This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa File: Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa (raw, json) Hash identifier: THRrDATBehizQuRMdoUMH27yXofDZyuSKLWoSx5aX+M= Subject key identifier: 19:FA:BA:3B:09:E0:5B:0D:5F:46:7F:14:D7:93:E3:D5:5F:10:82:8E Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2 Certificate serial: 019B7D5C9360B5214ECA98C0EDFA330E347A Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa Signing time: Fri 02 Jan 2026 06:19:37 +0000 ROA not before: Fri 02 Jan 2026 06:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201121 IP address blocks: 5.63.16.0/24 maxlen: 24 2a13:4440::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:93:60:b5:21:4e:ca:98:c0:ed:fa:33:0e:34:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2 Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19faba3b09e05b0d5f467f14d793e3d55f10828e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:c2:0c:0c:b4:9a:97:5a:cc:3f:b8:b1:c3: 0f:fb:01:a4:a5:cc:0f:f8:b5:5a:a2:10:ff:fd:c2: fa:3a:b1:28:f0:c7:ed:c4:1d:e9:f3:7a:53:2f:f0: 42:d1:be:48:f1:3b:4b:d4:f9:54:7e:f6:48:c2:33: cb:71:0c:00:2b:52:3a:ce:7c:95:f5:4d:71:89:b5: 57:f6:2f:e7:32:31:93:8f:25:ca:25:18:86:dc:ba: eb:ca:22:eb:20:2c:bc:66:ce:d3:a7:fb:14:d7:39: 82:f6:60:f2:7a:d5:ad:29:92:2a:87:56:e9:1e:7c: 9d:38:77:73:ae:87:7c:bb:79:60:c2:20:ff:b7:1c: 0e:7f:4f:ff:bb:a2:95:4b:d5:43:ac:5f:92:95:2d: 76:85:8a:3f:0d:d4:09:9a:83:85:9c:1e:2f:de:76: c8:b9:e8:5a:9f:73:fc:99:9a:03:23:a7:69:88:84: 5d:39:ce:a6:8c:ae:8f:f8:c4:7c:07:a6:a2:ca:74: ae:d8:54:4d:70:b2:65:10:96:5f:f5:d3:d6:97:de: cd:ca:0c:96:d2:2e:d4:cf:7c:e4:45:aa:ca:30:27: 11:e0:a0:b2:e5:77:78:5c:69:15:88:a9:ea:eb:57: b9:a5:d9:fd:9c:e4:1b:30:c2:ec:2c:5d:54:ff:84: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FA:BA:3B:09:E0:5B:0D:5F:46:7F:14:D7:93:E3:D5:5F:10:82:8E X509v3 Authority Key Identifier: keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/Gfq6OwngWw1fRn8U15Pj1V8Qgo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.16.0/24 IPv6: 2a13:4440::/29 Signature Algorithm: sha256WithRSAEncryption 5c:85:d4:c2:2b:fc:7b:c9:0d:f4:26:4d:92:86:6f:e1:3d:b7: cb:44:22:02:47:f8:93:fa:96:76:c9:2d:d3:2b:df:bf:72:ef: 1a:90:6e:a0:9e:88:12:54:84:e4:9d:b1:28:54:cd:18:ef:96: aa:0d:be:15:3f:26:4e:6e:cf:5c:1f:45:90:95:35:f5:5e:3c: eb:1a:67:55:71:6c:14:63:57:a5:2b:cb:43:44:4a:56:ee:6d: bb:e9:d3:0a:af:c0:14:e6:e7:81:58:f7:0a:dd:25:e8:18:2e: a3:07:d2:c4:8a:68:2c:13:48:33:e7:dd:67:b4:94:83:95:d9: d2:28:21:84:f3:bb:83:37:54:65:56:62:55:9e:b0:a1:4d:99: 5f:fe:84:e9:e6:ba:00:d3:2c:93:e6:93:ec:da:c8:3f:b6:1f: ea:a1:bc:20:f3:23:58:9f:ef:34:82:77:63:a9:aa:fa:81:c8: b5:e7:4b:e4:ce:b7:99:3b:06:2f:97:f4:47:89:01:8d:8d:b1: b9:4b:b3:a6:08:7a:f3:06:46:ac:62:7e:6d:5d:66:af:28:6d: 10:d7:77:24:ef:61:d4:ba:c7:c4:de:29:40:b5:6f:e8:b0:b1: 2d:a5:2a:48:f5:ea:6b:48:fc:74:2c:b1:cd:f2:c9:71:b0:b4: c3:73:89:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XJNgtSFOypjA7fozDjR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNzFjZTIwODY4MDVmOTEyZjg1MTJiNzljNWU2NmE5Yzlm NGQ0ZDIwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWZhYmEzYjA5ZTA1YjBkNWY0NjdmMTRkNzkzZTNkNTVmMTA4MjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqPCDAy0mpdazD+4scMP+wGkpcwP +LVaohD//cL6OrEo8MftxB3p83pTL/BC0b5I8TtL1PlUfvZIwjPLcQwAK1I6znyV 9U1xibVX9i/nMjGTjyXKJRiG3LrryiLrICy8Zs7Tp/sU1zmC9mDyetWtKZIqh1bp HnydOHdzrod8u3lgwiD/txwOf0//u6KVS9VDrF+SlS12hYo/DdQJmoOFnB4v3nbI uehan3P8mZoDI6dpiIRdOc6mjK6P+MR8B6aiynSu2FRNcLJlEJZf9dPWl97NygyW 0i7Uz3zkRarKMCcR4KCy5Xd4XGkViKnq61e5pdn9nOQbMMLsLF1U/4Q+lQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBn6ujsJ4FsNX0Z/FNeT49VfEIKOMB8GA1UdIwQY MBaAFONxziCGgF+RL4USt5xeZqnJ9NTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAt NzM1OTBhYTI5MGYxLzEvR2ZxNk93bmdXdzFmUm44VTE1UGoxVjhRZ280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAtNzM1OTBhYTI5MGYx LzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABT8QMA0E AgACMAcDBQMqE0RAMA0GCSqGSIb3DQEBCwUAA4IBAQBchdTCK/x7yQ30Jk2Shm/h PbfLRCICR/iT+pZ2yS3TK9+/cu8akG6gnogSVITknbEoVM0Y75aqDb4VPyZObs9c H0WQlTX1XjzrGmdVcWwUY1elK8tDREpW7m276dMKr8AU5ueBWPcK3SXoGC6jB9LE imgsE0gz591ntJSDldnSKCGE87uDN1RlVmJVnrChTZlf/oTp5roA0yyT5pPs2sg/ th/qobwg8yNYn+80gndjqar6gci150vkzreZOwYvl/RHiQGNjbG5S7OmCHrzBkas Yn5tXWavKG0Q13ck72HUusfE3ilAtW/osLEtpSpI9eprSPx0LLHN8slxsLTDc4kl -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:44 2026 by rpki-client