This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/G-toJfPo5_lPvfgOuGF2O7gK5MU.roa File: G-toJfPo5_lPvfgOuGF2O7gK5MU.roa (raw, json) Hash identifier: f/HsVZaK7DlKBZfvaInpx95ilwjwGX/MKV/SRXvYXG8= Subject key identifier: 1B:EB:68:25:F3:E8:E7:F9:4F:BD:F8:0E:B8:61:76:3B:B8:0A:E4:C5 Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B7B3593CD4CA6752F4377CEA2CE8E0DDA Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/G-toJfPo5_lPvfgOuGF2O7gK5MU.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203016 IP address blocks: 31.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:93:cd:4c:a6:75:2f:43:77:ce:a2:ce:8e:0d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1beb6825f3e8e7f94fbdf80eb861763bb80ae4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:2d:86:46:ea:5a:a9:26:cb:40:5f:7c:64: 7f:8b:42:79:2f:18:36:3a:29:72:5b:c5:3a:b1:69: 90:36:7b:b4:ca:f3:d8:6b:a5:2d:19:ba:ac:eb:ad: bd:22:4f:89:d5:8d:40:5a:8b:90:ea:ed:ae:cf:98: d3:01:6f:e0:84:2c:7c:e8:56:11:e6:83:62:14:12: 03:09:12:2b:c3:8b:e9:38:ea:1f:92:4e:73:98:f2: d5:e1:29:50:af:6e:f6:e4:6a:17:10:92:d6:07:cc: aa:5b:8c:1e:e1:02:14:25:47:c4:26:52:62:4b:26: 33:e7:aa:17:85:8a:d3:68:45:7f:51:cb:2a:6b:90: 4c:23:16:0c:a6:e7:47:bf:4b:82:ee:40:50:49:52: 42:bb:b1:d3:c0:f0:54:cd:e5:ca:44:f5:35:4e:c7: fb:ca:f9:7c:d3:b9:c6:4f:82:75:30:5b:5a:93:e8: a6:d6:20:2a:a6:ff:42:e1:d6:40:6d:11:b2:0d:70: 5b:54:39:a2:57:20:bf:da:8d:7a:a3:f7:75:61:98: b4:18:85:1a:b8:3c:32:45:4e:c1:1d:a4:40:79:bd: 17:8c:4b:ea:f1:1a:66:54:e5:22:15:96:c8:d8:90: 5a:8f:3c:39:eb:e9:d7:98:4c:83:45:f6:b0:d2:f1: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EB:68:25:F3:E8:E7:F9:4F:BD:F8:0E:B8:61:76:3B:B8:0A:E4:C5 X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/G-toJfPo5_lPvfgOuGF2O7gK5MU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.252.0/24 Signature Algorithm: sha256WithRSAEncryption 49:84:a3:6a:f5:b9:78:6b:75:98:9b:91:e9:42:7e:69:cb:d8: b5:06:53:20:fb:4b:d3:73:fe:68:82:dd:66:1a:67:38:bf:c0: 97:43:9d:c9:71:60:ec:f5:51:be:dd:c2:56:53:bc:5f:07:64: 62:06:a8:64:73:8a:fe:f9:a4:e0:5b:c1:ed:7c:f6:f4:c5:fa: 22:ce:54:95:17:99:59:c3:a2:69:8e:0d:65:4c:3f:c8:31:34: 01:68:89:76:a5:12:45:e8:af:90:e9:cb:c2:91:60:a0:6a:e0: 61:17:01:71:23:02:86:36:85:35:7e:bf:e4:60:ac:46:89:81: 98:f5:23:e5:c5:95:df:91:19:05:a3:bd:1f:f6:07:8b:55:dc: 03:55:01:28:0f:a1:de:92:d0:d6:57:33:28:f1:3f:a0:35:6e: 30:cb:05:41:35:69:eb:2e:b6:1d:32:fc:f9:e2:9f:71:52:69: 9e:f4:45:5e:da:65:92:c8:5e:77:be:49:7f:7d:6b:c3:51:f1: f4:6a:a6:db:63:c7:fb:27:82:ea:b6:64:f9:e9:fa:24:b6:f0: 86:be:2e:1d:9d:3b:f8:3a:62:4e:0b:92:36:c1:ab:4c:24:ef: 9b:e1:51:ba:f2:73:d2:05:b8:39:32:a4:b2:64:17:a4:45:68: 8b:c4:48:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZPNTKZ1L0N3zqLOjg3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmViNjgyNWYzZThlN2Y5NGZiZGY4MGViODYxNzYzYmI4MGFlNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+UthkbqWqkmy0BffGR/i0J5Lxg2 OilyW8U6sWmQNnu0yvPYa6UtGbqs6629Ik+J1Y1AWouQ6u2uz5jTAW/ghCx86FYR 5oNiFBIDCRIrw4vpOOofkk5zmPLV4SlQr2725GoXEJLWB8yqW4we4QIUJUfEJlJi SyYz56oXhYrTaEV/Ucsqa5BMIxYMpudHv0uC7kBQSVJCu7HTwPBUzeXKRPU1Tsf7 yvl807nGT4J1MFtak+im1iAqpv9C4dZAbRGyDXBbVDmiVyC/2o16o/d1YZi0GIUa uDwyRU7BHaRAeb0XjEvq8RpmVOUiFZbI2JBajzw56+nXmEyDRfaw0vG1mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvraCXz6Of5T734Drhhdju4CuTFMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEvRy10b0pmUG81X2xQdmZnT3VHRjJPN2dLNU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4D8MA0G CSqGSIb3DQEBCwUAA4IBAQBJhKNq9bl4a3WYm5HpQn5py9i1BlMg+0vTc/5ogt1m Gmc4v8CXQ53JcWDs9VG+3cJWU7xfB2RiBqhkc4r++aTgW8HtfPb0xfoizlSVF5lZ w6Jpjg1lTD/IMTQBaIl2pRJF6K+Q6cvCkWCgauBhFwFxIwKGNoU1fr/kYKxGiYGY 9SPlxZXfkRkFo70f9geLVdwDVQEoD6HektDWVzMo8T+gNW4wywVBNWnrLrYdMvz5 4p9xUmme9EVe2mWSyF53vkl/fWvDUfH0aqbbY8f7J4LqtmT56foktvCGvi4dnTv4 OmJOC5I2watMJO+b4VG68nPSBbg5MqSyZBekRWiLxEgb -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:30 2026 by rpki-client