This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/g0RaLD65-oQgpyqHw6Rb1clt6Us.roa File: g0RaLD65-oQgpyqHw6Rb1clt6Us.roa (raw, json) Hash identifier: MBY8mcPfd1xDaI5XexA7xmIlVnR5RWaKP5T2lgf3SaQ= Subject key identifier: 83:44:5A:2C:3E:B9:FA:84:20:A7:2A:87:C3:A4:5B:D5:C9:6D:E9:4B Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA8CB82A18C388B12DEECD842F999 Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/g0RaLD65-oQgpyqHw6Rb1clt6Us.roa Signing time: Thu 01 Jan 2026 00:18:34 +0000 ROA not before: Thu 01 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203598 IP address blocks: 62.228.240.0/24 maxlen: 24 87.228.203.0/24 maxlen: 24 93.109.224.0/24 maxlen: 24 93.109.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a8:cb:82:a1:8c:38:8b:12:de:ec:d8:42:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83445a2c3eb9fa8420a72a87c3a45bd5c96de94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:95:87:96:e9:49:87:40:fa:e3:2c:6a:e5: e6:5d:4b:49:61:87:5f:bd:f3:d3:55:12:ae:21:f8: e0:01:86:a5:c2:e0:cd:b8:3a:4a:2a:c2:eb:56:01: 92:34:20:75:13:d5:60:bf:b4:c7:91:dd:3d:30:0c: 29:04:be:aa:22:60:3e:19:04:7d:45:3e:7d:90:e4: 50:eb:bb:a4:5d:7a:54:a9:f8:62:be:3a:d0:7b:38: 72:32:9e:6d:00:c6:08:7d:00:fa:c8:36:cc:d4:99: aa:03:c7:9a:a3:df:f6:a0:d3:db:3c:af:9d:88:03: e0:61:99:49:7f:c5:a6:aa:fe:d6:07:5a:73:a8:58: fe:f3:71:ae:2d:fc:f4:8d:d0:f3:c6:2e:52:c7:2e: 53:7f:fe:53:4c:4f:bd:e8:e2:f7:ae:78:3f:94:e0: 4c:ee:93:b4:4e:c3:69:a5:08:a5:cb:56:b0:b5:48: 68:ff:3d:1c:f6:6a:38:d3:85:94:70:91:b7:29:17: 56:e3:bb:df:44:8f:2b:c5:26:73:37:f0:14:15:e8: 33:10:96:de:22:cd:06:97:2f:37:f7:99:0c:52:f4: 03:93:53:11:3d:cd:39:98:c0:ae:a2:2f:c1:af:5a: 78:2b:5a:db:bc:b8:13:32:48:d6:5a:7e:ce:8f:0a: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:5A:2C:3E:B9:FA:84:20:A7:2A:87:C3:A4:5B:D5:C9:6D:E9:4B X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/g0RaLD65-oQgpyqHw6Rb1clt6Us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.240.0/24 87.228.203.0/24 93.109.224.0/23 Signature Algorithm: sha256WithRSAEncryption 17:6b:1d:9c:d5:b0:19:80:23:ae:39:ae:9a:0a:37:4a:0c:be: 59:f2:dd:42:21:47:d0:29:10:cc:ec:4b:9c:84:58:b9:e5:8a: c7:38:66:61:e6:45:9d:4f:3f:78:84:28:4c:de:b4:7c:5b:2e: 2c:14:9e:d7:0c:b7:b5:ef:29:83:8c:5d:d8:79:1c:65:b6:13: 25:4e:bc:97:03:4d:50:1b:db:d4:77:2b:02:df:fc:0c:bc:88: 45:24:e6:4b:6c:64:d6:fc:c1:de:e9:28:ba:99:63:a8:2f:25: de:1a:72:32:22:4a:6f:da:21:ee:dd:44:99:d7:55:50:50:61: 78:fe:e2:83:23:dd:bd:75:bc:cc:41:1e:7f:93:e7:89:9c:9d: ac:f1:c9:bd:36:aa:a7:80:54:9f:79:ff:0b:3e:77:25:85:67: 89:51:1a:f7:0e:50:61:3a:3d:0a:f3:05:fb:d1:83:67:05:89: 4b:2a:e1:89:10:3f:5f:0f:14:61:56:15:bf:e4:b4:b8:7d:4e: c6:c2:13:56:79:1e:61:02:ae:04:10:72:d9:89:23:6c:ed:9c: aa:3c:71:c3:4e:a8:9c:25:02:96:77:65:e9:d9:94:d6:a9:94: 87:c8:ee:23:69:b8:e8:08:35:0a:cc:b5:0f:5b:4f:92:33:20: 7f:a0:45:65 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt266jLgqGMOIsS3uzYQvmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQ0NWEyYzNlYjlmYTg0MjBhNzJhODdjM2E0NWJkNWM5NmRlOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriiVh5bpSYdA+uMsauXmXUtJYYdf vfPTVRKuIfjgAYalwuDNuDpKKsLrVgGSNCB1E9Vgv7THkd09MAwpBL6qImA+GQR9 RT59kORQ67ukXXpUqfhivjrQezhyMp5tAMYIfQD6yDbM1JmqA8eao9/2oNPbPK+d iAPgYZlJf8Wmqv7WB1pzqFj+83GuLfz0jdDzxi5Sxy5Tf/5TTE+96OL3rng/lOBM 7pO0TsNppQily1awtUho/z0c9mo404WUcJG3KRdW47vfRI8rxSZzN/AUFegzEJbe Is0Gly8395kMUvQDk1MRPc05mMCuoi/Br1p4K1rbvLgTMkjWWn7OjwqfDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFINEWiw+ufqEIKcqh8OkW9XJbelLMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvZzBSYUxENjUtb1FncHlxSHc2UmIxY2x0NlVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPuTwAwQA V+TLAwQBXW3gMA0GCSqGSIb3DQEBCwUAA4IBAQAXax2c1bAZgCOuOa6aCjdKDL5Z 8t1CIUfQKRDM7EuchFi55YrHOGZh5kWdTz94hChM3rR8Wy4sFJ7XDLe17ymDjF3Y eRxlthMlTryXA01QG9vUdysC3/wMvIhFJOZLbGTW/MHe6Si6mWOoLyXeGnIyIkpv 2iHu3USZ11VQUGF4/uKDI929dbzMQR5/k+eJnJ2s8cm9NqqngFSfef8LPnclhWeJ URr3DlBhOj0K8wX70YNnBYlLKuGJED9fDxRhVhW/5LS4fU7GwhNWeR5hAq4EEHLZ iSNs7ZyqPHHDTqicJQKWd2Xp2ZTWqZSHyO4jabjoCDUKzLUPW0+SMyB/oEVl -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:48 2026 by rpki-client