This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa File: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (raw, json) Hash identifier: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24= Subject key identifier: 1B:8D:BE:15:D9:77:80:90:31:49:3A:A8:3B:14:7F:05:71:B5:A0:7F Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b Certificate serial: 019B791008151A133DD87340E3B5F5D222B5 Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 77.111.232.0/22 maxlen: 22 185.184.176.0/22 maxlen: 22 188.227.200.0/22 maxlen: 22 2a0b:3980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:08:15:1a:13:3d:d8:73:40:e3:b5:f5:d2:22:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b8dbe15d977809031493aa83b147f0571b5a07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:a5:aa:20:23:da:55:1e:c3:24:f0:24:76: 71:80:8f:a6:43:4f:fd:ba:44:5c:ac:5a:01:96:ba: 87:37:9c:9b:28:81:d7:47:e0:d8:8d:8b:66:61:7c: cb:7f:41:da:f8:57:ec:b4:77:7f:c5:dd:74:20:95: ca:f5:3a:f0:58:27:ce:d0:e3:65:c1:80:b6:ff:4c: 7e:7f:c0:c0:88:e0:87:9a:a7:8e:93:b8:30:cb:b8: c2:0d:92:b6:ec:17:22:94:a3:f8:58:0a:7f:db:61: ac:25:8d:53:39:00:a2:15:12:aa:f1:42:cb:19:4d: ae:cb:e2:1b:2a:ec:67:b4:d4:d6:fd:8e:8c:46:b6: 55:f3:b2:86:75:8f:c7:65:c8:a4:f7:35:9f:95:9b: 6d:ee:69:59:e4:0f:59:2a:14:94:a5:9c:bd:6b:81: 8f:08:32:66:14:48:fd:86:a2:43:44:2b:d2:ce:d9: 03:29:06:a9:94:fd:c4:2f:71:d5:9e:b1:50:e0:15: 77:46:dd:f2:4d:e1:10:c0:a0:93:95:fa:ec:d1:15: 82:f4:d8:b7:ba:0f:aa:f1:0d:e3:74:ca:a6:46:43: 50:a4:94:1a:3b:6e:c0:79:c5:27:c9:a0:34:5a:3b: 29:b3:0c:56:41:db:85:ef:fd:56:9f:a5:01:31:ed: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:BE:15:D9:77:80:90:31:49:3A:A8:3B:14:7F:05:71:B5:A0:7F X509v3 Authority Key Identifier: keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.232.0/22 185.184.176.0/22 188.227.200.0/22 IPv6: 2a0b:3980::/32 Signature Algorithm: sha256WithRSAEncryption 64:72:ec:44:ba:2d:fd:9b:c8:a2:ad:20:e8:ae:c9:83:78:7a: 9c:10:65:f2:99:61:98:be:40:75:5f:ad:50:57:c0:0a:95:30: 39:29:24:84:19:f3:df:4d:aa:4c:df:7e:e6:81:3f:5a:a0:a3: 83:3e:32:0b:73:f1:d7:e1:e2:4f:15:1e:7e:87:0b:9c:9c:60: 6d:b2:bc:32:53:a1:2f:ae:d2:e5:85:72:b4:cc:8f:ec:28:93: 7d:45:92:9e:18:fe:98:9c:7c:02:5a:16:41:a8:5f:9d:85:13: a4:0d:f6:55:de:9c:67:9f:70:ea:88:43:78:2a:1c:25:6f:3d: e0:e3:c4:6b:24:c5:54:79:0e:fb:54:d1:48:ef:c9:1e:13:31: 6c:da:fe:31:37:cc:87:1c:38:e5:9b:91:bd:53:ad:36:21:46: e6:a6:bc:3b:5a:91:28:98:4e:f8:59:80:bb:6e:cf:cd:9c:5c: 40:68:d7:20:c4:aa:48:91:1f:f6:c3:f7:13:f6:16:ee:82:31: 5f:c5:05:46:81:b2:aa:d6:d4:85:4b:ae:c5:7a:cc:c2:e3:50: a3:46:ae:69:08:30:ac:2f:06:ae:08:25:ae:c3:70:af:93:bc: 52:02:b9:70:91:c6:73:49:43:e4:74:da:f7:41:ab:dc:27:c1: 96:88:97:08 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EAgVGhM92HNA47X10iK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4 ZGMzN2IwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjhkYmUxNWQ5Nzc4MDkwMzE0OTNhYTgzYjE0N2YwNTcxYjVhMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfmlqiAj2lUewyTwJHZxgI+mQ0/9 ukRcrFoBlrqHN5ybKIHXR+DYjYtmYXzLf0Ha+FfstHd/xd10IJXK9TrwWCfO0ONl wYC2/0x+f8DAiOCHmqeOk7gwy7jCDZK27BcilKP4WAp/22GsJY1TOQCiFRKq8ULL GU2uy+IbKuxntNTW/Y6MRrZV87KGdY/HZcik9zWflZtt7mlZ5A9ZKhSUpZy9a4GP CDJmFEj9hqJDRCvSztkDKQaplP3EL3HVnrFQ4BV3Rt3yTeEQwKCTlfrs0RWC9Ni3 ug+q8Q3jdMqmRkNQpJQaO27AecUnyaA0WjspswxWQduF7/1Wn6UBMe3q+wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBuNvhXZd4CQMUk6qDsUfwVxtaB/MB8GA1UdIwQY MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et MzM0ZGUzZDc2ZmU1LzEvRzQyLUZkbDNnSkF4U1Rxb094Ul9CWEcxb0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1 LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCTW/oAwQC ubiwAwQCvOPIMA0EAgACMAcDBQAqCzmAMA0GCSqGSIb3DQEBCwUAA4IBAQBkcuxE ui39m8iirSDorsmDeHqcEGXymWGYvkB1X61QV8AKlTA5KSSEGfPfTapM337mgT9a oKODPjILc/HX4eJPFR5+hwucnGBtsrwyU6EvrtLlhXK0zI/sKJN9RZKeGP6YnHwC WhZBqF+dhROkDfZV3pxnn3DqiEN4Khwlbz3g48RrJMVUeQ77VNFI78keEzFs2v4x N8yHHDjlm5G9U602IUbmprw7WpEomE74WYC7bs/NnFxAaNcgxKpIkR/2w/cT9hbu gjFfxQVGgbKq1tSFS67FeszC41CjRq5pCDCsLwauCCWuw3Cvk7xSArlwkcZzSUPk dNr3QavcJ8GWiJcI -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:01 2026 by rpki-client