This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa File: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (raw, json) Hash identifier: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk= Subject key identifier: 81:51:2A:DC:D9:D5:76:DF:F6:5A:72:79:1E:41:4A:41:B1:45:EA:02 Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7 Certificate serial: 019B775887928316035531562CA4C9C097C3 Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39923 IP address blocks: 85.159.114.0/24 maxlen: 24 161.199.31.0/24 maxlen: 24 2a0f:efc0::/32 maxlen: 32 2a0f:efc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:87:92:83:16:03:55:31:56:2c:a4:c9:c0:97:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81512adcd9d576dff65a72791e414a41b145ea02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:cf:62:50:33:63:fa:9b:a0:e4:37:4f:56: 53:27:ad:a6:ea:8a:b3:a4:fc:20:31:51:b1:1a:00: 8e:93:18:69:4e:c9:9c:cb:68:89:d2:98:cf:1e:18: be:f4:f7:f8:21:54:63:46:a8:87:f9:14:bd:91:94: 27:26:f2:3a:e8:55:bf:ce:11:66:73:48:03:ee:ef: 4e:f2:bf:b1:8e:27:0d:f7:93:9d:e8:52:c5:83:ba: 98:82:87:76:6b:a9:0d:95:45:f7:58:12:66:67:4d: dc:bf:c7:2a:83:07:cd:54:c4:e3:91:7b:38:69:3e: d7:b6:4e:b7:f5:a7:f8:5c:d5:c1:9c:53:4c:4f:a6: 83:62:38:08:57:db:17:36:a5:c0:c0:e7:2b:98:be: a1:68:38:ed:eb:77:9a:f9:a3:02:2a:04:6a:f2:95: be:3a:a3:84:bd:08:8f:7e:c1:26:78:8b:c2:6f:c4: 71:13:b4:6e:c3:bf:58:2d:52:ff:d4:5d:37:67:72: 7e:0d:d3:48:92:11:ee:91:79:92:1c:c7:a5:b2:d3: ae:11:f5:c1:24:55:17:37:0b:14:4e:a2:f7:a7:73: 79:a7:e3:6b:a1:6e:23:f9:5a:8e:e9:73:cc:54:d1: 51:8a:63:6c:1e:d1:36:66:0d:52:c5:cd:2a:74:ff: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:51:2A:DC:D9:D5:76:DF:F6:5A:72:79:1E:41:4A:41:B1:45:EA:02 X509v3 Authority Key Identifier: keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.159.114.0/24 161.199.31.0/24 IPv6: 2a0f:efc0::/31 Signature Algorithm: sha256WithRSAEncryption ae:ad:90:bd:ef:10:88:04:78:ab:d4:ad:b9:8b:41:15:ff:1b: a7:e4:ec:6b:6b:f6:b5:85:46:ae:f8:5f:4b:f7:84:ce:b6:f8: c0:c5:7b:84:ff:78:69:90:1f:48:7c:b1:ad:14:45:73:cb:ff: a7:99:6d:07:a7:a0:23:63:3d:87:95:01:c0:69:5c:1f:71:ae: a4:1e:1f:a5:18:dc:70:0b:26:6c:e8:3c:0e:c3:6a:5e:e8:ef: bd:0d:39:34:f2:1e:e9:48:1a:6e:f6:63:de:8a:86:b1:20:e5: 2f:d9:af:d9:a1:db:e9:b1:da:30:d6:68:54:c3:82:4a:d1:ff: 4d:70:01:68:18:57:da:70:f8:8e:b5:2c:fe:8f:33:70:7e:5b: e3:bb:83:84:a7:d6:06:de:11:47:eb:c7:28:1f:35:79:82:af: c0:a8:5b:46:63:e3:89:df:3a:f7:5f:93:3d:46:23:4e:0a:d7: f8:17:23:64:e6:e8:20:ee:c3:f0:54:c7:94:ed:60:37:e1:5e: a0:95:02:9e:17:3a:7e:16:38:46:fb:a8:65:c8:50:9c:55:8d: 49:6b:77:71:8b:03:ca:f0:33:23:cf:73:90:4f:63:b0:5c:16: 19:30:9a:46:69:5b:f8:4e:7c:fc:ea:3c:3b:56:e3:d6:00:e2: 46:93:35:7a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WIeSgxYDVTFWLKTJwJfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzQ4Y2QwMGNkN2ZlNmEyMTc1NWFmNjQyZDg4MWI4ZGQ5 YTM5ZjcwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTUxMmFkY2Q5ZDU3NmRmZjY1YTcyNzkxZTQxNGE0MWIxNDVlYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKnPYlAzY/qboOQ3T1ZTJ62m6oqz pPwgMVGxGgCOkxhpTsmcy2iJ0pjPHhi+9Pf4IVRjRqiH+RS9kZQnJvI66FW/zhFm c0gD7u9O8r+xjicN95Od6FLFg7qYgod2a6kNlUX3WBJmZ03cv8cqgwfNVMTjkXs4 aT7Xtk639af4XNXBnFNMT6aDYjgIV9sXNqXAwOcrmL6haDjt63ea+aMCKgRq8pW+ OqOEvQiPfsEmeIvCb8RxE7Ruw79YLVL/1F03Z3J+DdNIkhHukXmSHMelstOuEfXB JFUXNwsUTqL3p3N5p+NroW4j+VqO6XPMVNFRimNsHtE2Zg1Sxc0qdP/VVwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIFRKtzZ1Xbf9lpyeR5BSkGxReoCMB8GA1UdIwQY MBaAFMp0jNAM1/5qIXVa9kLYgbjdmjn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgt MmEzZGY5YjMzMzEzLzEvZ1ZFcTNOblZkdF8yV25KNUhrRktRYkZGNmdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xNmVlYjItYzgyNy00MmM5LThlNDgtMmEzZGY5YjMzMzEz LzEveW5TTTBBelhfbW9oZFZyMlF0aUJ1TjJhT2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVZ9yAwQA occfMA0EAgACMAcDBQEqD+/AMA0GCSqGSIb3DQEBCwUAA4IBAQCurZC97xCIBHir 1K25i0EV/xun5Oxra/a1hUau+F9L94TOtvjAxXuE/3hpkB9IfLGtFEVzy/+nmW0H p6AjYz2HlQHAaVwfca6kHh+lGNxwCyZs6DwOw2pe6O+9DTk08h7pSBpu9mPeioax IOUv2a/Zodvpsdow1mhUw4JK0f9NcAFoGFfacPiOtSz+jzNwflvju4OEp9YG3hFH 68coHzV5gq/AqFtGY+OJ3zr3X5M9RiNOCtf4FyNk5ugg7sPwVMeU7WA34V6glQKe Fzp+FjhG+6hlyFCcVY1Ja3dxiwPK8DMjz3OQT2OwXBYZMJpGaVv4Tnz86jw7VuPW AOJGkzV6 -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:58 2026 by rpki-client