This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/g-cs4KCZKYLgUr-tN_UtNttNg5M.roa File: g-cs4KCZKYLgUr-tN_UtNttNg5M.roa (raw, json) Hash identifier: Si0dRFIGYFzZ10R6i6ARJVkpSXUEGLL2gkuxXEnez48= Subject key identifier: 83:E7:2C:E0:A0:99:29:82:E0:52:BF:AD:37:F5:2D:36:DB:4D:83:93 Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b Certificate serial: 019B797E37B6F2AA27FECA34634961D1B43C Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/g-cs4KCZKYLgUr-tN_UtNttNg5M.roa Signing time: Thu 01 Jan 2026 12:17:53 +0000 ROA not before: Thu 01 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35575 IP address blocks: 109.175.213.0/24 maxlen: 24 209.42.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:37:b6:f2:aa:27:fe:ca:34:63:49:61:d1:b4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83e72ce0a0992982e052bfad37f52d36db4d8393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:ee:ba:e5:64:3d:ee:ed:10:19:59:51:b8: 66:37:77:99:d0:e8:b1:d6:45:02:94:28:0b:5f:43: 9e:62:6c:3e:ac:64:1a:8b:9f:fd:5b:18:0e:13:2c: ee:1e:1b:91:2a:9e:e2:8c:5b:71:49:77:14:35:aa: f6:ea:40:b0:7e:6b:b1:06:b6:b4:c6:59:99:e2:b9: e5:59:90:7d:57:ae:a5:e8:db:b4:3f:59:85:29:e3: d8:50:57:7c:e2:ac:9a:a4:8c:55:8c:05:40:9f:2c: a9:8b:60:06:9f:f4:3f:10:9a:4f:96:5d:be:9d:8a: ae:62:0a:e7:c2:e6:25:48:00:8f:4f:b9:65:57:89: 9f:5d:d1:20:46:da:59:70:38:4e:12:5c:65:9c:29: 1b:3f:87:17:a1:58:2d:dc:d6:ed:9e:a8:8c:84:48: c5:6c:32:33:17:b0:41:e9:23:43:1f:8f:53:6e:e5: cf:42:85:85:d9:1d:85:16:6f:fd:23:01:d8:bc:72: a8:b9:e5:f9:0d:9a:d2:da:c7:0c:f4:5d:e3:f1:3d: 26:a0:12:96:df:8f:aa:50:c5:dd:51:88:07:e4:49: 0f:b7:45:19:87:ae:7c:1c:3f:c9:8f:57:18:77:86: 7b:60:39:22:d1:4c:bb:85:84:68:16:a2:61:ce:a7: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E7:2C:E0:A0:99:29:82:E0:52:BF:AD:37:F5:2D:36:DB:4D:83:93 X509v3 Authority Key Identifier: keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/g-cs4KCZKYLgUr-tN_UtNttNg5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.213.0/24 209.42.2.0/24 Signature Algorithm: sha256WithRSAEncryption 81:0a:93:40:3e:6c:f9:90:51:14:11:e7:88:3f:d7:4f:7c:30: 81:3c:c6:f1:fc:8f:37:02:0e:bf:29:42:b4:a4:81:74:ca:7e: 71:47:bf:0d:8c:3a:ac:0d:03:f9:b4:5a:57:39:d7:05:25:fb: d2:3a:a5:0a:c7:c5:ce:23:07:93:14:61:a1:08:72:ec:4c:d3: 68:68:08:4f:a6:c2:99:62:12:0d:3b:d3:da:0e:37:ce:8c:eb: 6c:cf:83:1a:6b:57:00:13:4f:3a:b8:0f:95:e0:31:13:35:b1: dd:9b:9a:26:e9:07:d9:e9:08:6c:0c:00:69:db:39:95:44:ba: be:7a:3c:39:21:1f:d5:9b:7f:01:92:e3:b1:38:5a:8d:bf:03: 09:cc:f2:e0:1a:b3:28:6e:87:ea:f2:f1:c6:3e:f8:48:9c:19: 5d:f2:34:ae:6c:7c:8c:dc:05:a7:bc:b7:44:a3:9e:e0:ef:5f: 6f:fe:e5:92:b8:b5:fe:af:f3:18:22:21:5b:3f:3d:30:27:51: 11:4b:07:46:f2:87:0b:d5:85:35:d8:8f:41:61:0a:ea:53:8e: e4:47:a7:a4:14:db:34:eb:43:13:9d:29:fb:59:04:8f:06:8a: 89:31:d9:e7:61:82:96:d3:b2:2b:af:f9:5e:50:01:28:63:73: 81:03:b2:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fje28qon/so0Y0lh0bQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw YWMxN2IwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2U3MmNlMGEwOTkyOTgyZTA1MmJmYWQzN2Y1MmQzNmRiNGQ4MzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj7uuuVkPe7tEBlZUbhmN3eZ0Oix 1kUClCgLX0OeYmw+rGQai5/9WxgOEyzuHhuRKp7ijFtxSXcUNar26kCwfmuxBra0 xlmZ4rnlWZB9V66l6Nu0P1mFKePYUFd84qyapIxVjAVAnyypi2AGn/Q/EJpPll2+ nYquYgrnwuYlSACPT7llV4mfXdEgRtpZcDhOElxlnCkbP4cXoVgt3NbtnqiMhEjF bDIzF7BB6SNDH49TbuXPQoWF2R2FFm/9IwHYvHKoueX5DZrS2scM9F3j8T0moBKW 34+qUMXdUYgH5EkPt0UZh658HD/Jj1cYd4Z7YDki0Uy7hYRoFqJhzqcvVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIPnLOCgmSmC4FK/rTf1LTbbTYOTMB8GA1UdIwQY MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt MDFlNzEzMWFlMWRlLzEvZy1jczRLQ1pLWUxnVXItdE5fVXROdHROZzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAba/VAwQA 0SoCMA0GCSqGSIb3DQEBCwUAA4IBAQCBCpNAPmz5kFEUEeeIP9dPfDCBPMbx/I83 Ag6/KUK0pIF0yn5xR78NjDqsDQP5tFpXOdcFJfvSOqUKx8XOIweTFGGhCHLsTNNo aAhPpsKZYhINO9PaDjfOjOtsz4Maa1cAE086uA+V4DETNbHdm5om6QfZ6QhsDABp 2zmVRLq+ejw5IR/Vm38BkuOxOFqNvwMJzPLgGrMobofq8vHGPvhInBld8jSubHyM 3AWnvLdEo57g719v/uWSuLX+r/MYIiFbPz0wJ1ERSwdG8ocL1YU12I9BYQrqU47k R6ekFNs060MTnSn7WQSPBoqJMdnnYYKW07Irr/leUAEoY3OBA7IN -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:33 2026 by rpki-client