This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/gFPtY840cLMHPIAm8CMRVd0tx6Y.roa File: gFPtY840cLMHPIAm8CMRVd0tx6Y.roa (raw, json) Hash identifier: JaE0xay3++fm7hhQzeyY7hTKvCUzMEL4kuE9EKN5pjk= Subject key identifier: 80:53:ED:63:CE:34:70:B3:07:3C:80:26:F0:23:11:55:DD:2D:C7:A6 Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019B7C12A05BE1113DD37CABE1C7C5A11BBE Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/gFPtY840cLMHPIAm8CMRVd0tx6Y.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58181 IP address blocks: 109.202.105.0/24 maxlen: 24 109.202.110.0/24 maxlen: 24 213.152.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a0:5b:e1:11:3d:d3:7c:ab:e1:c7:c5:a1:1b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8053ed63ce3470b3073c8026f0231155dd2dc7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:4d:86:52:70:f2:67:2b:68:9e:31:fd:c8: 28:5e:c4:cc:2d:d5:b4:f5:06:d5:23:eb:ac:1b:77: 7f:d4:ad:78:ce:d3:05:61:5f:76:49:54:38:99:88: 51:6f:7e:c9:2d:7f:cc:80:3e:64:77:12:a3:ad:31: c2:19:26:09:c8:17:a5:a0:44:cd:9d:a2:cc:ee:30: aa:ed:f8:4c:fe:ae:0f:8a:b5:b1:ac:a0:f7:c8:2d: ab:2f:e4:33:5b:1f:f7:3b:00:fa:35:58:21:a6:b3: d4:cb:a3:17:5e:16:bd:0c:df:42:50:97:b8:fd:7e: c5:6b:a8:8f:0a:e1:84:f3:33:75:4f:04:06:1d:c5: 48:c4:50:f1:bc:fd:be:8a:5f:cc:34:f5:44:4d:e3: d6:21:97:a8:6b:a4:0b:b7:4d:ee:85:d7:9c:78:4f: 84:e2:70:5c:d5:9c:35:e4:a5:9a:91:e0:32:75:a1: 75:9b:70:2b:b2:d6:61:f2:f7:28:95:5d:65:5b:d5: 06:14:cc:83:5f:c5:ef:42:da:0b:57:17:8d:74:16: 11:4a:c1:c0:00:d3:25:95:b6:21:e5:dd:1f:20:ca: b9:56:df:91:4a:44:bf:c7:c5:1a:ef:11:cd:9b:4c: 63:5c:b3:00:34:8f:2c:f9:1c:dc:fa:80:15:49:2b: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:ED:63:CE:34:70:B3:07:3C:80:26:F0:23:11:55:DD:2D:C7:A6 X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/gFPtY840cLMHPIAm8CMRVd0tx6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.202.105.0/24 109.202.110.0/24 213.152.175.0/24 Signature Algorithm: sha256WithRSAEncryption 57:22:38:71:63:61:8a:d0:75:eb:6b:f1:66:b9:08:c6:00:d0: 37:d5:21:d1:79:a7:42:e1:81:27:cf:7a:fe:00:38:d6:3d:fd: e8:9c:ef:82:1c:0d:29:e7:e0:38:bf:7b:db:db:90:26:e1:75: 68:50:a4:7f:c4:3a:45:20:53:2f:87:bf:6e:c6:ed:7b:4a:17: f1:b9:4e:22:92:e4:0b:2f:a2:d0:89:36:07:07:c3:90:f6:27: ad:92:e1:56:8a:82:4e:b3:a6:11:31:56:bf:ed:39:f7:30:3e: 75:d4:fe:fa:a8:de:79:87:24:f6:e9:3e:e7:39:31:fd:b9:02: 0b:c3:46:b5:86:7f:36:7e:6a:d5:3b:e1:67:de:07:ed:84:75: 3b:16:1c:4e:5b:33:3e:a3:74:0a:67:48:56:53:4d:de:e6:c9: ae:00:f4:6c:22:fa:67:92:20:ce:16:ce:b5:78:cd:4e:bf:85: 88:cd:1b:ba:f5:cb:0f:05:0b:43:ba:c7:e1:f3:3d:c1:e2:b8: 71:39:4e:58:01:ab:f3:35:71:13:c7:c1:ec:5f:10:0d:4c:f5: a9:e7:98:d6:bf:7d:47:67:1d:9e:20:33:bb:c7:6c:dc:64:f6: 5a:27:4f:67:f0:9b:da:5f:5b:b7:9b:59:37:5c:1a:68:7e:f2: cb:9c:3f:7f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EqBb4RE903yr4cfFoRu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDUzZWQ2M2NlMzQ3MGIzMDczYzgwMjZmMDIzMTE1NWRkMmRjN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWRNhlJw8mcraJ4x/cgoXsTMLdW0 9QbVI+usG3d/1K14ztMFYV92SVQ4mYhRb37JLX/MgD5kdxKjrTHCGSYJyBeloETN naLM7jCq7fhM/q4PirWxrKD3yC2rL+QzWx/3OwD6NVghprPUy6MXXha9DN9CUJe4 /X7Fa6iPCuGE8zN1TwQGHcVIxFDxvP2+il/MNPVETePWIZeoa6QLt03uhdeceE+E 4nBc1Zw15KWakeAydaF1m3ArstZh8vcolV1lW9UGFMyDX8XvQtoLVxeNdBYRSsHA ANMllbYh5d0fIMq5Vt+RSkS/x8Ua7xHNm0xjXLMANI8s+Rzc+oAVSStwWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIBT7WPONHCzBzyAJvAjEVXdLcemMB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvZ0ZQdFk4NDBjTE1IUElBbThDTVJWZDB0eDZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbcppAwQA bcpuAwQA1ZivMA0GCSqGSIb3DQEBCwUAA4IBAQBXIjhxY2GK0HXra/FmuQjGANA3 1SHReadC4YEnz3r+ADjWPf3onO+CHA0p5+A4v3vb25Am4XVoUKR/xDpFIFMvh79u xu17ShfxuU4ikuQLL6LQiTYHB8OQ9ietkuFWioJOs6YRMVa/7Tn3MD511P76qN55 hyT26T7nOTH9uQILw0a1hn82fmrVO+Fn3gfthHU7FhxOWzM+o3QKZ0hWU03e5smu APRsIvpnkiDOFs61eM1Ov4WIzRu69csPBQtDusfh8z3B4rhxOU5YAavzNXETx8Hs XxANTPWp55jWv31HZx2eIDO7x2zcZPZaJ09n8JvaX1u3m1k3XBpofvLLnD9/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:47 2026 by rpki-client