This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/g9eUHufAbqCnyoz7MWSGoEXgVqk.roa File: g9eUHufAbqCnyoz7MWSGoEXgVqk.roa (raw, json) Hash identifier: h3ZbwcX8TFezVBJLOgnMiqp7D8R/Las6MgO0OvsuqC0= Subject key identifier: 83:D7:94:1E:E7:C0:6E:A0:A7:CA:8C:FB:31:64:86:A0:45:E0:56:A9 Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf Certificate serial: 019B7D5ADFF47A2E0CBA5AF9E9BB82CB39A1 Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/g9eUHufAbqCnyoz7MWSGoEXgVqk.roa Signing time: Fri 02 Jan 2026 06:17:46 +0000 ROA not before: Fri 02 Jan 2026 06:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29070 IP address blocks: 185.103.20.0/22 maxlen: 22 185.103.20.0/24 maxlen: 24 185.103.21.0/24 maxlen: 24 185.103.22.0/24 maxlen: 24 185.103.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:df:f4:7a:2e:0c:ba:5a:f9:e9:bb:82:cb:39:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf Validity Not Before: Jan 2 06:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83d7941ee7c06ea0a7ca8cfb316486a045e056a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:14:6f:00:17:a4:8b:16:76:27:f9:e7:de: 69:14:59:bd:95:cd:43:14:93:43:a0:90:98:ae:a2: d9:78:0b:3a:73:62:ac:39:63:b6:7c:9b:57:9a:da: f3:28:1f:60:05:e5:b9:0a:18:7e:c6:52:99:37:9a: d8:85:1a:f7:19:37:23:b3:58:85:1c:47:4d:38:3f: 1a:6c:09:a3:79:f2:81:49:70:4b:44:8e:03:f4:fd: b5:2c:e4:80:a5:f0:0b:80:d2:0a:22:95:19:d6:2d: da:85:0f:ac:2e:a0:2e:2f:4f:58:58:d7:66:1d:cc: 55:2a:b5:8f:b3:9a:f9:6f:b1:18:78:46:eb:75:d7: 0e:1c:88:77:81:bf:0a:9b:f8:11:6a:f2:b2:e7:b5: 1f:91:d0:9c:f4:f8:e4:1a:1f:83:a0:8d:d3:ea:3a: 92:63:1c:ff:6e:6f:75:ae:a6:4a:20:b9:69:42:45: c0:2b:d9:d1:73:dd:24:7c:d5:e8:35:9e:3c:82:c4: 98:3b:9f:6e:d3:5c:0a:32:e4:bb:40:b7:48:9a:2e: 97:65:ba:fc:33:bf:45:cd:12:1a:9e:ff:e1:9a:57: 6a:8a:2c:7e:2b:85:82:ef:4f:f0:b2:f6:a1:b4:f6: cd:9f:b0:30:bb:1c:3a:8a:af:ad:12:37:f6:a4:f6: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D7:94:1E:E7:C0:6E:A0:A7:CA:8C:FB:31:64:86:A0:45:E0:56:A9 X509v3 Authority Key Identifier: keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/g9eUHufAbqCnyoz7MWSGoEXgVqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.20.0/22 Signature Algorithm: sha256WithRSAEncryption 25:c2:80:74:e7:3f:d8:c4:c7:8f:56:b1:be:68:a9:4b:9d:cf: a8:26:8e:32:10:89:87:9c:6a:a9:4c:6a:32:3a:82:c9:2f:98: ff:06:1b:da:9d:04:33:ff:35:f5:e9:77:d3:64:47:d3:2b:d2: e1:72:93:df:5c:b4:21:28:06:b3:59:ef:07:e7:e3:de:2c:90: 92:a9:4b:27:ee:28:e2:91:5a:cd:f5:dc:46:2d:bf:71:7f:91: f4:02:3a:34:ff:d3:e2:2a:17:bb:31:a5:ea:0d:ca:bc:24:c9: ba:cd:e7:b7:b6:d6:cd:da:5a:7e:a5:a2:3b:d4:66:fd:f8:c5: 3f:29:08:c9:c9:88:fb:e9:ad:3f:4e:d8:e0:4b:dd:a1:b2:57: 8d:9e:f4:bc:c5:14:8b:e7:fb:3b:25:07:46:bd:66:89:b1:2f: 96:ae:b4:af:61:34:9e:a5:ea:73:3c:06:ed:7d:01:9a:58:93: 05:db:08:55:fc:7d:76:a7:a5:5d:13:43:82:e3:73:5c:43:52: 94:0b:23:df:f0:5e:54:66:48:e1:23:fa:a5:91:d9:62:db:8d: b7:2c:4e:c2:cf:47:e3:ec:af:cb:43:1b:f3:3b:20:32:89:da: 47:a6:dc:e6:36:cf:94:82:8c:3d:ba:8f:09:0c:65:ed:04:d3: 27:3d:6a:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wt/0ei4Mulr56buCyzmhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZThhMjVhOTM3OTJhNThiM2EyZDgwZmIxYWFkOTU5ZTY1 YWVkZGYwHhcNMjYwMTAyMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2Q3OTQxZWU3YzA2ZWEwYTdjYThjZmIzMTY0ODZhMDQ1ZTA1NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpwUbwAXpIsWdif5595pFFm9lc1D FJNDoJCYrqLZeAs6c2KsOWO2fJtXmtrzKB9gBeW5Chh+xlKZN5rYhRr3GTcjs1iF HEdNOD8abAmjefKBSXBLRI4D9P21LOSApfALgNIKIpUZ1i3ahQ+sLqAuL09YWNdm HcxVKrWPs5r5b7EYeEbrddcOHIh3gb8Km/gRavKy57UfkdCc9PjkGh+DoI3T6jqS Yxz/bm91rqZKILlpQkXAK9nRc90kfNXoNZ48gsSYO59u01wKMuS7QLdImi6XZbr8 M79FzRIanv/hmldqiix+K4WC70/wsvahtPbNn7Awuxw6iq+tEjf2pPY/wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIPXlB7nwG6gp8qM+zFkhqBF4FapMB8GA1UdIwQY MBaAFKboolqTeSpYs6LYD7Gq2VnmWu3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzct NGVhZWIyYTIzYjI3LzEvZzllVUh1ZkFicUNueW96N01XU0dvRVhnVnFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzctNGVhZWIyYTIzYjI3 LzEvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWcUMA0G CSqGSIb3DQEBCwUAA4IBAQAlwoB05z/YxMePVrG+aKlLnc+oJo4yEImHnGqpTGoy OoLJL5j/BhvanQQz/zX16XfTZEfTK9LhcpPfXLQhKAazWe8H5+PeLJCSqUsn7iji kVrN9dxGLb9xf5H0Ajo0/9PiKhe7MaXqDcq8JMm6zee3ttbN2lp+paI71Gb9+MU/ KQjJyYj76a0/TtjgS92hsleNnvS8xRSL5/s7JQdGvWaJsS+WrrSvYTSepepzPAbt fQGaWJMF2whV/H12p6VdE0OC43NcQ1KUCyPf8F5UZkjhI/qlkdli2423LE7Cz0fj 7K/LQxvzOyAyidpHptzmNs+Ugow9uo8JDGXtBNMnPWoj -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:29 2026 by rpki-client