This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/rGbAvxffuaD19j9Z71kDL1ZXfkw.roa File: rGbAvxffuaD19j9Z71kDL1ZXfkw.roa (raw, json) Hash identifier: sitMqNnjc8K5EZ9Upi4aj5hSlGyOwGjgogjDhHAmXNw= Subject key identifier: AC:66:C0:BF:17:DF:B9:A0:F5:F6:3F:59:EF:59:03:2F:56:57:7E:4C Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B30BA8A426E7E031B5A696FEC0BB06CF1 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/rGbAvxffuaD19j9Z71kDL1ZXfkw.roa Signing time: Thu 18 Dec 2025 09:11:30 +0000 ROA not before: Thu 18 Dec 2025 09:11:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51213 IP address blocks: 194.84.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:ba:8a:42:6e:7e:03:1b:5a:69:6f:ec:0b:b0:6c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Dec 18 09:11:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ac66c0bf17dfb9a0f5f63f59ef59032f56577e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:fd:75:38:e8:4d:d3:61:36:5f:5e:70:4d: 26:7e:e2:3b:68:ab:b4:0c:cd:ac:c3:64:7e:7b:44: 18:73:a3:98:c1:65:30:fb:23:d6:b2:b0:38:eb:20: 80:53:71:75:c6:5c:5d:97:17:20:dd:35:79:04:af: b8:4f:e8:85:fd:50:fb:39:f2:e3:59:83:31:0e:d7: f9:df:6b:72:35:b9:c6:6d:9e:a8:c8:2f:a4:ed:8d: c7:5b:d8:8b:b9:e2:7c:6c:51:33:1c:39:a7:bb:d7: e6:cf:db:2f:9f:74:20:5a:a2:8b:52:e9:35:ea:82: b7:bc:56:1b:e8:65:2c:21:cb:4a:37:e4:74:ce:2a: d1:fa:41:d1:d0:a8:73:0f:c9:ee:7d:d2:13:a6:6a: f1:09:1a:5f:9a:4b:85:b8:4a:f8:4a:ef:32:01:30: d6:5c:c7:f1:e3:2b:83:df:1e:21:71:7c:98:d4:5b: ca:b4:bc:dd:f3:d7:6e:19:db:7e:01:1c:ef:55:3a: 5c:2c:22:6f:ed:df:38:10:9a:3a:bc:f8:8f:7a:4a: fb:fd:44:03:9e:06:0b:8e:5c:48:7a:66:1e:7d:9a: e5:da:62:78:59:cb:71:55:d5:71:81:c2:50:49:82: f0:3c:d9:ef:f6:21:9b:6f:ef:46:3f:df:77:7a:56: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:C0:BF:17:DF:B9:A0:F5:F6:3F:59:EF:59:03:2F:56:57:7E:4C X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/rGbAvxffuaD19j9Z71kDL1ZXfkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.84.104.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f2:bb:92:27:47:07:40:4c:29:78:f4:58:0d:f7:94:f6:2c: 54:70:b5:4e:94:96:05:6b:75:34:5b:e3:f7:22:4f:99:16:d8: db:f2:3d:f2:cb:09:12:1c:2a:9b:a5:7f:ff:43:0f:15:70:36: 9f:d3:4b:d4:a8:ad:8b:05:23:8d:90:a0:65:5f:7a:fb:e0:36: 01:88:64:6b:09:8a:ca:02:a6:e0:ee:20:5d:7e:ae:ff:7c:ab: ae:a0:d5:88:8d:54:e9:28:2b:15:db:11:8a:66:f8:82:09:02: 40:37:b6:25:55:22:fa:ef:d6:1c:b7:b0:97:3f:7a:4e:7d:89: 21:a9:b7:7e:08:1d:42:4d:c3:fa:9c:3d:be:11:d3:e7:78:b1: b5:69:75:9f:a0:5a:7f:17:0b:12:a3:f2:7f:1d:f4:0a:52:4c: b8:f3:f0:e3:47:6b:da:61:40:71:11:05:d8:3c:3a:3f:43:ad: 4a:b0:bb:b5:ad:77:a0:1f:6e:1d:d2:a5:2c:68:97:fd:98:48: fc:2a:ba:0d:ee:35:a3:a6:b7:7e:fb:89:23:98:ec:cf:4e:a0: 45:d3:f3:2d:81:e5:89:6e:d8:f2:f0:e8:4a:53:2c:d4:ce:53: 02:83:0b:96:7f:00:94:12:a2:10:47:a3:a0:c5:de:be:95:74: 97:d1:a0:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZswuopCbn4DG1ppb+wLsGzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMjE4MDkxMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzY2YzBiZjE3ZGZiOWEwZjVmNjNmNTllZjU5MDMyZjU2NTc3ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiv9dTjoTdNhNl9ecE0mfuI7aKu0 DM2sw2R+e0QYc6OYwWUw+yPWsrA46yCAU3F1xlxdlxcg3TV5BK+4T+iF/VD7OfLj WYMxDtf532tyNbnGbZ6oyC+k7Y3HW9iLueJ8bFEzHDmnu9fmz9svn3QgWqKLUuk1 6oK3vFYb6GUsIctKN+R0zirR+kHR0KhzD8nufdITpmrxCRpfmkuFuEr4Su8yATDW XMfx4yuD3x4hcXyY1FvKtLzd89duGdt+ARzvVTpcLCJv7d84EJo6vPiPekr7/UQD ngYLjlxIemYefZrl2mJ4WctxVdVxgcJQSYLwPNnv9iGbb+9GP993elY+qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxmwL8X37mg9fY/We9ZAy9WV35MMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvckdiQXZ4ZmZ1YUQxOWo5Wjcxa0RMMVpYZmt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlRoMA0G CSqGSIb3DQEBCwUAA4IBAQBv8ruSJ0cHQEwpePRYDfeU9ixUcLVOlJYFa3U0W+P3 Ik+ZFtjb8j3yywkSHCqbpX//Qw8VcDaf00vUqK2LBSONkKBlX3r74DYBiGRrCYrK Aqbg7iBdfq7/fKuuoNWIjVTpKCsV2xGKZviCCQJAN7YlVSL679Yct7CXP3pOfYkh qbd+CB1CTcP6nD2+EdPneLG1aXWfoFp/FwsSo/J/HfQKUky48/DjR2vaYUBxEQXY PDo/Q61KsLu1rXegH24d0qUsaJf9mEj8KroN7jWjprd++4kjmOzPTqBF0/MtgeWJ btjy8OhKUyzUzlMCgwuWfwCUEqIQR6Ogxd6+lXSX0aAl -----END CERTIFICATE-----Generated at Sun Dec 21 05:35:46 2025 by rpki-client