This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/G1cVObMPOvr58gYfpMZUUg6xloA.roa File: G1cVObMPOvr58gYfpMZUUg6xloA.roa (raw, json) Hash identifier: kQwqsilWz22JvDZwbOTxkGaryBQcc34+YA+JEVWKuas= Subject key identifier: 1B:57:15:39:B3:0F:3A:FA:F9:F2:06:1F:A4:C6:54:52:0E:B1:96:80 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 019B7E38B1C828D41D6D609EBB29382C236B Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/G1cVObMPOvr58gYfpMZUUg6xloA.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52180 IP address blocks: 141.105.129.0/24 maxlen: 24 141.105.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b1:c8:28:d4:1d:6d:60:9e:bb:29:38:2c:23:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b571539b30f3afaf9f2061fa4c654520eb19680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:ed:8e:7f:bf:30:0e:ad:66:06:98:ea:a4: 5f:4c:13:90:a8:94:c1:28:fb:ae:fc:72:85:e2:20: 0c:40:ae:2a:5e:02:0e:0e:87:c1:4f:45:31:b6:a8: 03:a6:92:2f:f9:09:26:f0:13:dc:28:94:5c:e3:8c: 8f:36:ed:91:23:3d:18:bc:84:52:45:61:90:2a:86: 43:c8:0f:a6:c7:33:d6:98:62:48:0d:76:05:2a:f7: 18:14:71:a0:5f:a4:ba:35:1d:a9:c2:77:87:38:db: 2b:b9:ee:66:53:13:e8:d6:39:62:9b:a1:7c:b0:d2: 2c:6d:e1:66:b9:4d:d3:f2:7b:e5:21:6c:94:07:dd: 96:35:03:b6:c0:6a:f7:17:d1:90:ab:5d:8c:ae:1c: d4:44:a7:87:5b:0d:32:f4:2a:2a:3b:d7:df:a6:64: ae:0f:19:54:a7:62:97:99:65:e5:a6:77:dd:ea:bf: 11:4b:18:4d:bb:9e:da:0f:17:24:c0:95:46:4a:4b: 6a:62:65:8c:e3:07:a1:2b:c4:d1:18:a9:33:c5:73: b3:bd:81:15:8c:e8:21:ad:c9:ea:d2:30:f0:91:78: 57:9d:b6:9b:4e:a3:59:0d:c9:8e:7e:01:88:cf:08: 10:08:4b:ca:08:1f:6f:06:72:d3:c9:c0:f2:6e:11: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:15:39:B3:0F:3A:FA:F9:F2:06:1F:A4:C6:54:52:0E:B1:96:80 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/G1cVObMPOvr58gYfpMZUUg6xloA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.129.0/24 141.105.139.0/24 Signature Algorithm: sha256WithRSAEncryption a1:e1:ae:df:30:80:c2:48:e0:46:89:0c:85:4b:7f:10:65:e2: 30:7a:15:6b:90:6b:8d:c8:4c:f7:78:41:2a:ab:75:cc:d1:5b: 88:10:35:06:c8:6f:62:95:d1:e6:8a:68:f1:a8:45:0b:b9:d6: 97:cf:48:2a:fb:8e:2c:27:32:af:a2:c2:7b:66:e2:f4:08:a0: ef:a0:75:cc:4a:d7:e1:7f:bc:0c:f2:3a:36:f1:58:46:a3:cf: 60:74:d3:8c:c7:48:f5:0c:11:32:41:33:0a:fa:43:de:a0:c8: d3:94:2a:24:e5:0a:b1:02:f1:6b:35:0c:d7:58:24:a4:4c:3c: f6:5b:51:60:24:0c:ff:dc:a6:3d:42:18:f7:1c:63:36:e6:90: 4b:0c:8e:83:cc:06:44:2d:a1:21:39:ed:a6:2f:2d:98:0a:48: e7:4f:38:1b:b7:f2:de:45:4d:23:a7:7a:01:a9:ac:fb:36:3c: f5:48:37:b1:17:47:34:0e:1e:72:95:b0:b2:61:b0:8c:e1:0b: 0d:5a:c6:7d:ec:00:a7:ac:27:0e:1f:f5:64:fe:a4:86:6d:f3: 58:73:72:07:f9:d0:c5:17:e3:e2:5a:c3:17:4c:11:8f:bb:d0: 42:7c:75:37:8e:a0:99:c7:9f:f1:8a:a8:a1:7c:41:98:0f:df: bc:74:03:d4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OLHIKNQdbWCeuyk4LCNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjU3MTUzOWIzMGYzYWZhZjlmMjA2MWZhNGM2NTQ1MjBlYjE5NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3jtjn+/MA6tZgaY6qRfTBOQqJTB KPuu/HKF4iAMQK4qXgIODofBT0UxtqgDppIv+Qkm8BPcKJRc44yPNu2RIz0YvIRS RWGQKoZDyA+mxzPWmGJIDXYFKvcYFHGgX6S6NR2pwneHONsrue5mUxPo1jlim6F8 sNIsbeFmuU3T8nvlIWyUB92WNQO2wGr3F9GQq12MrhzURKeHWw0y9CoqO9ffpmSu DxlUp2KXmWXlpnfd6r8RSxhNu57aDxckwJVGSktqYmWM4wehK8TRGKkzxXOzvYEV jOghrcnq0jDwkXhXnbabTqNZDcmOfgGIzwgQCEvKCB9vBnLTycDybhHdowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBtXFTmzDzr6+fIGH6TGVFIOsZaAMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvRzFjVk9iTVBPdnI1OGdZZnBNWlVVZzZ4bG9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWmBAwQA jWmLMA0GCSqGSIb3DQEBCwUAA4IBAQCh4a7fMIDCSOBGiQyFS38QZeIwehVrkGuN yEz3eEEqq3XM0VuIEDUGyG9ildHmimjxqEULudaXz0gq+44sJzKvosJ7ZuL0CKDv oHXMStfhf7wM8jo28VhGo89gdNOMx0j1DBEyQTMK+kPeoMjTlCok5QqxAvFrNQzX WCSkTDz2W1FgJAz/3KY9Qhj3HGM25pBLDI6DzAZELaEhOe2mLy2YCkjnTzgbt/Le RU0jp3oBqaz7Njz1SDexF0c0Dh5ylbCyYbCM4QsNWsZ97ACnrCcOH/Vk/qSGbfNY c3IH+dDFF+PiWsMXTBGPu9BCfHU3jqCZx5/xiqihfEGYD9+8dAPU -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:46 2026 by rpki-client