This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa File: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (raw, json) Hash identifier: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU= Subject key identifier: E4:61:BD:02:8E:12:73:00:93:6A:A0:B0:02:2F:06:9C:AC:BE:B8:89 Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E38872EE6FECA5F6EFC8FA9DF59735D Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47330 IP address blocks: 37.156.28.0/23 maxlen: 23 92.114.16.0/22 maxlen: 22 92.114.20.0/24 maxlen: 24 92.114.21.0/24 maxlen: 24 188.213.65.0/24 maxlen: 24 188.213.66.0/24 maxlen: 24 188.213.67.0/24 maxlen: 24 188.213.68.0/24 maxlen: 24 188.213.69.0/24 maxlen: 24 2a00:5ca6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:87:2e:e6:fe:ca:5f:6e:fc:8f:a9:df:59:73:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e461bd028e127300936aa0b0022f069cacbeb889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:b9:0b:27:de:f6:59:60:58:b1:25:1a:fb: 12:33:7a:7a:02:ee:fc:ed:2e:03:9c:ff:a1:74:5c: 83:8a:60:eb:aa:a6:d3:6c:55:c8:b1:00:19:c5:69: 34:f2:2e:84:20:8b:1b:8a:80:e6:f7:2f:8f:d2:b4: c0:9c:91:94:3b:81:9f:c5:63:73:d6:ab:54:2d:09: 43:25:97:55:5a:37:e9:b7:c3:01:96:28:18:a3:78: 8b:8f:33:6e:40:0f:ee:45:5e:b0:5a:62:39:b0:51: 04:3b:56:b8:4d:28:e7:e6:24:c9:36:7e:57:fd:33: d1:fe:91:23:b7:f6:4c:27:9a:cf:dd:59:e2:4c:7e: bc:53:ed:47:21:90:7d:f2:3c:32:43:69:34:7d:02: f6:7e:8c:a2:88:58:fd:05:6f:a2:90:7e:48:ae:f2: 0f:d9:ab:0e:0b:7b:50:51:47:41:9a:e0:55:cf:79: 36:cd:ba:93:de:3c:95:91:56:73:fe:f5:16:4c:e8: b1:92:f6:a7:ca:ad:8e:c3:93:a2:6d:c8:3c:5d:78: ee:17:3e:ed:da:3e:b7:28:7d:45:30:24:31:5c:96: 39:29:f2:8f:d1:d2:44:96:9f:08:84:20:25:4b:45: 84:21:df:b9:71:89:1a:00:9c:dd:72:92:fc:60:8b: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:61:BD:02:8E:12:73:00:93:6A:A0:B0:02:2F:06:9C:AC:BE:B8:89 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.28.0/23 92.114.16.0-92.114.21.255 188.213.65.0-188.213.69.255 IPv6: 2a00:5ca6::/31 Signature Algorithm: sha256WithRSAEncryption 63:48:5f:95:cd:8d:3e:69:f9:1d:46:f7:f0:5d:7f:e6:e4:83: 56:a5:82:b6:c9:67:6d:1e:5a:d3:35:3c:ee:23:d2:61:36:1a: ef:88:f3:cd:af:03:76:e1:8f:36:04:07:fd:12:fc:a7:44:c2: ec:69:66:ac:78:d1:d9:35:a4:a5:a0:60:f0:99:51:4d:10:77: 0b:c7:15:65:54:14:72:28:f6:9c:f9:69:20:48:9d:9f:71:1f: 9b:1d:9b:0d:33:bc:af:97:f7:1a:da:49:7f:62:9c:61:9b:80: f2:6e:11:8f:71:15:00:57:da:7b:af:42:8b:9d:c4:b7:ee:91: 69:6d:3d:99:05:1c:de:10:a8:90:87:59:26:0d:11:dc:d2:49: 40:72:e7:c2:f6:0b:8d:28:97:50:87:f1:54:fb:bd:a4:43:b0: 5e:f1:39:6d:ff:92:f7:11:c6:0a:4c:c6:17:c7:46:63:9c:72: 4f:fe:3e:f8:ae:60:13:c6:65:e8:21:b1:cc:80:6e:35:69:c6: 38:e7:ee:a8:5e:52:74:24:84:cb:7a:a8:99:ed:42:f9:58:1a: 99:2c:19:37:6d:dd:54:1a:f2:34:50:41:e3:ed:e0:88:e7:66: a3:bc:fe:68:b3:e5:bf:ea:b1:7f:40:e9:7a:c8:a1:64:0f:f4: af:26:ac:7c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt+OIcu5v7KX278j6nfWXNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDYxYmQwMjhlMTI3MzAwOTM2YWEwYjAwMjJmMDY5Y2FjYmViODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNC5Cyfe9llgWLElGvsSM3p6Au78 7S4DnP+hdFyDimDrqqbTbFXIsQAZxWk08i6EIIsbioDm9y+P0rTAnJGUO4GfxWNz 1qtULQlDJZdVWjfpt8MBligYo3iLjzNuQA/uRV6wWmI5sFEEO1a4TSjn5iTJNn5X /TPR/pEjt/ZMJ5rP3VniTH68U+1HIZB98jwyQ2k0fQL2foyiiFj9BW+ikH5IrvIP 2asOC3tQUUdBmuBVz3k2zbqT3jyVkVZz/vUWTOixkvanyq2Ow5Oibcg8XXjuFz7t 2j63KH1FMCQxXJY5KfKP0dJElp8IhCAlS0WEId+5cYkaAJzdcpL8YIsPFwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFORhvQKOEnMAk2qgsAIvBpysvriJMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvNUdHOUFvNFNjd0NUYXFDd0FpOEduS3ktdUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiAwQBJZwcMAwD BARcchADBAFcchQwDAMEALzVQQMEAbzVRDANBAIAAjAHAwUBKgBcpjANBgkqhkiG 9w0BAQsFAAOCAQEAY0hflc2NPmn5HUb38F1/5uSDVqWCtslnbR5a0zU87iPSYTYa 74jzza8DduGPNgQH/RL8p0TC7GlmrHjR2TWkpaBg8JlRTRB3C8cVZVQUcij2nPlp IEidn3Efmx2bDTO8r5f3GtpJf2KcYZuA8m4Rj3EVAFfae69Ci53Et+6RaW09mQUc 3hCokIdZJg0R3NJJQHLnwvYLjSiXUIfxVPu9pEOwXvE5bf+S9xHGCkzGF8dGY5xy T/4++K5gE8Zl6CGxzIBuNWnGOOfuqF5SdCSEy3qome1C+VgamSwZN23dVBryNFBB 4+3giOdmo7z+aLPlv+qxf0DpesihZA/0ryasfA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:57 2026 by rpki-client