This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/G3k1ceVeNrPiVfhClGYQkeWRt20.roa File: G3k1ceVeNrPiVfhClGYQkeWRt20.roa (raw, json) Hash identifier: 230dvF/Eg30qO5iDwzXcq17h9jrnLTrgKjBI6YrKsv0= Subject key identifier: 1B:79:35:71:E5:5E:36:B3:E2:55:F8:42:94:66:10:91:E5:91:B7:6D Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a Certificate serial: 019B7F80E8BD363FE15B37DAD8723BE8566D Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/G3k1ceVeNrPiVfhClGYQkeWRt20.roa Signing time: Fri 02 Jan 2026 16:18:33 +0000 ROA not before: Fri 02 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213922 IP address blocks: 62.164.156.0/22 maxlen: 24 91.188.250.0/23 maxlen: 24 91.202.245.0/24 maxlen: 24 91.202.246.0/23 maxlen: 24 185.109.28.0/22 maxlen: 24 2a0c:6ec0:a01::/48 maxlen: 48 2a0c:6ec0:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:e8:bd:36:3f:e1:5b:37:da:d8:72:3b:e8:56:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a Validity Not Before: Jan 2 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b793571e55e36b3e255f84294661091e591b76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c8:0c:6d:84:1a:7b:b2:dd:d3:11:b5:f0:3d: e3:1d:33:c2:4e:ad:b6:3a:b8:c1:77:e3:55:30:4e: ec:c4:3a:c7:d1:d5:9a:92:dd:e3:a5:4d:e4:9c:79: 44:4b:7d:86:6e:1b:20:c8:e0:b0:04:17:4c:a5:15: b4:b9:7c:6c:e8:ed:c1:1c:76:60:7f:66:f5:14:2f: 12:9c:79:bd:82:17:8d:67:39:6a:5d:e7:62:74:05: 66:b6:e4:8f:42:5b:c2:91:82:2f:91:59:b9:0e:9a: f0:41:e5:0e:e3:e8:60:e5:19:9b:f2:89:ba:06:05: 62:0d:5c:c5:65:09:60:7d:0d:d7:8e:b4:73:34:ce: 9c:a7:d5:ca:64:98:b3:b1:48:8a:ec:76:df:e6:09: 9e:b1:23:93:f1:a4:fd:5f:46:95:1a:94:2f:20:47: 0a:d6:04:5d:c3:94:f2:73:84:45:61:b9:f5:39:b1: 37:da:97:b1:fa:f1:a6:d3:d9:60:fa:2d:8e:8c:91: 2d:56:da:9c:76:ba:0b:c0:95:c0:df:e9:10:ee:e8: 7d:99:a8:98:98:62:25:30:2d:81:1d:2d:db:37:79: 1e:1e:35:d1:db:35:ca:cd:d9:0f:f9:ec:fd:14:bc: 25:41:61:93:c4:c7:a3:31:5e:ca:0c:b9:e5:8b:4f: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:79:35:71:E5:5E:36:B3:E2:55:F8:42:94:66:10:91:E5:91:B7:6D X509v3 Authority Key Identifier: keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/G3k1ceVeNrPiVfhClGYQkeWRt20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.156.0/22 91.188.250.0/23 91.202.245.0-91.202.247.255 185.109.28.0/22 IPv6: 2a0c:6ec0:a01::/48 2a0c:6ec0:b00::/40 Signature Algorithm: sha256WithRSAEncryption 51:4f:eb:dc:a7:63:8b:07:8e:f9:93:c6:67:5b:40:3d:76:e6: 07:27:93:59:9b:36:d0:37:96:3f:8d:81:e3:06:ff:82:f2:83: 37:c1:41:d9:f3:54:74:50:ec:41:aa:be:e2:ce:01:01:9f:4a: 54:3c:98:b8:7f:b7:d5:56:55:84:dd:03:a7:15:82:c8:73:61: 45:eb:fb:22:95:0a:00:da:1a:00:df:92:99:54:57:67:a5:91: 39:b4:97:4f:95:a9:ff:c6:34:80:32:f6:21:7c:e3:06:21:53: f3:4f:2f:9c:08:f6:5b:05:0e:dc:86:a9:9b:d4:dd:df:8a:2c: 29:29:03:3d:21:54:2a:bc:47:22:89:fb:b3:a2:bc:68:7e:95: 85:81:ca:ed:97:50:1a:4e:92:fa:8e:71:dd:51:ef:b4:7b:b9: 90:a6:c5:6b:e4:7f:d6:14:e0:69:2e:b2:d1:23:bd:8c:e9:25: 73:53:fa:b2:04:3f:54:a4:60:98:91:a1:8c:6c:94:b5:d2:68: 19:2a:50:c1:fb:5b:c9:0b:e7:13:88:af:31:5f:54:67:8c:91: 3f:15:4e:73:3e:33:a9:9e:a7:c5:4d:1c:d1:b4:9f:80:f0:36: 34:cd:a3:30:ad:2a:48:5e:fb:15:41:36:f4:ae:13:f6:6a:33: 1c:74:ce:da -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt/gOi9Nj/hWzfa2HI76FZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4 ZTY3MGEwHhcNMjYwMTAyMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjc5MzU3MWU1NWUzNmIzZTI1NWY4NDI5NDY2MTA5MWU1OTFiNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cgMbYQae7Ld0xG18D3jHTPCTq22 OrjBd+NVME7sxDrH0dWakt3jpU3knHlES32GbhsgyOCwBBdMpRW0uXxs6O3BHHZg f2b1FC8SnHm9gheNZzlqXedidAVmtuSPQlvCkYIvkVm5DprwQeUO4+hg5Rmb8om6 BgViDVzFZQlgfQ3XjrRzNM6cp9XKZJizsUiK7Hbf5gmesSOT8aT9X0aVGpQvIEcK 1gRdw5Tyc4RFYbn1ObE32pex+vGm09lg+i2OjJEtVtqcdroLwJXA3+kQ7uh9maiY mGIlMC2BHS3bN3keHjXR2zXKzdkP+ez9FLwlQWGTxMejMV7KDLnli0+M4wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFBt5NXHlXjaz4lX4QpRmEJHlkbdtMB8GA1UdIwQY MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt YzI0MGJmYzljYmMxLzEvRzNrMWNlVmVOclBpVmZoQ2xHWVFrZVdSdDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAmBAIAATAgAwQCPqScAwQB W7z6MAwDBABbyvUDBANbyvADBAK5bRwwFwQCAAIwEQMHACoMbsAKAQMGACoMbsAL MA0GCSqGSIb3DQEBCwUAA4IBAQBRT+vcp2OLB475k8ZnW0A9duYHJ5NZmzbQN5Y/ jYHjBv+C8oM3wUHZ81R0UOxBqr7izgEBn0pUPJi4f7fVVlWE3QOnFYLIc2FF6/si lQoA2hoA35KZVFdnpZE5tJdPlan/xjSAMvYhfOMGIVPzTy+cCPZbBQ7chqmb1N3f iiwpKQM9IVQqvEciifuzorxofpWFgcrtl1AaTpL6jnHdUe+0e7mQpsVr5H/WFOBp LrLRI72M6SVzU/qyBD9UpGCYkaGMbJS10mgZKlDB+1vJC+cTiK8xX1RnjJE/FU5z PjOpnqfFTRzRtJ+A8DY0zaMwrSpIXvsVQTb0rhP2ajMcdM7a -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:58 2026 by rpki-client