This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa File: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (raw, json) Hash identifier: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM= Subject key identifier: 81:09:5A:0E:B2:9A:62:F9:74:F8:2F:83:C8:53:D5:B6:5D:2E:DC:1E Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef Certificate serial: 019B7F82FF9715FB5FC779AEBA7772BE4ED0 Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa Signing time: Fri 02 Jan 2026 16:20:50 +0000 ROA not before: Fri 02 Jan 2026 16:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209781 IP address blocks: 128.246.0.0/16 maxlen: 24 141.6.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ff:97:15:fb:5f:c7:79:ae:ba:77:72:be:4e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef Validity Not Before: Jan 2 16:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81095a0eb29a62f974f82f83c853d5b65d2edc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:fb:48:51:d9:52:6d:f9:1e:4b:4a:bf:41: ea:e4:36:d0:41:84:4b:09:7a:b6:ac:88:43:4e:26: 8e:2e:21:18:6e:21:7e:42:20:a7:bd:40:5d:09:0c: fa:4f:bf:94:40:9a:b2:4a:28:c8:cd:83:00:d8:aa: 62:36:51:36:18:ef:37:53:5c:02:b1:bd:68:17:a6: 8a:20:2b:4d:d5:67:e7:60:83:18:58:07:a7:af:08: 86:df:3a:d5:9d:20:66:ba:21:f2:8d:3e:0e:a7:2c: c8:a5:0f:69:c6:66:0b:38:80:bc:c8:08:b7:f2:4b: 92:17:c3:02:49:90:4c:19:b1:78:20:e8:d2:38:75: 6b:37:ee:79:2b:b0:1e:e8:0f:55:bc:27:ba:a9:89: a0:25:00:3a:34:dc:b3:12:d6:da:35:c9:1b:a3:28: ca:c2:00:6a:b4:22:04:2e:aa:05:62:58:b5:6a:23: a8:83:6a:83:dc:9f:b3:ee:89:90:d1:8b:9d:76:6b: d4:17:8c:e4:2e:08:8e:16:3c:d6:10:8f:d2:6c:7f: d8:d4:63:bf:df:fc:0e:53:ab:2a:db:68:54:06:47: 38:49:0e:df:a3:bc:66:52:0d:89:09:bf:a7:6a:d5: 47:d4:a7:7e:d5:5d:da:e6:91:3d:67:77:98:6d:e4: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:09:5A:0E:B2:9A:62:F9:74:F8:2F:83:C8:53:D5:B6:5D:2E:DC:1E X509v3 Authority Key Identifier: keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.246.0.0/16 141.6.0.0/16 Signature Algorithm: sha256WithRSAEncryption a6:8c:ef:b8:6d:69:2d:b5:da:9c:09:6d:cd:e1:f3:19:38:f2: ad:1a:8a:23:97:f5:2d:9d:e5:8f:24:9c:ae:b6:f1:70:4b:e1: 97:19:4d:34:6d:8b:fb:92:be:da:62:04:10:13:fd:6f:82:08: 89:15:5a:f7:de:69:f7:f4:49:22:11:ea:a2:67:87:fd:69:fa: 31:b9:cb:f1:29:36:0b:d7:ef:55:ac:08:65:98:37:fe:05:5d: 2d:53:ed:c3:23:68:d2:40:8e:c2:95:3d:41:85:5b:c7:47:c8: cc:36:91:0d:68:8a:eb:f8:27:86:b6:68:8f:d1:31:2a:12:7d: a0:3e:61:a5:a8:c1:22:45:df:ea:17:38:3b:de:a9:ff:ea:49: 58:3d:34:3c:2e:8f:20:18:ff:44:d6:d7:81:3f:84:67:47:da: 2e:39:c4:9f:12:83:94:96:a2:36:83:d2:31:8e:ef:ad:c8:af: 20:dc:1b:ae:d2:54:70:69:cd:1e:91:22:18:ed:77:ec:89:97: 2a:93:57:08:f4:86:0c:49:5a:8c:b6:0f:26:fa:73:47:96:6d: 0d:45:da:d8:85:85:e3:b1:dd:3d:2e:2c:5a:b8:f7:91:de:6d: 66:d3:a1:5e:72:57:45:9d:ee:91:2a:34:de:07:9d:92:0a:5d: c5:75:64:9a -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt/gv+XFftfx3muundyvk7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3 ODU2ZWYwHhcNMjYwMTAyMTYyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA5NWEwZWIyOWE2MmY5NzRmODJmODNjODUzZDViNjVkMmVkYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9z7SFHZUm35HktKv0Hq5DbQQYRL CXq2rIhDTiaOLiEYbiF+QiCnvUBdCQz6T7+UQJqySijIzYMA2KpiNlE2GO83U1wC sb1oF6aKICtN1WfnYIMYWAenrwiG3zrVnSBmuiHyjT4OpyzIpQ9pxmYLOIC8yAi3 8kuSF8MCSZBMGbF4IOjSOHVrN+55K7Ae6A9VvCe6qYmgJQA6NNyzEtbaNckboyjK wgBqtCIELqoFYli1aiOog2qD3J+z7omQ0YuddmvUF4zkLgiOFjzWEI/SbH/Y1GO/ 3/wOU6sq22hUBkc4SQ7fo7xmUg2JCb+natVH1Kd+1V3a5pE9Z3eYbeT3xQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFIEJWg6ymmL5dPgvg8hT1bZdLtweMB8GA1UdIwQY MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt YzBiODEzYjRlYzdlLzEvZ1FsYURyS2FZdmwwLUMtRHlGUFZ0bDB1M0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgPYDAwCN BjANBgkqhkiG9w0BAQsFAAOCAQEApozvuG1pLbXanAltzeHzGTjyrRqKI5f1LZ3l jyScrrbxcEvhlxlNNG2L+5K+2mIEEBP9b4IIiRVa995p9/RJIhHqomeH/Wn6MbnL 8Sk2C9fvVawIZZg3/gVdLVPtwyNo0kCOwpU9QYVbx0fIzDaRDWiK6/gnhrZoj9Ex KhJ9oD5hpajBIkXf6hc4O96p/+pJWD00PC6PIBj/RNbXgT+EZ0faLjnEnxKDlJai NoPSMY7vrcivINwbrtJUcGnNHpEiGO137ImXKpNXCPSGDElajLYPJvpzR5ZtDUXa 2IWF47HdPS4sWrj3kd5tZtOhXnJXRZ3ukSo03gedkgpdxXVkmg== -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client