This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa File: gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa (raw, json) Hash identifier: jC0EOd0XvL5sRKBgmxuZafhPeS0sVcqw+4cs49iJ+mY= Subject key identifier: 82:A5:98:C2:FA:92:12:A0:C5:35:35:02:72:71:9A:E5:20:D9:17:61 Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c Certificate serial: 019B7EA7176EFE626B1EFA26F205BC768B25 Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50620 IP address blocks: 109.197.104.0/21 maxlen: 21 193.107.124.0/22 maxlen: 22 2001:67c:2200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:17:6e:fe:62:6b:1e:fa:26:f2:05:bc:76:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82a598c2fa9212a0c535350272719ae520d91761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:ba:c9:cb:d3:37:fc:9c:66:e8:76:95:63: fc:5f:36:fe:e6:dc:1c:21:f8:30:a7:b7:89:8f:bf: 6d:a8:45:50:74:43:47:b8:a4:15:3d:c7:48:9d:0d: 6b:62:4f:4a:a6:b4:8f:db:19:e2:1f:73:ae:d3:32: 4a:9e:cb:b5:bf:76:ff:eb:e9:5d:6b:d5:bb:a7:90: 56:f2:39:4e:ad:fd:71:1d:33:85:48:00:88:af:1b: 1e:7a:49:f6:b7:f2:93:98:20:d9:3a:50:64:36:b3: 04:82:47:73:79:d5:a4:cb:eb:02:c7:fe:df:d5:b3: b0:60:50:7c:00:c2:67:78:f4:6d:db:c5:b0:9a:4c: bb:65:96:d7:45:d8:75:5d:a4:06:e3:72:81:8c:f0: 36:5b:fd:e0:29:52:3f:e0:c8:62:da:63:81:7f:be: f3:25:27:ed:d3:7c:20:2e:3e:19:0c:04:2b:19:d8: c3:a2:6a:b1:41:78:f6:19:47:25:19:1d:71:83:94: 1e:60:be:6f:33:fb:40:a0:01:08:00:80:e0:84:54: 3f:29:28:31:dd:c3:09:bb:df:9b:41:77:e1:c3:2a: 5c:cb:d9:fd:aa:9d:63:b3:8d:10:29:b7:70:34:5c: 1e:1f:ec:7e:54:78:96:7b:17:04:eb:58:a7:b8:31: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A5:98:C2:FA:92:12:A0:C5:35:35:02:72:71:9A:E5:20:D9:17:61 X509v3 Authority Key Identifier: keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.104.0/21 193.107.124.0/22 IPv6: 2001:67c:2200::/48 Signature Algorithm: sha256WithRSAEncryption 3e:5e:2f:3d:38:89:41:36:d6:a9:49:1e:56:15:3e:4d:2b:f3: 7a:bc:0a:14:da:0b:b6:26:35:51:bc:78:3a:0c:9c:3d:78:44: 1c:ab:47:af:82:90:92:db:0a:ba:dd:ed:d1:d7:da:3e:4b:41: 71:ac:c2:9d:fc:d1:8d:86:80:a6:cc:76:f0:3f:ce:2b:4f:77: 3c:48:07:ee:b7:b0:c0:14:78:9d:4b:ed:88:21:2e:b1:fd:94: ba:58:f8:11:92:21:b7:87:b0:83:58:e6:88:c7:6f:fb:b5:6c: 6c:4a:c5:14:0c:53:8b:80:68:09:76:be:9f:c5:69:03:c7:4a: 49:ac:df:29:89:30:08:e1:a4:28:ab:a5:a1:4c:4e:b5:54:d2: 85:11:a4:36:b5:45:c6:f6:cc:7d:98:4a:d2:18:44:ee:0d:96: 44:cb:d2:37:92:3c:02:ad:d4:8a:8a:b1:02:cf:56:22:7a:b1: 5e:d7:bc:22:a6:8b:17:c9:52:92:63:1c:18:c6:80:53:7c:a1: 82:b9:9b:0d:b9:63:a2:c2:b1:07:94:86:8b:94:40:b7:3e:d7: 03:7c:0a:34:22:86:a3:bd:3f:4c:2d:6a:2a:39:fd:ad:9e:98: de:09:a7:83:2d:b2:f6:94:97:61:d0:98:5f:94:a6:eb:6c:40: 4d:d5:51:dc -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+pxdu/mJrHvom8gW8doslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZmZmMDAxMzZjODNmNTNhMzhhYzNlZWFjOTcxMGE3OTkz NmIyNGMwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmE1OThjMmZhOTIxMmEwYzUzNTM1MDI3MjcxOWFlNTIwZDkxNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A66ycvTN/ycZuh2lWP8Xzb+5twc Ifgwp7eJj79tqEVQdENHuKQVPcdInQ1rYk9KprSP2xniH3Ou0zJKnsu1v3b/6+ld a9W7p5BW8jlOrf1xHTOFSACIrxseekn2t/KTmCDZOlBkNrMEgkdzedWky+sCx/7f 1bOwYFB8AMJnePRt28Wwmky7ZZbXRdh1XaQG43KBjPA2W/3gKVI/4Mhi2mOBf77z JSft03wgLj4ZDAQrGdjDomqxQXj2GUclGR1xg5QeYL5vM/tAoAEIAIDghFQ/KSgx 3cMJu9+bQXfhwypcy9n9qp1js40QKbdwNFweH+x+VHiWexcE61inuDG4mwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIKlmML6khKgxTU1AnJxmuUg2RdhMB8GA1UdIwQY MBaAFGX/8AE2yD9To4rD7qyXEKeZNrJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDkt MGQ1OWQ5ZDExNTA1LzEvZ3FXWXd2cVNFcURGTlRVQ2NuR2E1U0RaRjJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDktMGQ1OWQ5ZDExNTA1 LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDbcVoAwQC wWt8MA8EAgACMAkDBwAgAQZ8IgAwDQYJKoZIhvcNAQELBQADggEBAD5eLz04iUE2 1qlJHlYVPk0r83q8ChTaC7YmNVG8eDoMnD14RByrR6+CkJLbCrrd7dHX2j5LQXGs wp380Y2GgKbMdvA/zitPdzxIB+63sMAUeJ1L7YghLrH9lLpY+BGSIbeHsINY5ojH b/u1bGxKxRQMU4uAaAl2vp/FaQPHSkms3ymJMAjhpCirpaFMTrVU0oURpDa1Rcb2 zH2YStIYRO4NlkTL0jeSPAKt1IqKsQLPViJ6sV7XvCKmixfJUpJjHBjGgFN8oYK5 mw25Y6LCsQeUhouUQLc+1wN8CjQihqO9P0wtaio5/a2emN4Jp4MtsvaUl2HQmF+U putsQE3VUdw= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:53 2026 by rpki-client