This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa File: G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa (raw, json) Hash identifier: FvP89IRchdhDOJHirpo71l3u2H6iIX16MtsmawYXGPM= Subject key identifier: 1B:6B:D8:F9:7C:AE:5C:F1:27:19:3E:74:54:BF:C3:47:63:06:B3:C4 Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Certificate serial: 019B7E387D9828EDD0B140FE8B919DAB22E4 Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199894 IP address blocks: 91.187.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7d:98:28:ed:d0:b1:40:fe:8b:91:9d:ab:22:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b6bd8f97cae5cf127193e7454bfc3476306b3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:ba:e3:02:b5:27:ee:0a:de:94:1d:78:01: a8:d8:72:8a:d8:56:7a:c7:a2:16:e5:fa:6f:59:67: c1:00:77:95:c7:d8:24:ce:1e:81:62:68:34:e3:00: 8e:b2:fb:ff:ff:89:98:9c:6d:8e:fa:4d:5d:d5:eb: cb:81:8d:b9:63:5a:8a:79:a1:16:dd:28:f0:e9:cc: c1:c1:d9:69:13:51:8b:75:ba:1c:37:0f:a0:8a:54: 0c:d1:de:2e:cf:45:0d:b3:8a:16:89:4e:1d:80:e9: 11:6e:d7:8b:57:68:1a:fc:6d:96:b1:56:53:5f:62: 76:eb:6f:09:05:bd:51:1a:16:03:7d:74:0e:5b:77: 42:e9:69:af:47:93:8d:4c:ba:60:bd:dd:88:f2:b6: e7:d0:12:7e:8f:cb:16:62:a6:d3:c5:62:b2:63:82: a5:a2:02:1c:e0:32:18:f1:41:ac:c1:80:29:cd:6d: f5:ff:49:74:73:48:b3:77:37:bc:d0:6c:c3:8c:3f: 0f:11:a4:6f:d1:77:f4:94:53:33:d1:73:fb:b1:b2: 89:18:84:55:66:d2:13:37:44:3d:1c:65:1e:91:5a: ba:4e:60:d0:89:2a:b2:24:0e:70:df:22:c3:75:ed: 14:fd:05:fa:21:01:7d:63:81:cc:7f:90:db:df:32: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6B:D8:F9:7C:AE:5C:F1:27:19:3E:74:54:BF:C3:47:63:06:B3:C4 X509v3 Authority Key Identifier: keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.187.226.0/24 Signature Algorithm: sha256WithRSAEncryption 26:91:ff:af:c8:4a:03:76:65:e2:fd:31:a2:de:f0:16:45:91: 35:a9:de:3f:90:f5:27:11:fb:af:9c:c5:fc:86:69:ff:10:db: d6:0d:a3:ea:23:ff:80:71:65:86:ef:44:bb:0b:92:d3:72:56: 02:eb:f0:7b:a7:5b:27:27:94:62:62:32:87:91:85:71:78:3e: 63:5b:b4:99:4a:f4:de:1d:db:a6:4d:6c:de:48:bb:5f:14:0b: 44:38:96:47:1e:9c:82:ae:df:eb:74:ad:25:54:84:db:85:6d: 2d:c1:96:b1:07:3a:a9:b5:8f:f4:1f:b5:68:da:66:38:f5:9e: d2:21:8a:87:35:4d:17:13:75:bb:2c:49:d4:ae:1a:7e:91:ab: 91:20:01:24:e4:fd:65:88:bc:fc:9a:2c:bd:14:00:4e:79:ce: 3b:4e:3f:3e:39:89:15:f3:2a:d7:d6:4d:f8:72:71:30:77:e1: 87:5a:4d:84:13:ba:1c:6b:e7:92:5e:15:84:b8:d7:b8:f0:36: fc:1e:66:c9:22:77:60:0b:10:b7:b3:7f:8b:16:68:60:5d:df: d7:7e:7d:82:1e:2e:47:32:8c:3b:c6:4b:8d:37:9d:fa:d4:4e: 03:29:df:33:b1:ac:80:25:d0:db:b3:a6:a5:49:8e:7f:11:5f: 45:7c:13:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OH2YKO3QsUD+i5GdqyLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0 ZDQ4MjIwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjZiZDhmOTdjYWU1Y2YxMjcxOTNlNzQ1NGJmYzM0NzYzMDZiM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlO64wK1J+4K3pQdeAGo2HKK2FZ6 x6IW5fpvWWfBAHeVx9gkzh6BYmg04wCOsvv//4mYnG2O+k1d1evLgY25Y1qKeaEW 3Sjw6czBwdlpE1GLdbocNw+gilQM0d4uz0UNs4oWiU4dgOkRbteLV2ga/G2WsVZT X2J2628JBb1RGhYDfXQOW3dC6WmvR5ONTLpgvd2I8rbn0BJ+j8sWYqbTxWKyY4Kl ogIc4DIY8UGswYApzW31/0l0c0izdze80GzDjD8PEaRv0Xf0lFMz0XP7sbKJGIRV ZtITN0Q9HGUekVq6TmDQiSqyJA5w3yLDde0U/QX6IQF9Y4HMf5Db3zLDbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtr2Pl8rlzxJxk+dFS/w0djBrPEMB8GA1UdIwQY MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt NDFlYWExZmRlMTFiLzEvRzJ2WS1YeXVYUEVuR1Q1MFZMX0RSMk1HczhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7viMA0G CSqGSIb3DQEBCwUAA4IBAQAmkf+vyEoDdmXi/TGi3vAWRZE1qd4/kPUnEfuvnMX8 hmn/ENvWDaPqI/+AcWWG70S7C5LTclYC6/B7p1snJ5RiYjKHkYVxeD5jW7SZSvTe HdumTWzeSLtfFAtEOJZHHpyCrt/rdK0lVITbhW0twZaxBzqptY/0H7Vo2mY49Z7S IYqHNU0XE3W7LEnUrhp+kauRIAEk5P1liLz8miy9FABOec47Tj8+OYkV8yrX1k34 cnEwd+GHWk2EE7oca+eSXhWEuNe48Db8HmbJIndgCxC3s3+LFmhgXd/Xfn2CHi5H Mow7xkuNN5361E4DKd8zsayAJdDbs6alSY5/EV9FfBOo -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:07 2026 by rpki-client