This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/G-aVVHLMC99yYOkBY3QkMmE3DqY.roa File: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (raw, json) Hash identifier: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg= Subject key identifier: 1B:E6:95:54:72:CC:0B:DF:72:60:E9:01:63:74:24:32:61:37:0E:A6 Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019B7F8251DBEC7DBB7D0A8808F45414779D Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/G-aVVHLMC99yYOkBY3QkMmE3DqY.roa Signing time: Fri 02 Jan 2026 16:20:05 +0000 ROA not before: Fri 02 Jan 2026 16:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208860 IP address blocks: 185.52.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:51:db:ec:7d:bb:7d:0a:88:08:f4:54:14:77:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Jan 2 16:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1be6955472cc0bdf7260e9016374243261370ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:f3:3f:ef:c3:a0:64:ff:c3:e8:3c:2e:8e: 35:93:48:33:20:5f:8f:aa:e0:11:64:59:ed:c3:0d: 19:a2:64:2b:7f:b0:25:2b:41:be:ac:b5:8b:b5:4b: 14:19:12:f1:ad:14:6c:d2:9c:31:11:8f:7f:38:a4: 2f:83:4f:e1:48:d2:b8:24:e4:51:cc:e5:d6:d8:b0: 3b:b3:4c:4f:23:b0:9a:17:f3:ef:17:09:c7:69:32: 0a:ee:6d:5a:23:66:19:c6:04:26:f7:f0:aa:fd:42: b0:37:05:e1:51:5d:a4:4c:b8:3b:a1:6e:1a:1d:48: fd:97:79:4c:7b:7e:67:18:82:04:d6:11:fe:a6:04: 6b:c0:27:c0:75:cf:9a:80:92:37:6d:63:1e:7d:aa: af:4a:c6:9c:f7:0e:64:28:aa:17:14:a4:2e:92:e0: 87:44:00:ca:80:37:7e:af:29:5e:5c:96:b5:0e:69: a2:1f:9e:b8:56:65:e3:be:4f:14:27:86:f1:ee:6f: 22:5e:33:92:0d:96:6c:fd:3c:fe:c4:a2:5d:57:97: f2:9a:4c:f9:ab:f8:fc:e6:c5:54:e8:d6:22:bd:c5: fb:d5:f1:f7:42:1a:b7:f4:bd:e9:9b:db:3c:ed:39: a0:88:a1:e7:3b:73:1d:6f:3d:7b:f4:e4:04:66:77: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E6:95:54:72:CC:0B:DF:72:60:E9:01:63:74:24:32:61:37:0E:A6 X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/G-aVVHLMC99yYOkBY3QkMmE3DqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.48.0/24 Signature Algorithm: sha256WithRSAEncryption 49:3c:18:6e:86:0b:18:da:3e:8d:88:0f:91:0c:cc:44:5b:1a: d7:94:45:3d:ec:3f:ff:36:c9:53:de:0b:a9:53:11:56:ca:74: 10:51:46:3e:40:c0:22:c7:e8:9c:73:5f:b7:d0:be:75:39:07: f1:ab:d6:4d:01:c2:86:4a:be:83:c8:c4:e2:f3:7a:c9:96:e9: 1f:89:ef:f2:85:f1:b1:b9:7c:38:b3:fc:b5:c8:d4:b1:18:a7: d7:01:aa:21:d1:5c:33:04:62:26:ae:ec:e6:89:57:d5:10:fd: be:c8:1a:49:49:9c:a7:82:6a:51:bb:c6:cd:9c:f2:ad:f6:02: a1:98:90:d8:e4:0d:76:09:45:84:63:e2:68:93:33:41:c2:94: 2f:fd:74:62:c7:c3:fe:a8:a2:63:05:2d:a6:f6:80:ad:3c:a5: 0f:cb:de:f2:6f:e4:36:8e:5e:d9:c9:72:f5:d4:a6:5e:52:ed: 8b:89:87:6e:81:21:85:25:c4:f0:c8:80:57:a0:1b:6d:db:f7: 5f:e8:a3:5c:2d:cf:cc:aa:f0:f4:aa:3b:b8:75:ea:d2:16:05: ec:c3:d0:5e:3a:c4:77:87:7e:d3:b9:44:8b:35:8c:4a:0e:2d: d3:9a:51:43:b4:9f:d9:65:07:aa:2d:72:2f:c7:ba:76:81:25: d9:06:d9:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/glHb7H27fQqICPRUFHedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjYwMTAyMTYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmU2OTU1NDcyY2MwYmRmNzI2MGU5MDE2Mzc0MjQzMjYxMzcwZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEHzP+/DoGT/w+g8Lo41k0gzIF+P quARZFntww0ZomQrf7AlK0G+rLWLtUsUGRLxrRRs0pwxEY9/OKQvg0/hSNK4JORR zOXW2LA7s0xPI7CaF/PvFwnHaTIK7m1aI2YZxgQm9/Cq/UKwNwXhUV2kTLg7oW4a HUj9l3lMe35nGIIE1hH+pgRrwCfAdc+agJI3bWMefaqvSsac9w5kKKoXFKQukuCH RADKgDd+ryleXJa1DmmiH564VmXjvk8UJ4bx7m8iXjOSDZZs/Tz+xKJdV5fymkz5 q/j85sVU6NYivcX71fH3Qhq39L3pm9s87TmgiKHnO3Mdbz179OQEZnfixwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvmlVRyzAvfcmDpAWN0JDJhNw6mMB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvRy1hVlZITE1DOTl5WU9rQlkzUWtNbUUzRHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTQwMA0G CSqGSIb3DQEBCwUAA4IBAQBJPBhuhgsY2j6NiA+RDMxEWxrXlEU97D//NslT3gup UxFWynQQUUY+QMAix+icc1+30L51OQfxq9ZNAcKGSr6DyMTi83rJlukfie/yhfGx uXw4s/y1yNSxGKfXAaoh0VwzBGImruzmiVfVEP2+yBpJSZyngmpRu8bNnPKt9gKh mJDY5A12CUWEY+JokzNBwpQv/XRix8P+qKJjBS2m9oCtPKUPy97yb+Q2jl7ZyXL1 1KZeUu2LiYdugSGFJcTwyIBXoBtt2/df6KNcLc/MqvD0qju4derSFgXsw9BeOsR3 h37TuUSLNYxKDi3TmlFDtJ/ZZQeqLXIvx7p2gSXZBtnt -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:42 2026 by rpki-client