This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/gCfjL-3SvYyiT3WrM2LlYTWwgkY.roa File: gCfjL-3SvYyiT3WrM2LlYTWwgkY.roa (raw, json) Hash identifier: EiG5DzSKz6tAYp29UWL2CcDw/nWlCYzW/1PC1TLd15o= Subject key identifier: 80:27:E3:2F:ED:D2:BD:8C:A2:4F:75:AB:33:62:E5:61:35:B0:82:46 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A32A5EF63D2C8430020FE07906C8C2 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/gCfjL-3SvYyiT3WrM2LlYTWwgkY.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 158.94.220.0/24 maxlen: 24 2a01:fb03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2a:5e:f6:3d:2c:84:30:02:0f:e0:79:06:c8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8027e32fedd2bd8ca24f75ab3362e56135b08246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:a8:99:6c:07:f6:11:82:bf:60:6a:c4:35: 26:c5:cb:80:b4:23:b1:80:44:1e:21:ff:8d:79:34: e3:13:c3:e9:04:7f:5e:3f:58:e5:73:3d:0c:d0:cc: 0b:61:8f:59:35:b2:ad:24:9e:0a:9e:93:15:99:70: 81:1e:62:35:02:6d:3d:79:37:64:65:95:4e:35:04: 27:fb:13:ae:14:71:08:56:fb:c2:52:88:00:d0:f0: 4a:8b:dc:0e:82:70:24:87:ae:c1:a3:24:1a:51:67: c0:80:7f:25:76:ab:f1:84:7e:a5:e4:91:d3:f5:ad: 4d:09:e3:e7:58:b6:be:06:bd:69:33:35:e5:82:d4: 90:06:df:b3:56:37:7d:f8:a1:26:0f:b3:cb:b8:90: 4d:fc:2d:3f:50:2e:70:b3:0c:d8:18:d7:6e:6d:1d: a1:09:b1:fa:17:14:7f:b4:5d:0a:1d:29:00:7b:99: 4a:1e:77:da:eb:77:e5:ce:a6:ea:c7:f2:42:00:78: 7e:8c:90:53:7b:e8:21:c9:32:bb:d5:ec:f7:d0:b5: 96:24:7d:99:5d:40:ef:21:0e:a3:24:ac:93:0e:69: da:d5:27:e9:9e:ea:b2:84:4d:35:74:8e:cb:57:0e: 37:35:1c:00:af:7d:2c:c6:be:46:14:55:a2:82:2c: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:27:E3:2F:ED:D2:BD:8C:A2:4F:75:AB:33:62:E5:61:35:B0:82:46 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/gCfjL-3SvYyiT3WrM2LlYTWwgkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.220.0/24 IPv6: 2a01:fb03::/32 Signature Algorithm: sha256WithRSAEncryption 4f:11:ef:8d:32:96:a5:f8:36:01:a1:ff:b0:69:12:50:6d:19: c5:1d:45:c6:58:33:34:69:65:f2:e2:2b:8b:5b:d2:d8:f1:9e: 08:77:2f:60:53:4c:d3:06:25:da:d2:72:99:51:d1:34:35:0c: f2:15:ca:55:92:e4:ce:4a:2a:ca:ff:9f:1a:1c:07:a8:4f:8a: ae:cb:81:fa:79:a2:16:90:bc:e6:4e:81:91:b3:c9:05:0e:91: 59:d1:c2:33:e5:f9:d4:77:f0:ac:21:bd:c7:db:98:94:d8:57: c6:c5:53:fd:c7:0d:84:3e:96:bc:db:bd:c1:d2:ff:e0:7c:28: e8:c0:99:d2:43:2a:ae:43:d9:86:d4:5b:b9:c5:7c:d0:d0:61: 08:79:47:11:a7:4b:57:1d:19:30:a3:dc:c7:f3:d4:ed:59:8d: 60:ce:16:c5:c7:d9:28:fb:b4:a2:2d:45:34:52:83:fb:ae:e0: a8:81:06:63:e6:8f:6a:3d:53:98:14:5e:46:78:89:ec:57:d3: b5:c0:b1:94:4a:24:a8:a4:10:af:44:cb:a8:66:71:f1:f5:dd: a0:b0:62:7c:3e:8c:82:9c:15:19:97:1c:bf:2f:9d:26:75:1e: d7:fa:3d:52:8d:56:c8:a0:df:f3:11:60:ff:8f:a7:40:88:7c: bb:33:a2:ca -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oype9j0shDACD+B5BsjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDI3ZTMyZmVkZDJiZDhjYTI0Zjc1YWIzMzYyZTU2MTM1YjA4MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroSomWwH9hGCv2BqxDUmxcuAtCOx gEQeIf+NeTTjE8PpBH9eP1jlcz0M0MwLYY9ZNbKtJJ4KnpMVmXCBHmI1Am09eTdk ZZVONQQn+xOuFHEIVvvCUogA0PBKi9wOgnAkh67BoyQaUWfAgH8ldqvxhH6l5JHT 9a1NCePnWLa+Br1pMzXlgtSQBt+zVjd9+KEmD7PLuJBN/C0/UC5wswzYGNdubR2h CbH6FxR/tF0KHSkAe5lKHnfa63flzqbqx/JCAHh+jJBTe+ghyTK71ez30LWWJH2Z XUDvIQ6jJKyTDmna1SfpnuqyhE01dI7LVw43NRwAr30sxr5GFFWigiyETQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIAn4y/t0r2Mok91qzNi5WE1sIJGMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvZ0NmakwtM1N2WXlpVDNXck0yTGxZVFd3Z2tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAnl7cMA0E AgACMAcDBQAqAfsDMA0GCSqGSIb3DQEBCwUAA4IBAQBPEe+NMpal+DYBof+waRJQ bRnFHUXGWDM0aWXy4iuLW9LY8Z4Idy9gU0zTBiXa0nKZUdE0NQzyFcpVkuTOSirK /58aHAeoT4quy4H6eaIWkLzmToGRs8kFDpFZ0cIz5fnUd/CsIb3H25iU2FfGxVP9 xw2EPpa8273B0v/gfCjowJnSQyquQ9mG1Fu5xXzQ0GEIeUcRp0tXHRkwo9zH89Tt WY1gzhbFx9ko+7SiLUU0UoP7ruCogQZj5o9qPVOYFF5GeInsV9O1wLGUSiSopBCv RMuoZnHx9d2gsGJ8PoyCnBUZlxy/L50mdR7X+j1SjVbIoN/zEWD/j6dAiHy7M6LK -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:12 2026 by rpki-client