This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/G8YCS6i0g0ubDbA7T2_j3kguxlE.roa File: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (raw, json) Hash identifier: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI= Subject key identifier: 1B:C6:02:4B:A8:B4:83:4B:9B:0D:B0:3B:4F:6F:E3:DE:48:2E:C6:51 Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Certificate serial: 019B7FF22A1D01F93F148845920D2082705A Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/G8YCS6i0g0ubDbA7T2_j3kguxlE.roa Signing time: Fri 02 Jan 2026 18:22:15 +0000 ROA not before: Fri 02 Jan 2026 18:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13250 IP address blocks: 212.117.192.0/19 maxlen: 29 212.117.204.0/24 maxlen: 24 2a03:380::/32 maxlen: 117 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:2a:1d:01:f9:3f:14:88:45:92:0d:20:82:70:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Validity Not Before: Jan 2 18:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bc6024ba8b4834b9b0db03b4f6fe3de482ec651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:03:7f:ec:3a:31:29:5b:53:2f:b3:ab:15: 7c:aa:a3:70:ee:df:d1:fc:26:3b:43:cd:9e:d1:1e: 37:71:f7:79:d9:c1:c6:ca:ca:4c:9c:25:91:70:5d: da:23:44:08:6c:5a:4c:23:3c:05:21:04:1e:ae:d4: c3:3c:27:ee:92:b9:a4:df:46:7f:f8:83:99:03:8b: 20:3f:e5:c7:6d:7d:ca:de:8b:48:c4:da:6a:da:bd: b2:f3:14:4d:8f:b9:ff:b7:2a:33:1a:8a:94:97:47: 72:b2:2b:58:ba:e5:74:a4:d4:23:ab:0a:a7:81:14: b0:b9:eb:d9:ce:63:c2:8d:d5:a5:ad:88:36:c1:eb: 62:26:d8:5b:92:df:5c:fc:15:87:1f:51:8a:38:11: 15:12:6d:2c:31:a8:5c:41:a9:81:a7:57:59:36:ff: 76:7f:4d:a4:e9:4a:c4:1e:d4:5e:14:b2:16:1f:d3: c7:1e:e7:46:4d:e5:f8:af:f5:88:79:97:7f:25:58: a5:ab:40:5d:6c:9a:d6:f8:e6:96:8f:a4:b2:ee:0c: 24:40:88:e5:7a:67:58:ac:61:d3:7a:76:2a:f0:ac: aa:24:14:bb:a1:af:fd:a7:05:ea:2b:c2:37:16:80: 0c:39:b7:3f:c5:e4:e8:06:29:ab:54:0d:8f:9e:26: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C6:02:4B:A8:B4:83:4B:9B:0D:B0:3B:4F:6F:E3:DE:48:2E:C6:51 X509v3 Authority Key Identifier: keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/G8YCS6i0g0ubDbA7T2_j3kguxlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.117.192.0/19 IPv6: 2a03:380::/32 Signature Algorithm: sha256WithRSAEncryption 13:b0:b1:61:4d:13:65:3b:55:3b:3c:f2:cb:60:ed:4e:56:91: 51:f7:ed:8f:f5:1c:02:76:a9:96:18:a8:97:a1:96:80:58:5f: 0c:37:6d:c8:0c:3e:a6:d2:4d:f2:9a:92:8d:20:6c:4e:1a:dc: b1:37:76:65:79:d1:2b:30:15:93:2f:dc:2b:8e:b6:85:80:80: e7:d8:31:4f:4f:4f:da:16:b0:52:27:29:4f:99:1a:8c:ed:67: a4:ab:2c:6a:5b:af:a7:f6:61:47:cd:5f:06:31:ed:ab:27:e9: 9e:09:a0:d8:eb:59:3c:22:21:c4:83:67:a0:b9:5e:d0:7f:a9: 8f:4d:a8:66:60:31:6f:d6:39:17:fe:eb:e9:b5:49:20:56:36: d2:5c:e9:9a:4b:6e:a6:ea:8f:f0:56:81:ed:4d:69:ef:1f:e7: 79:c4:10:37:cd:ee:12:5c:70:52:a0:13:c3:05:54:19:b2:b7: bd:0b:1f:4f:61:6e:45:35:8c:3f:77:a6:4e:bc:d0:71:a4:a0: cc:cd:d5:c5:5e:98:16:3d:46:e4:62:a4:33:34:8f:e9:0c:0a: c8:7d:3a:2d:8b:ac:f7:cd:55:74:e3:13:c4:b0:c8:20:d2:51: ef:f9:5c:86:2b:b7:28:80:53:e7:34:28:8f:17:21:f2:b7:b5: 40:54:1c:ee -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8iodAfk/FIhFkg0ggnBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0 ODg5ZTAwHhcNMjYwMTAyMTgyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmM2MDI0YmE4YjQ4MzRiOWIwZGIwM2I0ZjZmZTNkZTQ4MmVjNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TsDf+w6MSlbUy+zqxV8qqNw7t/R /CY7Q82e0R43cfd52cHGyspMnCWRcF3aI0QIbFpMIzwFIQQertTDPCfukrmk30Z/ +IOZA4sgP+XHbX3K3otIxNpq2r2y8xRNj7n/tyozGoqUl0dysitYuuV0pNQjqwqn gRSwuevZzmPCjdWlrYg2wetiJthbkt9c/BWHH1GKOBEVEm0sMahcQamBp1dZNv92 f02k6UrEHtReFLIWH9PHHudGTeX4r/WIeZd/JVilq0BdbJrW+OaWj6Sy7gwkQIjl emdYrGHTenYq8KyqJBS7oa/9pwXqK8I3FoAMObc/xeToBimrVA2Pnia3cwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBvGAkuotINLmw2wO09v495ILsZRMB8GA1UdIwQY MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et MWRhZWE0YmM5NGIzLzEvRzhZQ1M2aTBnMHViRGJBN1QyX2oza2d1eGxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1HXAMA0E AgACMAcDBQAqAwOAMA0GCSqGSIb3DQEBCwUAA4IBAQATsLFhTRNlO1U7PPLLYO1O VpFR9+2P9RwCdqmWGKiXoZaAWF8MN23IDD6m0k3ympKNIGxOGtyxN3ZledErMBWT L9wrjraFgIDn2DFPT0/aFrBSJylPmRqM7WekqyxqW6+n9mFHzV8GMe2rJ+meCaDY 61k8IiHEg2eguV7Qf6mPTahmYDFv1jkX/uvptUkgVjbSXOmaS26m6o/wVoHtTWnv H+d5xBA3ze4SXHBSoBPDBVQZsre9Cx9PYW5FNYw/d6ZOvNBxpKDMzdXFXpgWPUbk YqQzNI/pDArIfToti6z3zVV04xPEsMgg0lHv+VyGK7cogFPnNCiPFyHyt7VAVBzu -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:17 2026 by rpki-client