This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/g_zg-zFG0YjcYdCq7B9NX8bqoSM.roa File: g_zg-zFG0YjcYdCq7B9NX8bqoSM.roa (raw, json) Hash identifier: XNai44WiN46wXrrNfjnUMmIbT8tDeP8H+2bJlAFOYkc= Subject key identifier: 83:FC:E0:FB:31:46:D1:88:DC:61:D0:AA:EC:1F:4D:5F:C6:EA:A1:23 Certificate issuer: /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be Certificate serial: 019B7EA5837EABF2395F1D5807A15E60BE79 Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/g_zg-zFG0YjcYdCq7B9NX8bqoSM.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52209 IP address blocks: 81.30.107.0/24 maxlen: 24 2a09:cbc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:83:7e:ab:f2:39:5f:1d:58:07:a1:5e:60:be:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83fce0fb3146d188dc61d0aaec1f4d5fc6eaa123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:c6:d0:a8:26:2c:d4:c4:fb:28:85:2a:59: 6f:50:bc:55:b1:92:76:b4:0d:80:cd:ca:bc:0f:7b: 20:bf:89:f5:ca:fd:4a:7f:2d:84:ef:a2:7e:7b:e3: 6a:28:a7:35:af:48:8d:a1:3c:13:a3:b1:6d:00:68: a2:37:0b:9c:13:38:69:f5:0b:0d:6f:50:c2:2e:da: 4e:7e:e2:d1:4e:c8:bf:ff:b9:4c:68:f7:58:b6:ca: 52:7c:fd:9d:22:5d:e1:26:ab:83:a2:8f:17:35:8f: fa:aa:c4:ff:71:ab:a1:15:cc:8a:a8:3e:42:50:c6: dd:3e:87:99:d5:c2:9f:c4:0f:66:c6:57:f4:09:db: 03:4e:df:b6:f1:56:27:3f:37:11:87:6d:8c:00:94: bb:0f:ce:4d:56:79:19:62:32:8d:77:65:e3:a9:74: c4:fe:5d:88:6d:01:56:44:40:a6:c3:b2:67:2c:9f: 34:75:f0:2c:ba:e7:3c:68:20:01:ed:b2:a5:cb:a0: b7:d1:e4:0b:fd:13:2e:2a:28:fe:ca:ca:1a:cc:7e: a5:5e:0a:a4:ce:bb:60:1f:e1:e1:92:00:11:6a:4f: c0:8d:e6:ba:6e:42:3c:8b:18:3e:22:54:78:33:bc: 3b:61:45:86:9b:8a:66:00:e5:f5:73:0d:b5:fc:9c: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:E0:FB:31:46:D1:88:DC:61:D0:AA:EC:1F:4D:5F:C6:EA:A1:23 X509v3 Authority Key Identifier: keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/g_zg-zFG0YjcYdCq7B9NX8bqoSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.107.0/24 IPv6: 2a09:cbc0::/29 Signature Algorithm: sha256WithRSAEncryption 97:6c:63:8d:d1:42:f5:07:d3:71:b9:fe:89:04:5a:ba:5c:67: 0f:aa:ed:f4:4f:4f:ce:fd:d7:13:c4:30:00:96:e2:62:ec:46: 36:57:17:3d:e1:82:2c:6b:4d:68:1d:12:58:cc:2e:f0:bb:35: 59:48:55:03:f0:22:37:60:ca:2a:a4:36:bf:ff:8c:87:61:b9: 50:7b:74:ee:a8:ae:e6:2b:69:da:94:a5:e7:b5:cb:99:c6:53: 68:71:92:d7:7b:96:82:bb:3d:b8:5a:a6:7e:9e:e1:29:5e:28: 73:51:de:9d:ee:4e:58:62:55:eb:be:8b:41:ae:64:fa:5c:55: 3b:f2:6d:0e:64:95:aa:db:ea:ef:20:69:57:0d:f2:de:b7:4e: e3:d4:a6:f3:7a:86:15:27:d2:d1:38:a3:f7:33:79:93:40:72: 69:7f:0d:f0:85:d2:3e:92:8a:28:f7:9f:60:6f:ed:9e:a8:1b: ea:64:74:52:67:e8:e3:16:f7:65:e6:13:8f:90:3c:35:5a:64: 08:50:88:a4:f0:ab:9e:67:4a:9d:7f:39:5c:67:9d:17:ee:ca: e9:a4:1b:0d:94:6e:aa:5a:b7:50:76:59:76:36:65:3f:37:d6: 00:43:47:7c:52:80:8d:75:8b:4a:46:8a:44:4a:fc:03:8b:95: 83:e8:e9:2f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pYN+q/I5Xx1YB6FeYL55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzQ2OWM1NDI4ZWVmOWFiNzY4ZDllZDZjMmM4OTQ0M2E2 YmI0YmUwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2ZjZTBmYjMxNDZkMTg4ZGM2MWQwYWFlYzFmNGQ1ZmM2ZWFhMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnHG0KgmLNTE+yiFKllvULxVsZJ2 tA2Azcq8D3sgv4n1yv1Kfy2E76J+e+NqKKc1r0iNoTwTo7FtAGiiNwucEzhp9QsN b1DCLtpOfuLRTsi//7lMaPdYtspSfP2dIl3hJquDoo8XNY/6qsT/cauhFcyKqD5C UMbdPoeZ1cKfxA9mxlf0CdsDTt+28VYnPzcRh22MAJS7D85NVnkZYjKNd2XjqXTE /l2IbQFWRECmw7JnLJ80dfAsuuc8aCAB7bKly6C30eQL/RMuKij+ysoazH6lXgqk zrtgH+HhkgARak/Ajea6bkI8ixg+IlR4M7w7YUWGm4pmAOX1cw21/JzDrwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIP84PsxRtGI3GHQquwfTV/G6qEjMB8GA1UdIwQY MBaAFOx0acVCju+at2jZ7WwsiUQ6a7S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQt OGRlZTFkYTEwNzQxLzEvZ196Zy16RkcwWWpjWWRDcTdCOU5YOGJxb1NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82YjU0NGMtNTBlNy00Zjk2LThjOGQtOGRlZTFkYTEwNzQx LzEvN0hScHhVS083NXEzYU5udGJDeUpSRHBydEw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUR5rMA0E AgACMAcDBQMqCcvAMA0GCSqGSIb3DQEBCwUAA4IBAQCXbGON0UL1B9Nxuf6JBFq6 XGcPqu30T0/O/dcTxDAAluJi7EY2Vxc94YIsa01oHRJYzC7wuzVZSFUD8CI3YMoq pDa//4yHYblQe3TuqK7mK2nalKXntcuZxlNocZLXe5aCuz24WqZ+nuEpXihzUd6d 7k5YYlXrvotBrmT6XFU78m0OZJWq2+rvIGlXDfLet07j1KbzeoYVJ9LROKP3M3mT QHJpfw3whdI+kooo959gb+2eqBvqZHRSZ+jjFvdl5hOPkDw1WmQIUIik8KueZ0qd fzlcZ50X7srppBsNlG6qWrdQdll2NmU/N9YAQ0d8UoCNdYtKRopESvwDi5WD6Okv -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:41 2026 by rpki-client