This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/g0mhvAZsLExNosr94fQnamWzRDY.roa File: g0mhvAZsLExNosr94fQnamWzRDY.roa (raw, json) Hash identifier: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE= Subject key identifier: 83:49:A1:BC:06:6C:2C:4C:4D:A2:CA:FD:E1:F4:27:6A:65:B3:44:36 Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Certificate serial: 019B79ECA6055BF4A3327D01E36F4C919946 Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/g0mhvAZsLExNosr94fQnamWzRDY.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59931 IP address blocks: 109.75.64.0/24 maxlen: 24 109.75.65.0/24 maxlen: 24 109.75.66.0/24 maxlen: 24 109.75.67.0/24 maxlen: 24 109.75.68.0/24 maxlen: 24 109.75.69.0/24 maxlen: 24 109.75.70.0/24 maxlen: 24 109.75.71.0/24 maxlen: 24 109.75.72.0/24 maxlen: 24 109.75.73.0/24 maxlen: 24 109.75.74.0/24 maxlen: 24 109.75.75.0/24 maxlen: 24 109.75.76.0/24 maxlen: 24 109.75.77.0/24 maxlen: 24 109.75.78.0/24 maxlen: 24 109.75.79.0/24 maxlen: 24 185.204.48.0/24 maxlen: 24 185.204.49.0/24 maxlen: 24 185.204.50.0/24 maxlen: 24 185.204.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a6:05:5b:f4:a3:32:7d:01:e3:6f:4c:91:99:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8349a1bc066c2c4c4da2cafde1f4276a65b34436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:fb:a8:39:f8:45:fd:57:6b:92:1d:8d:0d: f5:f8:ac:0a:22:9a:9e:de:aa:45:a6:9f:cd:51:98: 94:53:8b:82:73:be:7e:35:98:1d:51:78:bf:fe:b0: 65:5c:c9:57:8a:d6:53:6f:24:13:60:e2:e0:1f:f6: 19:00:a5:bc:d7:62:b7:ee:fd:fb:57:bf:44:1f:56: 23:e6:4b:7e:af:e2:c9:52:75:13:39:15:c5:41:98: 64:8a:0b:64:45:a3:08:97:d2:d6:9c:86:30:6b:66: 62:84:7a:a4:10:ce:12:ae:c8:25:67:ca:ef:d3:bd: 3b:b6:8e:75:b1:13:1a:5d:11:3f:d8:35:99:e8:80: 23:cc:f2:1b:7c:aa:7d:46:4a:83:54:92:74:d4:2c: cc:48:a8:eb:4b:a7:67:e0:d3:26:8c:37:58:52:06: 7c:c6:8d:fe:3e:1f:b4:14:2d:9d:65:24:99:7f:e4: eb:61:4a:49:2e:de:02:5a:bb:92:b4:b7:9e:96:92: bc:9d:60:e7:d3:82:5e:f3:63:17:e2:50:6a:ba:8d: 1d:a5:e2:d6:b5:4c:a9:85:ab:9a:2c:bc:21:25:25: 30:23:95:ff:de:d7:54:88:4e:e5:32:58:2a:f0:50: 56:31:fa:6a:92:e5:c9:ee:af:ba:b8:40:3e:65:0a: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:49:A1:BC:06:6C:2C:4C:4D:A2:CA:FD:E1:F4:27:6A:65:B3:44:36 X509v3 Authority Key Identifier: keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/g0mhvAZsLExNosr94fQnamWzRDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.75.64.0/20 185.204.48.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:f7:24:09:8a:a1:78:bc:d6:2c:e3:7e:88:ed:b4:5b:22:ef: af:99:ec:8b:50:0d:db:26:08:33:81:3c:db:ec:99:49:22:ab: e8:bc:7a:30:94:98:c0:b5:51:bb:2d:5e:de:6a:be:09:c1:9e: 5c:dc:b5:24:42:d6:82:66:09:98:75:34:0a:c6:be:4c:52:05: e8:9a:9f:78:86:55:96:82:88:82:11:de:91:22:a9:66:fb:d0: 0b:ba:0f:ed:81:38:c0:10:2c:24:d4:3c:3a:5b:67:f5:85:c4: b2:20:86:27:36:44:d4:a7:2f:d0:de:ca:98:fd:a0:8b:a6:5b: 89:80:78:c1:63:40:c2:90:a2:15:2f:7b:d4:5e:71:76:fe:51: 39:04:f3:26:66:25:12:dd:4c:c9:47:d2:3e:4a:75:54:4b:66: d9:a0:54:cd:d9:1f:05:59:f1:a5:d0:34:df:2d:52:70:e5:65: 21:2d:a6:b6:51:07:d8:20:47:3b:fd:b9:25:f3:82:0f:7e:d7: 85:3a:b8:e0:d0:df:51:17:26:a4:52:ab:59:9a:95:da:72:e2: 5e:5f:d7:b6:2c:54:38:ea:6d:34:37:ca:95:e6:18:74:ad:97: 54:24:73:10:3c:f6:b1:49:5f:37:d6:c3:53:d5:ff:9c:da:73: 5c:7e:1f:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57KYFW/SjMn0B429MkZlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWYyZTdjYzJjNjg3ZjU4YzBkMWY2MTMyYmIyZGNmZGYz OGNiNjQwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQ5YTFiYzA2NmMyYzRjNGRhMmNhZmRlMWY0Mjc2YTY1YjM0NDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K77qDn4Rf1Xa5IdjQ31+KwKIpqe 3qpFpp/NUZiUU4uCc75+NZgdUXi//rBlXMlXitZTbyQTYOLgH/YZAKW812K37v37 V79EH1Yj5kt+r+LJUnUTORXFQZhkigtkRaMIl9LWnIYwa2ZihHqkEM4SrsglZ8rv 0707to51sRMaXRE/2DWZ6IAjzPIbfKp9RkqDVJJ01CzMSKjrS6dn4NMmjDdYUgZ8 xo3+Ph+0FC2dZSSZf+TrYUpJLt4CWruStLeelpK8nWDn04Je82MX4lBquo0dpeLW tUyphauaLLwhJSUwI5X/3tdUiE7lMlgq8FBWMfpqkuXJ7q+6uEA+ZQqktwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFINJobwGbCxMTaLK/eH0J2pls0Q2MB8GA1UdIwQY MBaAFN1fLnzCxof1jA0fYTK7Lc/fOMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMt OWRjZmQyZWYzMDIzLzEvZzBtaHZBWnNMRXhOb3NyOTRmUW5hbVd6UkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMtOWRjZmQyZWYzMDIz LzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEbUtAAwQC ucwwMA0GCSqGSIb3DQEBCwUAA4IBAQCe9yQJiqF4vNYs436I7bRbIu+vmeyLUA3b JggzgTzb7JlJIqvovHowlJjAtVG7LV7ear4JwZ5c3LUkQtaCZgmYdTQKxr5MUgXo mp94hlWWgoiCEd6RIqlm+9ALug/tgTjAECwk1Dw6W2f1hcSyIIYnNkTUpy/Q3sqY /aCLpluJgHjBY0DCkKIVL3vUXnF2/lE5BPMmZiUS3UzJR9I+SnVUS2bZoFTN2R8F WfGl0DTfLVJw5WUhLaa2UQfYIEc7/bkl84IPfteFOrjg0N9RFyakUqtZmpXacuJe X9e2LFQ46m00N8qV5hh0rZdUJHMQPPaxSV831sNT1f+c2nNcfh+l -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:59 2026 by rpki-client