This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1GOYWh4PKQpRf6Pep1sxJKZXFek.roa File: 1GOYWh4PKQpRf6Pep1sxJKZXFek.roa (raw, json) Hash identifier: TaPSpUlF/NwsasDhYAcqptLEO7TA/x57UQn0C1Aj3fw= Subject key identifier: D4:63:98:5A:1E:0F:29:0A:51:7F:A3:DE:A7:5B:31:24:A6:57:15:E9 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA52B49ACCD6BF59F877369F6D278AF Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1GOYWh4PKQpRf6Pep1sxJKZXFek.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 213.16.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2b:49:ac:cd:6b:f5:9f:87:73:69:f6:d2:78:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d463985a1e0f290a517fa3dea75b3124a65715e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:cd:da:38:f3:01:c3:3a:b3:09:85:d4:00: 0e:7a:bf:49:dd:24:6c:7b:8f:ad:5c:12:48:d1:32: f6:d3:76:4b:2f:4f:a6:77:29:8c:5d:55:eb:f5:5f: 8a:dc:2a:92:90:8b:9d:65:c6:30:38:96:54:cb:84: 21:90:0b:d8:c3:13:de:6c:f9:6b:bb:25:44:d6:09: 7d:11:71:eb:53:26:3d:59:9d:3a:99:2d:ca:c1:fb: 08:95:02:44:b1:b1:cc:0e:ab:be:2b:c9:d7:5d:5b: 0f:c3:40:cc:64:8d:8d:4e:bd:98:db:85:61:98:32: a6:6b:f2:b2:51:f5:f6:5a:5f:98:e0:aa:c1:95:4a: 61:6d:00:a1:3a:8c:2a:7c:38:fc:70:66:4f:7e:67: 76:19:e2:30:99:f3:3b:b8:92:38:a8:69:46:e9:cb: 50:84:4d:25:8c:67:23:f6:2b:1b:e6:f8:ed:41:3d: f1:0c:26:4a:e2:0e:47:56:0f:24:d8:03:d3:2b:ee: 41:d8:dd:4f:32:37:0b:0d:0a:61:ab:4b:30:e3:da: ee:8d:7f:ad:ed:45:13:03:56:50:ad:83:fa:9c:38: 51:13:34:75:fe:5d:0e:22:ca:e2:9b:ad:17:91:7d: 39:03:ab:f8:ba:69:ac:fb:20:6e:a8:c4:5e:ad:71: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:63:98:5A:1E:0F:29:0A:51:7F:A3:DE:A7:5B:31:24:A6:57:15:E9 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1GOYWh4PKQpRf6Pep1sxJKZXFek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.16.60.0/24 Signature Algorithm: sha256WithRSAEncryption 48:8d:3c:4a:b0:e7:cb:d5:08:e9:5f:75:84:56:da:a6:79:88: a5:09:ea:c7:93:54:02:a6:61:e3:30:c9:b5:13:d5:79:c7:49: ea:5a:37:98:bb:1e:c5:3c:23:a0:d6:36:cc:7e:02:9f:5e:86: 8a:08:96:13:bb:fb:5a:15:62:e9:cf:9e:c3:d6:d2:eb:ea:b7: 75:e2:d4:dc:1d:92:00:6d:01:7d:7f:44:b1:50:c6:45:eb:df: 21:69:da:c7:12:4a:9d:14:a4:b8:c5:a2:49:c0:da:49:9f:a6: 22:22:03:57:4e:31:08:ea:62:95:7f:24:45:17:7d:8c:b7:fb: 41:2b:cf:d7:d9:12:8f:09:e3:ae:84:8b:81:e3:1d:7f:de:57: 41:41:bf:4c:1e:ee:f5:ab:89:f3:3b:41:5c:97:ae:cd:9c:23: 2e:b2:9f:9a:cb:b2:f3:3b:5d:bb:83:1e:92:b1:9e:13:c5:41: 41:9d:d4:58:e7:9f:21:e1:ec:5c:26:36:b4:fa:33:8b:50:6e: 7e:7a:53:4a:4f:89:35:fb:b7:d5:b5:bb:e5:52:01:46:5e:05: 57:45:fb:86:58:8b:74:8a:bb:b5:d2:4b:63:d5:7c:b8:52:16: cc:dd:4b:58:37:77:d4:da:2c:4b:2e:2f:35:3c:68:ff:75:68: 67:a4:dd:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pStJrM1r9Z+Hc2n20nivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDYzOTg1YTFlMGYyOTBhNTE3ZmEzZGVhNzViMzEyNGE2NTcxNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqPN2jjzAcM6swmF1AAOer9J3SRs e4+tXBJI0TL203ZLL0+mdymMXVXr9V+K3CqSkIudZcYwOJZUy4QhkAvYwxPebPlr uyVE1gl9EXHrUyY9WZ06mS3KwfsIlQJEsbHMDqu+K8nXXVsPw0DMZI2NTr2Y24Vh mDKma/KyUfX2Wl+Y4KrBlUphbQChOowqfDj8cGZPfmd2GeIwmfM7uJI4qGlG6ctQ hE0ljGcj9isb5vjtQT3xDCZK4g5HVg8k2APTK+5B2N1PMjcLDQphq0sw49rujX+t 7UUTA1ZQrYP6nDhREzR1/l0OIsrim60XkX05A6v4umms+yBuqMRerXGYvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRjmFoeDykKUX+j3qdbMSSmVxXpMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvMUdPWVdoNFBLUXBSZjZQZXAxc3hKS1pYRmVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RA8MA0G CSqGSIb3DQEBCwUAA4IBAQBIjTxKsOfL1QjpX3WEVtqmeYilCerHk1QCpmHjMMm1 E9V5x0nqWjeYux7FPCOg1jbMfgKfXoaKCJYTu/taFWLpz57D1tLr6rd14tTcHZIA bQF9f0SxUMZF698hadrHEkqdFKS4xaJJwNpJn6YiIgNXTjEI6mKVfyRFF32Mt/tB K8/X2RKPCeOuhIuB4x1/3ldBQb9MHu71q4nzO0Fcl67NnCMusp+ay7LzO127gx6S sZ4TxUFBndRY558h4excJja0+jOLUG5+elNKT4k1+7fVtbvlUgFGXgVXRfuGWIt0 iru10ktj1Xy4UhbM3UtYN3fU2ixLLi81PGj/dWhnpN2u -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:14 2026 by rpki-client