This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/gXqLoCjch24SvYMMr4ERE1p3TXY.roa File: gXqLoCjch24SvYMMr4ERE1p3TXY.roa (raw, json) Hash identifier: iUQ1Oys+V4y+EkeTDwfkNa5H0Gsu8L8N4uEAk+c5TDQ= Subject key identifier: 81:7A:8B:A0:28:DC:87:6E:12:BD:83:0C:AF:81:11:13:5A:77:4D:76 Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Certificate serial: 019B78356023FD153E7D543276016E4C1F8A Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/gXqLoCjch24SvYMMr4ERE1p3TXY.roa Signing time: Thu 01 Jan 2026 06:18:42 +0000 ROA not before: Thu 01 Jan 2026 06:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204315 IP address blocks: 185.253.148.0/22 maxlen: 22 185.253.148.0/24 maxlen: 24 185.253.149.0/24 maxlen: 24 2a0c:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:60:23:fd:15:3e:7d:54:32:76:01:6e:4c:1f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=817a8ba028dc876e12bd830caf8111135a774d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4f:04:9a:da:b7:3c:f1:f1:6b:3b:12:b7:ab: 5f:17:32:ab:e7:b7:66:ed:d7:93:09:f7:bb:66:67: b1:f3:68:28:15:9a:dd:30:db:61:73:06:2a:94:8a: b5:4c:5f:5c:bd:9e:e2:33:09:0b:1b:b5:cb:bd:48: dd:c6:e6:9d:93:c6:02:30:4a:0a:78:b0:55:59:0c: 77:62:a1:53:9f:c8:95:bb:49:7e:cc:f6:25:b8:e0: 44:68:72:12:2f:11:26:88:e5:d6:a5:c6:c2:41:da: 46:03:81:9f:dc:8c:97:0a:2e:44:1a:34:b0:ed:02: 1f:f4:fa:f0:fb:0a:2e:ed:34:b7:61:10:1c:65:bf: fe:17:a0:0d:a9:67:e9:8b:14:3b:e0:60:99:04:47: 20:fd:d2:38:e2:b3:78:29:70:dc:db:35:13:64:85: b6:63:79:5c:2d:00:93:05:31:90:d4:23:7f:25:91: 05:e9:dd:3b:96:55:21:68:09:09:0e:e6:51:3e:81: d8:c7:ab:84:67:3e:8b:09:f3:4b:0d:fb:f7:9c:3d: d8:ba:91:63:8e:f2:27:4d:00:38:e9:53:8f:7e:ee: 79:47:62:5d:e6:df:22:20:27:8b:2c:09:06:40:de: 43:39:8e:b5:52:1f:b9:d1:9b:f8:b0:0e:5a:1c:b3: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:8B:A0:28:DC:87:6E:12:BD:83:0C:AF:81:11:13:5A:77:4D:76 X509v3 Authority Key Identifier: keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/gXqLoCjch24SvYMMr4ERE1p3TXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.148.0/22 IPv6: 2a0c:3d40::/32 Signature Algorithm: sha256WithRSAEncryption ab:d6:e4:4d:cd:af:27:2c:b2:c6:81:4d:27:f0:ba:e0:25:93: 0f:69:f3:29:3e:f5:72:58:f8:3d:1a:d3:e0:bf:ac:d4:4c:7e: a7:44:f6:22:00:b2:16:6b:64:d5:91:1a:69:1f:d7:10:e4:0f: e9:9b:1b:64:0a:52:0f:7a:0e:ad:27:4c:9b:29:7e:3a:32:20: 02:05:e0:fb:42:fc:89:67:83:d0:fd:50:1d:d8:b4:be:39:de: 48:e4:d4:23:84:2e:c6:b9:d6:ad:f1:7e:f1:01:fc:cf:32:f2: fa:8f:c3:a1:37:87:44:8d:16:40:93:7f:72:ca:df:3f:13:75: ac:73:0d:93:ab:cf:ef:81:4c:2b:07:00:71:99:9b:74:0f:a9: 38:2c:da:ec:72:4e:13:2b:2c:3c:dd:0a:50:bf:6f:26:08:3e: 07:ad:b6:be:47:80:10:a1:db:bb:ec:7f:8e:6f:a6:04:e6:5b: 85:32:8e:d5:08:82:51:af:74:24:eb:0b:3b:29:6a:92:27:58: bb:97:b7:01:dc:a1:d4:1d:95:fa:ca:64:c4:46:00:a4:9a:2a: 4b:05:73:73:0f:9a:34:2d:12:63:6f:cc:68:86:69:33:2b:03: af:2e:36:1b:d5:84:7f:93:9c:75:a9:29:85:f6:db:c8:be:c9: 3a:44:ae:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NWAj/RU+fVQydgFuTB+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl OGE3ZTIwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTdhOGJhMDI4ZGM4NzZlMTJiZDgzMGNhZjgxMTExMzVhNzc0ZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA908Emtq3PPHxazsSt6tfFzKr57dm 7deTCfe7Zmex82goFZrdMNthcwYqlIq1TF9cvZ7iMwkLG7XLvUjdxuadk8YCMEoK eLBVWQx3YqFTn8iVu0l+zPYluOBEaHISLxEmiOXWpcbCQdpGA4Gf3IyXCi5EGjSw 7QIf9Prw+wou7TS3YRAcZb/+F6ANqWfpixQ74GCZBEcg/dI44rN4KXDc2zUTZIW2 Y3lcLQCTBTGQ1CN/JZEF6d07llUhaAkJDuZRPoHYx6uEZz6LCfNLDfv3nD3YupFj jvInTQA46VOPfu55R2Jd5t8iICeLLAkGQN5DOY61Uh+50Zv4sA5aHLNbFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIF6i6Ao3IduEr2DDK+BERNad012MB8GA1UdIwQY MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt Mzg3NzA2YzJhODQ5LzEvZ1hxTG9DamNoMjRTdllNTXI0RVJFMXAzVFhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5 LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf2UMA0E AgACMAcDBQAqDD1AMA0GCSqGSIb3DQEBCwUAA4IBAQCr1uRNza8nLLLGgU0n8Lrg JZMPafMpPvVyWPg9GtPgv6zUTH6nRPYiALIWa2TVkRppH9cQ5A/pmxtkClIPeg6t J0ybKX46MiACBeD7QvyJZ4PQ/VAd2LS+Od5I5NQjhC7Gudat8X7xAfzPMvL6j8Oh N4dEjRZAk39yyt8/E3Wscw2Tq8/vgUwrBwBxmZt0D6k4LNrsck4TKyw83QpQv28m CD4Hrba+R4AQodu77H+Ob6YE5luFMo7VCIJRr3Qk6ws7KWqSJ1i7l7cB3KHUHZX6 ymTERgCkmipLBXNzD5o0LRJjb8xohmkzKwOvLjYb1YR/k5x1qSmF9tvIvsk6RK4G -----END CERTIFICATE-----Generated at Mon Jan 12 01:21:43 2026 by rpki-client