This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/g9I_yWxBlJxb8jdFSzLNO8T9hlc.roa File: g9I_yWxBlJxb8jdFSzLNO8T9hlc.roa (raw, json) Hash identifier: TRyTQ0llIsE/ca7TvYvmRm2iVcdywoCtmcZZaLoUu1E= Subject key identifier: 83:D2:3F:C9:6C:41:94:9C:5B:F2:37:45:4B:32:CD:3B:C4:FD:86:57 Certificate issuer: /CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4 Certificate serial: 019B7E38C814FAC4813AF3394EB8ECDF0B15 Authority key identifier: 82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/g9I_yWxBlJxb8jdFSzLNO8T9hlc.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59959 IP address blocks: 185.243.124.0/22 maxlen: 22 2a0d:1380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c8:14:fa:c4:81:3a:f3:39:4e:b8:ec:df:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83d23fc96c41949c5bf237454b32cd3bc4fd8657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:ae:23:39:a7:a9:38:4e:bd:7e:40:c7:b0: ec:60:1b:76:b3:b9:a4:3f:f0:34:8f:2d:a6:07:73: a0:cb:af:18:58:51:2a:b9:7c:e3:96:e2:02:49:e5: 0c:58:e5:a8:55:f5:f1:1f:e9:84:66:b1:d5:b0:50: 2e:98:f3:c0:ba:d6:3d:05:d4:22:7f:f3:6f:a2:04: 0a:b3:64:c1:86:67:49:c2:67:1b:ed:bc:8a:4c:60: 64:f4:c1:c2:ef:09:55:c1:20:f5:a8:d6:5e:94:4e: 4c:6d:a0:bf:7d:ab:72:7e:99:a8:1d:1a:14:30:e3: b7:b3:3a:c6:b5:49:2a:8a:27:c9:e7:0e:45:dc:b3: fa:00:8f:ad:f3:ae:cc:fb:e2:bf:91:76:67:42:14: bd:ec:57:a7:fe:9d:7e:62:cf:08:5c:7d:e0:be:12: 8c:61:a9:98:27:d7:f0:45:14:64:28:97:c0:3d:8c: 68:13:05:b5:f2:f9:1a:8d:1b:35:c3:ca:f0:e9:9b: 69:b9:80:21:ad:91:35:8e:af:d8:de:7d:0e:c5:3a: 58:4a:16:36:87:95:41:6d:d8:5c:a0:b2:cc:46:d2: 9e:09:04:45:4c:a2:a4:56:23:43:8b:f7:c1:8d:5c: 09:be:b1:b8:bf:20:e1:11:03:d3:d9:71:b9:c3:e3: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D2:3F:C9:6C:41:94:9C:5B:F2:37:45:4B:32:CD:3B:C4:FD:86:57 X509v3 Authority Key Identifier: keyid:82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/g9I_yWxBlJxb8jdFSzLNO8T9hlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.124.0/22 IPv6: 2a0d:1380::/29 Signature Algorithm: sha256WithRSAEncryption 20:85:ce:44:75:6d:41:cd:e1:7a:0f:b7:b5:b5:a9:53:22:37: 3c:96:40:85:93:be:6a:a7:76:be:c8:ae:0c:74:eb:49:c6:50: 28:2a:e3:cf:95:aa:81:75:27:49:2b:8e:32:f6:98:1f:ed:99: a4:f6:bf:fb:17:28:13:76:36:58:b9:a2:1b:87:77:f4:0e:9d: d4:48:58:a1:98:23:3c:66:dc:16:8b:87:e5:48:41:ca:f5:99: 95:63:f9:16:21:7b:45:02:36:21:04:f3:04:f3:85:f9:ce:a8: 7b:4a:cf:9d:82:e7:0c:70:be:c8:90:ab:8e:96:24:2e:9b:c3: 98:13:4c:3b:ea:cf:ff:0b:c7:df:79:4f:e1:eb:7a:ed:19:f3: 39:ee:fa:39:3a:a2:56:8a:f3:c8:92:31:b4:6b:27:76:dd:01: ec:34:cf:0d:61:4c:58:32:52:78:f0:95:8c:b6:4c:b2:b9:db: f3:a4:f2:c6:93:a8:43:ec:57:3a:64:29:98:e7:ee:b4:fe:7d: d5:4f:9d:d0:39:dc:23:6e:a9:50:94:14:5e:24:de:77:d9:1e: 6c:02:33:09:4f:a2:c9:f5:ec:e0:69:0b:33:d4:28:9c:0b:63: 05:c2:6a:e8:23:6a:19:02:62:ed:64:02:cd:96:d3:97:21:2e: a9:a2:ec:6a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OMgU+sSBOvM5Trjs3wsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYTQxNjFhY2FiZjY2ZDQyNWVkODc4YzVkYTk2YTdkNWNi M2ZmZTQwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2QyM2ZjOTZjNDE5NDljNWJmMjM3NDU0YjMyY2QzYmM0ZmQ4NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4uuIzmnqThOvX5Ax7DsYBt2s7mk P/A0jy2mB3Ogy68YWFEquXzjluICSeUMWOWoVfXxH+mEZrHVsFAumPPAutY9BdQi f/NvogQKs2TBhmdJwmcb7byKTGBk9MHC7wlVwSD1qNZelE5MbaC/fatyfpmoHRoU MOO3szrGtUkqiifJ5w5F3LP6AI+t867M++K/kXZnQhS97Fen/p1+Ys8IXH3gvhKM YamYJ9fwRRRkKJfAPYxoEwW18vkajRs1w8rw6ZtpuYAhrZE1jq/Y3n0OxTpYShY2 h5VBbdhcoLLMRtKeCQRFTKKkViNDi/fBjVwJvrG4vyDhEQPT2XG5w+NxlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIPSP8lsQZScW/I3RUsyzTvE/YZXMB8GA1UdIwQY MBaAFIKkFhrKv2bUJe2HjF2pan1cs//kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FRV0dzcV9adFFsN1llTVhhbHFmVnl6Xy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MjA5YjYtZDY0Yy00MzYwLThjMmIt NmY3MGQ1M2NiZWY2LzEvZzlJX3lXeEJsSnhiOGpkRlN6TE5POFQ5aGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MjA5YjYtZDY0Yy00MzYwLThjMmItNmY3MGQ1M2NiZWY2 LzEvZ3FRV0dzcV9adFFsN1llTVhhbHFmVnl6Xy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufN8MA0E AgACMAcDBQMqDROAMA0GCSqGSIb3DQEBCwUAA4IBAQAghc5EdW1BzeF6D7e1talT Ijc8lkCFk75qp3a+yK4MdOtJxlAoKuPPlaqBdSdJK44y9pgf7Zmk9r/7FygTdjZY uaIbh3f0Dp3USFihmCM8ZtwWi4flSEHK9ZmVY/kWIXtFAjYhBPME84X5zqh7Ss+d gucMcL7IkKuOliQum8OYE0w76s//C8ffeU/h63rtGfM57vo5OqJWivPIkjG0ayd2 3QHsNM8NYUxYMlJ48JWMtkyyudvzpPLGk6hD7Fc6ZCmY5+60/n3VT53QOdwjbqlQ lBReJN532R5sAjMJT6LJ9ezgaQsz1CicC2MFwmroI2oZAmLtZALNltOXIS6pouxq -----END CERTIFICATE-----Generated at Tue Jan 13 11:44:57 2026 by rpki-client