This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gFfo29etJvfqu6bIKaGgejLKs7o.roa File: gFfo29etJvfqu6bIKaGgejLKs7o.roa (raw, json) Hash identifier: ykIqQltNNblq3jp1xzxTotH/V6TYH+NGbSK6s8+tLiI= Subject key identifier: 80:57:E8:DB:D7:AD:26:F7:EA:BB:A6:C8:29:A1:A0:7A:32:CA:B3:BA Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5672459B4F5A9BA66B500C695E62 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gFfo29etJvfqu6bIKaGgejLKs7o.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206286 IP address blocks: 45.141.24.0/24 maxlen: 24 45.144.225.0/24 maxlen: 24 89.31.216.0/24 maxlen: 24 178.239.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:56:72:45:9b:4f:5a:9b:a6:6b:50:0c:69:5e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8057e8dbd7ad26f7eabba6c829a1a07a32cab3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:7b:3b:e3:90:42:69:32:ba:9b:0c:33:fe: f6:55:30:8d:29:e9:f4:35:eb:a1:87:a3:f2:ac:42: 93:25:19:6a:07:da:8f:7a:55:c1:22:64:a2:18:c4: 22:b0:fc:cf:dd:ac:fb:8d:04:4b:e6:15:2b:81:59: 4d:fd:59:77:e0:84:91:b8:a4:3a:a6:c9:ec:63:0b: b3:19:98:df:38:b0:77:b3:d3:92:03:42:e0:e4:3b: 73:e8:1d:f4:14:25:8d:82:71:47:26:e0:a3:8c:19: 7f:27:70:bd:52:ab:f5:d3:60:a6:1d:54:01:b4:07: 13:48:35:0d:58:45:ef:5e:d4:cd:26:95:df:fe:d1: e9:21:09:14:8d:da:c0:a9:76:2a:55:d6:14:99:76: 79:7c:33:26:2f:bd:ba:bc:93:0f:a3:ef:b7:fe:c0: 71:cc:c0:de:6d:e2:ba:d4:01:d5:73:c8:72:c3:42: 6b:cb:56:44:06:2c:31:ee:a8:11:73:31:77:74:65: ee:72:8c:79:f0:2f:44:00:ec:ce:ae:7c:23:79:8f: 2e:84:9c:8c:d8:aa:4d:43:ef:6f:9f:a2:20:7e:a7: 02:e5:8b:16:4c:04:dc:ef:1c:55:76:b0:51:be:3e: fe:37:72:ba:8e:53:88:01:f0:5f:c6:80:80:27:a8: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:57:E8:DB:D7:AD:26:F7:EA:BB:A6:C8:29:A1:A0:7A:32:CA:B3:BA X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/gFfo29etJvfqu6bIKaGgejLKs7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.24.0/24 45.144.225.0/24 89.31.216.0/24 178.239.199.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:ed:43:39:a6:79:f7:44:7c:d4:82:4f:da:40:5d:99:aa:bf: c6:75:7d:0d:22:b4:0e:35:f1:af:2e:94:1b:dd:d8:5d:7f:51: 74:c7:aa:9d:7c:c6:c9:ba:32:38:c1:50:68:5c:4f:27:ce:1d: 34:d9:a6:7d:2f:51:b2:7b:1b:f6:cd:02:2d:4c:1f:f6:6c:4b: 7f:41:c9:c9:d5:6f:ea:46:b1:45:b5:60:7c:46:a2:5a:68:f9: 54:5d:91:54:3b:6f:32:7a:15:ed:8a:2e:d0:55:d6:80:46:94: c1:38:c2:e0:b5:8e:9e:95:f6:5e:bf:e7:40:91:17:e7:c9:ca: 95:88:06:55:bb:ae:7e:24:f1:37:b6:52:8e:86:eb:db:e6:40: af:79:cf:ab:7f:b4:38:64:93:2b:c1:6b:2d:7e:fb:33:8f:98: 29:6e:38:c7:7d:10:3e:c3:d1:76:05:d5:c9:6d:37:63:a1:ab: 89:a5:0e:bd:58:a8:f5:a0:4b:4a:16:18:f5:77:76:ed:27:54: 05:4d:af:c9:ac:bb:55:a7:07:f1:26:a5:1e:15:00:55:9d:18: c4:94:26:f7:05:46:fa:7d:35:cf:7c:ee:a6:e0:1b:03:f7:17: 3b:b4:f4:d0:4a:08:36:ff:fc:01:8e:21:cc:0d:aa:8b:a9:4d: 5d:f5:38:74 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XVZyRZtPWpuma1AMaV5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDU3ZThkYmQ3YWQyNmY3ZWFiYmE2YzgyOWExYTA3YTMyY2FiM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLN7O+OQQmkyupsMM/72VTCNKen0 Neuhh6PyrEKTJRlqB9qPelXBImSiGMQisPzP3az7jQRL5hUrgVlN/Vl34ISRuKQ6 psnsYwuzGZjfOLB3s9OSA0Lg5Dtz6B30FCWNgnFHJuCjjBl/J3C9Uqv102CmHVQB tAcTSDUNWEXvXtTNJpXf/tHpIQkUjdrAqXYqVdYUmXZ5fDMmL726vJMPo++3/sBx zMDebeK61AHVc8hyw0Jry1ZEBiwx7qgRczF3dGXucox58C9EAOzOrnwjeY8uhJyM 2KpNQ+9vn6IgfqcC5YsWTATc7xxVdrBRvj7+N3K6jlOIAfBfxoCAJ6iUKQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIBX6NvXrSb36rumyCmhoHoyyrO6MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvZ0ZmbzI5ZXRKdmZxdTZiSUthR2dlakxLczdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALY0YAwQA LZDhAwQAWR/YAwQAsu/HMA0GCSqGSIb3DQEBCwUAA4IBAQBM7UM5pnn3RHzUgk/a QF2Zqr/GdX0NIrQONfGvLpQb3dhdf1F0x6qdfMbJujI4wVBoXE8nzh002aZ9L1Gy exv2zQItTB/2bEt/QcnJ1W/qRrFFtWB8RqJaaPlUXZFUO28yehXtii7QVdaARpTB OMLgtY6elfZev+dAkRfnycqViAZVu65+JPE3tlKOhuvb5kCvec+rf7Q4ZJMrwWst fvszj5gpbjjHfRA+w9F2BdXJbTdjoauJpQ69WKj1oEtKFhj1d3btJ1QFTa/JrLtV pwfxJqUeFQBVnRjElCb3BUb6fTXPfO6m4BsD9xc7tPTQSgg2//wBjiHMDaqLqU1d 9Th0 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:20 2026 by rpki-client