This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/GoX9g1-BvEDBwc2mnD_QhckWvkc.roa File: GoX9g1-BvEDBwc2mnD_QhckWvkc.roa (raw, json) Hash identifier: iwAHyRmv8fh6MiZyHh25bmItIDzU2/7EGoZ3U3OP5g8= Subject key identifier: 1A:85:FD:83:5F:81:BC:40:C1:C1:CD:A6:9C:3F:D0:85:C9:16:BE:47 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B7911173D23B39E4A054444E377C19DEC Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/GoX9g1-BvEDBwc2mnD_QhckWvkc.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34369 IP address blocks: 84.241.0.0/18 maxlen: 24 94.182.109.0/24 maxlen: 24 94.182.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:17:3d:23:b3:9e:4a:05:44:44:e3:77:c1:9d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a85fd835f81bc40c1c1cda69c3fd085c916be47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:ca:bd:07:3c:bb:6e:a5:59:b5:90:89:ea: 81:12:0c:34:af:18:0a:48:12:08:63:9a:82:75:c1: 99:9f:92:a2:ca:a0:c9:fa:48:52:9e:23:3d:70:0b: 8b:dd:5a:43:da:aa:03:d0:81:da:89:d0:85:b5:83: 9a:57:07:d6:41:77:62:5b:b8:f4:c1:7e:23:ca:cd: 0e:f1:e2:72:a5:37:3f:93:28:8c:36:9f:f9:a5:25: 4d:d1:e8:f0:d8:df:6f:a3:f9:ec:d0:7b:77:12:dd: 45:64:43:9a:45:78:a0:79:8f:2d:b3:bd:f0:00:f3: 5e:bc:30:52:5f:98:4c:cd:94:26:f3:06:5f:da:7a: ea:ee:2a:ec:cd:87:3b:89:68:f6:fe:ef:8d:83:8c: 45:72:4e:e2:87:5e:d3:19:7a:16:6f:54:41:5a:08: ee:0c:14:c4:f1:22:7c:b9:2e:2e:33:6a:9e:99:28: 7d:09:52:d5:16:41:25:41:b9:c8:3e:3e:88:ba:aa: 3b:a0:b3:1c:0d:05:00:0c:1a:d9:10:c0:c2:4c:0c: b5:fc:51:e7:c9:f1:aa:dc:ac:87:85:df:de:b7:ea: 4d:57:20:a7:39:6b:f5:c6:19:f2:b4:bb:f8:51:98: 6c:a2:45:45:d7:9d:31:da:b4:19:99:3f:0f:b0:ef: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:FD:83:5F:81:BC:40:C1:C1:CD:A6:9C:3F:D0:85:C9:16:BE:47 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/GoX9g1-BvEDBwc2mnD_QhckWvkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.241.0.0/18 94.182.109.0/24 94.182.151.0/24 Signature Algorithm: sha256WithRSAEncryption 91:c4:96:8e:31:14:19:8b:db:5a:43:93:2c:7b:ce:39:c4:20: ce:71:bb:2a:91:81:18:17:cd:6b:3d:86:47:0e:b7:45:12:17: f2:7c:6b:6d:e8:e4:f0:41:15:d7:ae:b8:b4:8b:25:b8:47:35: 9c:79:47:ae:99:f7:96:8b:58:14:0a:02:cb:f2:84:08:49:70: 43:07:e0:de:06:05:e4:89:25:2d:e9:b5:16:5d:bd:1a:f5:bb: 04:d7:1a:54:07:82:32:9b:fe:95:14:d1:be:90:a9:e5:51:6d: 49:f5:df:55:ea:b7:07:47:76:8d:5b:73:f0:da:af:de:fc:e7: f2:e3:f5:66:c1:c3:75:1f:d8:33:82:28:ea:c0:b2:28:1b:59: 57:b5:21:33:c2:27:be:10:ba:c4:1f:f8:bc:a1:c1:f2:68:a8: bd:18:7b:2b:0f:f2:7b:03:fd:da:f4:b2:21:d4:98:17:e2:5f: f1:eb:f1:e0:e8:39:35:63:6b:53:cb:ce:95:be:19:0b:ba:34: e3:dc:df:4f:f8:fd:cb:26:e5:cc:61:b1:00:53:87:5e:4e:80: 01:f9:39:1f:05:3b:74:14:4d:0f:39:dd:45:d6:a0:ee:2b:d4: 9a:ad:40:84:6d:26:36:60:1d:c6:d8:f2:21:49:8e:86:b7:ff: 75:db:26:d5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ERc9I7OeSgVERON3wZ3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTg1ZmQ4MzVmODFiYzQwYzFjMWNkYTY5YzNmZDA4NWM5MTZiZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09vKvQc8u26lWbWQieqBEgw0rxgK SBIIY5qCdcGZn5KiyqDJ+khSniM9cAuL3VpD2qoD0IHaidCFtYOaVwfWQXdiW7j0 wX4jys0O8eJypTc/kyiMNp/5pSVN0ejw2N9vo/ns0Ht3Et1FZEOaRXigeY8ts73w APNevDBSX5hMzZQm8wZf2nrq7irszYc7iWj2/u+Ng4xFck7ih17TGXoWb1RBWgju DBTE8SJ8uS4uM2qemSh9CVLVFkElQbnIPj6Iuqo7oLMcDQUADBrZEMDCTAy1/FHn yfGq3KyHhd/et+pNVyCnOWv1xhnytLv4UZhsokVF150x2rQZmT8PsO/nOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBqF/YNfgbxAwcHNppw/0IXJFr5HMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvR29YOWcxLUJ2RURCd2MybW5EX1FoY2tXdmtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGVPEAAwQA XrZtAwQAXraXMA0GCSqGSIb3DQEBCwUAA4IBAQCRxJaOMRQZi9taQ5Mse845xCDO cbsqkYEYF81rPYZHDrdFEhfyfGtt6OTwQRXXrri0iyW4RzWceUeumfeWi1gUCgLL 8oQISXBDB+DeBgXkiSUt6bUWXb0a9bsE1xpUB4Iym/6VFNG+kKnlUW1J9d9V6rcH R3aNW3Pw2q/e/Ofy4/VmwcN1H9gzgijqwLIoG1lXtSEzwie+ELrEH/i8ocHyaKi9 GHsrD/J7A/3a9LIh1JgX4l/x6/Hg6Dk1Y2tTy86VvhkLujTj3N9P+P3LJuXMYbEA U4deToAB+TkfBTt0FE0POd1F1qDuK9SarUCEbSY2YB3G2PIhSY6Gt/912ybV -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:24 2026 by rpki-client