This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/GN5fvWr40gdv3JGN6vxjkZjGr-M.roa File: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (raw, json) Hash identifier: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw= Subject key identifier: 18:DE:5F:BD:6A:F8:D2:07:6F:DC:91:8D:EA:FC:63:91:98:C6:AF:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019B797EFC838345A1BD0A0FD7D06DC18874 Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/GN5fvWr40gdv3JGN6vxjkZjGr-M.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49673 IP address blocks: 94.247.104.0/21 maxlen: 21 94.247.110.0/23 maxlen: 23 94.247.110.0/24 maxlen: 24 94.247.111.0/24 maxlen: 24 185.54.244.0/22 maxlen: 22 185.54.244.0/24 maxlen: 24 185.54.245.0/24 maxlen: 24 2a02:47a0:a::/48 maxlen: 48 2a02:47a0:a:112::/64 maxlen: 64 2a02:47a0:a:115::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fc:83:83:45:a1:bd:0a:0f:d7:d0:6d:c1:88:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18de5fbd6af8d2076fdc918deafc639198c6afe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:a0:cc:20:3b:38:45:d7:67:5b:1c:fb:a5: 46:b5:6f:54:c0:71:e3:6f:97:e3:22:cc:1a:cf:d0: 10:79:a8:bb:a6:dd:61:66:df:8e:65:a0:eb:34:90: b4:2d:0b:3a:5a:c1:00:c1:1c:da:c8:ad:57:01:17: fc:4b:2d:d2:06:74:c8:0e:ea:6f:c7:fc:7d:da:d6: 10:ee:aa:aa:6d:45:b7:07:02:3d:69:f9:cc:e4:80: d8:16:51:e8:05:43:a4:2c:35:fb:d7:6f:43:5c:da: bc:ad:a9:49:b9:21:f0:6c:b0:a6:b8:da:38:83:a9: e9:d0:a5:12:4c:9a:da:9f:41:c8:3c:6b:1b:59:9c: 96:0b:53:d8:a2:69:80:d1:fe:4d:eb:fa:b6:ae:0b: 4e:2c:6e:58:77:28:9e:40:d1:05:d5:19:d4:af:a0: d2:f8:b2:77:ed:e4:ad:6f:ca:fd:0e:ba:9b:65:c8: b3:66:2c:e8:60:db:54:bb:3a:48:f0:12:bf:d1:29: be:8a:9a:8e:15:86:ff:a0:e9:fc:5e:0b:f3:f0:0f: bd:c1:55:1c:57:ba:d9:ae:6f:0d:64:64:56:cd:3d: ef:9b:e8:0e:15:d1:56:c4:be:1b:3b:f6:d9:61:02: 8c:a5:a4:0c:40:54:92:bb:c6:4a:81:44:d5:22:b3: aa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DE:5F:BD:6A:F8:D2:07:6F:DC:91:8D:EA:FC:63:91:98:C6:AF:E3 X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/GN5fvWr40gdv3JGN6vxjkZjGr-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.104.0/21 185.54.244.0/22 IPv6: 2a02:47a0:a::/48 Signature Algorithm: sha256WithRSAEncryption 68:1a:c0:a8:8b:19:12:96:e4:2c:e4:60:7f:82:ec:fa:c3:75: b8:6d:25:c2:90:ce:e6:b5:37:71:27:c3:35:9d:cc:a9:c5:eb: 1f:ad:0a:20:cb:18:4e:3e:fa:df:79:94:78:f0:93:d7:05:d0: 97:dc:df:e1:3e:2a:18:fd:c7:bd:8e:e2:fc:a1:2d:df:05:e7: 4c:a0:69:90:50:66:65:e6:b2:0e:29:03:89:5b:94:fe:11:ad: 82:fb:0b:74:87:5f:c3:ff:fb:22:cc:61:e7:a3:c2:80:76:af: b3:e2:f2:6d:56:fe:a9:93:d1:1b:ca:3d:9c:01:7b:e5:5c:5e: 10:d2:9c:89:97:de:1f:0c:0c:ca:53:a4:03:42:5e:dd:45:6c: b3:f8:ec:32:f3:53:7b:af:8f:4b:61:3f:bf:99:b2:48:9c:31: 88:e4:29:e4:3e:44:d0:9d:cf:d0:c2:9a:9d:81:4f:18:07:38: 1f:82:18:af:27:c7:29:b6:e2:04:6c:c8:6f:42:2b:b5:48:5f: 7e:b1:a9:93:a8:19:b1:f6:11:fe:e9:c9:81:46:46:cd:47:9e: db:00:a6:90:ae:7a:cc:ee:d0:96:a7:df:74:3d:7f:47:2d:be: 6c:2f:ba:99:3a:09:f7:bb:1e:4c:33:33:e5:c3:cc:7f:af:cd: 14:44:c6:d1 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5fvyDg0WhvQoP19BtwYh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGRlNWZiZDZhZjhkMjA3NmZkYzkxOGRlYWZjNjM5MTk4YzZhZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OugzCA7OEXXZ1sc+6VGtW9UwHHj b5fjIswaz9AQeai7pt1hZt+OZaDrNJC0LQs6WsEAwRzayK1XARf8Sy3SBnTIDupv x/x92tYQ7qqqbUW3BwI9afnM5IDYFlHoBUOkLDX7129DXNq8ralJuSHwbLCmuNo4 g6np0KUSTJran0HIPGsbWZyWC1PYommA0f5N6/q2rgtOLG5YdyieQNEF1RnUr6DS +LJ37eStb8r9DrqbZcizZizoYNtUuzpI8BK/0Sm+ipqOFYb/oOn8Xgvz8A+9wVUc V7rZrm8NZGRWzT3vm+gOFdFWxL4bO/bZYQKMpaQMQFSSu8ZKgUTVIrOqFQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBjeX71q+NIHb9yRjer8Y5GYxq/jMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvR041ZnZXcjQwZ2R2M0pHTjZ2eGprWmpHci1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDXvdoAwQC uTb0MA8EAgACMAkDBwAqAkegAAowDQYJKoZIhvcNAQELBQADggEBAGgawKiLGRKW 5CzkYH+C7PrDdbhtJcKQzua1N3EnwzWdzKnF6x+tCiDLGE4++t95lHjwk9cF0Jfc 3+E+Khj9x72O4vyhLd8F50ygaZBQZmXmsg4pA4lblP4RrYL7C3SHX8P/+yLMYeej woB2r7Pi8m1W/qmT0RvKPZwBe+VcXhDSnImX3h8MDMpTpANCXt1FbLP47DLzU3uv j0thP7+ZskicMYjkKeQ+RNCdz9DCmp2BTxgHOB+CGK8nxym24gRsyG9CK7VIX36x qZOoGbH2Ef7pyYFGRs1HntsAppCueszu0Jan33Q9f0ctvmwvupk6Cfe7HkwzM+XD zH+vzRRExtE= -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:15 2026 by rpki-client