This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa File: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (raw, json) Hash identifier: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw= Subject key identifier: 82:9F:15:4D:48:CD:51:ED:92:1C:0E:8D:C3:A8:CC:0A:B0:44:9A:92 Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Certificate serial: 019B7CED66869F6010D66D86DB4E72DF5C76 Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa Signing time: Fri 02 Jan 2026 04:18:11 +0000 ROA not before: Fri 02 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29134 IP address blocks: 185.65.220.0/22 maxlen: 24 195.181.248.0/22 maxlen: 24 212.57.32.0/21 maxlen: 24 2a00:1e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:66:86:9f:60:10:d6:6d:86:db:4e:72:df:5c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=829f154d48cd51ed921c0e8dc3a8cc0ab0449a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:04:03:b7:0e:bc:1b:30:94:61:42:17:e0: 59:7c:3e:a2:4c:86:e5:fc:f1:8c:43:1c:9d:3f:b0: 72:1c:53:a5:f0:98:9a:94:ec:13:c4:31:70:de:f1: 11:54:c4:1c:d6:4b:b1:50:09:60:43:c9:0f:a1:48: 47:20:0c:9e:29:37:38:5c:cc:16:0f:a8:0e:71:d9: 25:25:e8:06:a6:13:ad:55:58:a2:75:b7:5c:f3:1b: 5b:36:10:f3:77:2b:88:2a:fa:e2:fd:aa:ef:84:46: 0c:99:b7:17:85:1d:5e:04:30:59:97:cb:e9:83:6d: 96:57:ee:01:f5:89:07:0f:02:62:97:f7:e5:f5:fe: f0:4b:57:07:a3:53:d5:6e:6a:86:a8:76:02:20:0b: e3:56:1b:26:ab:8d:d9:15:f5:e3:00:ce:19:05:48: 0e:10:fd:bf:66:54:cd:31:98:ef:63:07:59:da:d7: 19:e4:35:79:4f:1d:8f:8b:04:81:ce:c3:92:e9:5c: 29:cd:3b:f9:88:55:35:11:8b:34:03:02:2d:79:6a: 5b:e4:70:48:85:4e:0d:65:b6:f1:43:1a:70:ce:b2: c3:23:c8:02:87:e9:08:b6:ba:0a:f7:ca:f9:46:23: 07:31:aa:d6:ac:19:14:da:55:c5:56:19:82:07:bc: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9F:15:4D:48:CD:51:ED:92:1C:0E:8D:C3:A8:CC:0A:B0:44:9A:92 X509v3 Authority Key Identifier: keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.220.0/22 195.181.248.0/22 212.57.32.0/21 IPv6: 2a00:1e40::/32 Signature Algorithm: sha256WithRSAEncryption cf:79:d9:04:38:b9:df:27:f5:bf:c5:15:cd:3c:15:fe:17:86: ed:c1:d6:c4:e5:ab:45:12:3d:d4:67:91:7c:e0:0d:de:63:ff: 72:88:62:06:f8:06:9a:10:9a:56:54:e1:49:b1:28:85:c3:3c: b2:14:40:d8:40:f7:7c:78:40:a2:d5:e9:05:94:0e:9a:11:b9: 9e:4b:90:80:13:2a:c4:17:24:a4:38:1e:aa:52:e1:b4:55:a5: 4b:5e:6e:ca:b8:f8:fe:f8:e7:3a:8c:39:07:51:38:10:17:10: 1c:07:d9:6c:31:83:d8:db:38:8f:99:20:2a:c3:17:50:f5:67: fb:d2:55:2e:13:f9:b4:37:7d:78:8f:c6:8d:d9:9b:45:91:ce: 57:a9:35:74:a3:dc:ba:4b:ee:5f:60:a4:60:64:a3:0f:5d:80: 0c:73:f2:c5:d6:d8:78:c8:f0:7c:0b:25:37:8c:38:d9:4a:cb: 21:1d:d8:7c:0f:cd:74:51:be:f1:c6:67:19:25:c8:9f:3d:61: e1:1a:3e:35:87:3a:77:b5:66:5c:0e:f6:37:c7:8c:2e:0e:38: 01:8e:24:fc:a7:d6:7b:00:2b:b7:5b:e8:28:86:05:ec:a5:ae: c1:84:af:6b:58:0d:d9:2d:92:fe:ce:61:bb:0d:7b:4c:0d:00: 18:23:bd:f0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87WaGn2AQ1m2G205y31x2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl NGU0NjEwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjlmMTU0ZDQ4Y2Q1MWVkOTIxYzBlOGRjM2E4Y2MwYWIwNDQ5YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SgEA7cOvBswlGFCF+BZfD6iTIbl /PGMQxydP7ByHFOl8JialOwTxDFw3vERVMQc1kuxUAlgQ8kPoUhHIAyeKTc4XMwW D6gOcdklJegGphOtVViidbdc8xtbNhDzdyuIKvri/arvhEYMmbcXhR1eBDBZl8vp g22WV+4B9YkHDwJil/fl9f7wS1cHo1PVbmqGqHYCIAvjVhsmq43ZFfXjAM4ZBUgO EP2/ZlTNMZjvYwdZ2tcZ5DV5Tx2PiwSBzsOS6VwpzTv5iFU1EYs0AwIteWpb5HBI hU4NZbbxQxpwzrLDI8gCh+kItroK98r5RiMHMarWrBkU2lXFVhmCB7z7rwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIKfFU1IzVHtkhwOjcOozAqwRJqSMB8GA1UdIwQY MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt YmM5MWMwNjcwZDAzLzEvZ3A4VlRVak5VZTJTSEE2Tnc2ak1DckJFbXBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUHcAwQC w7X4AwQD1DkgMA0EAgACMAcDBQAqAB5AMA0GCSqGSIb3DQEBCwUAA4IBAQDPedkE OLnfJ/W/xRXNPBX+F4btwdbE5atFEj3UZ5F84A3eY/9yiGIG+AaaEJpWVOFJsSiF wzyyFEDYQPd8eECi1ekFlA6aEbmeS5CAEyrEFySkOB6qUuG0VaVLXm7KuPj++Oc6 jDkHUTgQFxAcB9lsMYPY2ziPmSAqwxdQ9Wf70lUuE/m0N314j8aN2ZtFkc5XqTV0 o9y6S+5fYKRgZKMPXYAMc/LF1th4yPB8CyU3jDjZSsshHdh8D810Ub7xxmcZJcif PWHhGj41hzp3tWZcDvY3x4wuDjgBjiT8p9Z7ACu3W+gohgXspa7BhK9rWA3ZLZL+ zmG7DXtMDQAYI73w -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:55 2026 by rpki-client