This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa File: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (raw, json) Hash identifier: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4= Subject key identifier: 81:7D:C1:43:8F:0A:4F:54:81:08:87:50:D4:14:EF:16:FE:72:58:9B Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Certificate serial: 019B7834779A19B46ABF607DE022ACE6951E Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9021 IP address blocks: 185.237.68.0/22 maxlen: 22 185.237.68.0/23 maxlen: 23 185.237.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:77:9a:19:b4:6a:bf:60:7d:e0:22:ac:e6:95:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=817dc1438f0a4f5481088750d414ef16fe72589b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fe:3c:96:13:ca:a6:31:67:46:92:5c:a4:9a: f0:22:f6:5f:57:d4:9f:e4:6f:15:74:7a:8b:49:94: 06:e1:19:e5:f0:5e:2d:7b:15:1c:8e:06:41:7a:1d: df:13:a3:90:96:0d:f9:10:6e:f8:d0:00:a1:00:11: 5f:f9:9b:17:46:32:d8:b8:9f:35:ec:b6:f9:35:f3: 40:d7:bc:6e:96:7d:98:61:df:89:6d:5d:af:83:30: 3f:61:41:4e:d1:3a:8f:ef:84:56:e5:13:a8:b8:da: 26:55:84:0e:71:10:b6:8d:86:77:cb:2e:49:a6:ca: 29:ea:50:1b:6a:43:1a:a6:fd:6a:9e:91:c4:bd:3b: 6d:e1:1a:ef:e0:7f:f6:0d:ac:ca:b2:3a:29:42:ee: 42:df:78:ca:a3:c0:b5:9e:e0:f2:93:00:a9:31:d9: 14:a8:be:b7:db:b3:1e:d1:10:00:33:8c:9b:49:14: c5:3f:be:87:9b:b6:b8:eb:19:bc:79:02:70:3b:4d: 68:22:35:b9:04:72:ee:79:67:ee:fc:b3:e4:30:f3: 40:c8:08:99:46:0a:e2:d8:2d:8e:a0:9f:1f:eb:96: fb:46:63:d2:79:d0:ac:8f:77:ef:a0:f7:30:ec:85: 41:81:1e:dc:77:dc:de:6e:e1:b2:c8:b5:8e:fc:4c: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7D:C1:43:8F:0A:4F:54:81:08:87:50:D4:14:EF:16:FE:72:58:9B X509v3 Authority Key Identifier: keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.68.0/22 Signature Algorithm: sha256WithRSAEncryption 00:6d:35:ff:f6:89:96:cb:c1:d7:94:34:04:73:99:cc:04:76: be:96:fd:a9:9f:73:62:2d:46:40:28:20:30:43:99:8c:8e:f5: 1f:b7:0d:2c:e2:37:24:49:16:ea:9d:dc:cd:42:6f:40:40:6f: be:e7:dd:09:40:8c:7d:2e:47:34:c5:e8:9b:65:e5:d0:27:41: 40:e3:6f:9e:26:ff:c0:57:24:ab:b5:9b:15:28:7f:1e:5a:08: 0e:27:4b:49:4f:0c:7a:f3:44:2d:b1:97:27:6a:35:5c:a9:47: 54:a1:16:64:29:a0:d6:80:ca:30:a7:c4:a6:56:a0:63:12:1e: 89:07:ee:4c:ab:c5:e5:16:c0:ea:20:95:fa:cb:74:1c:d3:3b: 82:52:d6:82:4b:6f:57:0c:c2:a7:f6:c3:3a:ab:e1:32:7b:94: 0c:11:53:3d:f3:9f:1d:52:0a:74:3d:de:1f:a9:50:9f:3a:47: 62:be:ba:7e:96:c3:09:82:b0:db:8d:41:26:a1:db:94:0d:91: fa:ef:c1:e1:7a:43:20:ee:b7:30:70:d6:2e:8e:fb:ac:ab:07: 82:09:c6:b9:c8:d7:02:a5:03:1c:92:1c:d9:1a:32:b7:03:5a: 0f:c8:23:74:62:97:83:c4:df:5d:68:84:c7:94:69:a9:ca:a4: 6b:ff:f9:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHeaGbRqv2B94CKs5pUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl ZDIxMzgwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTdkYzE0MzhmMGE0ZjU0ODEwODg3NTBkNDE0ZWYxNmZlNzI1ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/48lhPKpjFnRpJcpJrwIvZfV9Sf 5G8VdHqLSZQG4Rnl8F4texUcjgZBeh3fE6OQlg35EG740AChABFf+ZsXRjLYuJ81 7Lb5NfNA17xuln2YYd+JbV2vgzA/YUFO0TqP74RW5ROouNomVYQOcRC2jYZ3yy5J psop6lAbakMapv1qnpHEvTtt4Rrv4H/2DazKsjopQu5C33jKo8C1nuDykwCpMdkU qL6327Me0RAAM4ybSRTFP76Hm7a46xm8eQJwO01oIjW5BHLueWfu/LPkMPNAyAiZ Rgri2C2OoJ8f65b7RmPSedCsj3fvoPcw7IVBgR7cd9zebuGyyLWO/EzW9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIF9wUOPCk9UgQiHUNQU7xb+clibMB8GA1UdIwQY MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt ZjM0NjNmYzcyY2I1LzEvZ1gzQlE0OEtUMVNCQ0lkUTFCVHZGdjV5V0pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1 LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue1EMA0G CSqGSIb3DQEBCwUAA4IBAQAAbTX/9omWy8HXlDQEc5nMBHa+lv2pn3NiLUZAKCAw Q5mMjvUftw0s4jckSRbqndzNQm9AQG++590JQIx9Lkc0xeibZeXQJ0FA42+eJv/A VySrtZsVKH8eWggOJ0tJTwx680QtsZcnajVcqUdUoRZkKaDWgMowp8SmVqBjEh6J B+5Mq8XlFsDqIJX6y3Qc0zuCUtaCS29XDMKn9sM6q+Eye5QMEVM9858dUgp0Pd4f qVCfOkdivrp+lsMJgrDbjUEmoduUDZH678HhekMg7rcwcNYujvusqweCCca5yNcC pQMckhzZGjK3A1oPyCN0YpeDxN9daITHlGmpyqRr//nr -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:58 2026 by rpki-client