This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/Cg3-GLroUHPLqy0MDoy8qVDXjIo.roa File: Cg3-GLroUHPLqy0MDoy8qVDXjIo.roa (raw, json) Hash identifier: ObFrv+qFlIMnwkBakSA2410HJwiAq/Uwxqer92VRQ5c= Subject key identifier: 0A:0D:FE:18:BA:E8:50:73:CB:AB:2D:0C:0E:8C:BC:A9:50:D7:8C:8A Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Certificate serial: 019B7BA32A2FE9DAD726EB8BAC6376B5C5A3 Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/Cg3-GLroUHPLqy0MDoy8qVDXjIo.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60868 IP address blocks: 185.25.32.0/22 maxlen: 24 2a00:77e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2a:2f:e9:da:d7:26:eb:8b:ac:63:76:b5:c5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a0dfe18bae85073cbab2d0c0e8cbca950d78c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:15:2d:bc:9e:42:f4:d8:06:15:01:51:b1: 83:92:70:d1:67:21:52:52:79:45:c3:0b:9f:ea:51: 1c:69:1b:67:33:af:68:88:99:8c:2a:80:c8:2b:96: fa:91:bb:40:ab:c4:bf:49:45:bb:76:54:41:51:70: ba:09:6e:3f:54:7a:64:6e:1e:3f:af:f2:07:5f:3f: d7:4c:b4:12:a3:5a:bc:17:01:b4:e7:fc:47:90:35: a7:68:2a:e7:3d:67:dd:d7:6f:2a:ea:b8:73:33:be: 95:81:95:34:a3:1f:a9:c8:0b:f1:4c:5f:30:b1:b7: 3f:65:9c:ee:55:b8:b1:f5:38:31:ed:ce:00:10:2c: 7d:ec:5a:ea:99:2e:57:5f:5f:ae:4d:4d:84:11:84: 61:eb:af:dd:8a:f9:31:ef:90:a1:7d:6e:08:74:1b: ff:05:7b:e5:3f:73:a0:81:da:2f:28:77:76:8f:a1: a6:1a:6d:3d:b3:a5:d5:e4:c9:71:ac:bf:6c:23:01: 16:ab:39:c8:94:89:45:37:cf:55:73:8c:30:7e:7a: 66:42:59:1e:d7:7e:cb:0c:8b:fd:30:cb:42:b2:f9: a5:f6:d0:6a:0b:2c:18:e7:a0:7b:a0:b9:60:b4:06: 2a:7e:29:97:3a:05:b5:4e:58:67:1c:e3:4d:12:26: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0D:FE:18:BA:E8:50:73:CB:AB:2D:0C:0E:8C:BC:A9:50:D7:8C:8A X509v3 Authority Key Identifier: keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/Cg3-GLroUHPLqy0MDoy8qVDXjIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.32.0/22 IPv6: 2a00:77e0::/32 Signature Algorithm: sha256WithRSAEncryption 1e:d6:52:7b:96:f1:b6:1a:f9:0b:ba:cd:47:9f:9d:df:40:c2: 1c:23:d5:b0:d9:a4:11:10:53:11:25:06:ab:55:f6:49:80:42: 3c:c8:af:84:f5:64:3a:da:4e:85:7a:bd:b9:0a:b6:4b:6f:24: 11:0c:09:3c:c1:b7:73:fb:0b:83:83:d5:fa:25:d8:f8:0e:c8: 27:66:c2:2d:14:7d:4b:97:8d:45:89:bb:cf:84:06:9a:c0:bf: 72:73:47:6f:46:e0:e5:c9:b4:84:eb:8a:18:97:ac:3c:43:74: c8:76:d8:47:9b:ca:2f:62:75:70:83:c4:e4:8a:32:66:13:79: 1d:ec:2a:58:50:ba:65:b8:58:20:d1:b4:19:6c:de:43:b3:9d: 0f:e8:61:5f:95:a0:44:f8:d7:16:0b:87:17:bf:d0:0d:e6:1a: ef:a4:22:95:6c:08:f5:97:01:e6:69:94:6f:f2:87:b9:c4:94: 7e:3b:6a:2c:0d:59:38:d2:26:7f:f5:98:2f:31:f4:1e:08:90: 2f:ef:9d:c5:e2:65:8d:94:f1:0e:86:56:9f:da:8a:63:ad:e9: f0:dc:53:53:50:0e:8a:0f:6e:ad:cf:bd:f8:b4:5d:c3:bf:f8: 10:9b:b6:c6:31:03:db:7e:e2:a0:da:e0:f9:be:48:74:0e:3c: 46:fb:3d:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7oyov6drXJuuLrGN2tcWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTMwNWQ3OWNhY2RiZWZiZjFlODMyYjM0ZDdjMDZiYmI1 ZjYyN2EwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTBkZmUxOGJhZTg1MDczY2JhYjJkMGMwZThjYmNhOTUwZDc4YzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwoVLbyeQvTYBhUBUbGDknDRZyFS UnlFwwuf6lEcaRtnM69oiJmMKoDIK5b6kbtAq8S/SUW7dlRBUXC6CW4/VHpkbh4/ r/IHXz/XTLQSo1q8FwG05/xHkDWnaCrnPWfd128q6rhzM76VgZU0ox+pyAvxTF8w sbc/ZZzuVbix9Tgx7c4AECx97FrqmS5XX1+uTU2EEYRh66/divkx75ChfW4IdBv/ BXvlP3OggdovKHd2j6GmGm09s6XV5MlxrL9sIwEWqznIlIlFN89Vc4wwfnpmQlke 137LDIv9MMtCsvml9tBqCywY56B7oLlgtAYqfimXOgW1TlhnHONNEiYkvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAoN/hi66FBzy6stDA6MvKlQ14yKMB8GA1UdIwQY MBaAFEnjBdecrNvvvx6DKzTXwGu7X2J6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMt ZmQwOTg5NDg3YjE2LzEvQ2czLUdMcm9VSFBMcXkwTURveThxVkRYaklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYmY5OTctY2RiYS00OTMwLTg1NTMtZmQwOTg5NDg3YjE2 LzEvU2VNRjE1eXMyLS1fSG9Nck5OZkFhN3RmWW5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRkgMA0E AgACMAcDBQAqAHfgMA0GCSqGSIb3DQEBCwUAA4IBAQAe1lJ7lvG2GvkLus1Hn53f QMIcI9Ww2aQREFMRJQarVfZJgEI8yK+E9WQ62k6Fer25CrZLbyQRDAk8wbdz+wuD g9X6Jdj4DsgnZsItFH1Ll41FibvPhAaawL9yc0dvRuDlybSE64oYl6w8Q3TIdthH m8ovYnVwg8TkijJmE3kd7CpYULpluFgg0bQZbN5Ds50P6GFflaBE+NcWC4cXv9AN 5hrvpCKVbAj1lwHmaZRv8oe5xJR+O2osDVk40iZ/9ZgvMfQeCJAv753F4mWNlPEO hlaf2opjrenw3FNTUA6KD26tz734tF3Dv/gQm7bGMQPbfuKg2uD5vkh0DjxG+z2B -----END CERTIFICATE-----Generated at Mon Jan 12 12:56:53 2026 by rpki-client