This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/1-G0EJ3RxyGrfpOewrxyNUksn-_s.roa File: 1-G0EJ3RxyGrfpOewrxyNUksn-_s.roa (raw, json) Hash identifier: tsw4bxcurhO+Kj73Cy+Fcmen52mveN4PcUB84BuL1BY= Subject key identifier: F8:6D:04:27:74:71:C8:6A:DF:A4:E7:B0:AF:1C:8D:52:4B:27:FB:FB Certificate issuer: /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Certificate serial: 019AE8BF6665B208FF6384BAFDCD99B3A8C8 Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/1-G0EJ3RxyGrfpOewrxyNUksn-_s.roa Signing time: Thu 04 Dec 2025 09:44:08 +0000 ROA not before: Thu 04 Dec 2025 09:44:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198678 IP address blocks: 123.2.0.0/15 maxlen: 15 142.221.0.0/16 maxlen: 16 161.37.0.0/16 maxlen: 16 168.86.0.0/17 maxlen: 17 2a07:3040::/33 maxlen: 33 2a07:3040:8000::/34 maxlen: 34 2a07:3040:c000::/35 maxlen: 35 2a07:3040:e000::/36 maxlen: 36 2a07:3040:f000::/37 maxlen: 37 2a07:3040:f800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:bf:66:65:b2:08:ff:63:84:ba:fd:cd:99:b3:a8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c Validity Not Before: Dec 4 09:44:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f86d04277471c86adfa4e7b0af1c8d524b27fbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:26:22:8f:c7:4f:dc:a2:01:b0:d1:cd:7f: cf:27:6b:26:23:cd:40:37:9c:5e:a5:ca:e7:8d:f7: 60:93:71:b0:92:c6:08:6b:9e:35:26:ee:55:5f:2c: a7:2b:c3:3e:36:47:bd:89:1e:af:43:d6:0e:dd:36: 21:de:de:e1:68:7a:c1:25:ef:aa:e5:07:48:c9:c4: ff:56:13:da:33:03:0b:f7:bd:cd:30:22:ad:9a:4e: ff:0f:d3:32:2a:4d:bc:a8:54:59:19:56:ec:78:9f: 73:d8:c9:63:00:bc:b1:56:8d:9f:f4:1c:89:70:7b: 94:8e:92:58:fb:46:86:60:ec:a4:0f:4f:05:2e:7c: 73:80:0d:f4:2c:88:5c:ca:90:b4:c6:ea:28:3b:85: 69:66:6a:44:d7:d1:24:cb:67:24:e0:83:3d:82:91: 61:6d:8f:79:57:58:68:0f:14:4b:9b:e8:4a:6d:df: 4f:ed:60:3d:3f:d0:7e:fb:43:44:dc:f3:d3:da:5d: 75:5e:a3:9b:a1:d3:c1:17:73:a9:a0:47:27:f7:0c: 22:83:0f:6a:f8:ea:a4:fc:03:1e:8c:a5:6f:27:20: c0:8b:a0:b2:84:8f:f7:e8:fd:e1:54:21:ec:71:ce: c9:4d:db:83:f6:a5:f0:45:40:55:9c:dd:f0:3c:9d: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6D:04:27:74:71:C8:6A:DF:A4:E7:B0:AF:1C:8D:52:4B:27:FB:FB X509v3 Authority Key Identifier: keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/1-G0EJ3RxyGrfpOewrxyNUksn-_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.2.0.0/15 142.221.0.0/16 161.37.0.0/16 168.86.0.0/17 IPv6: 2a07:3040::-2a07:3040:fbff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 