This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/G6olI-VvDp9ALlLPdV58qA5xPYI.roa File: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (raw, json) Hash identifier: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w= Subject key identifier: 1B:AA:25:23:E5:6F:0E:9F:40:2E:52:CF:75:5E:7C:A8:0E:71:3D:82 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019B797F0BD97BF33377A59347F8F712AE4F Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/G6olI-VvDp9ALlLPdV58qA5xPYI.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204866 IP address blocks: 194.99.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0b:d9:7b:f3:33:77:a5:93:47:f8:f7:12:ae:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1baa2523e56f0e9f402e52cf755e7ca80e713d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:d2:26:ed:34:0a:ac:7d:3f:26:3f:e1:21: f6:1b:e9:c6:7b:b2:84:46:ab:06:37:15:17:f5:64: f4:be:36:ca:72:7f:ca:b3:f7:72:23:2c:7e:f1:db: 6a:61:d7:a0:59:9c:66:d7:0f:1e:fc:9c:57:8d:47: cb:59:78:f3:15:60:cf:72:1e:f2:79:78:14:35:08: 69:77:63:0a:43:c3:cc:cb:6d:69:c4:f2:e0:34:a2: 1f:43:11:d0:9b:93:88:c2:ce:a2:09:df:b7:1f:5c: 7e:1d:40:e2:fb:07:f7:7d:73:d8:ba:3a:e3:a4:4d: ce:de:bc:c6:75:72:0b:67:21:56:55:e8:13:28:92: 35:14:7b:9a:fd:d3:f5:41:c0:3b:7a:18:af:6d:d3: c7:61:64:59:4c:17:db:ba:7a:63:62:e0:fd:5d:6f: c3:1d:be:d3:c1:58:f1:9c:7c:0b:96:4b:cf:df:23: ef:fe:fa:09:73:76:0e:48:e5:21:89:d1:77:8e:1f: 4e:cf:cb:3c:3b:f6:54:d3:97:5f:b3:ac:f3:7e:9e: 88:c9:df:41:04:ab:30:17:79:70:c2:ed:18:b0:9e: 90:17:7f:91:89:fd:65:c2:60:43:fc:7c:51:e0:07: 59:e6:17:d3:c4:30:50:1a:68:20:6a:b5:f9:d3:68: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AA:25:23:E5:6F:0E:9F:40:2E:52:CF:75:5E:7C:A8:0E:71:3D:82 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/G6olI-VvDp9ALlLPdV58qA5xPYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.44.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:16:8a:cb:09:30:fc:dd:ec:ab:45:6f:18:7a:3b:d8:98:6f: 4a:ab:49:a2:c2:cb:75:fa:88:af:8a:b0:f1:3b:8d:53:73:fe: 7d:b2:6c:45:db:cd:a2:6d:0e:e0:c8:79:b7:a5:b1:85:49:0b: da:ff:72:ce:b5:d8:69:53:e1:33:41:be:fe:f5:3f:e0:b2:d0: a9:8d:81:bd:3d:ea:ff:b0:e5:25:f2:1a:00:3f:fb:4c:50:39: 88:d9:a0:54:82:f5:76:8d:98:25:ef:0c:0e:bf:4c:c9:07:e4: a4:2d:0f:e5:09:e1:cf:41:ad:d8:00:10:6d:0e:ff:28:db:5d: 02:f6:a6:c5:38:74:eb:2e:63:42:b5:74:5f:4f:f5:a4:13:77: ac:35:b1:83:80:97:91:cc:9c:ab:36:66:42:75:bd:44:aa:49: 9a:5a:6b:fc:e5:f1:c5:33:28:7d:2e:d8:b8:4e:bf:d8:cc:05: 52:2f:ec:cd:aa:ab:16:61:93:a1:55:f8:8c:44:b0:67:10:57: 26:de:5c:0d:db:88:f7:ea:cd:17:ba:af:6e:66:25:27:be:ce: bf:a3:73:53:c5:cb:df:7c:3a:85:fa:f2:b5:61:50:17:61:72: ee:db:24:b8:db:10:1c:b2:7a:49:36:41:0a:b2:0e:12:2b:5d: 53:dd:be:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwvZe/Mzd6WTR/j3Eq5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmFhMjUyM2U1NmYwZTlmNDAyZTUyY2Y3NTVlN2NhODBlNzEzZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8fSJu00Cqx9PyY/4SH2G+nGe7KE RqsGNxUX9WT0vjbKcn/Ks/dyIyx+8dtqYdegWZxm1w8e/JxXjUfLWXjzFWDPch7y eXgUNQhpd2MKQ8PMy21pxPLgNKIfQxHQm5OIws6iCd+3H1x+HUDi+wf3fXPYujrj pE3O3rzGdXILZyFWVegTKJI1FHua/dP1QcA7ehivbdPHYWRZTBfbunpjYuD9XW/D Hb7TwVjxnHwLlkvP3yPv/voJc3YOSOUhidF3jh9Oz8s8O/ZU05dfs6zzfp6Iyd9B BKswF3lwwu0YsJ6QF3+Rif1lwmBD/HxR4AdZ5hfTxDBQGmggarX502jcIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBuqJSPlbw6fQC5Sz3VefKgOcT2CMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvRzZvbEktVnZEcDlBTGxMUGRWNThxQTV4UFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmMsMA0G CSqGSIb3DQEBCwUAA4IBAQBKForLCTD83eyrRW8YejvYmG9Kq0miwst1+oivirDx O41Tc/59smxF282ibQ7gyHm3pbGFSQva/3LOtdhpU+EzQb7+9T/gstCpjYG9Per/ sOUl8hoAP/tMUDmI2aBUgvV2jZgl7wwOv0zJB+SkLQ/lCeHPQa3YABBtDv8o210C 9qbFOHTrLmNCtXRfT/WkE3esNbGDgJeRzJyrNmZCdb1EqkmaWmv85fHFMyh9Lti4 Tr/YzAVSL+zNqqsWYZOhVfiMRLBnEFcm3lwN24j36s0Xuq9uZiUnvs6/o3NTxcvf fDqF+vK1YVAXYXLu2yS42xAcsnpJNkEKsg4SK11T3b5p -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:17 2026 by rpki-client