This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/Gv2C98GkItkWSOBM4tA4DrxRJWU.roa File: Gv2C98GkItkWSOBM4tA4DrxRJWU.roa (raw, json) Hash identifier: e2P8gV/Ieufy90RKv9FMC2T3qO0g0b/GfJ9bsJA175k= Subject key identifier: 1A:FD:82:F7:C1:A4:22:D9:16:48:E0:4C:E2:D0:38:0E:BC:51:25:65 Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Certificate serial: 019B0BDD46774B9DC65A293BAB5910DBF833 Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/Gv2C98GkItkWSOBM4tA4DrxRJWU.roa Signing time: Thu 11 Dec 2025 05:23:29 +0000 ROA not before: Thu 11 Dec 2025 05:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42277 IP address blocks: 5.249.192.0/19 maxlen: 19 37.188.0.0/18 maxlen: 20 46.62.0.0/17 maxlen: 17 77.241.16.0/21 maxlen: 21 77.241.20.0/22 maxlen: 22 94.247.248.0/22 maxlen: 24 94.247.248.0/24 maxlen: 24 94.247.252.0/22 maxlen: 22 176.241.192.0/19 maxlen: 19 178.249.240.0/21 maxlen: 21 2a02:51c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:dd:46:77:4b:9d:c6:5a:29:3b:ab:59:10:db:f8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf Validity Not Before: Dec 11 05:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1afd82f7c1a422d91648e04ce2d0380ebc512565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:cb:ad:a6:8d:5b:f1:31:e6:63:c5:2e:4b: 7d:e9:6d:52:1b:c0:ed:07:d8:38:5a:ee:b1:90:82: 09:2b:e5:21:26:55:ed:a1:23:6c:98:4f:a4:6b:10: 8a:b9:8d:ff:96:db:78:31:4a:0f:32:14:26:32:69: 73:9e:1d:b6:75:62:03:62:77:90:d6:dc:0b:cc:82: 48:fb:ef:52:4d:13:99:12:25:09:92:27:0b:a8:60: 2c:7f:f2:72:7a:e1:e2:a7:f1:a6:55:a5:26:fe:01: 61:c9:01:ae:43:5c:00:62:62:70:af:2a:d2:0c:ae: 28:4a:2b:5d:ed:55:38:36:0d:67:91:f9:d0:c9:97: 9f:99:be:d1:22:24:65:fb:23:05:f8:c5:c9:7f:e3: 7f:58:b2:5f:1d:38:09:7d:25:b0:67:7b:88:16:0a: 0b:a2:33:84:ed:65:00:c2:84:89:ff:05:0b:6b:38: 9b:42:78:be:7b:f7:59:52:4c:95:1f:a0:62:41:89: 3f:42:7e:c1:8a:13:68:7f:5e:cd:53:4a:9d:d8:ed: 74:65:df:ef:69:d2:f0:ad:ec:25:96:8d:75:4b:d0: 35:95:33:e3:95:ef:63:d9:e7:2e:2e:56:d1:ce:d7: f1:22:07:99:d8:2d:85:68:e5:01:8c:46:cb:95:d8: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FD:82:F7:C1:A4:22:D9:16:48:E0:4C:E2:D0:38:0E:BC:51:25:65 X509v3 Authority Key Identifier: keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/Gv2C98GkItkWSOBM4tA4DrxRJWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.192.0/19 37.188.0.0/18 46.62.0.0/17 77.241.16.0/21 94.247.248.0/21 176.241.192.0/19 178.249.240.0/21 IPv6: 