This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/RGqCvj9uTQazu4yVrY0uHX8imBc.roa File: RGqCvj9uTQazu4yVrY0uHX8imBc.roa (raw, json) Hash identifier: xBw16ZaoKz3+2dPg6gUCa4pN1RDhHcc1C4AmW+IOCt0= Subject key identifier: 44:6A:82:BE:3F:6E:4D:06:B3:BB:8C:95:AD:8D:2E:1D:7F:22:98:17 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A1548FA61EE5CC0836B01F320E46 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/RGqCvj9uTQazu4yVrY0uHX8imBc.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62003 IP address blocks: 185.52.4.0/22 maxlen: 24 2a04:9a00:1010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a1:54:8f:a6:1e:e5:cc:08:36:b0:1f:32:0e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=446a82be3f6e4d06b3bb8c95ad8d2e1d7f229817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bf:c0:60:2f:42:c9:be:ba:38:b2:15:f3:fb: 5a:25:08:0a:a0:d0:bc:f9:07:b9:5b:0c:34:87:15: 15:68:a1:a3:32:fa:38:6b:b9:93:73:37:0a:02:62: 37:01:99:53:7d:33:99:ff:a5:fa:ab:ee:62:7d:89: 0b:4e:52:19:07:cc:b6:68:37:37:81:a7:e3:9a:89: 11:f5:55:51:28:43:a4:4d:a0:1d:21:63:ec:df:59: f0:b7:a4:3b:ec:5b:02:76:b9:f2:3c:7f:8a:5f:62: c7:58:56:82:bc:29:94:11:65:c2:21:bb:e6:02:5a: 94:27:18:47:e3:50:d6:08:6f:78:51:d9:d5:70:77: 64:a3:70:f0:df:15:9e:5b:59:37:ec:0a:06:32:6a: 45:af:e0:a5:50:be:45:d7:7f:43:5b:f5:97:36:54: c1:7e:00:d2:e2:a4:13:dd:b8:9a:85:6c:fb:7c:0d: 1d:a9:2c:76:b8:d9:b3:3d:52:7c:0d:7b:db:29:4f: 3a:c6:b3:9c:ee:a3:19:9f:cd:8c:6d:9c:99:4e:37: c4:0a:3f:62:cc:af:b9:bc:69:7b:a6:d0:a5:fb:32: 47:83:34:c2:3d:c6:7b:35:60:be:52:ff:ac:53:42: 4f:92:c8:2d:17:5e:21:05:68:d1:b6:60:6a:34:d9: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:82:BE:3F:6E:4D:06:B3:BB:8C:95:AD:8D:2E:1D:7F:22:98:17 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/RGqCvj9uTQazu4yVrY0uHX8imBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.4.0/22 IPv6: 2a04:9a00:1010::/44 Signature Algorithm: sha256WithRSAEncryption 43:b9:f8:06:fa:c5:c8:b7:96:52:7c:09:f6:02:f6:20:e4:52: f5:2d:d9:94:ca:e4:ad:bc:dc:ef:a6:d1:ca:aa:70:e2:be:7e: a5:74:b9:e8:be:50:43:13:35:54:41:05:b8:47:0a:9e:21:ef: db:04:2d:a8:ac:26:1e:c1:2c:85:64:ee:4c:7c:50:5f:76:1a: da:c5:fb:62:f9:ff:d5:de:fd:34:f0:45:6e:5a:54:46:4a:c8: 44:bd:4c:02:92:d7:ac:87:1f:c7:78:6e:90:99:44:95:72:47: ac:4b:e4:7b:48:d7:67:ba:e5:a9:0f:54:0d:25:90:18:a1:9b: 03:1b:55:9f:ed:b8:79:75:c2:0d:87:e9:c7:db:47:9c:44:a0: 89:69:fa:95:86:73:88:49:ca:35:37:de:d9:79:31:f4:e8:32: f7:c2:60:65:ec:70:7c:ef:1b:f4:89:8f:d2:4c:4f:55:d9:fd: 5c:ac:60:8e:fe:22:5e:0e:84:37:fc:f8:c0:5a:4a:a2:fc:62: 1d:47:8b:5c:9a:24:a5:8a:0f:f4:05:7a:b1:d9:3c:3e:4e:dd: ed:7b:db:7f:6f:16:d6:99:1e:81:83:c4:02:d8:ad:83:22:bb: 6a:11:31:4c:0a:c1:33:cd:99:0a:ce:ee:b8:f2:35:c0:11:d6: 8a:c2:4c:de -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OKFUj6Ye5cwINrAfMg5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDZhODJiZTNmNmU0ZDA2YjNiYjhjOTVhZDhkMmUxZDdmMjI5ODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r/AYC9Cyb66OLIV8/taJQgKoNC8 +Qe5Www0hxUVaKGjMvo4a7mTczcKAmI3AZlTfTOZ/6X6q+5ifYkLTlIZB8y2aDc3 gafjmokR9VVRKEOkTaAdIWPs31nwt6Q77FsCdrnyPH+KX2LHWFaCvCmUEWXCIbvm AlqUJxhH41DWCG94UdnVcHdko3Dw3xWeW1k37AoGMmpFr+ClUL5F139DW/WXNlTB fgDS4qQT3biahWz7fA0dqSx2uNmzPVJ8DXvbKU86xrOc7qMZn82MbZyZTjfECj9i zK+5vGl7ptCl+zJHgzTCPcZ7NWC+Uv+sU0JPksgtF14hBWjRtmBqNNlgpwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFERqgr4/bk0Gs7uMla2NLh1/IpgXMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvUkdxQ3ZqOXVUUWF6dTR5VnJZMHVIWDhpbUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuTQEMA8E AgACMAkDBwQqBJoAEBAwDQYJKoZIhvcNAQELBQADggEBAEO5+Ab6xci3llJ8CfYC 9iDkUvUt2ZTK5K283O+m0cqqcOK+fqV0uei+UEMTNVRBBbhHCp4h79sELaisJh7B LIVk7kx8UF92GtrF+2L5/9Xe/TTwRW5aVEZKyES9TAKS16yHH8d4bpCZRJVyR6xL 5HtI12e65akPVA0lkBihmwMbVZ/tuHl1wg2H6cfbR5xEoIlp+pWGc4hJyjU33tl5 MfToMvfCYGXscHzvG/SJj9JMT1XZ/VysYI7+Il4OhDf8+MBaSqL8Yh1Hi1yaJKWK D/QFerHZPD5O3e17239vFtaZHoGDxALYrYMiu2oRMUwKwTPNmQrO7rjyNcAR1orC TN4= -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client