This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/g4g21LF95pPJf6FjYtTSCBm2Ym4.roa File: g4g21LF95pPJf6FjYtTSCBm2Ym4.roa (raw, json) Hash identifier: 2RGs1iJXhI4qh9KpJe3f6f/l82Lr3SGKXqSjSAND2n0= Subject key identifier: 83:88:36:D4:B1:7D:E6:93:C9:7F:A1:63:62:D4:D2:08:19:B6:62:6E Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE066DF715F57BEC92C5E0991AD67C Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/g4g21LF95pPJf6FjYtTSCBm2Ym4.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209408 IP address blocks: 45.66.224.0/22 maxlen: 22 194.242.63.0/24 maxlen: 24 2a09:6c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:06:6d:f7:15:f5:7b:ec:92:c5:e0:99:1a:d6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=838836d4b17de693c97fa16362d4d20819b6626e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:ce:0c:eb:3f:1a:f3:c4:33:ba:e0:2d:47: 9e:76:07:0c:dd:02:9f:d1:c1:9e:2c:91:94:6d:8a: b2:6f:34:72:ac:bd:d1:49:5b:b7:29:f4:f6:1b:19: 1b:53:b1:e2:1c:17:1f:bc:bc:ca:8f:c2:4a:ed:4f: 60:84:57:fb:0d:90:40:31:7e:da:57:e9:10:0f:de: 42:5a:f8:2a:98:2b:81:d7:a2:8e:f9:03:ac:ec:93: 11:5f:43:61:6d:f2:a4:77:f2:bb:fc:3a:22:dc:bc: b7:49:14:42:1c:35:7d:1f:1f:96:48:2d:bf:e9:0c: 3d:db:98:50:66:e4:f7:04:8f:e0:c3:20:c2:49:af: 49:77:95:60:98:93:82:11:1b:ec:ac:fe:b0:28:ae: 84:41:f3:70:ed:1e:86:74:e8:f7:c4:c5:97:af:d8: 91:b1:24:b2:c2:e5:c0:fc:47:c2:e2:89:c2:da:6b: b5:8e:d1:dc:ff:c9:34:32:29:13:a7:62:8c:52:f2: 41:4a:a7:e3:21:6c:dc:4c:fa:2d:a6:47:43:80:59: c7:89:c6:5d:cf:59:93:fd:99:20:aa:8d:68:80:55: 68:fa:be:db:b4:90:50:ca:db:2c:3a:27:38:22:1b: 01:15:4c:ad:4a:9f:b4:54:65:74:65:8f:7d:7a:c1: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:36:D4:B1:7D:E6:93:C9:7F:A1:63:62:D4:D2:08:19:B6:62:6E X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/g4g21LF95pPJf6FjYtTSCBm2Ym4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.224.0/22 194.242.63.0/24 IPv6: 2a09:6c40::/29 Signature Algorithm: sha256WithRSAEncryption 45:a5:a5:aa:2a:8c:32:99:8b:06:42:06:21:67:26:9c:96:54: 2e:56:bd:9c:e4:fa:ec:23:35:2f:81:e5:06:15:cf:11:07:2e: 8b:0b:11:0a:70:bc:e9:1c:e8:5f:68:6f:52:37:37:56:29:34: 3c:2f:94:ac:9b:70:14:19:d8:b0:a8:78:9e:6f:ca:0b:ce:65: eb:25:60:b9:d3:aa:be:49:f1:98:9c:96:f1:ae:15:53:a0:88: 75:42:59:9c:8a:f0:c8:eb:21:28:9a:90:9e:5e:7b:ee:bd:a7: 91:0b:15:c1:54:4f:da:2b:99:30:af:fd:f8:8a:a1:6d:16:cc: 63:9d:d1:86:1c:58:4c:4b:65:ed:2d:db:50:5a:50:1a:23:cc: ae:df:de:46:88:41:e6:35:5c:86:96:e9:92:22:ee:28:9c:20: cf:14:1f:76:ee:5e:bf:b3:80:c3:57:82:05:6b:ab:a7:a9:53: a8:1d:e9:65:1d:72:bb:14:7f:40:f0:09:ba:a6:fc:63:ae:a0: 52:94:4d:2a:de:f6:a6:53:cc:24:56:ba:d2:70:fb:14:d5:df: 67:84:3f:92:86:04:03:7d:74:45:93:a7:48:88:7d:fa:c6:ca: 58:ed:a5:9f:af:0d:66:f2:7c:40:f7:02:8f:7b:78:8e:e7:9c: 9d:e2:4b:77 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87gZt9xX1e+ySxeCZGtZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzg4MzZkNGIxN2RlNjkzYzk3ZmExNjM2MmQ0ZDIwODE5YjY2MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW/ODOs/GvPEM7rgLUeedgcM3QKf 0cGeLJGUbYqybzRyrL3RSVu3KfT2GxkbU7HiHBcfvLzKj8JK7U9ghFf7DZBAMX7a V+kQD95CWvgqmCuB16KO+QOs7JMRX0NhbfKkd/K7/Doi3Ly3SRRCHDV9Hx+WSC2/ 6Qw925hQZuT3BI/gwyDCSa9Jd5VgmJOCERvsrP6wKK6EQfNw7R6GdOj3xMWXr9iR sSSywuXA/EfC4onC2mu1jtHc/8k0MikTp2KMUvJBSqfjIWzcTPotpkdDgFnHicZd z1mT/Zkgqo1ogFVo+r7btJBQytssOic4IhsBFUytSp+0VGV0ZY99esGGYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIOINtSxfeaTyX+hY2LU0ggZtmJuMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvZzRnMjFMRjk1cFBKZjZGall0VFNDQm0yWW00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLULgAwQA wvI/MA0EAgACMAcDBQMqCWxAMA0GCSqGSIb3DQEBCwUAA4IBAQBFpaWqKowymYsG QgYhZyacllQuVr2c5PrsIzUvgeUGFc8RBy6LCxEKcLzpHOhfaG9SNzdWKTQ8L5Ss m3AUGdiwqHieb8oLzmXrJWC506q+SfGYnJbxrhVToIh1QlmcivDI6yEompCeXnvu vaeRCxXBVE/aK5kwr/34iqFtFsxjndGGHFhMS2XtLdtQWlAaI8yu395GiEHmNVyG lumSIu4onCDPFB927l6/s4DDV4IFa6unqVOoHellHXK7FH9A8Am6pvxjrqBSlE0q 3vamU8wkVrrScPsU1d9nhD+ShgQDfXRFk6dIiH36xspY7aWfrw1m8nxA9wKPe3iO 55yd4kt3 -----END CERTIFICATE-----Generated at Mon Jan 19 18:26:08 2026 by rpki-client