This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/gLFfimILtrvNmLCqHHnLyf5HeDQ.roa File: gLFfimILtrvNmLCqHHnLyf5HeDQ.roa (raw, json) Hash identifier: Au61gdy9n9KoeOHWn+nWGKr6a14kosDrZi3ajbtwzn8= Subject key identifier: 80:B1:5F:8A:62:0B:B6:BB:CD:98:B0:AA:1C:79:CB:C9:FE:47:78:34 Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019B7BA4E9ED4310179B47033874134550BC Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/gLFfimILtrvNmLCqHHnLyf5HeDQ.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3491 IP address blocks: 139.123.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e9:ed:43:10:17:9b:47:03:38:74:13:45:50:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80b15f8a620bb6bbcd98b0aa1c79cbc9fe477834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:3d:af:0f:40:b5:77:3f:86:7f:79:8f:20: a8:66:d8:42:7a:9f:5d:a9:6f:8f:f0:35:0d:6a:5d: bb:fb:45:bd:46:da:c1:10:92:4e:5d:e3:ec:9d:f2: dc:7c:5e:33:dd:97:31:83:eb:03:d8:6a:27:f8:c1: 5a:58:dc:82:02:14:e0:2e:b9:8a:78:81:8d:fd:a9: 31:b0:ad:e4:c8:62:9a:67:c9:2d:12:a0:76:b8:22: ca:0f:93:e8:a4:cf:d0:71:26:c8:da:69:3c:20:0b: 64:25:1f:20:d1:7b:fb:37:57:ed:e6:1b:cb:00:96: 95:60:45:e8:78:d5:be:89:28:08:72:d1:d3:6c:db: c7:71:4d:da:d3:37:7a:68:4b:48:50:32:79:9d:b1: f8:7a:3f:7d:0a:e8:2e:88:c2:23:9b:7c:fd:cb:b1: a0:8b:52:8c:a1:59:db:8b:e2:d2:1c:cd:1e:69:59: 9c:05:ab:45:15:91:a1:17:29:75:1d:cc:08:1f:b3: 3f:d2:14:fa:b9:76:c8:39:2f:f6:36:c9:29:35:ff: 2c:a0:fe:53:52:c0:78:d2:3b:a2:24:7e:0b:61:75: 0c:b3:48:47:6f:96:d9:f2:9b:b7:f1:23:6d:fb:2b: 45:3d:0b:85:11:6e:26:60:be:f5:f2:dc:79:7d:ed: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B1:5F:8A:62:0B:B6:BB:CD:98:B0:AA:1C:79:CB:C9:FE:47:78:34 X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/gLFfimILtrvNmLCqHHnLyf5HeDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.123.232.0/24 Signature Algorithm: sha256WithRSAEncryption 69:7c:05:47:ff:8c:0e:4c:9b:2d:0a:d4:91:2b:b6:bd:a4:ac: f4:d3:be:86:9a:e3:b3:11:94:41:11:e5:01:c8:0b:2c:d1:6e: 01:27:c8:3c:52:8d:09:61:bd:d9:8c:b9:64:3e:8e:02:4a:9f: 11:cc:92:f9:30:7c:ff:6b:0d:47:d0:cd:0e:ed:26:39:55:46: c1:61:a0:b6:68:c9:8c:54:4d:b8:f3:1f:e7:e7:17:43:17:c5: 0c:4a:d0:69:73:9e:00:02:ff:61:df:0e:ac:7c:71:4c:f4:82: d5:c3:a4:34:ec:f5:a4:29:67:be:c5:be:a6:6c:9f:5b:28:43: d3:99:53:ad:18:58:e7:3a:4c:3c:0b:16:fd:2d:bf:37:d8:71: d6:fd:13:88:0e:34:d6:29:3c:c8:a4:47:3d:43:57:07:e6:a9: 59:db:b4:96:7b:41:86:b0:3c:1b:65:f3:86:bc:91:e9:e7:73: 6b:ce:59:15:82:53:d7:bf:5a:8e:2e:ea:37:03:09:ab:66:b3: cf:ff:42:17:a4:30:bd:14:8e:26:a6:6c:e6:9e:bc:8a:7d:24: 45:f1:de:33:1f:e1:14:e4:e2:47:39:fe:35:b8:cb:6a:0b:78: c7:21:fb:0b:a8:0c:5c:b2:6c:f3:b0:13:9d:11:65:af:fb:12: 87:5f:12:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOntQxAXm0cDOHQTRVC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGIxNWY4YTYyMGJiNmJiY2Q5OGIwYWExYzc5Y2JjOWZlNDc3ODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSA9rw9AtXc/hn95jyCoZthCep9d qW+P8DUNal27+0W9RtrBEJJOXePsnfLcfF4z3Zcxg+sD2Gon+MFaWNyCAhTgLrmK eIGN/akxsK3kyGKaZ8ktEqB2uCLKD5PopM/QcSbI2mk8IAtkJR8g0Xv7N1ft5hvL AJaVYEXoeNW+iSgIctHTbNvHcU3a0zd6aEtIUDJ5nbH4ej99CuguiMIjm3z9y7Gg i1KMoVnbi+LSHM0eaVmcBatFFZGhFyl1HcwIH7M/0hT6uXbIOS/2NskpNf8soP5T UsB40juiJH4LYXUMs0hHb5bZ8pu38SNt+ytFPQuFEW4mYL718tx5fe3iswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICxX4piC7a7zZiwqhx5y8n+R3g0MB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvZ0xGZmltSUx0cnZObUxDcUhIbkx5ZjVIZURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi3voMA0G CSqGSIb3DQEBCwUAA4IBAQBpfAVH/4wOTJstCtSRK7a9pKz0076GmuOzEZRBEeUB yAss0W4BJ8g8Uo0JYb3ZjLlkPo4CSp8RzJL5MHz/aw1H0M0O7SY5VUbBYaC2aMmM VE248x/n5xdDF8UMStBpc54AAv9h3w6sfHFM9ILVw6Q07PWkKWe+xb6mbJ9bKEPT mVOtGFjnOkw8Cxb9Lb832HHW/ROIDjTWKTzIpEc9Q1cH5qlZ27SWe0GGsDwbZfOG vJHp53NrzlkVglPXv1qOLuo3AwmrZrPP/0IXpDC9FI4mpmzmnryKfSRF8d4zH+EU 5OJHOf41uMtqC3jHIfsLqAxcsmzzsBOdEWWv+xKHXxJ2 -----END CERTIFICATE-----Generated at Sun Jan 11 18:13:07 2026 by rpki-client