This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa File: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (raw, json) Hash identifier: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY= Subject key identifier: 0A:05:07:2A:24:6C:46:6C:D8:C7:B6:4E:0A:7B:8E:85:CE:89:BB:33 Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019B7EA7086445404B1B3FBDDA06EAD5151E Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204171 IP address blocks: 185.103.120.0/24 maxlen: 24 185.103.121.0/24 maxlen: 24 185.103.122.0/24 maxlen: 24 185.103.123.0/24 maxlen: 24 2a06:2bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:08:64:45:40:4b:1b:3f:bd:da:06:ea:d5:15:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a05072a246c466cd8c7b64e0a7b8e85ce89bb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1d:8b:83:1f:a6:62:8c:59:e6:08:ad:39:b8: 2b:50:3c:6e:65:6d:c3:e3:c8:89:44:53:c1:6a:fa: 81:34:b6:c5:9b:cd:99:8e:68:ed:57:0d:96:36:6f: 4e:5c:f6:13:1c:35:4e:48:b3:e6:66:11:8f:11:14: d5:35:88:fc:fd:f2:75:a8:6c:3d:89:a8:73:3d:f6: ea:3a:63:62:9b:8d:c3:20:82:70:16:1f:1c:27:ef: 2e:4e:8c:79:f1:ee:37:2e:8f:35:2c:33:63:ad:fd: 0c:ff:e4:71:e1:52:77:30:8a:4d:8a:1a:53:e8:40: d5:88:94:b4:b8:1d:45:9b:be:af:21:7c:e5:1d:d2: 76:fc:c8:65:b0:ea:41:88:bb:8d:71:21:2c:63:5e: 87:d9:53:87:a9:88:6f:31:bb:a1:2f:b0:83:d8:87: 0d:e8:1d:12:09:3b:cd:ac:38:db:e9:6f:a2:c7:de: 00:9a:ed:8d:93:70:c3:0b:15:69:d7:e1:4e:45:c7: fd:3e:55:2d:3f:b3:e1:9f:0d:ed:e7:74:ca:03:7c: c5:ed:1b:b1:ab:f3:ab:0a:82:eb:7a:9f:ce:1c:3b: 09:87:67:8d:41:3d:1b:79:4b:4c:13:7f:f6:92:f8: 99:bf:21:2a:bc:08:d7:57:00:1b:f9:a0:50:2e:f1: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:05:07:2A:24:6C:46:6C:D8:C7:B6:4E:0A:7B:8E:85:CE:89:BB:33 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.120.0/22 IPv6: 2a06:2bc0::/29 Signature Algorithm: sha256WithRSAEncryption 90:f2:e2:a6:d4:11:48:46:bd:ca:df:b5:99:66:ae:0d:93:85: df:f4:19:66:47:d2:7d:28:c2:98:18:57:55:b8:0c:97:67:0e: 1b:75:6e:12:e9:7c:aa:b8:80:d9:2a:41:0b:4b:2e:fa:0a:58: 1c:ca:af:16:92:0d:31:08:04:f4:c3:ac:6f:63:ff:d3:52:e5: eb:c9:e3:f7:3b:2c:79:c5:d5:e5:58:52:28:61:d1:b2:cd:dc: 8c:9f:dc:aa:35:5a:d3:19:fc:bf:d8:d8:0e:b3:b7:09:49:94: 1e:44:b0:a9:a6:e7:56:46:29:5f:cd:97:36:c0:fb:4d:49:f8: 6d:af:bf:da:fa:cd:24:49:27:3f:9f:a8:fc:0c:12:27:d1:34: 4c:11:7e:3a:46:7c:61:ad:68:69:36:9a:16:52:8a:99:a3:45: de:4b:5b:14:46:2e:05:56:f2:82:0e:58:ab:17:ca:0e:0d:7b: 65:3c:21:ae:5d:d7:de:34:4d:8c:2e:47:0f:8b:ba:1c:03:37: 79:0c:f5:fa:36:fb:2d:09:68:c9:a5:26:19:0b:65:33:1c:54: 5c:81:c2:f6:10:db:ad:a8:57:44:47:f3:70:07:05:39:ac:df: 8c:56:b5:91:ba:c2:67:3d:94:ec:fa:a0:25:f7:34:df:a3:7d: aa:90:d7:20 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pwhkRUBLGz+92gbq1RUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTA1MDcyYTI0NmM0NjZjZDhjN2I2NGUwYTdiOGU4NWNlODliYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih2Lgx+mYoxZ5gitObgrUDxuZW3D 48iJRFPBavqBNLbFm82ZjmjtVw2WNm9OXPYTHDVOSLPmZhGPERTVNYj8/fJ1qGw9 iahzPfbqOmNim43DIIJwFh8cJ+8uTox58e43Lo81LDNjrf0M/+Rx4VJ3MIpNihpT 6EDViJS0uB1Fm76vIXzlHdJ2/MhlsOpBiLuNcSEsY16H2VOHqYhvMbuhL7CD2IcN 6B0SCTvNrDjb6W+ix94Amu2Nk3DDCxVp1+FORcf9PlUtP7Phnw3t53TKA3zF7Rux q/OrCoLrep/OHDsJh2eNQT0beUtME3/2kviZvyEqvAjXVwAb+aBQLvFnuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAoFByokbEZs2Me2Tgp7joXOibszMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvQ2dVSEtpUnNSbXpZeDdaT0NudU9oYzZKdXpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWd4MA0E AgACMAcDBQMqBivAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ8uKm1BFIRr3K37WZZq4N k4Xf9BlmR9J9KMKYGFdVuAyXZw4bdW4S6XyquIDZKkELSy76Clgcyq8Wkg0xCAT0 w6xvY//TUuXryeP3Oyx5xdXlWFIoYdGyzdyMn9yqNVrTGfy/2NgOs7cJSZQeRLCp pudWRilfzZc2wPtNSfhtr7/a+s0kSSc/n6j8DBIn0TRMEX46RnxhrWhpNpoWUoqZ o0XeS1sURi4FVvKCDlirF8oODXtlPCGuXdfeNE2MLkcPi7ocAzd5DPX6NvstCWjJ pSYZC2UzHFRcgcL2ENutqFdER/NwBwU5rN+MVrWRusJnPZTs+qAl9zTfo32qkNcg -----END CERTIFICATE-----Generated at Mon Jan 5 05:02:10 2026 by rpki-client