This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/g0FtGOw6TxkA3fw7sxIeFzhy8n0.roa File: g0FtGOw6TxkA3fw7sxIeFzhy8n0.roa (raw, json) Hash identifier: VbLDwTgdy1V+yunFyXeS8r5ju6kbA+Nmv4L7O3VlwNM= Subject key identifier: 83:41:6D:18:EC:3A:4F:19:00:DD:FC:3B:B3:12:1E:17:38:72:F2:7D Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019ABAF42ACE3158FC22EA76740BB61B7B38 Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/g0FtGOw6TxkA3fw7sxIeFzhy8n0.roa Signing time: Tue 25 Nov 2025 12:19:15 +0000 ROA not before: Tue 25 Nov 2025 12:19:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 31.24.81.0/24 maxlen: 24 77.87.123.0/24 maxlen: 24 86.54.26.0/24 maxlen: 24 193.169.194.0/23 maxlen: 23 193.169.194.0/24 maxlen: 24 193.169.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:f4:2a:ce:31:58:fc:22:ea:76:74:0b:b6:1b:7b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Nov 25 12:19:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=83416d18ec3a4f1900ddfc3bb3121e173872f27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:ea:ca:ab:fb:3e:33:cc:6e:bc:e3:72:cc: f0:8e:07:f2:be:6a:81:68:98:d9:77:8a:6a:84:80: eb:9e:e0:dc:36:d2:73:9f:43:fc:bf:e2:fc:a4:81: 5f:59:11:1b:76:0e:46:71:06:30:01:fb:f9:63:fa: 5f:90:f9:47:2f:72:d7:22:10:7f:d9:62:51:78:8d: 91:6f:25:9a:72:27:b9:ad:f2:ee:6c:72:fe:9e:01: ed:47:3f:b8:30:5a:84:c4:4d:7b:8e:60:8d:4a:d8: d0:98:7a:a5:35:b3:8c:f1:fa:60:27:8c:46:65:08: 12:ed:3c:22:99:3a:a5:10:02:2a:a4:7c:fd:7b:b0: a5:e0:3e:9c:eb:6b:ed:8f:71:e5:7c:09:09:e2:8a: 8d:b2:45:d6:af:f6:6a:44:61:86:1a:fc:3d:29:e1: 18:ea:5f:2d:14:ac:7a:48:8e:13:f1:67:7d:50:8b: 55:63:b0:2a:64:ef:c9:5d:59:b8:4a:cb:23:53:21: 1e:f9:c1:55:14:05:b6:b7:60:e8:2a:14:c8:18:61: a5:04:f8:94:28:26:2d:2f:d8:09:a0:47:16:9b:94: 93:e0:71:bd:01:86:f7:f9:01:d8:2d:87:fe:d6:04: 6f:68:7a:ae:26:59:03:33:8a:a5:b0:1a:0d:6f:cd: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:41:6D:18:EC:3A:4F:19:00:DD:FC:3B:B3:12:1E:17:38:72:F2:7D X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/g0FtGOw6TxkA3fw7sxIeFzhy8n0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.81.0/24 77.87.123.0/24 86.54.26.0/24 193.169.194.0/23 Signature Algorithm: sha256WithRSAEncryption be:31:a2:2d:ad:50:ac:0f:5f:76:47:d0:76:14:53:fc:c6:06: 8b:00:36:5d:5d:ba:af:9b:d6:5a:ce:db:be:aa:86:80:bb:55: 21:11:5b:41:7d:12:cd:8a:ef:15:12:83:eb:4c:60:db:d7:75: 70:2a:23:b9:78:de:05:3f:2b:ac:ca:b3:c7:0c:3b:36:8c:53: 60:25:a4:36:4b:ef:fa:e8:ad:b1:68:66:aa:cc:23:39:29:3f: 09:d9:2e:00:e5:a0:ea:0a:46:b8:52:88:1d:ee:06:31:68:a9: e3:83:9d:43:04:76:f0:fb:89:a7:ac:82:1f:0d:d5:a6:f8:11: a3:d7:70:f7:89:99:e4:d6:ca:a0:f4:24:5a:bc:e7:e8:d3:ca: 84:03:bd:03:1c:e5:88:c1:fa:fc:48:9e:ed:21:3f:72:ab:d8: c6:c9:65:c8:b8:fb:44:65:07:5b:d7:91:e0:19:ef:53:55:17: 59:b0:43:54:52:48:e4:2d:fa:36:16:cc:c0:f0:10:56:f7:48: 7f:70:9f:ac:4c:6c:f6:bd:6d:60:f0:62:4a:f2:fd:d4:93:b0: 41:c6:9a:6f:b0:2f:0f:b7:32:08:f4:b2:3b:87:e3:cd:7a:fd: a6:84:4c:8d:98:c3:25:5f:5d:74:66:bb:b5:c0:38:01:65:04: c3:a2:8a:f6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZq69CrOMVj8Iup2dAu2G3s4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjUxMTI1MTIxOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQxNmQxOGVjM2E0ZjE5MDBkZGZjM2JiMzEyMWUxNzM4NzJmMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtzqyqv7PjPMbrzjcszwjgfyvmqB aJjZd4pqhIDrnuDcNtJzn0P8v+L8pIFfWREbdg5GcQYwAfv5Y/pfkPlHL3LXIhB/ 2WJReI2RbyWacie5rfLubHL+ngHtRz+4MFqExE17jmCNStjQmHqlNbOM8fpgJ4xG ZQgS7TwimTqlEAIqpHz9e7Cl4D6c62vtj3HlfAkJ4oqNskXWr/ZqRGGGGvw9KeEY 6l8tFKx6SI4T8Wd9UItVY7AqZO/JXVm4SssjUyEe+cFVFAW2t2DoKhTIGGGlBPiU KCYtL9gJoEcWm5ST4HG9AYb3+QHYLYf+1gRvaHquJlkDM4qlsBoNb82qrwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFINBbRjsOk8ZAN38O7MSHhc4cvJ9MB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvZzBGdEdPdzZUeGtBM2Z3N3N4SWVGemh5OG4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHxhRAwQA TVd7AwQAVjYaAwQBwanCMA0GCSqGSIb3DQEBCwUAA4IBAQC+MaItrVCsD192R9B2 FFP8xgaLADZdXbqvm9Zaztu+qoaAu1UhEVtBfRLNiu8VEoPrTGDb13VwKiO5eN4F PyusyrPHDDs2jFNgJaQ2S+/66K2xaGaqzCM5KT8J2S4A5aDqCka4Uogd7gYxaKnj g51DBHbw+4mnrIIfDdWm+BGj13D3iZnk1sqg9CRavOfo08qEA70DHOWIwfr8SJ7t IT9yq9jGyWXIuPtEZQdb15HgGe9TVRdZsENUUkjkLfo2FszA8BBW90h/cJ+sTGz2 vW1g8GJK8v3Uk7BBxppvsC8PtzII9LI7h+PNev2mhEyNmMMlX110Zru1wDgBZQTD oor2 -----END CERTIFICATE-----Generated at Fri Dec 5 04:29:25 2025 by rpki-client