This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/G_a_D4w6XID3HHcAkDZ33ncczUI.roa File: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (raw, json) Hash identifier: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0= Subject key identifier: 1B:F6:BF:0F:8C:3A:5C:80:F7:1C:77:00:90:36:77:DE:77:1C:CD:42 Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Certificate serial: 019B76EAFEDF47094A7E2BC2909F49431A21 Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/G_a_D4w6XID3HHcAkDZ33ncczUI.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 158.94.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fe:df:47:09:4a:7e:2b:c2:90:9f:49:43:1a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bf6bf0f8c3a5c80f71c7700903677de771ccd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:35:e3:bf:ee:f8:bc:ac:47:9f:53:ea:03: 35:a1:bc:52:08:92:5d:1a:2c:a0:fb:9a:5e:44:ad: fe:d1:1a:b2:73:62:e7:1c:92:b2:e4:66:7a:37:cf: 6f:de:81:77:58:6b:4f:e9:01:7f:fa:6b:0b:08:9d: 90:7a:da:cb:f3:c4:60:8b:b1:04:04:14:e3:a8:dc: 1b:9b:b4:56:64:20:c9:77:5d:5c:6d:4a:48:82:8b: 8c:d1:46:dc:4d:9c:57:6f:78:89:b3:f1:8b:dd:c1: ab:c1:6a:e4:91:8c:57:c0:49:70:e5:b9:60:5b:c9: 70:d2:06:8b:6e:c5:e7:86:c1:5c:d1:89:b7:2a:00: 01:09:3b:4a:10:45:dc:13:83:5a:25:3c:e7:65:37: 2d:97:a5:93:e8:9f:52:99:4a:ef:16:90:81:0d:ba: 60:2e:0f:92:39:46:72:e8:13:0d:7c:22:85:8f:fd: 9c:77:8c:68:79:1d:df:0b:3d:40:eb:1c:86:ad:50: dd:2e:ff:ea:f4:31:3d:5f:5d:c1:cf:15:47:03:cf: 43:79:93:b8:27:65:8f:b4:38:71:10:58:b8:e4:30: f4:58:ac:dd:e2:4d:86:fd:48:d9:23:07:35:a9:e3: 8e:c4:a7:95:f4:5c:5f:c1:fd:26:2f:f2:3c:c3:ce: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F6:BF:0F:8C:3A:5C:80:F7:1C:77:00:90:36:77:DE:77:1C:CD:42 X509v3 Authority Key Identifier: keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/G_a_D4w6XID3HHcAkDZ33ncczUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.48.0/20 Signature Algorithm: sha256WithRSAEncryption 90:77:69:72:03:08:5c:5b:09:ed:c2:ee:c8:36:7d:0e:6c:0d: db:ce:fb:4f:f3:1a:5a:23:9a:48:cf:9d:5b:ae:f0:0f:95:79: 20:71:30:4d:fa:f1:72:89:0a:a9:7e:de:78:da:21:ce:91:ad: 6e:f5:eb:46:3e:c2:52:2e:5b:65:69:15:96:03:ea:b9:2b:fd: 31:8d:7f:bc:2c:e1:bb:36:f6:75:a0:07:d0:5e:57:02:1a:ff: d0:e3:c0:27:94:22:82:5b:18:a4:20:72:72:df:36:80:b1:1c: 4b:80:2e:31:dc:e8:17:9e:66:29:73:3f:d0:a3:39:b4:2b:a1: 75:b1:42:fe:e4:eb:b1:a5:55:5c:ad:b5:64:a4:13:61:6b:e1: 1d:56:90:95:c2:e3:d1:1e:15:f7:2e:6f:f2:c2:62:36:e8:14: 6b:7b:6b:27:aa:15:98:97:88:38:d6:d3:07:31:20:9a:ee:02: 34:44:6a:22:ef:d0:07:41:6d:0c:55:67:d8:37:cb:91:fb:6e: c3:04:82:8d:fb:4a:c0:46:be:eb:66:56:ee:56:2d:90:c2:82: 6f:27:96:50:fa:f9:62:d3:e2:62:49:5e:3c:11:e4:0b:09:0a: c0:e3:78:f7:4e:76:ef:38:f9:72:27:92:31:37:7d:4e:1f:65: 4e:a4:71:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26v7fRwlKfivCkJ9JQxohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw ODUzYTEwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmY2YmYwZjhjM2E1YzgwZjcxYzc3MDA5MDM2NzdkZTc3MWNjZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbE147/u+LysR59T6gM1obxSCJJd Giyg+5peRK3+0Rqyc2LnHJKy5GZ6N89v3oF3WGtP6QF/+msLCJ2QetrL88Rgi7EE BBTjqNwbm7RWZCDJd11cbUpIgouM0UbcTZxXb3iJs/GL3cGrwWrkkYxXwElw5blg W8lw0gaLbsXnhsFc0Ym3KgABCTtKEEXcE4NaJTznZTctl6WT6J9SmUrvFpCBDbpg Lg+SOUZy6BMNfCKFj/2cd4xoeR3fCz1A6xyGrVDdLv/q9DE9X13BzxVHA89DeZO4 J2WPtDhxEFi45DD0WKzd4k2G/UjZIwc1qeOOxKeV9Fxfwf0mL/I8w84wEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBv2vw+MOlyA9xx3AJA2d953HM1CMB8GA1UdIwQY MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt YzRiZWZiMjU2MjJjLzEvR19hX0Q0dzZYSUQzSEhjQWtEWjMzbmNjelVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnl4wMA0G CSqGSIb3DQEBCwUAA4IBAQCQd2lyAwhcWwntwu7INn0ObA3bzvtP8xpaI5pIz51b rvAPlXkgcTBN+vFyiQqpft542iHOka1u9etGPsJSLltlaRWWA+q5K/0xjX+8LOG7 NvZ1oAfQXlcCGv/Q48AnlCKCWxikIHJy3zaAsRxLgC4x3OgXnmYpcz/Qozm0K6F1 sUL+5OuxpVVcrbVkpBNha+EdVpCVwuPRHhX3Lm/ywmI26BRre2snqhWYl4g41tMH MSCa7gI0RGoi79AHQW0MVWfYN8uR+27DBIKN+0rARr7rZlbuVi2QwoJvJ5ZQ+vli 0+JiSV48EeQLCQrA43j3TnbvOPlyJ5IxN31OH2VOpHEM -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:54 2026 by rpki-client