This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa File: gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa (raw, json) Hash identifier: KPBhQabvMXA3ivJ7vLYo7qGQjlOgp6mXdXBE/OSlu9M= Subject key identifier: 81:57:DD:5A:6D:14:85:39:BE:FE:46:21:0B:17:C8:FC:F3:E1:F6:94 Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3 Certificate serial: 019B7DC9EAF5FF23EA30EE49EF51C7C9269D Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa Signing time: Fri 02 Jan 2026 08:19:03 +0000 ROA not before: Fri 02 Jan 2026 08:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209961 IP address blocks: 92.249.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ea:f5:ff:23:ea:30:ee:49:ef:51:c7:c9:26:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3 Validity Not Before: Jan 2 08:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8157dd5a6d148539befe46210b17c8fcf3e1f694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:6f:42:4f:f2:42:8b:02:a4:7c:eb:9a:99: 3c:a6:8c:65:a9:14:8e:a0:4d:f6:07:e2:10:a4:b2: 20:4b:45:2e:0b:b1:3b:70:fd:90:53:29:b9:ea:01: 08:dc:26:15:0e:36:58:e5:ec:77:75:30:a9:c2:39: f8:4f:24:83:bc:5d:ac:8f:0c:b1:03:55:42:fe:1c: 57:99:a7:a0:c7:d5:38:17:25:ac:db:03:3d:f3:36: a4:f0:97:3b:6b:18:30:27:40:fb:2e:32:21:df:90: b2:73:a4:1d:38:67:de:48:d2:e0:c1:90:38:86:97: b2:97:bf:60:11:60:62:f3:11:40:da:22:4a:b8:23: f9:a4:24:b6:65:9e:bc:85:6f:c9:db:0c:1e:46:df: 80:71:2d:20:3a:70:96:b8:8a:0f:a7:0e:b2:7e:50: 86:b1:bf:a3:31:0e:7e:7b:61:a8:82:49:18:23:ec: a8:46:88:07:17:a1:5e:45:ff:5b:1a:b8:3a:65:e3: ee:59:93:62:d2:e8:02:a7:09:d8:28:8b:45:cc:a2: d3:54:27:61:e6:d5:e7:8e:5c:1f:92:36:aa:7d:fc: a7:f2:0b:50:c4:40:50:21:ec:be:91:6a:8a:37:9b: 92:61:9b:52:46:f9:75:8e:dc:d0:de:8b:a4:0d:a1: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:DD:5A:6D:14:85:39:BE:FE:46:21:0B:17:C8:FC:F3:E1:F6:94 X509v3 Authority Key Identifier: keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.25.0/24 Signature Algorithm: sha256WithRSAEncryption 76:5c:77:fd:b0:fe:ce:a0:f7:18:06:ce:b5:99:aa:ce:c8:95: fc:69:75:e0:1c:38:06:bd:44:e6:41:3c:71:e0:77:35:6a:44: e2:93:a2:a2:2f:94:2e:79:0c:d3:f5:99:06:95:9c:86:e8:fb: 9f:4a:07:f0:15:b9:c3:0a:7b:c2:e7:6f:ff:bf:92:ed:8b:2c: 23:cb:37:7c:ac:6f:07:85:85:f2:f9:d1:b3:33:9b:2c:9d:70: 0c:3b:61:49:ef:0d:a6:17:ff:0d:ab:bf:f3:06:34:be:53:bf: b5:60:db:cd:8b:c3:b1:5e:a7:0d:e8:35:e2:5f:48:29:b2:25: 3d:f9:0f:0e:87:9c:77:f2:f9:56:ce:34:ef:5a:0f:57:87:91: d7:21:6c:6e:fb:dd:e2:8e:f2:eb:e6:2c:c9:52:b4:83:9f:78: 9f:c3:9c:13:4a:6c:5f:3a:c0:b5:de:90:2a:a4:9d:88:05:5a: 12:92:46:0f:ff:d4:70:e8:58:00:15:85:aa:6e:09:09:48:70: c3:3f:7d:27:4b:f6:a9:2e:eb:87:e6:6b:53:de:82:59:4e:1c: e0:51:4d:29:34:0d:d2:44:30:6b:f7:cb:2a:51:c2:93:49:cb: 17:fb:8f:8e:4f:b3:6b:de:0e:5c:54:35:98:77:8f:e3:14:14: e6:87:3f:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yer1/yPqMO5J71HHySadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4 ZTU3ZDMwHhcNMjYwMTAyMDgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTU3ZGQ1YTZkMTQ4NTM5YmVmZTQ2MjEwYjE3YzhmY2YzZTFmNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA351vQk/yQosCpHzrmpk8poxlqRSO oE32B+IQpLIgS0UuC7E7cP2QUym56gEI3CYVDjZY5ex3dTCpwjn4TySDvF2sjwyx A1VC/hxXmaegx9U4FyWs2wM98zak8Jc7axgwJ0D7LjIh35Cyc6QdOGfeSNLgwZA4 hpeyl79gEWBi8xFA2iJKuCP5pCS2ZZ68hW/J2wweRt+AcS0gOnCWuIoPpw6yflCG sb+jMQ5+e2GogkkYI+yoRogHF6FeRf9bGrg6ZePuWZNi0ugCpwnYKItFzKLTVCdh 5tXnjlwfkjaqffyn8gtQxEBQIey+kWqKN5uSYZtSRvl1jtzQ3oukDaGB3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFX3VptFIU5vv5GIQsXyPzz4faUMB8GA1UdIwQY MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt ZTczM2MyNjJhMzgyLzEvZ1ZmZFdtMFVoVG0tX2tZaEN4ZklfUFBoOXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPkZMA0G CSqGSIb3DQEBCwUAA4IBAQB2XHf9sP7OoPcYBs61marOyJX8aXXgHDgGvUTmQTxx 4Hc1akTik6KiL5QueQzT9ZkGlZyG6PufSgfwFbnDCnvC52//v5Ltiywjyzd8rG8H hYXy+dGzM5ssnXAMO2FJ7w2mF/8Nq7/zBjS+U7+1YNvNi8OxXqcN6DXiX0gpsiU9 +Q8Oh5x38vlWzjTvWg9Xh5HXIWxu+93ijvLr5izJUrSDn3ifw5wTSmxfOsC13pAq pJ2IBVoSkkYP/9Rw6FgAFYWqbgkJSHDDP30nS/apLuuH5mtT3oJZThzgUU0pNA3S RDBr98sqUcKTScsX+4+OT7Nr3g5cVDWYd4/jFBTmhz+U -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:45 2026 by rpki-client