This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/ggNVICV3n79luwmtpqxkxLAB9-E.roa File: ggNVICV3n79luwmtpqxkxLAB9-E.roa (raw, json) Hash identifier: hehy8vJ2pMCobL1Ks6NMf8zuXtrrG4R7n74ZthFaYEQ= Subject key identifier: 82:03:55:20:25:77:9F:BF:65:BB:09:AD:A6:AC:64:C4:B0:01:F7:E1 Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Certificate serial: 019B7DCA72889F520EB3105CAEB3E0215050 Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/ggNVICV3n79luwmtpqxkxLAB9-E.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53850 IP address blocks: 86.109.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 14:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:72:88:9f:52:0e:b3:10:5c:ae:b3:e0:21:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8203552025779fbf65bb09ada6ac64c4b001f7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:fb:dd:1b:de:03:92:df:a8:83:8a:62:fa: db:34:90:1c:fa:18:26:7f:e3:30:bb:cd:09:63:d1: 55:dc:92:3a:aa:d7:46:21:70:dc:bc:b3:e3:44:a3: 75:cf:91:ee:bd:1f:7e:2d:81:82:3c:8f:f2:87:d6: 30:69:f2:fe:93:f3:c8:db:b0:28:74:6f:b5:48:d2: 0f:89:ce:15:ee:e3:ea:fc:ff:9e:04:0d:0c:a1:0c: 96:da:bd:63:bb:7d:95:ac:e9:62:f5:0b:24:99:35: 6f:4e:74:25:d5:c2:e3:99:4e:0b:8d:25:19:59:03: 0c:87:2e:b2:9e:c3:3d:a3:71:b2:cc:b3:c2:08:44: 67:76:75:e3:d9:33:bd:99:e8:0a:1d:6d:89:b5:56: 32:80:03:01:2e:ba:83:e8:45:d0:a5:60:81:a6:76: 7e:e7:63:0f:bd:ba:cc:8f:eb:86:20:ea:3e:30:8c: 1b:2a:bf:e9:e8:f9:54:9c:85:45:1e:41:94:00:93: ca:84:c3:bc:a9:5d:43:50:82:a8:88:47:e0:01:8d: 98:5c:9b:a8:ec:74:4e:d4:9a:05:6a:6a:3a:ae:5a: c1:69:71:52:f9:2e:cd:04:24:42:77:df:4e:57:af: 12:a9:72:26:fc:6e:68:06:cf:64:b7:0e:d7:c5:2b: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:03:55:20:25:77:9F:BF:65:BB:09:AD:A6:AC:64:C4:B0:01:F7:E1 X509v3 Authority Key Identifier: keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/ggNVICV3n79luwmtpqxkxLAB9-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.75.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:72:d1:64:60:84:ec:ed:2a:a3:cd:c3:a0:6c:b6:3c:fe:fe: ed:73:51:01:78:85:ec:38:cc:79:96:55:1f:c4:c1:67:0a:81: 95:fa:d4:6c:b6:44:0e:e8:ee:20:ee:43:b6:80:fc:c9:95:db: 51:0f:71:0e:e1:4c:04:28:bd:9f:29:8b:49:3d:4e:9b:6e:9d: e5:21:d2:78:82:6d:c3:13:17:03:06:3a:97:bc:e5:6c:33:ac: 97:91:44:7d:76:aa:85:3d:53:a7:e2:36:f7:7d:e1:58:d5:c8: 8d:33:60:5d:1f:88:5a:8d:28:e3:a2:8c:ce:8f:d8:e9:62:68: 7e:ff:8d:25:b7:1d:09:45:79:03:9f:d7:8c:21:be:e5:a6:7a: f1:35:8d:44:10:6a:15:0f:45:be:66:ee:25:16:99:91:7b:47: 26:f3:fe:a5:e5:54:f2:56:c4:5c:84:3f:88:ce:82:a1:31:5b: 00:ca:35:2f:93:c7:13:b2:c2:83:01:87:78:9c:e2:a3:9d:d0: e3:83:6a:d9:64:40:fe:a6:ef:31:4f:d3:c4:ab:7d:73:f3:c0: 83:ea:29:8c:20:66:88:86:c5:04:f7:54:53:f9:39:65:4a:d1: 26:fd:56:2f:ea:24:5c:81:2f:8f:95:af:89:23:23:69:f5:19: a6:7e:76:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ynKIn1IOsxBcrrPgIVBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx ZDlkNjQwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjAzNTUyMDI1Nzc5ZmJmNjViYjA5YWRhNmFjNjRjNGIwMDFmN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN/73RveA5LfqIOKYvrbNJAc+hgm f+Mwu80JY9FV3JI6qtdGIXDcvLPjRKN1z5HuvR9+LYGCPI/yh9YwafL+k/PI27Ao dG+1SNIPic4V7uPq/P+eBA0MoQyW2r1ju32VrOli9QskmTVvTnQl1cLjmU4LjSUZ WQMMhy6ynsM9o3GyzLPCCERndnXj2TO9megKHW2JtVYygAMBLrqD6EXQpWCBpnZ+ 52MPvbrMj+uGIOo+MIwbKr/p6PlUnIVFHkGUAJPKhMO8qV1DUIKoiEfgAY2YXJuo 7HRO1JoFamo6rlrBaXFS+S7NBCRCd99OV68SqXIm/G5oBs9ktw7XxSulLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIIDVSAld5+/ZbsJraasZMSwAffhMB8GA1UdIwQY MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut NDIyNTIzYzRlNjhiLzEvZ2dOVklDVjNuNzlsdXdtdHBxeGt4TEFCOS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm1LMA0G CSqGSIb3DQEBCwUAA4IBAQAtctFkYITs7SqjzcOgbLY8/v7tc1EBeIXsOMx5llUf xMFnCoGV+tRstkQO6O4g7kO2gPzJldtRD3EO4UwEKL2fKYtJPU6bbp3lIdJ4gm3D ExcDBjqXvOVsM6yXkUR9dqqFPVOn4jb3feFY1ciNM2BdH4hajSjjoozOj9jpYmh+ /40ltx0JRXkDn9eMIb7lpnrxNY1EEGoVD0W+Zu4lFpmRe0cm8/6l5VTyVsRchD+I zoKhMVsAyjUvk8cTssKDAYd4nOKjndDjg2rZZED+pu8xT9PEq31z88CD6imMIGaI hsUE91RT+TllStEm/VYv6iRcgS+Pla+JIyNp9RmmfnbA -----END CERTIFICATE-----Generated at Sat Jan 24 23:59:11 2026 by rpki-client