This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa File: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (raw, json) Hash identifier: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ= Subject key identifier: 1A:4D:F1:DD:D3:2F:33:2C:2B:D9:2F:09:D6:09:97:61:ED:21:9E:85 Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Certificate serial: 019B7F145CF9F8F005AF854BB5E07D5F0309 Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa Signing time: Fri 02 Jan 2026 14:19:59 +0000 ROA not before: Fri 02 Jan 2026 14:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53340 IP address blocks: 185.143.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5c:f9:f8:f0:05:af:85:4b:b5:e0:7d:5f:03:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f Validity Not Before: Jan 2 14:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a4df1ddd32f332c2bd92f09d6099761ed219e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:ba:fd:74:c5:b8:e1:f2:3f:68:9e:c1:38: 80:4b:c9:8c:32:59:ed:88:48:8c:65:f3:7e:e0:02: ac:3e:1e:20:34:a2:04:7d:00:d7:8e:31:7a:54:42: 77:2d:a5:38:e7:19:fd:37:40:60:3e:c2:43:68:01: b5:6f:3d:60:a5:e6:b2:e9:51:bf:2f:e0:76:af:c1: 71:d4:ff:a1:36:2e:c7:ec:e9:2a:f9:97:b3:aa:d4: 52:1f:3e:f3:8f:18:b0:87:80:6d:f9:d8:51:c7:3a: 84:d6:5e:a9:dc:ed:8e:33:41:48:6e:ff:8d:32:74: 93:0b:d4:56:83:d0:77:c4:3c:0e:1a:a9:1e:bd:f1: f2:18:cb:06:2b:30:9d:a6:cf:30:d9:90:ce:8b:35: f0:d8:88:be:73:2b:27:37:a5:0d:77:1d:19:b5:ac: 81:48:4c:67:09:be:19:e2:83:47:88:40:a8:bd:55: d1:5d:5c:e5:e9:75:88:e2:88:36:e8:ae:66:38:ec: cd:44:2f:88:87:d2:c4:f9:85:22:3f:32:4e:79:12: 3d:85:60:43:47:bd:7f:b7:3a:44:ba:94:bc:3c:f1: 54:32:33:29:00:7b:d1:1f:87:f1:09:51:1d:6c:47: 44:94:e4:b7:f8:d5:98:26:cc:5c:93:1c:4d:0f:9a: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4D:F1:DD:D3:2F:33:2C:2B:D9:2F:09:D6:09:97:61:ED:21:9E:85 X509v3 Authority Key Identifier: keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.240.0/24 Signature Algorithm: sha256WithRSAEncryption 36:6b:cc:cc:0e:1c:a6:ca:68:7f:a2:c1:72:15:e4:05:8a:cb: 0f:03:b0:e5:9b:85:f8:7e:2c:56:bc:bc:1c:3c:ea:b4:1c:32: 2e:59:b8:1a:30:ea:5e:21:dc:de:3f:9e:d3:21:ff:ea:bc:2d: 52:5f:65:3d:07:11:53:3e:5e:07:fb:0b:67:c0:5d:82:79:62: ec:a2:cb:9a:c1:6a:fc:b1:3a:9b:e9:cb:63:10:5b:a2:74:8f: ff:e1:f1:e2:09:98:ea:22:f2:c4:23:75:a0:dc:5a:39:73:3b: ae:f1:fe:b4:7e:40:55:b2:60:11:4f:be:1f:d1:c0:e9:ad:88: de:99:63:fc:05:f5:00:d6:89:39:a1:da:3e:04:81:60:f1:6a: f4:8b:54:1f:86:d8:56:e2:c1:63:22:11:cc:39:9f:fb:95:9b: 79:5c:1d:d1:f4:c4:1f:6e:d7:2b:b7:f9:54:02:e5:c0:c9:7a: b4:ca:6d:d0:e9:4a:41:96:46:44:a7:2c:67:e1:4b:a6:0f:15: 22:bf:fe:af:fd:59:96:3e:2c:8f:c0:a1:04:e9:bb:99:a6:7e: 01:aa:1f:49:10:c8:be:2d:dc:7f:d8:4c:5f:8b:2a:6e:cb:1d: 90:31:53:19:a3:2f:e1:49:40:61:83:96:69:d5:66:03:e7:6f: 6f:24:ea:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFz5+PAFr4VLteB9XwMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm MTZhOWYwHhcNMjYwMTAyMTQxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTRkZjFkZGQzMmYzMzJjMmJkOTJmMDlkNjA5OTc2MWVkMjE5ZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm+6/XTFuOHyP2iewTiAS8mMMlnt iEiMZfN+4AKsPh4gNKIEfQDXjjF6VEJ3LaU45xn9N0BgPsJDaAG1bz1gpeay6VG/ L+B2r8Fx1P+hNi7H7Okq+ZezqtRSHz7zjxiwh4Bt+dhRxzqE1l6p3O2OM0FIbv+N MnSTC9RWg9B3xDwOGqkevfHyGMsGKzCdps8w2ZDOizXw2Ii+cysnN6UNdx0ZtayB SExnCb4Z4oNHiECovVXRXVzl6XWI4og26K5mOOzNRC+Ih9LE+YUiPzJOeRI9hWBD R71/tzpEupS8PPFUMjMpAHvRH4fxCVEdbEdElOS3+NWYJsxckxxND5qgEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpN8d3TLzMsK9kvCdYJl2HtIZ6FMB8GA1UdIwQY MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt ODZhNTUxOGUyZDUyLzEvR2szeDNkTXZNeXdyMlM4SjFnbVhZZTBobm9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY/wMA0G CSqGSIb3DQEBCwUAA4IBAQA2a8zMDhymymh/osFyFeQFissPA7Dlm4X4fixWvLwc POq0HDIuWbgaMOpeIdzeP57TIf/qvC1SX2U9BxFTPl4H+wtnwF2CeWLsosuawWr8 sTqb6ctjEFuidI//4fHiCZjqIvLEI3Wg3Fo5czuu8f60fkBVsmART74f0cDprYje mWP8BfUA1ok5odo+BIFg8Wr0i1QfhthW4sFjIhHMOZ/7lZt5XB3R9MQfbtcrt/lU AuXAyXq0ym3Q6UpBlkZEpyxn4UumDxUiv/6v/VmWPiyPwKEE6buZpn4Bqh9JEMi+ Ldx/2Exfiypuyx2QMVMZoy/hSUBhg5Zp1WYD529vJOpw -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:22 2026 by rpki-client