2a02:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:ca:80:f2:a4:42:10:b3:86:6c:db:8d:54:b4:d9:8d:58:2a: 98:cc:6e:f6:4e:13:8f:9f:45:fc:f7:0b:bf:d8:36:6c:9b:80: d4:dc:44:ba:3e:93:00:3f:b3:ae:28:29:c5:55:2d:46:a6:d7: 54:46:3b:7e:76:ae:84:69:04:83:3e:26:77:f9:30:7a:10:ef: aa:df:c9:43:3c:ab:ef:fd:49:45:c4:1b:81:cb:63:bd:4a:d9: 25:38:a2:9f:2c:22:2b:7f:29:ca:12:e9:1b:42:e4:d3:d5:0b: 03:75:e1:e9:a2:c8:25:a5:1b:53:d3:20:12:16:39:54:cb:02: b2:52:2c:5b:d7:f1:7e:05:29:83:b5:ec:ed:6d:e2:cf:55:b3: dd:2c:ae:c5:4f:c8:fd:42:5a:07:18:4f:3f:a4:e8:dd:23:ab: 9f:15:93:0b:e6:84:fc:2b:8f:28:f7:43:fc:e4:6c:28:bc:26: 18:80:ab:ef:1a:e9:71:a0:96:ee:7a:b8:1c:05:e5:a1:3c:a8: 83:07:f8:9d:7e:d3:58:83:75:9f:8f:f5:3f:1f:39:25:c2:f8: 99:f8:fe:1c:7c:67:db:30:14:43:4a:99:6d:f3:74:9d:ad:0c: 9c:fe:f8:b4:ac:45:89:09:ae:3c:54:cd:f3:1a:9b:92:fb:17: 1d:a3:44:f1 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZsL3UZ3S53GWik7q1kQ2/gzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzY2FiNjhmYmIwYzk3OTQ3NjU5NGJkZmM1NmMxOTIwNDJi OGRlZGYwHhcNMjUxMjExMDUyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWZkODJmN2MxYTQyMmQ5MTY0OGUwNGNlMmQwMzgwZWJjNTEyNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD7LraaNW/Ex5mPFLkt96W1SG8Dt B9g4Wu6xkIIJK+UhJlXtoSNsmE+kaxCKuY3/ltt4MUoPMhQmMmlznh22dWIDYneQ 1twLzIJI++9STROZEiUJkicLqGAsf/JyeuHip/GmVaUm/gFhyQGuQ1wAYmJwryrS DK4oSitd7VU4Ng1nkfnQyZefmb7RIiRl+yMF+MXJf+N/WLJfHTgJfSWwZ3uIFgoL ojOE7WUAwoSJ/wULazibQni+e/dZUkyVH6BiQYk/Qn7BihNof17NU0qd2O10Zd/v adLwrewllo11S9A1lTPjle9j2ecuLlbRztfxIgeZ2C2FaOUBjEbLldjh8wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFBr9gvfBpCLZFkjgTOLQOA68USVlMB8GA1UdIwQY MBaAFPPKto+7DJeUdllL38VsGSBCuN7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUt YWE0YTgxYTJlYjIzLzEvR3YyQzk4R2tJdGtXU09CTTR0QTREcnhSSldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUtYWE0YTgxYTJlYjIz LzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQFBfnAAwQG JbwAAwQHLj4AAwQDTfEQAwQDXvf4AwQFsPHAAwQDsvnwMA0EAgACMAcDBQAqAlHA MA0GCSqGSIb3DQEBCwUAA4IBAQBbyoDypEIQs4Zs241UtNmNWCqYzG72ThOPn0X8 9wu/2DZsm4DU3ES6PpMAP7OuKCnFVS1GptdURjt+dq6EaQSDPiZ3+TB6EO+q38lD PKvv/UlFxBuBy2O9StklOKKfLCIrfynKEukbQuTT1QsDdeHposglpRtT0yASFjlU ywKyUixb1/F+BSmDteztbeLPVbPdLK7FT8j9QloHGE8/pOjdI6ufFZML5oT8K48o 90P85GwovCYYgKvvGulxoJbuergcBeWhPKiDB/idftNYg3Wfj/U/HzklwviZ+P4c fGfbMBRDSplt83SdrQyc/vi0rEWJCa48VM3zGpuS+xcdo0Tx -----END CERTIFICATE-----Generated at Fri Dec 19 11:44:58 2025 by rpki-client