This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/gC3_J_xT-GThmBsVujKFuCMCozU.roa File: gC3_J_xT-GThmBsVujKFuCMCozU.roa (raw, json) Hash identifier: D5aS1zozYEbd79/uXIgd19tuBfFWZjES3cPyLF6ZWd4= Subject key identifier: 80:2D:FF:27:FC:53:F8:64:E1:98:1B:15:BA:32:85:B8:23:02:A3:35 Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019BB6CC32CBB86EDBDEBDED19BA17C72E16 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/gC3_J_xT-GThmBsVujKFuCMCozU.roa Signing time: Tue 13 Jan 2026 09:59:54 +0000 ROA not before: Tue 13 Jan 2026 09:59:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 85.137.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:cc:32:cb:b8:6e:db:de:bd:ed:19:ba:17:c7:2e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Jan 13 09:59:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=802dff27fc53f864e1981b15ba3285b82302a335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:b0:f4:84:fc:0a:c0:66:e6:42:98:0c:4f: f5:df:33:26:8b:19:53:5d:82:03:d3:ae:f8:84:1b: 17:4c:3a:15:ab:2b:3a:50:cd:4f:97:21:8b:15:57: 9d:d3:27:6f:02:50:1d:c7:14:09:d1:e9:59:18:36: c9:4e:b9:60:7f:31:d6:9e:21:22:60:28:7d:64:06: 8e:b6:b2:31:eb:fd:75:3f:8c:81:f3:e1:f1:df:87: 3e:ec:40:7e:4a:7c:06:33:7c:f2:dc:60:bb:92:21: 7c:c0:49:1c:07:cc:4e:2d:8e:da:55:66:6f:01:d1: af:af:85:b1:a3:d6:ad:0c:25:56:fb:d5:da:45:66: b2:e4:3c:21:68:4c:f0:8f:34:00:53:5e:5f:35:9f: c4:ea:49:8c:82:ba:bc:36:08:b3:9a:b1:ea:1f:f2: 28:b8:b2:e6:d0:26:6a:ad:12:ef:a3:ab:3d:fb:52: d5:ab:47:22:92:86:73:36:29:6d:6e:f7:e7:60:0b: 1e:17:31:9b:c3:d8:a4:69:9b:93:1e:28:24:bc:b8: b4:a0:5f:9b:4a:b0:30:b2:ad:a8:a1:1e:7a:b5:2c: 1b:81:76:ac:3a:a5:7d:43:a0:4f:48:be:2d:4e:68: 2a:5e:e1:64:3d:0f:ad:eb:b1:3f:75:4c:74:90:f4: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:FF:27:FC:53:F8:64:E1:98:1B:15:BA:32:85:B8:23:02:A3:35 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/gC3_J_xT-GThmBsVujKFuCMCozU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.137.255.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:08:75:12:9f:f5:da:e0:56:58:69:fe:58:9a:d6:b7:4b:c0: 4e:37:37:32:a0:df:d4:2e:30:f5:09:7d:d0:39:da:41:8b:3a: b0:be:25:69:ad:74:38:ee:5f:19:3d:72:eb:4b:90:9e:7f:b2: 38:31:87:e4:88:db:13:ed:9b:bd:33:9c:22:15:49:ac:1c:a2: 95:08:fb:8f:6b:58:7c:3a:bd:7b:2b:33:d6:88:e7:e3:0a:d8: 05:9c:ab:52:51:cf:a3:16:97:a5:92:d2:cf:11:8f:be:6a:68: 63:2d:ab:b1:ad:8c:cc:3d:82:66:b2:6a:32:5f:e4:ea:7d:ef: 16:1a:23:66:15:f2:38:9a:86:1c:2f:86:f9:8f:5a:b9:0b:c1: 5d:b3:44:c6:94:fd:ce:e2:81:9a:b8:1f:1d:6e:50:db:20:78: 5d:37:f7:57:05:9d:fa:76:2b:8a:a8:da:06:81:db:e0:f9:b5: e1:a3:1e:03:de:24:d3:22:ca:92:94:e0:53:53:2e:88:e3:21: 01:b1:37:71:ef:8b:2a:b5:24:b5:4b:d3:c8:20:1a:bb:53:b2: bb:3e:86:f5:da:29:c8:98:0f:f9:03:9d:9a:33:75:1a:ec:56: 2f:cf:f8:27:c2:c7:38:45:7c:e7:07:58:d2:c1:a0:36:ef:51: 44:97:8d:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2zDLLuG7b3r3tGboXxy4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwMTEzMDk1OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDJkZmYyN2ZjNTNmODY0ZTE5ODFiMTViYTMyODViODIzMDJhMzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAmw9IT8CsBm5kKYDE/13zMmixlT XYID0674hBsXTDoVqys6UM1PlyGLFVed0ydvAlAdxxQJ0elZGDbJTrlgfzHWniEi YCh9ZAaOtrIx6/11P4yB8+Hx34c+7EB+SnwGM3zy3GC7kiF8wEkcB8xOLY7aVWZv AdGvr4Wxo9atDCVW+9XaRWay5DwhaEzwjzQAU15fNZ/E6kmMgrq8NgizmrHqH/Io uLLm0CZqrRLvo6s9+1LVq0cikoZzNiltbvfnYAseFzGbw9ikaZuTHigkvLi0oF+b SrAwsq2ooR56tSwbgXasOqV9Q6BPSL4tTmgqXuFkPQ+t67E/dUx0kPRduQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAt/yf8U/hk4ZgbFboyhbgjAqM1MB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEvZ0MzX0pfeFQtR1RobUJzVnVqS0Z1Q01Db3pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYn/MA0G CSqGSIb3DQEBCwUAA4IBAQCeCHUSn/Xa4FZYaf5Ymta3S8BONzcyoN/ULjD1CX3Q OdpBizqwviVprXQ47l8ZPXLrS5Cef7I4MYfkiNsT7Zu9M5wiFUmsHKKVCPuPa1h8 Or17KzPWiOfjCtgFnKtSUc+jFpelktLPEY++amhjLauxrYzMPYJmsmoyX+Tqfe8W GiNmFfI4moYcL4b5j1q5C8Fds0TGlP3O4oGauB8dblDbIHhdN/dXBZ36diuKqNoG gdvg+bXhox4D3iTTIsqSlOBTUy6I4yEBsTdx74sqtSS1S9PIIBq7U7K7Pob12inI mA/5A52aM3Ua7FYvz/gnwsc4RXznB1jSwaA271FEl41H -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:19 2026 by rpki-client