This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/G0YZaRvOpGakuanm7RUcv6bj3MM.roa File: G0YZaRvOpGakuanm7RUcv6bj3MM.roa (raw, json) Hash identifier: 7CABJvLN6kQ3DAKmcEt6bVwV3ypsakkVsbnD4Bax900= Subject key identifier: 1B:46:19:69:1B:CE:A4:66:A4:B9:A9:E6:ED:15:1C:BF:A6:E3:DC:C3 Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Certificate serial: 019B7C1236E719CABDAD1A6DEFAC1F628BC2 Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/G0YZaRvOpGakuanm7RUcv6bj3MM.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209042 IP address blocks: 5.182.248.0/22 maxlen: 24 2a0e:a400::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:36:e7:19:ca:bd:ad:1a:6d:ef:ac:1f:62:8b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3 Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b4619691bcea466a4b9a9e6ed151cbfa6e3dcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bf:03:5f:88:de:5c:a1:3f:2d:e9:d1:df:a4: 73:7a:e9:18:5d:85:e9:69:70:f4:2f:3c:d5:c1:15: 22:41:43:14:a2:5a:80:1a:df:9c:b6:28:96:42:8f: 86:be:45:64:1e:7e:69:e6:34:0d:8d:a0:bd:04:55: 6d:12:8a:56:88:2b:0d:55:10:ae:1f:87:6a:19:fb: e1:e9:fb:85:2f:f5:2e:6b:82:2c:3d:f0:a3:56:00: b4:8c:7a:1b:b3:91:ec:f5:bd:63:7e:37:01:f0:e4: 9a:5c:5f:05:76:d8:49:a4:b4:52:1d:d2:fd:b9:d8: b9:7f:30:cb:14:3f:50:0a:d3:05:c7:36:1a:45:32: 3e:e5:d7:2b:47:b2:2e:6c:40:88:bc:f1:5b:34:55: dc:db:0c:8b:6a:d6:c4:e2:56:da:fb:6f:f6:5a:32: 44:eb:d1:31:a8:a9:f7:ab:0f:e8:5a:69:31:1a:e8: e8:bb:65:82:bc:83:fe:90:96:d0:d2:7a:42:e7:18: 5d:4d:a7:f5:bd:3a:95:92:bc:c9:4e:22:b4:31:00: 10:5d:cd:ce:25:ac:c4:44:01:68:31:f4:93:f5:1d: d5:ff:c1:82:ae:17:de:f6:ae:42:d3:34:c6:81:35: 91:a4:1a:68:39:91:b5:41:d2:eb:0c:46:78:1c:14: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:46:19:69:1B:CE:A4:66:A4:B9:A9:E6:ED:15:1C:BF:A6:E3:DC:C3 X509v3 Authority Key Identifier: keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/G0YZaRvOpGakuanm7RUcv6bj3MM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.248.0/22 IPv6: 2a0e:a400::/29 Signature Algorithm: sha256WithRSAEncryption 8e:f5:cc:19:a5:c2:15:b0:9b:bf:8f:48:ef:59:27:69:e7:40: 4a:b9:3d:ea:30:76:a9:a3:24:17:ca:c8:45:d0:e0:05:cc:f1: ea:08:df:7d:0d:05:c9:17:d8:5e:d8:ba:c7:17:51:cd:8a:60: 12:0d:35:44:14:64:88:cc:cb:99:d6:a8:90:a7:ef:0b:eb:a9: 92:d2:89:a9:26:4c:9e:b4:11:7f:fd:92:14:e1:70:d7:c6:46: ff:64:d2:8e:4d:ad:ab:ba:27:5f:c8:28:6d:10:43:63:c5:df: 35:58:07:bc:4b:f4:65:42:ff:78:56:3e:59:d5:91:cb:00:7d: ad:13:cf:d2:d3:64:44:e5:da:48:1f:34:60:99:d4:19:af:3f: 90:c6:77:b9:a5:af:52:21:9b:20:7e:24:db:4b:cd:cc:01:2f: 4e:ba:0f:bc:c9:52:95:1f:fd:d1:46:87:9f:75:65:06:cb:be: da:43:72:c7:13:6c:98:ea:c3:67:c8:e8:e5:da:0c:91:71:73: 8e:ba:a4:37:ce:c6:e6:92:b0:b6:5a:49:27:27:79:9a:b2:95: f5:98:15:2b:af:7d:6e:1b:e7:ab:26:75:0d:40:cc:78:fa:55: 32:36:1f:c8:2a:f5:18:42:8a:1d:23:97:06:97:eb:f9:b9:39: 14:93:1f:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EjbnGcq9rRpt76wfYovCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh NDdmYTMwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjQ2MTk2OTFiY2VhNDY2YTRiOWE5ZTZlZDE1MWNiZmE2ZTNkY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+b8DX4jeXKE/LenR36RzeukYXYXp aXD0LzzVwRUiQUMUolqAGt+ctiiWQo+GvkVkHn5p5jQNjaC9BFVtEopWiCsNVRCu H4dqGfvh6fuFL/Uua4IsPfCjVgC0jHobs5Hs9b1jfjcB8OSaXF8FdthJpLRSHdL9 udi5fzDLFD9QCtMFxzYaRTI+5dcrR7IubECIvPFbNFXc2wyLatbE4lba+2/2WjJE 69ExqKn3qw/oWmkxGujou2WCvIP+kJbQ0npC5xhdTaf1vTqVkrzJTiK0MQAQXc3O JazERAFoMfST9R3V/8GCrhfe9q5C0zTGgTWRpBpoOZG1QdLrDEZ4HBSWmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBtGGWkbzqRmpLmp5u0VHL+m49zDMB8GA1UdIwQY MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt NWQwZTA5YTAyMDRmLzEvRzBZWmFSdk9wR2FrdWFubTdSVWN2NmJqM01NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBbb4MA0E AgACMAcDBQMqDqQAMA0GCSqGSIb3DQEBCwUAA4IBAQCO9cwZpcIVsJu/j0jvWSdp 50BKuT3qMHapoyQXyshF0OAFzPHqCN99DQXJF9he2LrHF1HNimASDTVEFGSIzMuZ 1qiQp+8L66mS0ompJkyetBF//ZIU4XDXxkb/ZNKOTa2ruidfyChtEENjxd81WAe8 S/RlQv94Vj5Z1ZHLAH2tE8/S02RE5dpIHzRgmdQZrz+Qxne5pa9SIZsgfiTbS83M AS9Oug+8yVKVH/3RRoefdWUGy77aQ3LHE2yY6sNnyOjl2gyRcXOOuqQ3zsbmkrC2 WkknJ3maspX1mBUrr31uG+erJnUNQMx4+lUyNh/IKvUYQoodI5cGl+v5uTkUkx85 -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:08 2026 by rpki-client