This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/gM8ofdQeGubU92gq-aGGa-zvY6Q.roa File: gM8ofdQeGubU92gq-aGGa-zvY6Q.roa (raw, json) Hash identifier: 3xpADweqEfrOHaBnc8vO2OLZLCKpNhwxUy/JAhbOyTM= Subject key identifier: 80:CF:28:7D:D4:1E:1A:E6:D4:F7:68:2A:F9:A1:86:6B:EC:EF:63:A4 Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82 Certificate serial: 019B7F8255684E59FE75B577D52AC8C01EAA Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/gM8ofdQeGubU92gq-aGGa-zvY6Q.roa Signing time: Fri 02 Jan 2026 16:20:06 +0000 ROA not before: Fri 02 Jan 2026 16:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59847 IP address blocks: 5.149.88.0/23 maxlen: 23 5.149.88.0/24 maxlen: 24 5.149.89.0/24 maxlen: 24 5.149.90.0/23 maxlen: 23 5.149.90.0/24 maxlen: 24 5.149.91.0/24 maxlen: 24 109.94.104.0/24 maxlen: 24 109.94.105.0/24 maxlen: 24 109.94.106.0/24 maxlen: 24 109.94.107.0/24 maxlen: 24 185.69.28.0/22 maxlen: 22 185.69.28.0/24 maxlen: 24 185.69.29.0/24 maxlen: 24 185.69.30.0/24 maxlen: 24 185.69.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:55:68:4e:59:fe:75:b5:77:d5:2a:c8:c0:1e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82 Validity Not Before: Jan 2 16:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80cf287dd41e1ae6d4f7682af9a1866becef63a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:db:c8:04:3a:af:db:04:cf:da:83:9d:5d: 06:31:49:0f:1a:d2:a2:05:5f:75:74:0c:3f:bd:f2: 53:84:46:30:45:e7:96:b3:8f:f2:59:03:09:b1:44: 55:5c:5f:c2:92:51:86:f5:30:d6:31:c4:40:a7:58: d9:d9:db:ba:0b:a1:70:95:ce:2e:3f:83:3c:1e:76: b1:e5:87:16:eb:d6:0f:ac:c8:26:47:ac:0c:39:b5: 9f:01:28:bb:1c:4f:d9:e4:60:fa:50:dd:79:d7:9f: 62:2c:07:78:fb:de:6d:a6:8f:e3:18:30:53:37:d2: a0:3e:5e:08:da:78:e1:90:45:a0:a8:0c:5c:c6:8c: c1:ef:9d:32:ba:93:75:ae:c3:90:84:2b:29:67:79: 0f:c2:06:3c:06:7d:2d:dc:1b:03:aa:c8:58:87:14: 1c:81:13:0b:36:42:a7:f2:2d:33:6c:17:f1:34:d6: fb:b1:f4:61:25:4c:f9:5d:af:d7:64:14:ca:9c:2d: a7:b6:1e:ed:06:2d:7f:b4:b1:39:81:c2:5f:75:dc: ee:14:7d:f4:f5:af:4c:a4:13:1b:29:88:76:0d:e0: a0:a1:3f:fa:b9:fd:71:79:0d:23:c3:0a:79:00:25: 6f:a2:79:a7:a4:2d:fa:38:8a:25:31:52:a6:48:8b: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:28:7D:D4:1E:1A:E6:D4:F7:68:2A:F9:A1:86:6B:EC:EF:63:A4 X509v3 Authority Key Identifier: keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/gM8ofdQeGubU92gq-aGGa-zvY6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.88.0/22 109.94.104.0/22 185.69.28.