This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/g5nPMDhR1xXE3aUl3Zj948mnSZo.roa File: g5nPMDhR1xXE3aUl3Zj948mnSZo.roa (raw, json) Hash identifier: hy3Afkla54p1JUhAk/RCQlLZSfZ1AsKTh6gnAbaPJ04= Subject key identifier: 83:99:CF:30:38:51:D7:15:C4:DD:A5:25:DD:98:FD:E3:C9:A7:49:9A Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Certificate serial: 019B7C11C686392F8EDC0A24CFFF73582E2A Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/g5nPMDhR1xXE3aUl3Zj948mnSZo.roa Signing time: Fri 02 Jan 2026 00:18:18 +0000 ROA not before: Fri 02 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62064 IP address blocks: 185.47.32.0/22 maxlen: 24 188.209.112.0/22 maxlen: 24 188.213.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c6:86:39:2f:8e:dc:0a:24:cf:ff:73:58:2e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8 Validity Not Before: Jan 2 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8399cf303851d715c4dda525dd98fde3c9a7499a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:a0:96:04:a2:ee:f1:02:03:9d:fa:98:a5: 0d:de:58:59:a5:3a:f9:5c:19:e7:2c:47:69:49:8a: 29:32:fb:f8:fc:58:8a:61:d2:07:7e:78:8f:2c:00: ad:b8:50:a8:9b:13:6a:6a:5f:a2:a3:98:f0:e8:69: 76:67:aa:18:ae:ef:61:7c:91:a1:5e:5f:96:ee:d5: 90:38:cd:fc:bb:c2:dc:67:80:05:7c:84:aa:eb:b6: 6e:8b:b1:ae:98:44:b6:f8:a0:97:97:14:85:1d:6c: d3:b9:0f:06:73:f0:8f:06:5e:56:b1:5c:a2:5e:b3: 15:0b:2a:28:ab:f2:ad:31:22:8c:d1:7f:9b:d3:8b: 62:f6:c9:3d:e9:d9:64:f3:49:a8:58:26:72:df:dc: 2d:02:fe:55:cc:ba:95:be:0f:ac:59:0f:52:09:23: 62:61:37:02:9e:60:b5:fc:89:5b:1a:04:27:80:2a: d6:48:82:72:87:f7:ff:71:1f:89:e4:68:34:d9:03: 6f:83:55:77:93:34:f5:90:a4:07:00:ba:da:84:9e: b4:3a:19:a1:1a:9c:44:45:e8:b4:55:96:86:f5:9c: f9:6f:64:53:21:bb:d1:dd:b2:cb:29:62:f3:84:d4: cf:06:8a:c1:8d:05:63:e0:b3:eb:7d:eb:e6:84:01: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:CF:30:38:51:D7:15:C4:DD:A5:25:DD:98:FD:E3:C9:A7:49:9A X509v3 Authority Key Identifier: keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/g5nPMDhR1xXE3aUl3Zj948mnSZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.32.0/22 188.209.112.0/22 188.213.8.0/21 Signature Algorithm: sha256WithRSAEncryption a6:91:a3:8d:24:34:41:c1:2c:a6:4f:14:e0:07:d6:02:b7:b7: cb:bf:65:0a:e2:c4:78:42:3f:27:9d:ec:5d:fc:46:fc:50:c0: 7a:14:4d:de:f0:16:2c:4e:c6:16:e0:c1:28:33:4a:f1:21:d7: a8:cf:3d:c2:55:20:38:5c:41:53:14:ad:67:a6:e4:13:bd:e3: da:ec:1d:d0:26:77:82:cc:9c:c4:8e:21:9d:2e:47:ed:cd:50: e3:28:87:03:8e:eb:69:28:11:e2:a3:41:19:c2:39:20:3d:c5: ab:1a:29:91:dd:ae:e1:9c:20:f9:76:82:19:0f:a3:64:55:55: 71:e2:b0:89:de:4f:84:ce:d8:52:bf:45:1d:f1:bf:02:86:06: 11:78:3f:37:9a:ac:3d:63:cb:8d:31:8e:85:9e:5c:d4:c4:2e: b3:3c:c1:cc:1c:4f:00:0a:b6:48:55:b4:44:1d:27:ae:8a:63: 2b:f0:12:01:8a:52:21:55:28:5c:88:f5:80:da:42:5a:e6:32: f9:36:38:71:fe:43:48:6e:a2:af:0f:72:f0:fd:92:51:c7:8b: fa:c5:cf:11:a2:33:7c:e1:cd:31:5c:94:25:be:20:26:8f:77: 30:7e:b2:46:c4:77:47:b0:7d:80:2f:bd:f8:c1:df:f2:ec:e1: 85:56:5a:57 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EcaGOS+O3Aokz/9zWC4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5 NzMwZjgwHhcNMjYwMTAyMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzk5Y2YzMDM4NTFkNzE1YzRkZGE1MjVkZDk4ZmRlM2M5YTc0OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl6glgSi7vECA536mKUN3lhZpTr5 XBnnLEdpSYopMvv4/FiKYdIHfniPLACtuFComxNqal+io5jw6Gl2Z6oYru9hfJGh Xl+W7tWQOM38u8LcZ4AFfISq67Zui7GumES2+KCXlxSFHWzTuQ8Gc/CPBl5WsVyi XrMVCyooq/KtMSKM0X+b04ti9sk96dlk80moWCZy39wtAv5VzLqVvg+sWQ9SCSNi YTcCnmC1/IlbGgQngCrWSIJyh/f/cR+J5Gg02QNvg1V3kzT1kKQHALrahJ60Ohmh GpxERei0VZaG9Zz5b2RTIbvR3bLLKWLzhNTPBorBjQVj4LPrfevmhAHt9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIOZzzA4UdcVxN2lJd2Y/ePJp0maMB8GA1UdIwQY MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt NTk0YzFhY2Q5ZGFmLzEvZzVuUE1EaFIxeFhFM2FVbDNaajk0OG1uU1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuS8gAwQC vNFwAwQDvNUIMA0GCSqGSIb3DQEBCwUAA4IBAQCmkaONJDRBwSymTxTgB9YCt7fL v2UK4sR4Qj8nnexd/Eb8UMB6FE3e8BYsTsYW4MEoM0rxIdeozz3CVSA4XEFTFK1n puQTvePa7B3QJneCzJzEjiGdLkftzVDjKIcDjutpKBHio0EZwjkgPcWrGimR3a7h nCD5doIZD6NkVVVx4rCJ3k+EzthSv0Ud8b8ChgYReD83mqw9Y8uNMY6FnlzUxC6z PMHMHE8ACrZIVbREHSeuimMr8BIBilIhVShciPWA2kJa5jL5Njhx/kNIbqKvD3Lw /ZJRx4v6xc8RojN84c0xXJQlviAmj3cwfrJGxHdHsH2AL734wd/y7OGFVlpX -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:50 2026 by rpki-client