This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa File: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (raw, json) Hash identifier: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo= Subject key identifier: 1A:FF:1E:E2:AE:81:27:5C:D4:B6:88:80:8C:3A:A1:52:56:D9:57:FA Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8AA5152419EABE1A284266FB0DDA2 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 141.226.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 23:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:aa:51:52:41:9e:ab:e1:a2:84:26:6f:b0:dd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aff1ee2ae81275cd4b688808c3aa15256d957fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:39:fb:61:52:6f:f1:bd:1d:a6:61:1a:d5: 62:88:1a:88:d6:84:6e:ef:02:b5:86:0c:93:40:1c: 79:ff:8f:0b:6a:09:c3:62:f2:10:8c:65:ac:49:53: af:a1:13:ba:e9:a1:cd:0e:f6:1f:2b:5b:6b:a9:81: c8:d4:64:6e:87:79:1a:94:90:4a:55:d1:2c:a0:b0: 22:d8:a8:65:c0:d4:96:ad:04:75:67:68:cd:d2:f7: 34:36:cd:07:f6:af:98:3b:a0:e6:c0:57:83:9d:d4: 3e:c5:31:b1:4c:66:94:f1:f7:47:14:97:81:12:0c: 7a:06:0e:85:93:6f:6e:ec:7d:56:0c:f6:b6:5e:cb: 5d:50:03:ab:3f:1a:dc:5c:c5:d3:3b:11:8d:01:e0: e3:67:28:e1:f2:55:a1:65:fc:7e:1e:5b:d9:67:f5: 33:a2:bb:21:34:83:ba:ec:17:5e:5a:87:1d:c6:69: 61:ab:89:24:5d:2b:fb:d1:8f:f9:25:71:ed:4b:1d: 48:18:51:b5:f9:43:1f:8e:a8:0d:02:42:e4:a6:38: 64:6c:83:cf:26:9e:4b:e4:a9:fb:74:36:e0:0f:8f: d3:05:31:a3:1d:06:31:bc:cc:5f:ca:9b:b2:37:44: 37:33:d4:95:66:bf:aa:3e:c4:ea:5b:cd:da:4f:2a: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FF:1E:E2:AE:81:27:5C:D4:B6:88:80:8C:3A:A1:52:56:D9:57:FA X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.245.0/24 Signature Algorithm: sha256WithRSAEncryption 03:48:f6:8c:fb:60:16:a6:40:66:da:2d:3c:f7:ce:91:de:4c: 03:1f:be:d6:ea:79:a6:fd:f1:d8:b3:4b:15:9a:da:a1:69:ed: 63:fe:95:90:b0:a7:e6:30:85:f7:bd:c0:34:5c:e0:08:d2:df: 82:8a:5b:1f:c7:ae:eb:47:a8:c7:6a:c7:a1:04:d7:3a:17:54: d8:43:81:2c:c2:f2:07:09:94:41:6b:e4:d7:26:f6:ac:76:51: ea:9f:cd:ba:26:24:f0:72:29:19:71:a0:5e:02:63:ea:33:7b: d4:1f:f1:2e:3c:de:a9:36:70:4c:06:98:8d:59:95:c1:39:ea: 8e:f9:8a:2a:d4:69:2e:95:fb:5d:a9:29:b9:6b:bf:18:04:c8: 3e:f3:f0:cc:c2:4f:a3:10:22:ed:f5:b9:2f:91:a6:1f:0a:f8: 4f:9f:49:6e:e3:ac:b0:4f:aa:2f:89:de:c3:da:23:89:ec:29: a2:b3:e0:ec:5a:e5:39:b3:af:5a:03:ca:76:63:25:41:1e:12: 1e:6d:3d:5f:54:70:72:69:bb:ee:e4:fb:a1:78:e7:40:16:25: b6:43:0a:df:31:f6:32:3f:d3:9e:fe:a3:6c:13:40:2a:12:7c: 35:54:5e:57:fe:e1:56:8d:02:61:26:5e:72:9b:85:32:72:3d: 49:47:11:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKpRUkGeq+GihCZvsN2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWZmMWVlMmFlODEyNzVjZDRiNjg4ODA4YzNhYTE1MjU2ZDk1N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VQ5+2FSb/G9HaZhGtViiBqI1oRu 7wK1hgyTQBx5/48LagnDYvIQjGWsSVOvoRO66aHNDvYfK1trqYHI1GRuh3kalJBK VdEsoLAi2KhlwNSWrQR1Z2jN0vc0Ns0H9q+YO6DmwFeDndQ+xTGxTGaU8fdHFJeB Egx6Bg6Fk29u7H1WDPa2XstdUAOrPxrcXMXTOxGNAeDjZyjh8lWhZfx+HlvZZ/Uz orshNIO67BdeWocdxmlhq4kkXSv70Y/5JXHtSx1IGFG1+UMfjqgNAkLkpjhkbIPP Jp5L5Kn7dDbgD4/TBTGjHQYxvMxfypuyN0Q3M9SVZr+qPsTqW83aTypkzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBr/HuKugSdc1LaIgIw6oVJW2Vf6MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvR3Y4ZTRxNkJKMXpVdG9pQWpEcWhVbGJaVl9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeL1MA0G CSqGSIb3DQEBCwUAA4IBAQADSPaM+2AWpkBm2i08986R3kwDH77W6nmm/fHYs0sV mtqhae1j/pWQsKfmMIX3vcA0XOAI0t+Cilsfx67rR6jHasehBNc6F1TYQ4EswvIH CZRBa+TXJvasdlHqn826JiTwcikZcaBeAmPqM3vUH/EuPN6pNnBMBpiNWZXBOeqO +Yoq1GkulftdqSm5a78YBMg+8/DMwk+jECLt9bkvkaYfCvhPn0lu46ywT6ovid7D 2iOJ7Cmis+DsWuU5s69aA8p2YyVBHhIebT1fVHByabvu5PuheOdAFiW2QwrfMfYy P9Oe/qNsE0AqEnw1VF5X/uFWjQJhJl5ym4Uycj1JRxG4 -----END CERTIFICATE-----Generated at Sun Jan 11 07:32:24 2026 by rpki-client