This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/G2YFM4i4daVeiu-YZOfdZi2K_5s.roa File: G2YFM4i4daVeiu-YZOfdZi2K_5s.roa (raw, json) Hash identifier: fZ6PKIPyu2LKbUXBpMg9IVsm03a/5oYSb04pbpjHKZ8= Subject key identifier: 1B:66:05:33:88:B8:75:A5:5E:8A:EF:98:64:E7:DD:66:2D:8A:FF:9B Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Certificate serial: 019B7EA658B57B65A9506F21021AE9EDC4F8 Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/G2YFM4i4daVeiu-YZOfdZi2K_5s.roa Signing time: Fri 02 Jan 2026 12:19:49 +0000 ROA not before: Fri 02 Jan 2026 12:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.87.134.0/24 maxlen: 24 185.87.135.0/24 maxlen: 24 2a05:c341::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:58:b5:7b:65:a9:50:6f:21:02:1a:e9:ed:c4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b66053388b875a55e8aef9864e7dd662d8aff9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:08:cb:7d:7e:df:47:0a:ed:f1:75:e0:58: 6e:38:cb:89:d6:82:de:af:34:b9:00:40:ca:18:c6: 3c:83:79:b9:06:d0:cd:73:78:06:29:3c:ee:fb:eb: 06:32:57:ac:eb:d9:94:38:8e:d3:a6:8b:ef:97:be: 4a:f4:73:5d:12:e9:e7:3c:96:84:36:f2:ec:bf:ef: 57:39:28:0b:0a:49:33:be:b1:0a:b2:ab:74:8e:09: 3a:f2:da:a3:0e:96:09:96:27:89:ac:ee:e4:34:4d: d4:c2:37:1d:2d:6c:a1:00:81:75:03:e6:8a:f1:91: b4:6f:81:ce:a2:1e:2e:06:2e:f9:e4:36:fa:4a:93: 92:4b:fe:5b:45:a2:da:10:dd:ef:30:1e:c0:a4:fd: c1:38:ff:43:e2:8b:3c:29:cc:e7:f7:c1:01:0d:22: 71:47:ff:b2:71:1a:9a:a4:22:84:48:63:fd:b9:29: 3c:3b:27:0c:5f:07:9d:16:81:39:0e:c1:30:8e:87: d6:5e:5a:59:78:e2:fc:2e:ab:6c:af:ea:7e:cf:71: cb:45:f5:c5:9a:00:e3:79:e3:dc:f3:cf:59:6b:ad: 07:11:87:99:f9:dd:3b:64:a6:29:4f:32:36:fd:19: 29:38:f3:2e:f4:a9:3b:6f:1d:82:df:bd:e7:b7:bd: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:66:05:33:88:B8:75:A5:5E:8A:EF:98:64:E7:DD:66:2D:8A:FF:9B X509v3 Authority Key Identifier: keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/G2YFM4i4daVeiu-YZOfdZi2K_5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.134.0/23 IPv6: 2a05:c341::/48 Signature Algorithm: sha256WithRSAEncryption 18:4f:92:d0:b1:99:83:11:20:3c:92:0f:e3:29:5f:50:4a:c1: 9b:74:54:66:c4:8f:4e:ac:d7:bb:77:8d:a5:7e:3c:a5:9e:c7: 73:37:2d:a4:48:ec:91:84:e9:5c:ec:14:a6:fc:1b:0e:45:03: e7:35:52:2e:bc:37:4b:c5:a2:23:2c:e3:d2:55:4c:72:4d:34: f8:82:a8:8b:34:15:bd:7e:07:eb:cd:89:27:97:41:a0:18:16: 43:98:6b:37:75:57:25:46:49:c9:8e:ec:93:1f:51:2b:d9:03: 50:f4:12:d3:c1:13:90:91:97:4c:3b:77:97:5a:80:b4:46:e4: ec:32:72:03:02:91:5a:a9:06:e9:5d:fe:40:19:64:d3:a5:53: c2:a9:5c:61:61:e8:8c:37:46:e2:ef:13:6c:16:41:98:be:ce: 41:35:7c:ac:56:7e:65:c6:d4:f7:53:4e:b5:67:1b:a3:fe:00: 47:27:10:1a:83:40:c3:5a:f8:b3:02:c2:14:b2:0e:88:8f:43: 4c:dd:d1:89:1a:11:92:91:de:95:00:63:1b:ad:77:18:e6:d7: bb:79:7f:39:29:c3:0d:96:e2:3c:fa:e7:1a:69:58:56:7d:58: 9f:b7:90:5c:05:23:2e:2c:3e:50:91:59:db:23:a3:71:cb:c0: 77:d1:41:4d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pli1e2WpUG8hAhrp7cT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGU1MGY4YmUyMWU2NTU2YTJhM2I1ZTYwZTFkZTc2NWFl MDJkNGUwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjY2MDUzMzg4Yjg3NWE1NWU4YWVmOTg2NGU3ZGQ2NjJkOGFmZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fgIy31+30cK7fF14FhuOMuJ1oLe rzS5AEDKGMY8g3m5BtDNc3gGKTzu++sGMles69mUOI7Tpovvl75K9HNdEunnPJaE NvLsv+9XOSgLCkkzvrEKsqt0jgk68tqjDpYJlieJrO7kNE3UwjcdLWyhAIF1A+aK 8ZG0b4HOoh4uBi755Db6SpOSS/5bRaLaEN3vMB7ApP3BOP9D4os8Kczn98EBDSJx R/+ycRqapCKESGP9uSk8OycMXwedFoE5DsEwjofWXlpZeOL8Lqtsr+p+z3HLRfXF mgDjeePc889Za60HEYeZ+d07ZKYpTzI2/RkpOPMu9Kk7bx2C373nt70wBQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBtmBTOIuHWlXorvmGTn3WYtiv+bMB8GA1UdIwQY MBaAFIEOUPi+IeZVaio7XmDh3nZa4C1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEt N2RmZGU4YjEyZTJjLzEvRzJZRk00aTRkYVZlaXUtWVpPZmRaaTJLXzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEtN2RmZGU4YjEyZTJj LzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuVeGMA8E AgACMAkDBwAqBcNBAAAwDQYJKoZIhvcNAQELBQADggEBABhPktCxmYMRIDySD+Mp X1BKwZt0VGbEj06s17t3jaV+PKWex3M3LaRI7JGE6VzsFKb8Gw5FA+c1Ui68N0vF oiMs49JVTHJNNPiCqIs0Fb1+B+vNiSeXQaAYFkOYazd1VyVGScmO7JMfUSvZA1D0 EtPBE5CRl0w7d5dagLRG5OwycgMCkVqpBuld/kAZZNOlU8KpXGFh6Iw3RuLvE2wW QZi+zkE1fKxWfmXG1PdTTrVnG6P+AEcnEBqDQMNa+LMCwhSyDoiPQ0zd0YkaEZKR 3pUAYxutdxjm17t5fzkpww2W4jz65xppWFZ9WJ+3kFwFIy4sPlCRWdsjo3HLwHfR QU0= -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:27 2026 by rpki-client