This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/gTIIxrJJD-NoTdqMNJJLRMS0lQs.roa File: gTIIxrJJD-NoTdqMNJJLRMS0lQs.roa (raw, json) Hash identifier: 0rFeNQFoSCuvCIBm913ksBYysYgLDykpUQhP0c/QksE= Subject key identifier: 81:32:08:C6:B2:49:0F:E3:68:4D:DA:8C:34:92:4B:44:C4:B4:95:0B Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C6796B9E268923D985A7ED4BDAF5B7 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/gTIIxrJJD-NoTdqMNJJLRMS0lQs.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 5.249.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:79:6b:9e:26:89:23:d9:85:a7:ed:4b:da:f5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=813208c6b2490fe3684dda8c34924b44c4b4950b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:df:27:7c:1b:e8:91:9a:ed:6f:2e:1f:c0: 4f:5a:9f:d3:89:a5:cd:27:21:64:b7:8a:79:df:00: 0b:86:5f:af:db:8c:6d:50:78:59:43:23:1c:0d:20: 07:18:46:18:71:f1:52:d6:fc:4b:5c:5c:58:3c:8a: 2b:19:75:a9:a0:3a:0a:d3:63:73:81:ac:2d:65:0a: 92:2a:8d:ff:6a:ba:3e:cb:c1:8c:36:f8:b2:ab:ec: 59:ae:71:21:5e:c9:86:ee:80:71:96:c4:24:a7:7e: 19:72:7a:47:ef:18:1e:55:1a:b9:df:05:2c:f6:88: bb:d2:87:0a:bb:bb:b3:a2:4f:ff:56:15:ed:c1:ea: 03:20:c1:cb:5b:0d:bf:56:c0:da:fc:84:86:d0:0f: dc:9a:67:c7:b1:cc:c4:73:b6:c9:ac:11:99:0b:2b: 58:78:6b:a2:66:7f:17:b0:7f:70:45:b2:ad:22:c2: 1f:96:44:50:eb:61:cc:08:b5:ad:18:a9:40:7c:4b: 2d:fd:f3:5c:51:2b:dd:5d:dc:93:6b:79:55:3c:6a: d0:06:5c:14:84:88:59:40:e0:b0:05:c2:ee:8c:5a: 5d:d6:b9:d6:b0:ea:da:37:61:a7:2f:50:63:4d:29: 28:4d:4e:a5:02:ab:45:26:fd:59:fd:1c:18:9b:ac: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:32:08:C6:B2:49:0F:E3:68:4D:DA:8C:34:92:4B:44:C4:B4:95:0B X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/gTIIxrJJD-NoTdqMNJJLRMS0lQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.184.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:38:20:bb:da:c2:c3:7c:dc:02:47:9f:15:ae:43:b2:46:be: 33:6d:8a:ba:3d:20:93:4d:95:b0:66:ec:55:11:59:50:75:47: 6a:60:37:cd:48:8c:40:68:b7:e2:cb:1c:22:1c:26:3b:97:ee: d7:e8:28:8c:3c:a9:fc:9b:02:08:37:8d:f8:f4:62:dc:97:bb: ea:c5:f2:eb:9a:94:90:30:fc:a1:a5:41:fa:26:a6:65:16:ff: 05:a8:0c:fd:db:1e:70:d2:9e:7b:c3:07:bf:14:f1:5e:0b:7c: f7:38:0f:fb:5f:de:23:78:3b:70:dd:1c:e3:03:da:e4:af:8d: 49:56:8a:38:2f:d9:48:10:10:96:db:e6:be:fe:d0:5d:c8:94: 72:75:f6:7b:0e:37:26:12:ed:b9:cd:0d:43:32:71:ef:f3:8f: 76:a8:3c:c3:27:61:ec:c6:84:30:1d:16:b6:26:79:14:1f:df: 77:ab:41:c2:c4:e7:77:73:46:ed:7b:fc:02:56:81:32:e0:31: a4:0f:1d:78:1e:48:9f:8e:a5:0e:09:c7:d7:d3:e1:9c:39:0d: bb:a2:9a:19:86:ac:81:fe:de:c3:ba:c4:a4:9d:37:e3:e3:c3: f2:70:d4:2f:d2:75:c2:a1:30:e3:22:56:3e:cc:e4:6e:bf:d3: b3:ef:17:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnlrniaJI9mFp+1L2vW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTMyMDhjNmIyNDkwZmUzNjg0ZGRhOGMzNDkyNGI0NGM0YjQ5NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmjfJ3wb6JGa7W8uH8BPWp/TiaXN JyFkt4p53wALhl+v24xtUHhZQyMcDSAHGEYYcfFS1vxLXFxYPIorGXWpoDoK02Nz gawtZQqSKo3/aro+y8GMNviyq+xZrnEhXsmG7oBxlsQkp34ZcnpH7xgeVRq53wUs 9oi70ocKu7uzok//VhXtweoDIMHLWw2/VsDa/ISG0A/cmmfHsczEc7bJrBGZCytY eGuiZn8XsH9wRbKtIsIflkRQ62HMCLWtGKlAfEst/fNcUSvdXdyTa3lVPGrQBlwU hIhZQOCwBcLujFpd1rnWsOraN2GnL1BjTSkoTU6lAqtFJv1Z/RwYm6wmxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEyCMaySQ/jaE3ajDSSS0TEtJULMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvZ1RJSXhySkpELU5vVGRxTU5KSkxSTVMwbFFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfm4MA0G CSqGSIb3DQEBCwUAA4IBAQAPOCC72sLDfNwCR58VrkOyRr4zbYq6PSCTTZWwZuxV EVlQdUdqYDfNSIxAaLfiyxwiHCY7l+7X6CiMPKn8mwIIN4349GLcl7vqxfLrmpSQ MPyhpUH6JqZlFv8FqAz92x5w0p57wwe/FPFeC3z3OA/7X94jeDtw3RzjA9rkr41J Voo4L9lIEBCW2+a+/tBdyJRydfZ7DjcmEu25zQ1DMnHv8492qDzDJ2HsxoQwHRa2 JnkUH993q0HCxOd3c0bte/wCVoEy4DGkDx14HkifjqUOCcfX0+GcOQ27opoZhqyB /t7DusSknTfj48PycNQv0nXCoTDjIlY+zORuv9Oz7xcL -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:09 2026 by rpki-client