This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/v_GyPtTsAH9QIYnrTtEoRffH7XA.roa File: v_GyPtTsAH9QIYnrTtEoRffH7XA.roa (raw, json) Hash identifier: BYuG14Z6tAEZyqszWQjrNSyqvdK+bV7ylGqKH6e88To= Subject key identifier: BF:F1:B2:3E:D4:EC:00:7F:50:21:89:EB:4E:D1:28:45:F7:C7:ED:70 Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa Certificate serial: 019B7EA73E2EB9262BCE0A6FF0E3F78E369E Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/v_GyPtTsAH9QIYnrTtEoRffH7XA.roa Signing time: Fri 02 Jan 2026 12:20:48 +0000 ROA not before: Fri 02 Jan 2026 12:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44712 IP address blocks: 151.249.104.0/21 maxlen: 24 2a01:a8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3e:2e:b9:26:2b:ce:0a:6f:f0:e3:f7:8e:36:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bff1b23ed4ec007f502189eb4ed12845f7c7ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:17:a7:9d:cd:62:b2:21:b2:f2:30:7a:60: 5a:a2:53:68:8d:4a:e8:b0:51:af:cd:21:db:96:c5: a0:5e:5a:fa:b1:b3:0d:79:dc:e3:72:1c:15:ad:7e: b3:b2:71:1c:02:1f:91:2d:83:ac:93:e1:09:ce:b7: ed:c2:1b:c1:17:8b:07:ae:ef:53:dd:29:72:2a:98: b3:59:d0:8a:76:9f:1f:77:ed:47:3f:86:9e:e7:32: bc:25:63:6c:65:55:3a:70:e3:3b:24:e0:89:46:41: eb:3e:3c:79:e5:88:c4:b3:ac:ee:10:18:6d:d9:ae: d3:ad:ca:e8:46:ec:4a:c8:17:ea:fe:8b:1c:41:6f: ba:27:af:91:eb:a9:b2:5b:26:82:e6:bb:9d:c4:46: e5:27:3f:4b:eb:88:19:9c:65:4f:49:7e:02:59:82: ac:69:81:71:f0:0b:88:e9:5c:42:bd:d3:0e:0c:9a: ac:09:fd:81:ca:c7:4e:af:11:32:8a:81:26:7f:3e: af:99:ca:fe:01:29:9d:ca:a4:ec:e1:20:69:ee:a9: 3e:24:26:5c:a9:4b:0d:b7:67:c5:6a:fd:19:3e:47: 97:30:8d:19:29:1e:07:21:7b:2c:1b:6b:9a:a3:b7: 91:95:c0:a5:f0:f1:7f:d3:3f:c6:8d:a1:a0:7c:b4: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F1:B2:3E:D4:EC:00:7F:50:21:89:EB:4E:D1:28:45:F7:C7:ED:70 X509v3 Authority Key Identifier: keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/v_GyPtTsAH9QIYnrTtEoRffH7XA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.249.104.0/21 IPv6: 2a01:a8c0::/29 Signature Algorithm: sha256WithRSAEncryption 8e:f4:b4:cc:31:f1:50:7a:6f:69:a1:5c:16:a4:8d:30:ca:5b: ee:53:ca:ee:06:6c:54:ab:0d:cf:9f:0a:c8:55:2b:49:2a:84: aa:36:f4:18:2a:5a:f7:e3:45:25:29:9f:15:2b:b0:82:24:49: 65:bd:4b:49:aa:33:6c:2b:00:f4:50:23:58:e1:16:a3:e4:7c: 84:ab:38:9d:6c:d6:19:2c:86:d7:9c:13:09:46:3d:f9:4b:9d: fe:e1:25:c3:dd:46:7b:e6:9b:09:d2:8a:7c:7c:f4:d0:87:11: 56:75:c3:5b:d7:4f:61:80:57:18:c2:0b:5a:26:97:f8:a1:fe: 46:1e:a5:aa:04:da:2d:37:60:3e:c6:ca:ba:4c:67:3c:3c:61: 22:cf:4c:84:50:49:b5:b3:6d:4f:44:5f:25:c1:0a:bc:84:1b: 62:a3:69:de:8c:be:b6:1c:69:21:8f:8c:25:74:1a:84:e8:ad: 14:bd:c3:db:7e:10:29:dd:a8:58:df:18:52:19:4f:d5:9a:dc: a2:34:d7:15:72:37:84:83:0e:07:d2:d3:b8:9b:9c:ba:44:87: 8b:3a:66:e1:d0:fd:a5:8d:70:9e:3c:44:6e:9d:1f:1a:58:90: cb:ce:82:41:04:2c:2a:44:18:b7:c8:03:33:98:01:56:21:1c: 79:b3:a4:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pz4uuSYrzgpv8OP3jjaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYWYwYmY5M2ZjNDM4MWZmZjdlN2FhODZiNDA3NmMwMzMy NDJmZmEwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmYxYjIzZWQ0ZWMwMDdmNTAyMTg5ZWI0ZWQxMjg0NWY3YzdlZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGQXp53NYrIhsvIwemBaolNojUro sFGvzSHblsWgXlr6sbMNedzjchwVrX6zsnEcAh+RLYOsk+EJzrftwhvBF4sHru9T 3SlyKpizWdCKdp8fd+1HP4ae5zK8JWNsZVU6cOM7JOCJRkHrPjx55YjEs6zuEBht 2a7TrcroRuxKyBfq/oscQW+6J6+R66myWyaC5rudxEblJz9L64gZnGVPSX4CWYKs aYFx8AuI6VxCvdMODJqsCf2BysdOrxEyioEmfz6vmcr+ASmdyqTs4SBp7qk+JCZc qUsNt2fFav0ZPkeXMI0ZKR4HIXssG2uao7eRlcCl8PF/0z/GjaGgfLQOKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFL/xsj7U7AB/UCGJ607RKEX3x+1wMB8GA1UdIwQY MBaAFJ+vC/k/xDgf/356qGtAdsAzJC/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgt ZjUyMGE3ZDcxZWY1LzEvdl9HeVB0VHNBSDlRSVluclR0RW9SZmZIN1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgtZjUyMGE3ZDcxZWY1 LzEvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDl/loMA0E AgACMAcDBQMqAajAMA0GCSqGSIb3DQEBCwUAA4IBAQCO9LTMMfFQem9poVwWpI0w ylvuU8ruBmxUqw3PnwrIVStJKoSqNvQYKlr340UlKZ8VK7CCJEllvUtJqjNsKwD0 UCNY4Raj5HyEqzidbNYZLIbXnBMJRj35S53+4SXD3UZ75psJ0op8fPTQhxFWdcNb 109hgFcYwgtaJpf4of5GHqWqBNotN2A+xsq6TGc8PGEiz0yEUEm1s21PRF8lwQq8 hBtio2nejL62HGkhj4wldBqE6K0UvcPbfhAp3ahY3xhSGU/VmtyiNNcVcjeEgw4H 0tO4m5y6RIeLOmbh0P2ljXCePERunR8aWJDLzoJBBCwqRBi3yAMzmAFWIRx5s6SR -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:37 2026 by rpki-client