This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/gVF7AxuIzKTCjMsBQD_13bKv0vk.roa File: gVF7AxuIzKTCjMsBQD_13bKv0vk.roa (raw, json) Hash identifier: Xq/PLLG8F1v6vaXhJgc29NbSM77ha3BnJMruHRHuujU= Subject key identifier: 81:51:7B:03:1B:88:CC:A4:C2:8C:CB:01:40:3F:F5:DD:B2:AF:D2:F9 Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Certificate serial: 019B77C66B5DD733979AC0DEEFC9391E3732 Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/gVF7AxuIzKTCjMsBQD_13bKv0vk.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205160 IP address blocks: 185.237.167.0/24 maxlen: 24 2a11:9940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6b:5d:d7:33:97:9a:c0:de:ef:c9:39:1e:37:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81517b031b88cca4c28ccb01403ff5ddb2afd2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:e5:f8:3e:02:0a:aa:b2:87:01:3d:b5:d2: c0:d1:6b:e0:b7:03:ac:7f:db:7f:ab:e6:ac:26:76: c2:80:9a:95:e2:8f:b6:55:34:39:7c:8f:ba:c6:d1: 2f:85:77:c4:45:55:c6:b4:79:a7:2c:86:47:80:5c: 80:47:0d:ff:af:a9:e7:02:44:45:7a:78:04:51:02: 89:b6:6e:40:66:33:c6:d6:c1:d2:88:da:31:4c:09: 00:ba:db:f6:64:28:5a:86:e7:e6:89:69:05:35:8a: b9:bc:64:1a:08:1a:ef:5a:32:7b:2f:6c:2b:13:0e: 28:48:21:e1:40:29:dd:51:e9:50:66:66:37:05:b5: c4:50:2c:a5:df:59:e6:0a:8e:a9:1e:af:75:bc:bb: 1d:1f:6a:1a:b9:4c:f0:8a:ac:d5:18:03:97:9e:a4: 6b:fe:e5:d0:ca:5c:d0:be:2d:f3:71:72:a3:d0:ae: e5:83:af:f4:01:42:24:19:11:7c:ac:c4:d0:5c:5a: 24:8e:02:e1:f6:14:71:83:c4:a4:7a:d1:a9:c7:65: bf:10:a8:3e:51:9a:b4:b7:69:0a:86:1e:ee:be:02: 9a:f9:17:05:32:6c:03:6a:25:62:7f:38:55:b7:26: a2:a5:22:a2:20:b2:c0:a9:45:4b:0d:1e:14:0d:37: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:51:7B:03:1B:88:CC:A4:C2:8C:CB:01:40:3F:F5:DD:B2:AF:D2:F9 X509v3 Authority Key Identifier: keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/gVF7AxuIzKTCjMsBQD_13bKv0vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.167.0/24 IPv6: 2a11:9940::/32 Signature Algorithm: sha256WithRSAEncryption 03:e1:80:cf:5f:09:57:bb:e3:ce:3f:3b:1a:c7:66:07:7a:98: 5a:9b:4c:e1:37:4a:62:60:60:11:af:da:4b:7a:e6:c8:ae:66: 75:06:f4:f2:80:58:da:2b:96:d4:40:be:d7:e7:6f:25:d3:46: d9:ab:a5:c8:33:e1:34:61:15:b8:9e:47:a6:df:83:f5:1d:6c: 42:57:06:7a:ee:e3:7a:05:9d:6c:30:d2:30:b8:f5:4c:de:4c: 57:72:18:ca:5b:41:45:96:b8:01:b4:0f:7e:d0:15:02:dd:e4: 46:54:23:bf:57:3b:11:01:49:1d:7b:14:3b:53:07:c8:3a:32: 7a:74:2a:ce:7b:6c:ff:c8:5f:32:79:7c:b6:98:a4:38:0b:55: c3:87:d0:a3:04:1e:42:74:e7:81:a7:9b:69:79:87:1a:45:50: f3:f9:3e:2e:1b:b5:0a:76:98:e4:e4:69:a1:b3:e4:aa:ee:47: e7:d3:fb:98:a0:b1:21:b8:f0:8c:ed:8d:49:89:b2:7c:8d:73: 6e:59:58:a1:61:cd:4e:d0:a1:dd:41:39:0a:2b:34:5b:ca:ed: 14:ec:55:0a:a9:93:fa:03:0e:70:97:18:78:e2:00:b8:79:84: c1:75:4f:c2:13:a6:57:16:f0:a7:23:88:7b:18:53:a3:62:11: 1a:13:b2:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xmtd1zOXmsDe78k5HjcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2N2RjZjU3NzY1NGRjYTE3YTYxMGI5YWY0ZjJjYTc0MjFk Y2JiODEwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTUxN2IwMzFiODhjY2E0YzI4Y2NiMDE0MDNmZjVkZGIyYWZkMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud/l+D4CCqqyhwE9tdLA0WvgtwOs f9t/q+asJnbCgJqV4o+2VTQ5fI+6xtEvhXfERVXGtHmnLIZHgFyARw3/r6nnAkRF engEUQKJtm5AZjPG1sHSiNoxTAkAutv2ZChahufmiWkFNYq5vGQaCBrvWjJ7L2wr Ew4oSCHhQCndUelQZmY3BbXEUCyl31nmCo6pHq91vLsdH2oauUzwiqzVGAOXnqRr /uXQylzQvi3zcXKj0K7lg6/0AUIkGRF8rMTQXFokjgLh9hRxg8SketGpx2W/EKg+ UZq0t2kKhh7uvgKa+RcFMmwDaiVifzhVtyaipSKiILLAqUVLDR4UDTdDtwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIFRewMbiMykwozLAUA/9d2yr9L5MB8GA1UdIwQY MBaAFAZ9z1d2VNyhemELmvTyynQh3LuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt OTg1MTgyMDAxZTkyLzEvZ1ZGN0F4dUl6S1RDak1zQlFEXzEzYkt2MHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky LzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAue2nMA0E AgACMAcDBQAqEZlAMA0GCSqGSIb3DQEBCwUAA4IBAQAD4YDPXwlXu+POPzsax2YH epham0zhN0piYGARr9pLeubIrmZ1BvTygFjaK5bUQL7X528l00bZq6XIM+E0YRW4 nkem34P1HWxCVwZ67uN6BZ1sMNIwuPVM3kxXchjKW0FFlrgBtA9+0BUC3eRGVCO/ VzsRAUkdexQ7UwfIOjJ6dCrOe2z/yF8yeXy2mKQ4C1XDh9CjBB5CdOeBp5tpeYca RVDz+T4uG7UKdpjk5Gmhs+Sq7kfn0/uYoLEhuPCM7Y1JibJ8jXNuWVihYc1O0KHd QTkKKzRbyu0U7FUKqZP6Aw5wlxh44gC4eYTBdU/CE6ZXFvCnI4h7GFOjYhEaE7LH -----END CERTIFICATE-----Generated at Mon Jan 12 04:55:44 2026 by rpki-client