This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/aQ_GfdLhVfeWZDkm7-WSjIfSbIw.roa File: aQ_GfdLhVfeWZDkm7-WSjIfSbIw.roa (raw, json) Hash identifier: dZ1mg6u90Iped4j/Ep8zJIk/Xe9I73j9HaUUu+dqgcc= Subject key identifier: 69:0F:C6:7D:D2:E1:55:F7:96:64:39:26:EF:E5:92:8C:87:D2:6C:8C Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b Certificate serial: 019B7F8439BA2E53AF46E985F2AA17CFB9F6 Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/aQ_GfdLhVfeWZDkm7-WSjIfSbIw.roa Signing time: Fri 02 Jan 2026 16:22:10 +0000 ROA not before: Fri 02 Jan 2026 16:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213166 IP address blocks: 86.105.182.0/24 maxlen: 24 91.194.110.0/24 maxlen: 24 2a0f:ea81::/32 maxlen: 48 2a0f:ea83::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:39:ba:2e:53:af:46:e9:85:f2:aa:17:cf:b9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=690fc67dd2e155f796643926efe5928c87d26c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:07:ab:42:d9:3f:dd:c8:79:7f:85:a9:9e: 47:ed:65:09:45:49:89:72:d6:49:f8:75:1b:59:06: 37:3c:c7:91:60:09:88:a4:3d:85:9e:e1:85:73:be: 6a:60:d6:e5:a7:57:89:a9:16:cf:21:dc:6c:40:5b: 43:bf:26:2a:cf:c3:32:2d:7b:be:88:14:66:de:e3: e6:73:1f:7e:93:8f:f1:37:08:dd:6e:81:b7:2d:75: b9:8d:78:6e:d2:fc:12:d7:80:23:30:30:ca:94:cb: cf:52:88:08:b9:6f:b1:91:11:2b:71:30:87:70:5c: 15:0e:40:34:a8:a4:c9:71:18:89:b0:fd:79:a9:fe: 0c:fb:28:e8:30:be:1a:4c:fc:1f:f3:01:0b:2b:ff: f5:e3:38:3b:fd:c0:33:31:09:dc:3e:f7:8b:58:e4: 7e:21:ac:e7:c4:f3:44:d5:43:c1:99:32:9e:07:70: bb:c2:95:26:65:36:e7:9c:23:6d:4c:cb:9c:67:00: 92:93:9b:8d:e7:4d:ff:41:de:82:49:d4:d7:43:60: ee:42:d5:a3:60:d0:e7:b7:9c:5f:3f:51:93:cd:eb: bb:9f:6f:8b:d6:82:5d:56:28:79:da:f4:da:52:c6: 97:8d:06:e2:50:f4:f4:b6:4e:85:92:06:ef:76:ee: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0F:C6:7D:D2:E1:55:F7:96:64:39:26:EF:E5:92:8C:87:D2:6C:8C X509v3 Authority Key Identifier: keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/aQ_GfdLhVfeWZDkm7-WSjIfSbIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.182.0/24 91.194.110.0/24 IPv6: 2a0f:ea81::/32 2a0f:ea83::/32 Signature Algorithm: sha256WithRSAEncryption 3b:ba:8c:47:c1:ff:2d:81:7b:b6:57:4a:b8:df:50:aa:dc:06: 8d:2f:a3:44:df:c1:da:2e:ec:b0:1b:5d:cf:4a:39:05:9f:11: 1d:31:b4:39:23:a2:db:b0:5a:d0:8a:92:97:12:bf:44:d8:b4: 1c:20:1c:d5:23:5d:75:37:98:15:20:5e:2a:83:ee:6c:c0:b0: b8:8e:82:20:62:db:0a:45:ea:98:7f:37:d0:51:30:45:a2:d6: 93:ee:28:ea:94:2e:c5:79:99:80:d8:a0:f1:86:22:8a:0e:81: d0:f0:d1:18:9f:6f:46:17:b4:be:f7:5f:13:3a:f4:31:d8:1e: 1d:d1:3b:33:58:f2:0a:bd:3b:77:a8:a7:94:ce:1c:e7:ea:5f: 76:7a:7d:27:63:06:d9:86:ff:6f:f3:93:57:bc:af:8c:19:28: 54:37:f9:47:9c:bb:8e:cd:81:2a:09:50:c1:ed:18:8c:50:47: 07:49:cd:e6:1b:1e:0d:ac:dd:f3:5a:8c:f6:b1:31:ee:52:3e: 86:63:cc:88:74:ce:b5:23:7c:ff:d7:42:31:e3:f4:cc:49:3a: 5b:b8:b2:c2:a5:9f:0d:fd:aa:82:f3:44:34:25:c5:8f:fc:70: d7:f6:ce:1d:78:15:af:a2:62:af:b3:e0:f4:47:ee:22:1c:52: ec:44:f7:10 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/hDm6LlOvRumF8qoXz7n2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz ZjQ0MmIwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTBmYzY3ZGQyZTE1NWY3OTY2NDM5MjZlZmU1OTI4Yzg3ZDI2YzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gIHq0LZP93IeX+FqZ5H7WUJRUmJ ctZJ+HUbWQY3PMeRYAmIpD2FnuGFc75qYNblp1eJqRbPIdxsQFtDvyYqz8MyLXu+ iBRm3uPmcx9+k4/xNwjdboG3LXW5jXhu0vwS14AjMDDKlMvPUogIuW+xkRErcTCH cFwVDkA0qKTJcRiJsP15qf4M+yjoML4aTPwf8wELK//14zg7/cAzMQncPveLWOR+ IaznxPNE1UPBmTKeB3C7wpUmZTbnnCNtTMucZwCSk5uN503/Qd6CSdTXQ2DuQtWj YNDnt5xfP1GTzeu7n2+L1oJdVih52vTaUsaXjQbiUPT0tk6Fkgbvdu5zRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGkPxn3S4VX3lmQ5Ju/lkoyH0myMMB8GA1UdIwQY MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt MWM2NTRlMDJkNzVkLzEvYVFfR2ZkTGhWZmVXWkRrbTctV1NqSWZTYkl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAVmm2AwQA W8JuMBQEAgACMA4DBQAqD+qBAwUAKg/qgzANBgkqhkiG9w0BAQsFAAOCAQEAO7qM R8H/LYF7tldKuN9QqtwGjS+jRN/B2i7ssBtdz0o5BZ8RHTG0OSOi27Ba0IqSlxK/ RNi0HCAc1SNddTeYFSBeKoPubMCwuI6CIGLbCkXqmH830FEwRaLWk+4o6pQuxXmZ gNig8YYiig6B0PDRGJ9vRhe0vvdfEzr0MdgeHdE7M1jyCr07d6inlM4c5+pfdnp9 J2MG2Yb/b/OTV7yvjBkoVDf5R5y7js2BKglQwe0YjFBHB0nN5hseDazd81qM9rEx 7lI+hmPMiHTOtSN8/9dCMeP0zEk6W7iywqWfDf2qgvNENCXFj/xw1/bOHXgVr6Ji r7Pg9EfuIhxS7ET3EA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:54 2026 by rpki-client