This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/Gff8TmwVPpxm50jMmhogv68or6Q.roa File: Gff8TmwVPpxm50jMmhogv68or6Q.roa (raw, json) Hash identifier: B/elEWjqFAvdBWzQPKMaoVqjCNgvn4XXEe/fNIDzSvE= Subject key identifier: 19:F7:FC:4E:6C:15:3E:9C:66:E7:48:CC:9A:1A:20:BF:AF:28:AF:A4 Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Certificate serial: 019BA1BCA969736816EA8D966B9D03265CBE Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/Gff8TmwVPpxm50jMmhogv68or6Q.roa Signing time: Fri 09 Jan 2026 07:50:54 +0000 ROA not before: Fri 09 Jan 2026 07:50:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212632 IP address blocks: 212.39.32.0/21 maxlen: 21 212.39.32.0/22 maxlen: 22 212.39.32.0/24 maxlen: 24 212.39.34.0/24 maxlen: 24 212.39.63.0/24 maxlen: 24 2a12:1587::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:bc:a9:69:73:68:16:ea:8d:96:6b:9d:03:26:5c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Validity Not Before: Jan 9 07:50:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19f7fc4e6c153e9c66e748cc9a1a20bfaf28afa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:5b:64:d8:f1:7d:c9:3b:49:17:5a:f2:42: a4:6c:3d:0a:c9:40:b5:e0:d1:d8:82:63:65:0f:02: 22:85:69:a9:92:1d:24:3a:46:47:5b:a3:f9:8d:cd: 6e:49:e3:3a:64:ad:49:f7:8b:5a:57:40:de:9d:4e: 33:f0:35:b3:d0:38:11:4f:70:33:ce:72:38:9b:26: aa:f6:0d:49:12:8f:8a:1d:7b:af:e1:40:5b:7e:ea: f6:e9:fa:b3:0c:93:49:c7:71:57:af:38:52:22:a8: 83:0f:60:3b:df:25:4f:b4:9e:31:34:fc:0e:5a:36: 70:5c:c9:c3:a2:0f:6d:7c:bf:fc:b3:0f:3a:19:1d: cc:29:c5:5c:ca:42:1f:87:aa:37:85:d9:10:29:04: f9:bd:bc:89:24:67:3e:58:cf:08:25:f7:48:1d:23: 6d:41:ed:82:e8:3e:69:61:ed:94:13:d5:55:6a:dd: 9b:30:6a:b6:0f:dc:f2:85:c3:5e:3e:6d:97:c0:b0: 64:d6:5d:77:d2:85:5f:cb:0a:c3:dd:29:f3:07:29: 22:05:8b:bb:b9:da:c4:1c:7b:5e:65:bc:26:fd:5f: df:e7:6a:2b:30:40:0c:61:74:4d:fb:43:0f:26:1e: a3:05:82:1d:0d:3d:00:9a:73:c1:0b:e8:93:45:83: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F7:FC:4E:6C:15:3E:9C:66:E7:48:CC:9A:1A:20:BF:AF:28:AF:A4 X509v3 Authority Key Identifier: keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/Gff8TmwVPpxm50jMmhogv68or6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.39.32.0/21 212.39.63.0/24 IPv6: 2a12:1587::/48 Signature Algorithm: sha256WithRSAEncryption 14:6f:19:6d:18:54:1d:de:87:db:71:af:36:b4:2c:b1:69:67: 82:01:28:9c:90:99:9e:d4:58:8d:66:c8:7f:db:b9:fb:39:4b: 4d:af:ed:00:6a:e5:96:6f:a5:84:ca:a6:c8:ad:c3:8b:4c:64: 3b:84:21:c4:f5:24:67:d6:5c:80:88:9c:9d:ce:7e:bb:38:d5: 3c:6b:bc:01:2b:22:a9:90:32:4d:33:3e:d5:e3:9a:d1:02:c0: 84:fa:60:b1:40:63:a3:7e:e6:00:c3:4a:68:fa:d4:9b:a9:bb: a2:9f:3c:f0:dd:1e:a2:01:5c:89:a1:f7:8b:ca:0e:e6:59:b2: d8:ed:f4:b5:fa:da:35:93:a8:7b:b7:68:8e:62:df:2d:33:98: 5f:59:29:b0:2f:9c:96:3d:b6:18:2e:3c:dc:6d:9d:69:f9:18: 10:b5:a1:cc:cc:d1:d2:67:d0:16:fb:c0:24:48:40:02:06:6e: 31:fe:32:1d:6e:a7:09:0d:4e:8f:fa:1d:9b:c7:f1:32:34:24: 02:ff:08:98:14:2a:b9:0e:0d:a2:53:4f:8d:ba:f4:d3:7d:3f: 46:c7:fc:f2:8e:da:37:c1:18:51:a7:ef:33:73:01:8b:9f:66: fb:b2:26:57:34:3b:55:b6:53:91:7b:51:87:59:f2:54:a3:fc: 26:b7:03:92 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZuhvKlpc2gW6o2Wa50DJly+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmRjN2JkYmM5ZDA5NzMzNmRlNjI0M2I1NTBhYjE3MzM3 NWVhMzkwHhcNMjYwMTA5MDc1MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWY3ZmM0ZTZjMTUzZTljNjZlNzQ4Y2M5YTFhMjBiZmFmMjhhZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj9bZNjxfck7SRda8kKkbD0KyUC1 4NHYgmNlDwIihWmpkh0kOkZHW6P5jc1uSeM6ZK1J94taV0DenU4z8DWz0DgRT3Az znI4myaq9g1JEo+KHXuv4UBbfur26fqzDJNJx3FXrzhSIqiDD2A73yVPtJ4xNPwO WjZwXMnDog9tfL/8sw86GR3MKcVcykIfh6o3hdkQKQT5vbyJJGc+WM8IJfdIHSNt Qe2C6D5pYe2UE9VVat2bMGq2D9zyhcNePm2XwLBk1l130oVfywrD3SnzBykiBYu7 udrEHHteZbwm/V/f52orMEAMYXRN+0MPJh6jBYIdDT0AmnPBC+iTRYMNQwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBn3/E5sFT6cZudIzJoaIL+vKK+kMB8GA1UdIwQY MBaAFKktx728nQlzNt5iQ7VQqxczdeo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMt OTkxYjdhZWU3NDZjLzEvR2ZmOFRtd1ZQcHhtNTBqTW1ob2d2NjhvcjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wYjQ2MjktMzljYy00ZTZjLTllMWMtOTkxYjdhZWU3NDZj LzEvcVMzSHZieWRDWE0yM21KRHRWQ3JGek4xNmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQD1CcgAwQA 1Cc/MA8EAgACMAkDBwAqEhWHAAAwDQYJKoZIhvcNAQELBQADggEBABRvGW0YVB3e h9txrza0LLFpZ4IBKJyQmZ7UWI1myH/bufs5S02v7QBq5ZZvpYTKpsitw4tMZDuE IcT1JGfWXICInJ3Ofrs41TxrvAErIqmQMk0zPtXjmtECwIT6YLFAY6N+5gDDSmj6 1Jupu6KfPPDdHqIBXImh94vKDuZZstjt9LX62jWTqHu3aI5i3y0zmF9ZKbAvnJY9 thguPNxtnWn5GBC1oczM0dJn0Bb7wCRIQAIGbjH+Mh1upwkNTo/6HZvH8TI0JAL/ CJgUKrkODaJTT4269NN9P0bH/PKO2jfBGFGn7zNzAYufZvuyJlc0O1W2U5F7UYdZ 8lSj/Ca3A5I= -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:15 2026 by rpki-client