This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GJEF2Jaw6wpA4fI5Q5fyY4H91vo.roa File: GJEF2Jaw6wpA4fI5Q5fyY4H91vo.roa (raw, json) Hash identifier: 6F3cLUlWH1QosyObIvZbGd9mbUk5djE4/WeGknGqFgU= Subject key identifier: 18:91:05:D8:96:B0:EB:0A:40:E1:F2:39:43:97:F2:63:81:FD:D6:FA Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41CB0D90364A01718175B19CF40C5 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GJEF2Jaw6wpA4fI5Q5fyY4H91vo.roa Signing time: Thu 01 Jan 2026 22:18:31 +0000 ROA not before: Thu 01 Jan 2026 22:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211641 IP address blocks: 185.109.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:1c:b0:d9:03:64:a0:17:18:17:5b:19:cf:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=189105d896b0eb0a40e1f2394397f26381fdd6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:37:eb:12:33:86:0c:6a:14:af:77:a4:5b: 3b:6c:7e:7f:20:0b:b3:a9:e6:0f:6b:92:7b:93:ba: e8:9d:4e:fe:ee:30:1a:b0:b0:ec:4c:9c:73:d2:07: fb:93:74:b1:42:08:9b:46:02:78:bd:69:86:f2:0f: 7e:e5:e7:3e:03:15:38:24:e4:da:82:ca:39:5d:7e: 18:ee:72:0c:0c:b0:05:34:92:2f:44:1b:5c:30:64: d5:3e:81:3d:9c:96:4c:f0:30:f3:31:e4:73:a5:67: 7e:29:7d:c2:1f:c7:77:24:f5:5d:87:c3:aa:cc:56: df:b5:4b:df:eb:cc:2a:fd:f6:af:c9:d0:a5:90:ac: de:3e:fe:c3:6e:59:55:b4:cd:44:8e:6d:ee:93:e5: 15:6e:f8:b0:1b:52:0b:b9:bf:96:59:57:df:3c:ce: a9:2a:d0:71:16:e1:e5:4f:38:be:cc:73:e2:0e:d9: 88:11:ac:22:d7:d3:bb:9c:d4:eb:2c:bb:06:f7:97: ff:5d:6d:c5:77:9d:4d:2b:10:53:7a:ea:bf:c3:45: ab:ad:4e:0a:2f:c0:db:af:8b:10:7c:14:8c:64:2e: 4b:53:bb:50:df:89:19:76:ac:f0:fe:99:dd:40:03: 66:1c:d5:13:e0:bf:f4:e6:66:20:99:88:1c:1d:ea: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:05:D8:96:B0:EB:0A:40:E1:F2:39:43:97:F2:63:81:FD:D6:FA X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/GJEF2Jaw6wpA4fI5Q5fyY4H91vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.20.0/24 Signature Algorithm: sha256WithRSAEncryption 78:34:17:17:1f:43:57:b4:49:2f:cd:24:e6:71:aa:c9:61:99: 42:85:b1:4f:ac:dc:e5:7d:d8:24:23:c4:27:ce:60:48:7a:48: de:ba:a1:cc:ca:65:f9:ca:99:04:d0:86:82:87:0f:1f:3b:71: 56:e1:86:04:e0:27:01:28:f2:55:e3:48:3a:07:08:68:c9:39: b4:6d:23:83:55:32:8c:d4:47:8b:a4:7c:ed:9b:58:06:eb:e8: 0b:4f:f7:81:3d:99:db:3d:0d:ac:ee:39:d5:85:20:3b:d1:1f: 0e:f8:32:b6:41:ef:2f:1a:c3:59:a6:ea:96:f1:4a:0b:04:d8: 6b:6c:63:d0:a2:de:3a:be:b6:11:97:07:8c:75:4d:74:02:42: 53:96:2f:35:6d:7d:e2:cf:e8:a3:6d:ec:c0:14:68:ec:e6:2b: a2:2b:84:af:6d:6e:58:7b:1a:ee:59:c1:42:7e:01:fc:a5:40: fe:a3:fd:ab:c5:d8:2a:7a:2d:49:bb:22:3d:ca:37:b8:be:44: 3c:99:97:83:c8:76:50:12:45:ca:6b:92:1e:d9:61:a6:35:03: 8e:18:1b:40:c6:e3:69:e3:af:d4:d0:61:7d:e3:c9:d9:cf:fc: e4:ba:5f:5d:eb:0f:1b:c7:dd:49:39:0d:70:fb:01:be:a2:61: 20:42:34:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pByw2QNkoBcYF1sZz0DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODkxMDVkODk2YjBlYjBhNDBlMWYyMzk0Mzk3ZjI2MzgxZmRkNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/c36xIzhgxqFK93pFs7bH5/IAuz qeYPa5J7k7ronU7+7jAasLDsTJxz0gf7k3SxQgibRgJ4vWmG8g9+5ec+AxU4JOTa gso5XX4Y7nIMDLAFNJIvRBtcMGTVPoE9nJZM8DDzMeRzpWd+KX3CH8d3JPVdh8Oq zFbftUvf68wq/favydClkKzePv7DbllVtM1Ejm3uk+UVbviwG1ILub+WWVffPM6p KtBxFuHlTzi+zHPiDtmIEawi19O7nNTrLLsG95f/XW3Fd51NKxBTeuq/w0WrrU4K L8Dbr4sQfBSMZC5LU7tQ34kZdqzw/pndQANmHNUT4L/05mYgmYgcHeoFNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBiRBdiWsOsKQOHyOUOX8mOB/db6MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvR0pFRjJKYXc2d3BBNGZJNVE1ZnlZNEg5MXZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuW0UMA0G CSqGSIb3DQEBCwUAA4IBAQB4NBcXH0NXtEkvzSTmcarJYZlChbFPrNzlfdgkI8Qn zmBIekjeuqHMymX5ypkE0IaChw8fO3FW4YYE4CcBKPJV40g6BwhoyTm0bSODVTKM 1EeLpHztm1gG6+gLT/eBPZnbPQ2s7jnVhSA70R8O+DK2Qe8vGsNZpuqW8UoLBNhr bGPQot46vrYRlweMdU10AkJTli81bX3iz+ijbezAFGjs5iuiK4SvbW5YexruWcFC fgH8pUD+o/2rxdgqei1JuyI9yje4vkQ8mZeDyHZQEkXKa5Ie2WGmNQOOGBtAxuNp 46/U0GF948nZz/zkul9d6w8bx91JOQ1w+wG+omEgQjRt -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:19 2026 by rpki-client