This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/gpyVlC0l_arGjmVVCGk8FwUeXCo.roa File: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (raw, json) Hash identifier: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw= Subject key identifier: 82:9C:95:94:2D:25:FD:AA:C6:8E:65:55:08:69:3C:17:05:1E:5C:2A Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Certificate serial: 019B79109E9B89DDA6288794F9BBBBE4899A Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/gpyVlC0l_arGjmVVCGk8FwUeXCo.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208512 IP address blocks: 185.136.128.0/22 maxlen: 24 2a03:a4e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9e:9b:89:dd:a6:28:87:94:f9:bb:bb:e4:89:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=829c95942d25fdaac68e655508693c17051e5c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fd:ba:bf:11:c5:7b:5a:40:c7:ed:ee:d5:53: 52:70:6a:3f:8f:5b:d1:27:87:3a:c6:d0:d0:37:ea: fb:d6:a8:69:8a:e3:13:57:01:b5:6f:e5:55:d0:23: 98:df:08:ca:8e:b3:3a:bd:5e:61:38:ea:5f:b4:3d: 68:47:d4:f2:9a:e1:06:47:6b:e0:bd:77:af:d2:b3: 3d:6f:30:d8:61:dc:88:2e:66:33:71:af:15:58:fe: 5f:27:33:57:1c:c3:cf:b0:9a:22:ee:01:65:2a:0f: 6d:da:07:08:cf:db:bb:17:62:a2:ca:7d:03:f4:f7: 53:e1:9d:5f:f9:e4:b4:fa:44:27:60:d5:6c:f3:70: 8f:0b:c2:6e:c0:09:a2:99:d2:4e:20:51:37:5e:0a: f4:3e:b2:c6:54:1f:03:a9:da:08:94:f4:9a:1f:3e: 64:7a:fb:e6:97:f9:67:6a:61:f9:53:10:a4:e8:b9: 1b:8f:eb:ee:2c:12:2e:cf:01:1a:41:ea:05:5c:20: d7:b0:ba:ac:57:91:f7:40:9f:37:2e:6d:59:87:fd: 52:90:d4:cc:8c:fc:72:87:66:f0:84:27:71:0d:2a: 29:38:d7:d9:07:50:cd:00:f1:8a:40:13:cd:5e:ef: 73:8b:ee:7c:26:2c:b4:14:2d:d2:2b:c1:f9:37:76: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:95:94:2D:25:FD:AA:C6:8E:65:55:08:69:3C:17:05:1E:5C:2A X509v3 Authority Key Identifier: keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/gpyVlC0l_arGjmVVCGk8FwUeXCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.128.0/22 IPv6: 2a03:a4e0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:6f:50:8f:b7:38:b5:59:b7:2f:4e:d3:0b:a6:87:74:d7:7c: 5a:9e:37:e1:c5:e6:53:69:48:d1:6a:85:78:02:8b:12:11:4d: 3e:4b:6e:83:a8:74:ba:6a:1c:3c:94:84:07:55:8c:e9:5a:a3: 95:ef:ae:bc:c0:b6:d4:33:59:db:6b:a8:e2:81:7d:6e:31:fe: c9:21:ec:58:fe:84:f7:ee:0e:5a:4c:2c:30:0c:6f:70:2d:1c: 1a:23:9d:7c:04:52:87:55:4a:73:78:74:48:22:38:3b:0a:f6: d0:4f:e8:6a:6f:aa:73:fd:e4:b7:bd:45:6d:c3:8b:72:19:3f: ee:97:19:60:a3:99:7e:0c:02:53:2b:fa:ef:64:ad:85:0c:e1: 2b:84:70:f0:74:85:fa:a8:c9:d4:5f:c3:84:a7:8d:d2:d1:23: 85:59:be:89:ae:ec:6a:c9:46:3d:88:48:9c:e5:3e:ab:42:f7: 42:dc:f0:b7:9d:eb:fe:32:73:be:10:d3:b3:42:2a:c9:7f:7a: 40:20:ae:a5:2e:b8:a8:3a:f1:a0:26:6a:3d:8e:c7:80:a9:51: 9d:a2:1c:8c:76:9a:1c:e4:76:bd:b9:47:68:be:d5:96:91:79: 45:bf:62:67:b4:c8:74:81:b4:ab:60:96:3e:ae:72:13:1c:8f: 85:d8:77:26 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EJ6bid2mKIeU+bu75ImaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh NGNjOTQwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjljOTU5NDJkMjVmZGFhYzY4ZTY1NTUwODY5M2MxNzA1MWU1YzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7P26vxHFe1pAx+3u1VNScGo/j1vR J4c6xtDQN+r71qhpiuMTVwG1b+VV0COY3wjKjrM6vV5hOOpftD1oR9TymuEGR2vg vXev0rM9bzDYYdyILmYzca8VWP5fJzNXHMPPsJoi7gFlKg9t2gcIz9u7F2Kiyn0D 9PdT4Z1f+eS0+kQnYNVs83CPC8JuwAmimdJOIFE3Xgr0PrLGVB8DqdoIlPSaHz5k evvml/lnamH5UxCk6Lkbj+vuLBIuzwEaQeoFXCDXsLqsV5H3QJ83Lm1Zh/1SkNTM jPxyh2bwhCdxDSopONfZB1DNAPGKQBPNXu9zi+58Jiy0FC3SK8H5N3btdwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIKclZQtJf2qxo5lVQhpPBcFHlwqMB8GA1UdIwQY MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt YzZhODgyMWFkZWE5LzEvZ3B5VmxDMGxfYXJHam1WVkNHazhGd1VlWENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5 LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYiAMA0E AgACMAcDBQAqA6TgMA0GCSqGSIb3DQEBCwUAA4IBAQAsb1CPtzi1WbcvTtMLpod0 13xanjfhxeZTaUjRaoV4AosSEU0+S26DqHS6ahw8lIQHVYzpWqOV7668wLbUM1nb a6jigX1uMf7JIexY/oT37g5aTCwwDG9wLRwaI518BFKHVUpzeHRIIjg7CvbQT+hq b6pz/eS3vUVtw4tyGT/ulxlgo5l+DAJTK/rvZK2FDOErhHDwdIX6qMnUX8OEp43S 0SOFWb6JruxqyUY9iEic5T6rQvdC3PC3nev+MnO+ENOzQirJf3pAIK6lLrioOvGg Jmo9jseAqVGdohyMdpoc5Ha9uUdovtWWkXlFv2JntMh0gbSrYJY+rnITHI+F2Hcm -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:54 2026 by rpki-client