This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g_-khaDN5ofblmg7sZrSYFRqr_Q.roa File: g_-khaDN5ofblmg7sZrSYFRqr_Q.roa (raw, json) Hash identifier: nYYtGv++dAQFko8v7MxwoRK2/1NJMwBJejfBb5zCMbY= Subject key identifier: 83:FF:A4:85:A0:CD:E6:87:DB:96:68:3B:B1:9A:D2:60:54:6A:AF:F4 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F85059C2E0562D6A0BE1B60EA09E370 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g_-khaDN5ofblmg7sZrSYFRqr_Q.roa Signing time: Fri 02 Jan 2026 16:23:02 +0000 ROA not before: Fri 02 Jan 2026 16:23:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209002 IP address blocks: 146.120.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:05:9c:2e:05:62:d6:a0:be:1b:60:ea:09:e3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83ffa485a0cde687db96683bb19ad260546aaff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:fe:26:7c:9d:cf:d3:21:4b:e8:1e:d2:c3: ae:55:6f:cc:b5:f1:07:d7:f0:de:e8:68:b2:f9:f7: 35:9a:87:78:30:8f:a4:73:10:90:41:7e:4b:9e:fa: 3f:71:e5:2e:7d:b6:95:96:35:52:5f:fc:11:20:d9: ee:16:1b:67:97:82:61:20:ff:b8:73:19:21:10:7c: 48:b2:f9:78:a8:78:23:f0:25:03:99:23:42:b2:4c: 1f:f1:39:44:44:91:a5:ce:e9:76:b4:4d:37:f5:ff: 8a:72:c6:82:ab:96:fb:1c:89:b9:2d:17:9f:45:2e: 44:73:42:a1:64:72:a7:58:35:61:e0:49:54:10:5f: 91:3c:2f:94:e3:af:42:5b:f6:cf:52:d9:fd:ed:02: fb:4d:88:e3:a5:1e:1d:49:80:ad:b7:96:41:bc:f3: 63:2e:ea:55:d1:df:a9:54:26:84:02:7b:3e:47:57: 51:d4:58:70:b8:cc:0e:78:63:e8:b1:a6:54:1a:e0: 78:3d:25:13:dc:16:77:6b:08:9f:f8:a5:98:bf:ad: 87:2c:97:0e:0f:89:cf:c8:dd:fe:2f:91:c7:fd:bc: 43:09:fb:3c:be:6e:b4:89:30:24:cb:f1:f9:14:8b: 68:bd:96:f4:b2:25:ec:90:e6:17:19:49:d9:7b:19: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FF:A4:85:A0:CD:E6:87:DB:96:68:3B:B1:9A:D2:60:54:6A:AF:F4 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g_-khaDN5ofblmg7sZrSYFRqr_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.112.0/24 Signature Algorithm: sha256WithRSAEncryption 36:be:ea:fe:f9:99:22:a1:1c:f3:5b:da:1d:54:2c:e9:28:da: a7:7a:39:77:c4:90:8d:4f:05:49:9a:ac:91:23:cd:fd:9b:00: 89:d3:aa:5e:be:79:2e:ae:cf:63:fc:4a:f6:ce:9d:a5:2d:e1: 55:4f:2c:16:b7:c8:b4:8a:a8:93:44:c5:11:74:3a:1e:95:e4: 6a:58:fb:c5:97:c6:37:8f:cc:e4:df:72:c0:c8:22:7e:1d:08: 77:14:68:d3:3c:eb:5c:88:39:eb:f4:29:6c:dd:c4:bc:f3:78: 2c:24:d1:5e:9e:9e:96:42:10:2f:57:b9:be:3f:b4:6c:e6:42: d2:69:f5:32:5e:dc:66:ff:5b:50:bf:4b:6a:1c:08:d7:23:cf: 0c:b4:96:45:93:d2:4a:c8:65:d9:b3:7d:f6:84:30:ab:6c:f2: 0a:58:46:6b:8e:31:64:ad:be:50:00:ac:7a:cc:93:37:91:79: e8:17:dd:b2:28:6e:ed:f7:92:f0:8c:33:97:7a:93:86:6e:d8: 8a:dd:41:b9:3c:b6:c0:44:84:c6:50:19:ed:41:f6:f6:a5:ec: 34:0f:0f:1f:63:01:f2:a8:2c:e2:20:b1:a6:ae:ac:6c:f9:a3: 02:61:85:90:48:67:43:a1:ad:07:23:c9:bd:01:9f:86:4a:63: e1:28:63:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQWcLgVi1qC+G2DqCeNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2ZmYTQ4NWEwY2RlNjg3ZGI5NjY4M2JiMTlhZDI2MDU0NmFhZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3D+Jnydz9MhS+ge0sOuVW/MtfEH 1/De6Giy+fc1mod4MI+kcxCQQX5Lnvo/ceUufbaVljVSX/wRINnuFhtnl4JhIP+4 cxkhEHxIsvl4qHgj8CUDmSNCskwf8TlERJGlzul2tE039f+KcsaCq5b7HIm5LRef RS5Ec0KhZHKnWDVh4ElUEF+RPC+U469CW/bPUtn97QL7TYjjpR4dSYCtt5ZBvPNj LupV0d+pVCaEAns+R1dR1FhwuMwOeGPosaZUGuB4PSUT3BZ3awif+KWYv62HLJcO D4nPyN3+L5HH/bxDCfs8vm60iTAky/H5FItovZb0siXskOYXGUnZexm7RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIP/pIWgzeaH25ZoO7Ga0mBUaq/0MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZ18ta2hhRE41b2ZibG1nN3NaclNZRlJxcl9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknhwMA0G CSqGSIb3DQEBCwUAA4IBAQA2vur++ZkioRzzW9odVCzpKNqnejl3xJCNTwVJmqyR I839mwCJ06pevnkurs9j/Er2zp2lLeFVTywWt8i0iqiTRMURdDoeleRqWPvFl8Y3 j8zk33LAyCJ+HQh3FGjTPOtciDnr9Cls3cS883gsJNFenp6WQhAvV7m+P7Rs5kLS afUyXtxm/1tQv0tqHAjXI88MtJZFk9JKyGXZs332hDCrbPIKWEZrjjFkrb5QAKx6 zJM3kXnoF92yKG7t95LwjDOXepOGbtiK3UG5PLbARITGUBntQfb2pew0Dw8fYwHy qCziILGmrqxs+aMCYYWQSGdDoa0HI8m9AZ+GSmPhKGMb -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:39 2026 by rpki-client