This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/gGeNvgahudXxUPNz9yBFk3kYHS4.roa File: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (raw, json) Hash identifier: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y= Subject key identifier: 80:67:8D:BE:06:A1:B9:D5:F1:50:F3:73:F7:20:45:93:79:18:1D:2E Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019B7F8364E4ACE64EC5DABB76CE669CD253 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/gGeNvgahudXxUPNz9yBFk3kYHS4.roa Signing time: Fri 02 Jan 2026 16:21:16 +0000 ROA not before: Fri 02 Jan 2026 16:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 109.237.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:64:e4:ac:e6:4e:c5:da:bb:76:ce:66:9c:d2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jan 2 16:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80678dbe06a1b9d5f150f373f720459379181d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:9e:94:2e:1d:7f:4c:ac:98:7e:9d:7e:da: 95:cc:38:de:c9:af:4b:3c:25:72:8b:21:84:ff:77: 9c:90:d5:75:20:f5:71:1a:57:10:0e:1d:72:d5:40: b0:52:49:a8:30:b9:90:16:1a:34:57:5b:db:1e:df: 25:bd:c7:c8:c6:f4:1f:33:23:05:a0:e5:51:72:9d: 81:42:fd:43:5e:d1:ad:e0:18:72:ad:3a:77:e6:d2: 64:a2:05:89:d9:7d:af:3d:52:3e:2b:f5:27:4f:b7: a0:15:79:53:c4:f8:f0:82:94:c9:98:9c:37:eb:e3: d5:39:9d:45:97:a7:0c:6a:48:00:cf:8b:da:f8:d3: cb:83:30:f7:8d:58:64:3a:95:16:de:65:11:d3:6f: 75:a0:bb:b5:5a:bf:b5:48:cf:40:84:96:c1:59:f4: 2e:0f:8b:56:ef:f6:10:0a:ba:21:c0:51:8c:e5:89: dc:8a:8e:53:84:3a:c3:72:e7:03:26:17:7b:fd:13: 70:9f:86:8b:48:0c:65:dc:ed:5e:c3:d4:6d:c7:c8: 5f:5a:9c:b5:8a:e4:f4:46:0e:48:30:7e:6e:d2:95: 87:1e:78:fc:44:98:0e:8f:e4:ab:ee:ea:e6:c2:90: 00:92:22:e2:b3:f1:6e:9d:e7:dd:ec:fe:01:33:24: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:67:8D:BE:06:A1:B9:D5:F1:50:F3:73:F7:20:45:93:79:18:1D:2E X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/gGeNvgahudXxUPNz9yBFk3kYHS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.237.97.0/24 Signature Algorithm: sha256WithRSAEncryption 76:ca:52:68:28:c8:73:32:c9:57:4a:37:7a:a2:60:d1:a9:a1: c7:1d:d1:0c:25:40:52:16:3b:cd:4c:1e:fe:1f:ea:b8:75:8c: 96:43:b9:5f:63:7f:f8:64:e7:d7:65:d1:71:1f:b4:b8:82:35: 97:02:f3:ea:fe:f7:86:fe:63:7d:cf:a1:b7:f8:90:f5:ab:c0: 33:73:ec:e3:44:3b:34:77:8a:18:d9:73:f6:d4:59:77:82:38: 50:85:e0:86:d4:91:bf:46:d0:99:e7:c9:8b:04:bd:44:02:9e: 1e:5c:34:63:84:3a:89:23:45:af:60:b9:4d:50:11:ea:e0:07: a0:25:df:26:f9:9a:d9:f9:6d:0c:c7:cc:97:9d:9e:c7:2f:ab: 01:a1:3b:70:7d:5b:48:fe:0f:ae:9d:99:23:8f:f7:9c:9c:c1: 05:48:9f:9a:f6:39:54:b2:27:4b:e9:56:ac:89:5d:33:50:47: f5:dc:a1:02:23:83:c1:12:2c:13:c3:09:95:e5:a9:4f:83:ea: a4:79:5f:e4:52:e4:2a:59:dd:29:0f:c9:ea:9e:fe:42:b5:05: b8:ad:b7:91:ec:75:0c:5c:8b:e3:f4:d5:9e:aa:d8:c4:a9:b6: de:8d:5a:5d:bd:9c:17:fb:95:05:34:01:47:31:35:6a:18:1e: 50:04:e8:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2TkrOZOxdq7ds5mnNJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMTAyMTYyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDY3OGRiZTA2YTFiOWQ1ZjE1MGYzNzNmNzIwNDU5Mzc5MTgxZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnuelC4df0ysmH6dftqVzDjeya9L PCVyiyGE/3eckNV1IPVxGlcQDh1y1UCwUkmoMLmQFho0V1vbHt8lvcfIxvQfMyMF oOVRcp2BQv1DXtGt4BhyrTp35tJkogWJ2X2vPVI+K/UnT7egFXlTxPjwgpTJmJw3 6+PVOZ1Fl6cMakgAz4va+NPLgzD3jVhkOpUW3mUR0291oLu1Wr+1SM9AhJbBWfQu D4tW7/YQCrohwFGM5Yncio5ThDrDcucDJhd7/RNwn4aLSAxl3O1ew9Rtx8hfWpy1 iuT0Rg5IMH5u0pWHHnj8RJgOj+Sr7urmwpAAkiLis/Funefd7P4BMyQ8DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIBnjb4GobnV8VDzc/cgRZN5GB0uMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvZ0dlTnZnYWh1ZFh4VVBOejl5QkZrM2tZSFM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbe1hMA0G CSqGSIb3DQEBCwUAA4IBAQB2ylJoKMhzMslXSjd6omDRqaHHHdEMJUBSFjvNTB7+ H+q4dYyWQ7lfY3/4ZOfXZdFxH7S4gjWXAvPq/veG/mN9z6G3+JD1q8Azc+zjRDs0 d4oY2XP21Fl3gjhQheCG1JG/RtCZ58mLBL1EAp4eXDRjhDqJI0WvYLlNUBHq4Aeg Jd8m+ZrZ+W0Mx8yXnZ7HL6sBoTtwfVtI/g+unZkjj/ecnMEFSJ+a9jlUsidL6Vas iV0zUEf13KECI4PBEiwTwwmV5alPg+qkeV/kUuQqWd0pD8nqnv5CtQW4rbeR7HUM XIvj9NWeqtjEqbbejVpdvZwX+5UFNAFHMTVqGB5QBOhW -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:10 2026 by rpki-client