC:95:83:32:D9:E6:8D:37:9D:53:D4:50 X509v3 Authority Key Identifier: keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/RG6yqiKkRhz8lYMy2eaNN51T1FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.117.0-130.255.119.255 Signature Algorithm: sha256WithRSAEncryption 1b:c8:69:3d:39:3e:18:79:b5:60:4f:f3:67:cc:5c:a1:d0:d6: 7e:e3:32:cc:b6:dc:28:3b:b0:7f:12:54:87:36:bf:9c:ec:a9: 6c:18:f3:69:db:7c:af:40:85:6e:c5:6c:29:58:3c:77:d8:9f: 45:4b:52:43:c1:a0:a8:60:c4:cf:2c:4b:f8:40:db:a0:ba:7a: 33:00:f8:c9:91:e2:f8:a1:78:b9:49:a2:10:08:40:76:d0:ab: 62:f2:d4:c5:57:29:04:0d:72:d6:8c:00:05:cd:6d:82:b4:0e: 9f:79:1e:6b:cd:0f:1d:9f:ee:5a:df:08:dc:5a:c0:3f:cf:17: 3a:ed:ae:85:21:25:89:cc:21:16:8b:16:97:c2:ff:e0:1e:c1: 7f:a4:8d:8f:b3:df:85:70:13:6a:97:1d:90:4b:2a:b0:be:1a: da:e6:15:2b:1d:44:75:86:52:29:76:dd:b2:6c:99:57:35:1b: 44:49:7f:d2:0b:ef:0d:04:c1:cc:cd:40:01:f2:5b:43:00:2f: 85:a2:b5:eb:b8:8f:ef:00:8c:3d:3b:7a:51:25:2d:00:52:ac: 26:dd:f6:94:6d:21:db:e1:43:a2:9d:f3:f5:97:b5:94:bc:31: 52:26:4a:67:43:2e:1f:77:11:5a:df:a1:52:a4:05:65:33:06: ce:d2:96:a4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7pQBuNFwfEOsHwM/7iszhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMzFjMmRhNmJiOWE1NmMyOGVmZWVjNGU0ZGYwNzU4Y2My NGViMjYwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDZlYjJhYTIyYTQ0NjFjZmM5NTgzMzJkOWU2OGQzNzlkNTNkNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro4mVM3fpoz05ZmE0nKmafij19Hd KSPVNkhHdVHKef5RS4IBoCbkMQ77mxO7FC5twhytHF3OYcCuA1+Q2IuSWymTI9nx VoSLOwUGThOHZqO0N/FHP2TH8AsMOAbAj3gqm+kyvvhrzBt6NFq7tTzGVuiLr64b ODjDPW/flgGBaaxNagz07x9zy3y0uIk1gBnJIABIlOGujmre7YJlYT9je/y3UQTW M48wkiFKfQs45hrrm4hIJSkM9e0KCKsq/BZOY1nnovxhHMgsUWS2axLAZu06F4t1 ILnkX8VBMhrvjFNRrwb9UG1Dxpc+hbO2z/nUBH4Pc1QtN9Ikw8WLYtNTUQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFERusqoipEYc/JWDMtnmjTedU9RQMB8GA1UdIwQY MBaAFPAxwtpruaVsKO/uxOTfB1jMJOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZDcwNGItYzczNS00NGRmLWE3OTYt Zjg2MjQzYTljMmIzLzEvUkc2eXFpS2tSaHo4bFlNeTJlYU5ONTFUMUZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZDcwNGItYzczNS00NGRmLWE3OTYtZjg2MjQzYTljMmIz LzEvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACC/3UD BAOC/3AwDQYJKoZIhvcNAQELBQADggEBABvIaT05Phh5tWBP82fMXKHQ1n7jMsy2 3Cg7sH8SVIc2v5zsqWwY82nbfK9AhW7FbClYPHfYn0VLUkPBoKhgxM8sS/hA26C6 ejMA+MmR4viheLlJohAIQHbQq2Ly1MVXKQQNctaMAAXNbYK0Dp95HmvNDx2f7lrf CNxawD/PFzrtroUhJYnMIRaLFpfC/+AewX+kjY+z34VwE2qXHZBLKrC+GtrmFSsd RHWGUil23bJsmVc1G0RJf9IL7w0EwczNQAHyW0MAL4Witeu4j+8AjD07elElLQBS rCbd9pRtIdvhQ6Kd8/WXtZS8MVImSmdDLh93EVrfoVKkBWUzBs7SlqQ= -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:29 2026 by rpki-client