This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa File: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (raw, json) Hash identifier: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g= Subject key identifier: 1B:6A:85:4A:3F:B3:1D:26:67:FD:C4:74:51:F5:AC:E0:61:49:6D:30 Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965 Certificate serial: 019B77C72C1AA6A5909E595D44F619BA8ADA Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210201 IP address blocks: 194.34.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2c:1a:a6:a5:90:9e:59:5d:44:f6:19:ba:8a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b6a854a3fb31d2667fdc47451f5ace061496d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:02:84:10:2d:e1:29:1d:91:3d:df:6b:9e: db:b8:28:e6:1d:19:da:a8:aa:23:fd:89:0d:16:2f: 69:2b:93:cb:ef:cb:74:02:7c:2c:1a:f7:63:4f:5a: 55:e2:9b:1b:24:66:8e:5d:5f:40:b7:25:b2:1a:77: 3a:d0:c3:74:2f:4f:5b:9e:f5:eb:db:92:7d:52:de: a5:b6:40:a2:07:c5:81:a9:74:14:b6:08:aa:cb:3f: 19:84:72:11:5f:73:c9:20:25:7c:73:03:62:bd:85: ce:c5:b9:37:84:f8:2d:c3:fe:85:92:24:17:ce:89: e8:e4:2f:11:95:64:75:e6:5c:8c:e7:11:0b:c7:da: 49:43:68:80:b8:9b:54:b6:bc:63:cf:70:4b:bd:ee: 94:a8:85:62:be:43:25:4f:10:1c:b2:0d:e3:a4:dc: 27:76:65:41:cb:13:50:dd:c1:69:28:3b:97:e6:49: eb:1c:40:d4:79:54:be:1a:9f:c4:14:a6:9d:17:69: 08:7b:42:0a:be:5b:5c:8b:cc:2e:53:9f:60:8e:5f: f4:60:eb:e1:68:25:50:f5:5b:76:88:3a:16:6c:38: dc:b0:2e:d6:fd:cc:ab:e0:0d:f3:4d:e9:60:33:07: 8f:97:25:64:6c:10:f2:83:eb:98:11:a9:f8:e0:7a: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6A:85:4A:3F:B3:1D:26:67:FD:C4:74:51:F5:AC:E0:61:49:6D:30 X509v3 Authority Key Identifier: keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.96.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:b1:2d:0c:1f:6b:a1:ed:75:af:1b:09:f9:78:eb:04:aa:15: aa:45:77:fd:97:6a:ca:e0:a4:4e:51:5d:f6:e9:be:6b:1b:c7: 36:95:af:50:0c:80:11:09:fd:74:c6:03:8a:33:07:84:ec:be: ec:5c:d1:23:c5:a6:77:08:b0:ee:74:f7:0d:ef:00:53:8e:f8: 05:3b:51:3d:3a:da:d8:21:35:94:f2:a0:15:64:aa:f5:45:a7: b8:6c:e3:db:6c:86:9d:cc:a3:24:d0:ea:34:79:af:c9:be:cb: 5d:56:bf:2c:6c:df:3d:6e:41:2c:e9:96:9a:36:f2:c6:ed:86: 42:0c:f8:f2:ad:53:e7:61:1e:86:f8:f9:76:3b:3a:a3:be:a9: 2f:22:a1:e5:03:47:d3:51:d9:8a:02:de:c5:64:fc:11:83:18: 8a:a6:25:e7:00:dc:93:65:66:07:48:6a:62:0a:03:0b:34:81: 94:3e:29:ad:8a:35:db:d5:ba:10:1f:27:64:59:e2:60:b7:bf: 8d:b5:4b:82:09:7c:8a:24:39:f5:72:0e:22:78:bf:ba:8c:68: 77:0e:9c:2b:c5:10:1f:68:fb:3e:83:96:7d:d6:9c:b3:2e:cc: 11:ae:89:c2:b0:b8:1a:0a:12:f3:a4:07:41:7d:6a:e8:9c:ac: c8:d8:1f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xywapqWQnlldRPYZuoraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NDBjZjc3OGRkOTgxNzY1N2NkOGQ0ZmVlZGQ0MjNkNDZk MWE5NjUwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjZhODU0YTNmYjMxZDI2NjdmZGM0NzQ1MWY1YWNlMDYxNDk2ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kChBAt4SkdkT3fa57buCjmHRna qKoj/YkNFi9pK5PL78t0AnwsGvdjT1pV4psbJGaOXV9AtyWyGnc60MN0L09bnvXr 25J9Ut6ltkCiB8WBqXQUtgiqyz8ZhHIRX3PJICV8cwNivYXOxbk3hPgtw/6FkiQX zono5C8RlWR15lyM5xELx9pJQ2iAuJtUtrxjz3BLve6UqIVivkMlTxAcsg3jpNwn dmVByxNQ3cFpKDuX5knrHEDUeVS+Gp/EFKadF2kIe0IKvltci8wuU59gjl/0YOvh aCVQ9Vt2iDoWbDjcsC7W/cyr4A3zTelgMwePlyVkbBDyg+uYEan44HpMHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtqhUo/sx0mZ/3EdFH1rOBhSW0wMB8GA1UdIwQY MBaAFElAz3eN2YF2V82NT+7dQj1G0allMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAt MDAzOTRiNjEwYTM0LzEvRzJxRlNqLXpIU1puX2NSMFVmV3M0R0ZKYlRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iMDI1YmMtYmM3My00ZDNjLWE0MzAtMDAzOTRiNjEwYTM0 LzEvU1VEUGQ0M1pnWFpYelkxUDd0MUNQVWJScVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiJgMA0G CSqGSIb3DQEBCwUAA4IBAQCbsS0MH2uh7XWvGwn5eOsEqhWqRXf9l2rK4KROUV32 6b5rG8c2la9QDIARCf10xgOKMweE7L7sXNEjxaZ3CLDudPcN7wBTjvgFO1E9OtrY ITWU8qAVZKr1Rae4bOPbbIadzKMk0Oo0ea/JvstdVr8sbN89bkEs6ZaaNvLG7YZC DPjyrVPnYR6G+Pl2OzqjvqkvIqHlA0fTUdmKAt7FZPwRgxiKpiXnANyTZWYHSGpi CgMLNIGUPimtijXb1boQHydkWeJgt7+NtUuCCXyKJDn1cg4ieL+6jGh3DpwrxRAf aPs+g5Z91pyzLswRronCsLgaChLzpAdBfWronKzI2B8f -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:21 2026 by rpki-client