This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa File: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (raw, json) Hash identifier: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY= Subject key identifier: 83:98:F9:15:99:2F:30:00:65:0E:04:35:57:15:23:DF:EA:87:AC:84 Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Certificate serial: 019B7CEDF63276A95D4C68EEB3C69E1D5E97 Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.180.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f6:32:76:a9:5d:4c:68:ee:b3:c6:9e:1d:5e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8398f915992f3000650e0435571523dfea87ac84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:81:b0:26:ed:ef:e3:5d:26:62:0f:be:e8: 76:a3:24:37:86:d6:0b:1f:ce:40:39:5d:1f:9e:3f: f1:a8:6c:d0:02:53:e5:7c:e3:37:43:27:11:5e:c0: 65:47:52:41:f5:63:21:83:0c:14:d6:29:d6:da:90: 95:51:f1:5c:c1:53:d0:c0:c2:3c:67:79:50:9e:7a: 6c:07:8a:7f:2d:3b:9c:87:ee:88:b8:2b:1d:cc:5a: 05:d6:8d:58:0f:2f:83:0f:fe:d1:f5:fa:51:7f:bc: 8b:36:68:ab:41:0e:26:e6:d2:f5:d0:90:91:b2:7b: 94:02:7e:23:ce:58:11:5f:93:22:c7:11:49:d8:d0: de:a2:2d:0e:68:c0:72:b3:d9:43:c7:d5:81:71:aa: c5:6d:51:39:c8:2e:7a:48:81:1d:d5:93:be:64:cf: a0:2f:8d:7d:0f:be:1a:f5:6f:0d:23:24:e1:80:eb: 34:43:65:82:41:dd:f9:35:04:1f:f5:c7:8a:b7:17: 85:b4:ae:c5:fe:7e:a3:94:05:cb:ea:6c:16:c5:90: 94:a2:0b:ff:2d:99:6b:a4:77:d1:b9:d2:a5:3a:16: 5f:e6:58:6b:2a:3f:cb:16:a4:33:09:2a:95:89:11: 12:0f:d5:67:ad:6a:14:00:21:45:cc:97:6c:61:d7: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:98:F9:15:99:2F:30:00:65:0E:04:35:57:15:23:DF:EA:87:AC:84 X509v3 Authority Key Identifier: keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.60.0/22 Signature Algorithm: sha256WithRSAEncryption ad:31:cb:e3:26:bb:c0:df:e0:0f:4f:78:a5:a9:a8:c8:8b:94: 0e:ec:b0:5b:62:79:61:ee:b2:a0:40:28:d8:79:2c:d6:38:5a: cd:0c:15:8c:2e:96:c7:a4:84:35:ac:1e:73:02:bb:7e:78:65: b1:ca:aa:5f:42:d0:d5:92:96:31:e1:a0:42:31:53:f4:7b:00: 25:d8:29:eb:4a:02:db:ba:47:2d:bb:71:f6:08:2c:f1:a9:b5: eb:d8:1f:30:e6:4a:f8:4f:c7:24:d3:29:95:5d:ba:66:40:2a: 37:a9:34:c8:d8:f5:cc:f7:cb:7f:ab:ba:e5:6e:14:56:22:08: b6:41:a1:81:8d:ef:06:c3:14:63:d3:d3:b9:8f:3c:c2:0f:c3: 2c:0b:12:1d:2c:7d:1f:64:19:cb:bd:9e:b8:81:41:0e:cd:f2: a7:af:61:04:bc:44:94:49:9d:95:4e:11:dd:f0:86:d0:cf:00: 63:40:dd:ee:22:fd:3a:27:8d:e2:cc:bc:55:a2:c9:34:9b:d5: 37:55:18:91:90:98:9e:b6:a0:e2:46:e5:14:19:47:93:2b:e5: 37:36:0a:09:59:1c:cf:aa:bb:d5:5a:67:45:82:da:01:a8:ff: 46:b2:7f:e1:01:c3:b1:c8:10:1b:9e:9c:20:86:6c:15:d4:20: 9c:85:8a:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fYydqldTGjus8aeHV6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmNGEyOTZiY2UxNGQ2ZGVlZDI1MTE2YWE3MGI2MGJj Y2U0YTQwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzk4ZjkxNTk5MmYzMDAwNjUwZTA0MzU1NzE1MjNkZmVhODdhYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruaBsCbt7+NdJmIPvuh2oyQ3htYL H85AOV0fnj/xqGzQAlPlfOM3QycRXsBlR1JB9WMhgwwU1inW2pCVUfFcwVPQwMI8 Z3lQnnpsB4p/LTuch+6IuCsdzFoF1o1YDy+DD/7R9fpRf7yLNmirQQ4m5tL10JCR snuUAn4jzlgRX5MixxFJ2NDeoi0OaMBys9lDx9WBcarFbVE5yC56SIEd1ZO+ZM+g L419D74a9W8NIyThgOs0Q2WCQd35NQQf9ceKtxeFtK7F/n6jlAXL6mwWxZCUogv/ LZlrpHfRudKlOhZf5lhrKj/LFqQzCSqViRESD9VnrWoUACFFzJdsYded+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIOY+RWZLzAAZQ4ENVcVI9/qh6yEMB8GA1UdIwQY MBaAFGuE9KKWvOFNbe7SURaqcLYLzOSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2Yzkt MTRmYWIwMjQ0OTQ4LzEvZzVqNUZaa3ZNQUJsRGdRMVZ4VWozLXFIcklRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2YzktMTRmYWIwMjQ0OTQ4 LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubQ8MA0G CSqGSIb3DQEBCwUAA4IBAQCtMcvjJrvA3+APT3ilqajIi5QO7LBbYnlh7rKgQCjY eSzWOFrNDBWMLpbHpIQ1rB5zArt+eGWxyqpfQtDVkpYx4aBCMVP0ewAl2CnrSgLb ukctu3H2CCzxqbXr2B8w5kr4T8ck0ymVXbpmQCo3qTTI2PXM98t/q7rlbhRWIgi2 QaGBje8GwxRj09O5jzzCD8MsCxIdLH0fZBnLvZ64gUEOzfKnr2EEvESUSZ2VThHd 8IbQzwBjQN3uIv06J43izLxVosk0m9U3VRiRkJietqDiRuUUGUeTK+U3NgoJWRzP qrvVWmdFgtoBqP9Gsn/hAcOxyBAbnpwghmwV1CCchYr8 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:23 2026 by rpki-client