This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/rGvb_I1RWnjkOaC400eqOKX9gUs.roa File: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (raw, json) Hash identifier: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY= Subject key identifier: AC:6B:DB:FC:8D:51:5A:78:E4:39:A0:B8:D3:47:AA:38:A5:FD:81:4B Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Certificate serial: 019B7EA7329E65532BCCED549292CC28B630 Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/rGvb_I1RWnjkOaC400eqOKX9gUs.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 185.31.36.0/22 maxlen: 22 2a04:4d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:32:9e:65:53:2b:cc:ed:54:92:92:cc:28:b6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac6bdbfc8d515a78e439a0b8d347aa38a5fd814b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:6d:36:fa:cd:fc:5a:bc:01:c3:b7:4f:bb: 8f:b9:d1:16:10:1c:4d:36:eb:72:82:06:bc:1c:4f: c0:e1:b9:f8:51:2b:d0:25:cc:d6:18:f3:e4:75:f9: 7e:0f:31:c7:2d:74:75:71:ba:3d:7d:24:b5:6b:a1: de:9b:bc:6d:3f:3a:77:c0:d9:6b:70:94:69:f9:41: 87:e6:4e:ba:5f:3d:14:d7:2f:5b:24:ed:d6:01:33: 7f:45:46:9c:e6:d6:b4:c6:1e:0b:53:8c:bf:b7:5c: 19:d7:64:be:9b:aa:30:4b:ef:c7:a4:a9:9f:1c:df: cc:e7:e1:d1:f1:c7:97:9b:32:b1:f3:9a:67:c1:dd: 14:41:6a:99:ca:2d:55:84:8e:82:15:e9:d2:d9:15: 93:57:a3:6b:3a:db:28:f8:13:27:f1:8c:d6:5a:d5: 64:08:f5:c0:03:d8:e9:6e:90:ea:75:c6:03:11:56: 0f:bc:df:a8:6c:66:be:64:67:c2:18:a1:2c:21:26: 0f:a9:ca:ac:df:af:9f:b8:9f:33:74:1f:37:b8:9a: a7:5e:27:f5:c2:cb:97:b4:13:f4:3c:f1:30:16:d8: b4:6e:05:54:4b:da:3e:3b:69:41:de:35:b6:b0:89: c7:a4:9e:54:f3:3b:a3:69:47:fa:d2:9e:5b:3a:f2: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6B:DB:FC:8D:51:5A:78:E4:39:A0:B8:D3:47:AA:38:A5:FD:81:4B X509v3 Authority Key Identifier: keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/rGvb_I1RWnjkOaC400eqOKX9gUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.36.0/22 IPv6: 2a04:4d40::/29 Signature Algorithm: sha256WithRSAEncryption a1:0a:4c:a5:70:96:fd:de:a3:d1:14:73:d2:54:a4:27:d1:c6: fa:52:7d:bf:44:13:a0:c7:dc:2c:32:b3:5e:d4:43:19:2a:20: 8d:57:6f:c6:02:65:c1:bc:a2:83:38:84:ae:14:ae:c1:50:a9: 63:7f:06:ca:42:1c:df:a2:20:b3:91:7c:db:25:65:0c:a0:2d: b5:5b:c5:fd:21:c7:f6:c9:fd:78:9f:c2:91:77:a3:2f:e8:0c: f2:a1:44:7d:61:39:40:9a:bd:98:24:be:24:dc:a9:8f:e3:86: 31:be:6e:25:e1:97:b9:a0:3b:55:59:4b:f1:60:65:4e:a8:59: 89:69:d1:75:b8:05:7b:fd:e0:d8:dd:3a:45:a3:9c:42:47:38: 3f:9a:b4:8f:28:12:ad:c5:a6:74:bc:2a:b9:c1:ee:4f:5b:2f: a2:e9:06:3a:e9:cf:3b:47:f1:27:e0:71:1f:26:8d:52:76:f0: 2d:46:88:d9:12:a2:71:05:74:1d:df:c6:ae:d2:d7:cb:8f:05: 25:13:b0:e8:ce:21:1f:07:8e:f3:fd:73:05:0e:b3:13:7e:55: b7:09:f1:a8:95:1a:22:46:47:15:de:9d:ad:f4:c7:38:4d:ff: 4f:e8:31:f5:cb:05:cc:b7:9b:cc:e3:ff:14:72:86:3e:a7:40: 72:cf:66:e0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pzKeZVMrzO1UkpLMKLYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3 MGIxZmEwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzZiZGJmYzhkNTE1YTc4ZTQzOWEwYjhkMzQ3YWEzOGE1ZmQ4MTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CttNvrN/Fq8AcO3T7uPudEWEBxN Nutygga8HE/A4bn4USvQJczWGPPkdfl+DzHHLXR1cbo9fSS1a6Hem7xtPzp3wNlr cJRp+UGH5k66Xz0U1y9bJO3WATN/RUac5ta0xh4LU4y/t1wZ12S+m6owS+/HpKmf HN/M5+HR8ceXmzKx85pnwd0UQWqZyi1VhI6CFenS2RWTV6NrOtso+BMn8YzWWtVk CPXAA9jpbpDqdcYDEVYPvN+obGa+ZGfCGKEsISYPqcqs36+fuJ8zdB83uJqnXif1 wsuXtBP0PPEwFti0bgVUS9o+O2lB3jW2sInHpJ5U8zujaUf60p5bOvK97QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKxr2/yNUVp45DmguNNHqjil/YFLMB8GA1UdIwQY MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It ODU0OTMwNDZlYzQ2LzEvckd2Yl9JMVJXbmprT2FDNDAwZXFPS1g5Z1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2 LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR8kMA0E AgACMAcDBQMqBE1AMA0GCSqGSIb3DQEBCwUAA4IBAQChCkylcJb93qPRFHPSVKQn 0cb6Un2/RBOgx9wsMrNe1EMZKiCNV2/GAmXBvKKDOISuFK7BUKljfwbKQhzfoiCz kXzbJWUMoC21W8X9Icf2yf14n8KRd6Mv6AzyoUR9YTlAmr2YJL4k3KmP44Yxvm4l 4Ze5oDtVWUvxYGVOqFmJadF1uAV7/eDY3TpFo5xCRzg/mrSPKBKtxaZ0vCq5we5P Wy+i6QY66c87R/En4HEfJo1SdvAtRojZEqJxBXQd38au0tfLjwUlE7DoziEfB47z /XMFDrMTflW3CfGolRoiRkcV3p2t9Mc4Tf9P6DH1ywXMt5vM4/8UcoY+p0Byz2bg -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:16 2026 by rpki-client