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:96:c6:fa:df:2f:17:8c:79:49:9c:35:22:4b:57:d7:68:d2: 88:d7:ae:f4:e1:73:59:b7:45:89:65:72:5d:e6:cc:7e:61:90: ed:1f:17:89:d4:87:f1:ee:5f:99:58:56:04:11:58:c6:c7:12: 3f:33:9f:c3:0a:fe:f8:7b:6a:01:53:2b:68:c8:23:1a:29:b1: d8:d1:20:05:e9:67:76:24:ed:18:d3:d1:35:69:16:e5:cc:dc: d2:37:59:3e:10:f1:86:bc:ad:84:9e:d7:a2:0b:77:3c:2e:3b: 6f:4d:b8:15:3d:a8:c7:d9:04:5a:48:f2:4b:d1:8e:96:bb:9f: 00:9b:4a:b2:26:b0:52:d3:75:d9:1b:cb:24:e6:d1:b6:28:80: e8:d3:e9:7f:f0:6a:f0:f1:51:04:32:0f:13:31:a7:8a:ec:6a: 0b:66:90:a0:e5:87:82:98:33:fd:10:80:71:3a:2e:ab:3f:ff: 96:bf:3a:52:c7:9f:0a:5e:f0:fb:07:48:ca:36:6e:5a:ce:67: a2:48:11:c0:42:13:c8:5a:52:8a:73:ad:d9:ea:ef:09:0b:41: dd:7b:5c:ed:fe:84:26:e8:b5:69:dc:ed:61:94:e8:65:dc:06: 00:be:98:12:fc:cb:50:1b:9f:b4:18:fc:fc:6d:86:51:24:44: e4:90:a0:7f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/glVoTln+dbV31SrIwB6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYTc0YWJjYjEzODJjMjJiOTFhZDQwN2ZkNDMzOWFiOGJh ODFiODIwHhcNMjYwMTAyMTYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGNmMjg3ZGQ0MWUxYWU2ZDRmNzY4MmFmOWExODY2YmVjZWY2M2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw/byAQ6r9sEz9qDnV0GMUkPGtKi BV91dAw/vfJThEYwReeWs4/yWQMJsURVXF/CklGG9TDWMcRAp1jZ2du6C6Fwlc4u P4M8Hnax5YcW69YPrMgmR6wMObWfASi7HE/Z5GD6UN15159iLAd4+95tpo/jGDBT N9KgPl4I2njhkEWgqAxcxozB750yupN1rsOQhCspZ3kPwgY8Bn0t3BsDqshYhxQc gRMLNkKn8i0zbBfxNNb7sfRhJUz5Xa/XZBTKnC2nth7tBi1/tLE5gcJfddzuFH30 9a9MpBMbKYh2DeCgoT/6uf1xeQ0jwwp5ACVvonmnpC36OIolMVKmSItgIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIDPKH3UHhrm1PdoKvmhhmvs72OkMB8GA1UdIwQY MBaAFOOnSryxOCwiuRrUB/1DOauLqBuCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDZkS3ZMRTRMQ0s1R3RRSF9VTTVxNHVvRzRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mOTFlYTgtN2VlYS00NGZiLWFmMjct NWMwODZkZGM5YTI2LzEvZ004b2ZkUWVHdWJVOTJncS1hR0dhLXp2WTZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mOTFlYTgtN2VlYS00NGZiLWFmMjctNWMwODZkZGM5YTI2 LzEvNDZkS3ZMRTRMQ0s1R3RRSF9VTTVxNHVvRzRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBZVYAwQC bV5oAwQCuUUcMA0GCSqGSIb3DQEBCwUAA4IBAQCflsb63y8XjHlJnDUiS1fXaNKI 16704XNZt0WJZXJd5sx+YZDtHxeJ1Ifx7l+ZWFYEEVjGxxI/M5/DCv74e2oBUyto yCMaKbHY0SAF6Wd2JO0Y09E1aRblzNzSN1k+EPGGvK2EnteiC3c8LjtvTbgVPajH 2QRaSPJL0Y6Wu58Am0qyJrBS03XZG8sk5tG2KIDo0+l/8Grw8VEEMg8TMaeK7GoL ZpCg5YeCmDP9EIBxOi6rP/+WvzpSx58KXvD7B0jKNm5azmeiSBHAQhPIWlKKc63Z 6u8JC0Hde1zt/oQm6LVp3O1hlOhl3AYAvpgS/MtQG5+0GPz8bYZRJETkkKB/ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:29 2026 by rpki-client