This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/g0oXLuj5iDetxALq5Bw1KiMkRUo.roa File: g0oXLuj5iDetxALq5Bw1KiMkRUo.roa (raw, json) Hash identifier: PW9/wUds/6yFiBdtio7q4yhD06x/RpMiIm+VqX8uKYc= Subject key identifier: 83:4A:17:2E:E8:F9:88:37:AD:C4:02:EA:E4:1C:35:2A:23:24:45:4A Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c Certificate serial: 019B7A5B20A6C31BEFDE12C7D12665E64659 Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/g0oXLuj5iDetxALq5Bw1KiMkRUo.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 185.55.100.0/22 maxlen: 22 185.55.100.0/23 maxlen: 23 185.55.102.0/23 maxlen: 23 2a01:8e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:20:a6:c3:1b:ef:de:12:c7:d1:26:65:e6:46:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=834a172ee8f98837adc402eae41c352a2324454a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:67:87:ee:2f:1e:0e:9c:55:df:93:bd:75: 5f:9a:5c:b6:07:53:7f:6f:7f:37:3c:bb:49:19:23: 6f:63:08:2a:e2:ab:40:5e:ff:3a:18:5f:1f:c2:f2: 32:06:e1:70:b3:e8:90:9a:74:b5:68:6f:b0:be:89: c8:50:7c:31:72:74:67:22:6b:4b:d2:d9:28:5e:86: bb:ca:73:5a:4e:3d:cf:dd:f1:5c:b3:57:06:53:8f: d1:b4:83:e9:e1:96:a6:64:c6:70:4d:ad:24:77:a4: 13:c5:2e:72:5d:fe:98:ea:80:8b:a6:f6:de:61:5e: 28:f0:88:31:60:5b:63:2b:ea:1b:c4:30:c2:90:e7: 71:4e:b1:9b:3c:2a:64:75:d1:6a:23:3f:c0:98:d6: b2:04:9d:ff:77:cf:1d:f3:5f:15:3f:51:4b:4b:62: 4c:c4:5d:02:98:f7:cd:8c:88:e9:3d:2b:24:84:23: 0f:8c:3b:e3:9e:93:c7:e4:23:af:63:4e:db:51:39: d1:ab:38:0f:a1:15:2b:f3:74:d6:2e:29:3e:76:c7: 69:fb:e8:51:b7:ec:18:48:3e:0d:f9:ad:64:52:e2: f8:48:62:24:11:f4:7f:cd:54:2c:3a:57:01:b0:c1: 8b:72:b4:e3:e8:9e:4b:63:ba:0e:02:81:3d:78:d7: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4A:17:2E:E8:F9:88:37:AD:C4:02:EA:E4:1C:35:2A:23:24:45:4A X509v3 Authority Key Identifier: keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/g0oXLuj5iDetxALq5Bw1KiMkRUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.100.0/22 IPv6: 2a01:8e20::/32 Signature Algorithm: sha256WithRSAEncryption 68:ff:bf:88:f9:4f:65:3e:2f:61:ac:0f:a9:cf:92:8e:20:f0: 6e:86:c0:43:40:2f:b1:02:dd:b5:19:ce:19:b0:52:f0:f6:e7: 47:aa:b6:86:3a:e8:cc:7d:8e:a0:0d:59:b7:2e:df:78:34:be: 19:e6:d7:f8:e9:bb:79:bd:58:80:bc:10:3a:56:28:a8:54:c0: 4d:b4:ea:9e:61:00:f1:0e:fe:ef:ac:73:b5:7b:a3:15:ea:43: 43:91:39:d3:c1:0b:b0:9e:09:f8:0f:63:45:7f:a9:f1:86:c1: 64:4a:88:ff:6c:b4:c2:b3:89:d3:b2:95:c2:ed:cd:29:06:2d: ce:77:9c:e3:bf:7e:66:76:da:0c:ad:c1:f5:43:4e:47:66:b7: 01:1c:84:b5:39:a9:a8:5b:10:34:54:7e:af:0d:5a:ec:5c:7a: 8b:04:2f:46:b2:b0:f0:8c:5b:b7:38:1e:71:e3:df:52:12:d3: 8c:b2:92:2f:1b:8c:51:6f:72:d8:42:d3:bb:d5:f1:40:7d:c8: 76:93:d6:8a:02:61:21:27:6b:50:8d:d4:94:f7:71:07:a5:5a: 10:89:df:f0:01:86:da:a2:d3:06:36:1a:fc:67:15:ab:e1:bb: a1:7c:50:b1:cd:03:6c:93:2f:6f:e3:5f:af:9a:0a:5d:9d:83: ea:b0:28:a2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WyCmwxvv3hLH0SZl5kZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWE1MDhhODViYzczYTlhYWEyMDNhOGE3YmFmOWMxNjJl NmYzNmMwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzRhMTcyZWU4Zjk4ODM3YWRjNDAyZWFlNDFjMzUyYTIzMjQ0NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoJnh+4vHg6cVd+TvXVfmly2B1N/ b383PLtJGSNvYwgq4qtAXv86GF8fwvIyBuFws+iQmnS1aG+wvonIUHwxcnRnImtL 0tkoXoa7ynNaTj3P3fFcs1cGU4/RtIPp4ZamZMZwTa0kd6QTxS5yXf6Y6oCLpvbe YV4o8IgxYFtjK+obxDDCkOdxTrGbPCpkddFqIz/AmNayBJ3/d88d818VP1FLS2JM xF0CmPfNjIjpPSskhCMPjDvjnpPH5COvY07bUTnRqzgPoRUr83TWLik+dsdp++hR t+wYSD4N+a1kUuL4SGIkEfR/zVQsOlcBsMGLcrTj6J5LY7oOAoE9eNcTWQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFINKFy7o+Yg3rcQC6uQcNSojJEVKMB8GA1UdIwQY MBaAFAPqUIqFvHOpqqIDqKe6+cFi5vNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1wUWlvVzhjNm1xb2dPb3A3cjV3V0xtODJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZWIzNDYtN2IwNy00MTA4LTlmYjAt ZDcyNzA5MDVlOTIzLzEvZzBvWEx1ajVpRGV0eEFMcTVCdzFLaU1rUlVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZWIzNDYtN2IwNy00MTA4LTlmYjAtZDcyNzA5MDVlOTIz LzEvQS1wUWlvVzhjNm1xb2dPb3A3cjV3V0xtODJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTdkMA0E AgACMAcDBQAqAY4gMA0GCSqGSIb3DQEBCwUAA4IBAQBo/7+I+U9lPi9hrA+pz5KO IPBuhsBDQC+xAt21Gc4ZsFLw9udHqraGOujMfY6gDVm3Lt94NL4Z5tf46bt5vViA vBA6ViioVMBNtOqeYQDxDv7vrHO1e6MV6kNDkTnTwQuwngn4D2NFf6nxhsFkSoj/ bLTCs4nTspXC7c0pBi3Od5zjv35mdtoMrcH1Q05HZrcBHIS1OamoWxA0VH6vDVrs XHqLBC9GsrDwjFu3OB5x499SEtOMspIvG4xRb3LYQtO71fFAfch2k9aKAmEhJ2tQ jdSU93EHpVoQid/wAYbaotMGNhr8ZxWr4buhfFCxzQNsky9v41+vmgpdnYPqsCii -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:40 2026 by rpki-client