This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa File: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (raw, json) Hash identifier: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M= Subject key identifier: 18:8A:8D:D5:AA:25:9C:27:FE:35:9D:EF:B6:6A:01:D6:57:CB:85:75 Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Certificate serial: 019B7AC90DA39309BB310717252C16A939C2 Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa Signing time: Thu 01 Jan 2026 18:19:15 +0000 ROA not before: Thu 01 Jan 2026 18:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14080 IP address blocks: 185.107.198.0/24 maxlen: 24 2a06:45c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0d:a3:93:09:bb:31:07:17:25:2c:16:a9:39:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=188a8dd5aa259c27fe359defb66a01d657cb8575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:3c:40:ae:60:f4:e6:7b:60:cf:c7:73:21: 33:5a:cc:a3:57:d9:22:a9:91:ee:e5:e7:77:e1:99: ae:0b:21:94:2a:e9:81:a9:7c:eb:18:14:ae:90:97: 61:4a:3b:45:d5:a5:0d:52:fe:92:ed:05:5c:d6:7b: 44:20:4e:5a:6d:33:c2:11:20:b8:b0:b1:28:33:a1: cc:77:64:6c:d9:53:13:0a:13:8f:18:db:44:13:10: 3c:9d:79:36:a1:4e:6b:6a:ed:65:6f:e2:db:b7:56: a9:78:1c:c6:e7:29:cf:b1:89:a0:d9:37:58:82:05: 45:4a:4e:7d:40:dd:64:80:17:a6:2c:c7:f2:a4:c4: 0a:96:b3:79:24:8d:af:27:10:e1:31:29:e5:a2:d7: 60:cb:19:7b:f4:2d:f7:f3:54:65:ae:9d:3c:af:59: 7b:28:92:4e:6f:87:fb:dc:ba:d5:a2:bc:8c:48:4f: a5:70:d0:b8:62:d5:48:26:95:49:47:11:8a:31:1f: ef:fd:f4:21:eb:49:3f:9e:2e:ee:06:11:20:40:74: 6d:6b:ea:e7:f6:37:16:12:7c:95:f5:29:ce:2e:3c: 71:4f:2d:ca:48:ba:db:e6:57:99:e1:a7:14:a5:a1: 2d:ed:b8:de:0c:b4:9c:d7:09:ea:bb:9f:1c:34:94: 7d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8A:8D:D5:AA:25:9C:27:FE:35:9D:EF:B6:6A:01:D6:57:CB:85:75 X509v3 Authority Key Identifier: keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.198.0/24 IPv6: 2a06:45c1::/32 Signature Algorithm: sha256WithRSAEncryption 62:00:0a:37:d1:62:61:c5:d2:ad:e4:24:d1:db:9a:b4:f2:4d: c5:1d:4b:33:e4:3f:3f:0d:36:30:1b:5b:c6:bb:ab:a5:ca:69: 6f:4f:20:4f:5e:ad:1d:3a:b1:29:70:1a:29:72:9f:a1:3a:06: 47:8d:5e:c6:c9:22:b2:2c:3d:16:d9:25:0b:08:11:84:f8:fd: f8:3d:d4:04:9a:a1:96:5c:42:d3:9d:76:5f:ce:8e:c6:c9:9a: 0a:ad:85:2d:89:68:df:0b:34:4c:b7:b5:43:39:d2:66:7e:c8: e9:8c:5d:ba:f5:d9:dc:4b:60:b1:1b:ea:4b:3a:f4:ed:23:9d: c0:c2:28:14:2b:ff:4a:2c:14:fe:c0:96:ba:24:f9:f2:81:f9: 44:76:24:ce:84:6f:62:ab:a5:44:f4:37:9a:e7:45:e5:92:48: 1d:c3:af:ed:ed:77:4f:71:c5:93:40:76:81:c4:4c:57:4f:31: 4e:ef:02:d7:c1:0a:38:84:2a:c2:be:07:43:72:e0:4b:e8:b1: 8b:3d:ce:0e:1d:9a:74:60:ad:62:d4:97:8f:68:7f:d8:63:bb: d4:61:cc:98:3a:f7:11:6c:4a:64:9b:a5:6a:69:af:2c:7a:a0: 3f:40:23:25:09:de:d6:30:81:8e:f6:82:03:24:9e:53:67:e1: d2:e3:59:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yQ2jkwm7MQcXJSwWqTnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl YjliYjMwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODhhOGRkNWFhMjU5YzI3ZmUzNTlkZWZiNjZhMDFkNjU3Y2I4NTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W88QK5g9OZ7YM/HcyEzWsyjV9ki qZHu5ed34ZmuCyGUKumBqXzrGBSukJdhSjtF1aUNUv6S7QVc1ntEIE5abTPCESC4 sLEoM6HMd2Rs2VMTChOPGNtEExA8nXk2oU5rau1lb+Lbt1apeBzG5ynPsYmg2TdY ggVFSk59QN1kgBemLMfypMQKlrN5JI2vJxDhMSnlotdgyxl79C3381Rlrp08r1l7 KJJOb4f73LrVoryMSE+lcNC4YtVIJpVJRxGKMR/v/fQh60k/ni7uBhEgQHRta+rn 9jcWEnyV9SnOLjxxTy3KSLrb5leZ4acUpaEt7bjeDLSc1wnqu58cNJR9wQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBiKjdWqJZwn/jWd77ZqAdZXy4V1MB8GA1UdIwQY MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt MTQ3MDJhNGQyNjYwLzEvR0lxTjFhb2xuQ2YtTlozdnRtb0IxbGZMaFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWvGMA0E AgACMAcDBQAqBkXBMA0GCSqGSIb3DQEBCwUAA4IBAQBiAAo30WJhxdKt5CTR25q0 8k3FHUsz5D8/DTYwG1vGu6ulymlvTyBPXq0dOrEpcBopcp+hOgZHjV7GySKyLD0W 2SULCBGE+P34PdQEmqGWXELTnXZfzo7GyZoKrYUtiWjfCzRMt7VDOdJmfsjpjF26 9dncS2CxG+pLOvTtI53AwigUK/9KLBT+wJa6JPnygflEdiTOhG9iq6VE9Dea50Xl kkgdw6/t7XdPccWTQHaBxExXTzFO7wLXwQo4hCrCvgdDcuBL6LGLPc4OHZp0YK1i 1JePaH/YY7vUYcyYOvcRbEpkm6Vqaa8seqA/QCMlCd7WMIGO9oIDJJ5TZ+HS41mk -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:17 2026 by rpki-client