40:35:31:16:d8:2d:b4:8a:aa:55:56:0b:85:43:c6:2c:88:30: 49:d6:1c:20:37:0e:0b:ad:e6:11:9b:50:37:3d:1a:ad:19:ea: e3:23:52:00:60:85:3e:80:d5:78:57:4e:29:12:6d:8a:27:e0: c3:d6:46:e1:16:5e:a5:31:f4:9e:7a:16:7f:9c:aa:68:17:bb: ae:6c:9f:86:d7:83:d1:a1:29:0e:3d:f1:b9:b0:a2:9a:8e:ba: 51:ed:4a:e2:c4:b1:97:e1:42:65:b6:3d:5b:84:07:02:c7:02: 7c:ed:9f:f9:9f:6d:14:ac:d4:38:83:b9:56:81:6c:d2:82:80: 4b:41:93:0f:44:e4:04:f1:d2:67:73:56:4c:e1:d3:19:fa:a0: ba:cc:a7:17:0e:c2:18:90:e6:95:a5:9e:41:62:ad:ab:1b:20: 7f:c5:ca:ec:f7:79:8e:da:f3:7c:ce:af:f4:3c:c5:24:93:59: a3:7a:5e:5a:77:6e:62:bb:72:ee:0c:c7:42:f4:81:ea:c7:73: 9f:2c:41:87:61:1e:1f:14:7c:c6:63:21:a4:3d:6c:e3:73:a5: 59:44:bf:29:46:0a:8e:b8:16:4d:93:2b:ba:bb:b4:b2:6b:4e: d5:0a:51:76:6e:08:f6:c2:bd:38:ec:89:eb:5f:fd:f3:a7:68: 45:ed:1d:37 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZrov2Zlsgj/Y4S6/c2Zs6jIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMDVkYzc0MGY2ZjRiYjViYzRiMDMzODdlOWI0NzUzMDg1 MDc0M2MwHhcNMjUxMjA0MDk0NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODZkMDQyNzc0NzFjODZhZGZhNGU3YjBhZjFjOGQ1MjRiMjdmYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOUmIo/HT9yiAbDRzX/PJ2smI81A N5xepcrnjfdgk3GwksYIa541Ju5VXyynK8M+Nke9iR6vQ9YO3TYh3t7haHrBJe+q 5QdIycT/VhPaMwML973NMCKtmk7/D9MyKk28qFRZGVbseJ9z2MljALyxVo2f9ByJ cHuUjpJY+0aGYOykD08FLnxzgA30LIhcypC0xuooO4VpZmpE19Eky2ck4IM9gpFh bY95V1hoDxRLm+hKbd9P7WA9P9B++0NE3PPT2l11XqObodPBF3OpoEcn9wwigw9q +Oqk/AMejKVvJyDAi6CyhI/36P3hVCHscc7JTduD9qXwRUBVnN3wPJ23UwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPhtBCd0cchq36TnsK8cjVJLJ/v7MB8GA1UdIwQY MBaAFB0F3HQPb0u1vEsDOH6bR1MIUHQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMt NWVlNTM0ZmRiMzliLzEvMS1HMEVKM1J4eUdyZnBPZXdyeHlOVWtzbi1fcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjMvMDRlNGM2LTMzNDktNGFlZC04OGJjLTVlZTUzNGZkYjM5 Yi8xL0hRWGNkQTl2UzdXOFN3TTRmcHRIVXdoUWREdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBHBggrBgEFBQcBBwEB/wQ4MDYwGwQCAAEwFQMDAXsCAwMA jt0DAwChJQMEB6hWADAXBAIAAjARMA8DBQYqBzBAAwYCKgcwQPgwDQYJKoZIhvcN AQELBQADggEBAEA1MRbYLbSKqlVWC4VDxiyIMEnWHCA3Dgut5hGbUDc9Gq0Z6uMj UgBghT6A1XhXTikSbYon4MPWRuEWXqUx9J56Fn+cqmgXu65sn4bXg9GhKQ498bmw opqOulHtSuLEsZfhQmW2PVuEBwLHAnztn/mfbRSs1DiDuVaBbNKCgEtBkw9E5ATx 0mdzVkzh0xn6oLrMpxcOwhiQ5pWlnkFirasbIH/Fyuz3eY7a83zOr/Q8xSSTWaN6 Xlp3bmK7cu4Mx0L0gerHc58sQYdhHh8UfMZjIaQ9bONzpVlEvylGCo64Fk2TK7q7 tLJrTtUKUXZuCPbCvTjsietf/fOnaEXtHTc= -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:14 2025 by rpki-client