This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/G3s7fFZiJFqITolnCSvINrflYsk.roa File: G3s7fFZiJFqITolnCSvINrflYsk.roa (raw, json) Hash identifier: jskO07AkOlpZvjtyrYTNt3+GnH5jKgWqutiH7gmA7J0= Subject key identifier: 1B:7B:3B:7C:56:62:24:5A:88:4E:89:67:09:2B:C8:36:B7:E5:62:C9 Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d Certificate serial: 019B7A5B10E704B4545D20ECF3EDDFD7DC09 Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/G3s7fFZiJFqITolnCSvINrflYsk.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205876 IP address blocks: 31.24.250.0/24 maxlen: 24 45.152.249.0/24 maxlen: 24 45.152.250.0/24 maxlen: 24 194.5.132.0/24 maxlen: 24 194.5.145.0/24 maxlen: 24 212.125.138.0/24 maxlen: 24 212.125.139.0/24 maxlen: 24 2a12:5040:1::/48 maxlen: 48 2a12:5040:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:10:e7:04:b4:54:5d:20:ec:f3:ed:df:d7:dc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b7b3b7c5662245a884e8967092bc836b7e562c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:97:80:13:bc:36:0a:a8:eb:63:96:25:d0: 58:6a:48:7a:ef:23:e1:64:61:01:30:11:5a:39:f5: 78:06:af:9e:3b:c7:ce:4d:49:33:c4:96:54:1a:59: e4:20:a2:f9:fc:f1:3e:e3:86:ef:dd:13:48:96:51: 40:6d:7d:c3:71:1f:52:3c:d9:d4:da:59:67:39:66: 47:a1:2b:e2:c5:34:07:7d:29:d9:58:27:73:18:49: ed:d9:07:bf:8d:5a:fd:18:d0:fd:cf:6b:b1:c5:6e: 72:0d:97:44:99:04:5c:65:44:c5:ba:4f:b0:2f:1d: 44:e7:8c:eb:2f:a4:ab:66:46:af:5b:09:dd:f2:da: 7d:df:da:53:9d:92:97:95:0f:61:e5:e8:f9:38:6c: f1:5b:1f:a3:ca:c3:f6:8d:3a:89:27:47:c9:a1:9b: 85:c9:de:12:f9:98:63:cb:72:09:7d:69:e3:c1:79: 9f:50:7d:0c:da:b6:a3:3c:a4:73:93:8d:e8:f8:e2: 45:7c:18:64:d0:35:5d:e6:49:2b:38:97:cd:c6:a0: 86:90:da:be:64:1f:15:38:04:4f:78:7c:f0:f9:a5: 20:5b:e9:8f:ae:0f:4d:f6:27:74:29:75:25:bd:49: 98:f0:c5:c2:40:31:4b:05:00:90:9d:58:b9:79:81: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7B:3B:7C:56:62:24:5A:88:4E:89:67:09:2B:C8:36:B7:E5:62:C9 X509v3 Authority Key Identifier: keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/G3s7fFZiJFqITolnCSvINrflYsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.250.0/24 45.152.249.0-45.152.250.255 194.5.132.0/24 194.5.145.0/24 212.125.138.0/23 IPv6: 2a12:5040:1::-2a12:5040:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 43:cb:94:f0:7c:c8:6f:10:4b:9f:29:32:50:e1:c7:53:60:bc: 20:53:8d:34:f5:bf:33:9c:57:c6:c4:b6:f3:ae:cd:aa:98:27: 80:dd:01:62:0a:a8:0b:9a:76:ac:2e:6f:27:7a:0e:8a:9f:f5: ab:f3:bd:3f:a8:a0:2f:fa:ad:a5:8b:db:f9:66:24:cf:d8:3a: f8:09:8a:14:b2:dc:bd:97:30:61:c1:53:69:33:3b:56:7a:c3: 96:31:2d:68:24:a7:b2:78:79:d2:b3:b2:c6:a7:57:1c:18:fb: 08:68:46:ca:11:d1:64:35:65:a5:bd:6b:34:bf:16:58:42:20: 3a:e8:0c:96:5c:10:42:71:8d:52:fd:95:10:d9:c4:29:3d:e9: 3a:17:f3:c9:35:61:b9:e2:ae:5a:89:fc:9b:ad:21:5d:e8:63: 45:39:e6:05:54:67:bb:b6:02:d7:31:16:ce:f8:70:9d:3d:56: b3:5b:7f:74:5a:51:e8:f5:49:7f:ca:1d:c0:25:c9:b2:9f:00: 91:2e:c7:b8:6e:15:a8:66:1d:98:c0:73:af:2d:b9:67:a8:c3: 00:7e:fa:67:84:75:79:68:b8:d6:4a:d4:3a:3c:dc:f9:8c:cb: d6:fa:23:f8:51:35:fd:99:90:38:24:a4:c8:38:e7:81:7a:82: b0:38:32:ae -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt6WxDnBLRUXSDs8+3f19wJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2E0ZjRhNzM3ZWMwOWYzMzVhYzQwNjMzMTMzMzI4MjEz ZWZjM2QwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjdiM2I3YzU2NjIyNDVhODg0ZTg5NjcwOTJiYzgzNmI3ZTU2MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8KXgBO8Ngqo62OWJdBYakh67yPh ZGEBMBFaOfV4Bq+eO8fOTUkzxJZUGlnkIKL5/PE+44bv3RNIllFAbX3DcR9SPNnU 2llnOWZHoSvixTQHfSnZWCdzGEnt2Qe/jVr9GND9z2uxxW5yDZdEmQRcZUTFuk+w Lx1E54zrL6SrZkavWwnd8tp939pTnZKXlQ9h5ej5OGzxWx+jysP2jTqJJ0fJoZuF yd4S+Zhjy3IJfWnjwXmfUH0M2rajPKRzk43o+OJFfBhk0DVd5kkrOJfNxqCGkNq+ ZB8VOARPeHzw+aUgW+mPrg9N9id0KXUlvUmY8MXCQDFLBQCQnVi5eYGETwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFBt7O3xWYiRaiE6JZwkryDa35WLJMB8GA1UdIwQY MBaAFKrKT0pzfsCfM1rEBjMTMyghPvw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDct MzM0ZTZmMzMyMTgwLzEvRzNzN2ZGWmlKRnFJVG9sbkNTdklOcmZsWXNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDctMzM0ZTZmMzMyMTgw LzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAsBAIAATAmAwQAHxj6MAwD BAAtmPkDBAAtmPoDBADCBYQDBADCBZEDBAHUfYowGgQCAAIwFDASAwcAKhJQQAAB AwcAKhJQQAACMA0GCSqGSIb3DQEBCwUAA4IBAQBDy5TwfMhvEEufKTJQ4cdTYLwg U4009b8znFfGxLbzrs2qmCeA3QFiCqgLmnasLm8neg6Kn/Wr870/qKAv+q2li9v5 ZiTP2Dr4CYoUsty9lzBhwVNpMztWesOWMS1oJKeyeHnSs7LGp1ccGPsIaEbKEdFk NWWlvWs0vxZYQiA66AyWXBBCcY1S/ZUQ2cQpPek6F/PJNWG54q5aifybrSFd6GNF OeYFVGe7tgLXMRbO+HCdPVazW390WlHo9Ul/yh3AJcmynwCRLse4bhWoZh2YwHOv LblnqMMAfvpnhHV5aLjWStQ6PNz5jMvW+iP4UTX9mZA4JKTIOOeBeoKwODKu -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:24 2026 by rpki-client