This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/GEmrHZiocuP3uGGu2fdf9GiH_oI.roa File: GEmrHZiocuP3uGGu2fdf9GiH_oI.roa (raw, json) Hash identifier: bqGaJMwhtgjzoA4tEVMy3ciK+ou3gzZ+eYmOVgdgS0o= Subject key identifier: 18:49:AB:1D:98:A8:72:E3:F7:B8:61:AE:D9:F7:5F:F4:68:87:FE:82 Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Certificate serial: 019B7CEE111CB00DB205E306C7EA031B1819 Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/GEmrHZiocuP3uGGu2fdf9GiH_oI.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206334 IP address blocks: 185.189.92.0/24 maxlen: 24 185.189.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:11:1c:b0:0d:b2:05:e3:06:c7:ea:03:1b:18:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1849ab1d98a872e3f7b861aed9f75ff46887fe82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:63:29:e1:d0:6f:27:21:10:87:ad:5b:b1: c8:39:30:d4:fb:56:68:91:78:fc:93:54:d5:4e:f1: 3a:a8:e2:b6:8e:68:f7:17:ba:29:a1:68:9c:42:ff: 77:f6:83:b8:1d:6c:8e:8a:ca:cf:71:80:81:50:2a: 99:95:26:3a:34:88:44:af:47:a5:db:29:1e:33:d4: fc:99:f2:9c:db:3a:2d:e3:33:ae:dd:eb:96:f9:f1: 5e:14:2f:64:c6:6c:ee:96:5e:1b:ef:92:5a:03:84: e9:5c:48:df:a5:9f:bd:3a:72:72:14:7a:35:f1:f7: fa:23:45:27:2e:0f:34:fa:0c:e0:6f:09:55:cc:61: db:3b:4e:60:42:d8:31:31:7f:e2:dc:ca:42:cd:d7: 4e:7a:8d:23:ea:28:ee:53:47:94:94:08:6a:83:89: fe:49:34:5b:8d:e8:d4:a8:ef:2d:75:84:ac:52:3c: c1:2a:74:97:00:2d:82:d5:a7:ac:d3:50:f2:c5:92: 88:6a:0e:ac:d0:43:d0:7c:70:97:af:b9:17:b6:da: 35:e6:fe:a9:cb:cd:ba:4b:07:72:f9:9b:a2:85:6f: 3a:b1:2e:07:b0:60:63:67:79:78:2f:d9:52:74:52: 9f:c5:59:b0:13:4d:bb:3a:2f:22:0f:c1:af:db:a0: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:49:AB:1D:98:A8:72:E3:F7:B8:61:AE:D9:F7:5F:F4:68:87:FE:82 X509v3 Authority Key Identifier: keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/GEmrHZiocuP3uGGu2fdf9GiH_oI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.92.0/23 Signature Algorithm: sha256WithRSAEncryption 19:7f:f3:79:22:de:0d:5c:be:20:d4:a8:3c:58:49:67:f2:69: 2f:f5:ab:f6:8b:e5:8d:5a:29:e7:bc:85:41:c4:b9:95:29:ac: 81:81:4c:76:41:26:ef:d0:0f:76:ff:cf:cd:b5:a7:e0:68:2e: b4:ae:d5:03:8e:a7:43:1e:8e:27:d6:1d:f1:3d:bc:ab:fa:22: 1e:c6:7c:67:af:2e:cc:3f:c3:6e:b0:59:99:36:d4:5c:e7:96: 04:54:99:76:55:23:74:91:43:3f:2b:c8:5d:b4:8f:34:66:c0: 13:b0:1a:ef:65:ee:81:c8:cb:5e:50:e0:ba:99:2d:d2:5a:44: 77:ac:4a:2a:6d:f9:26:cc:3b:7e:77:a3:57:6f:19:2d:1d:97: 51:a0:9a:79:bc:c8:00:b5:1a:b7:5a:07:f8:49:84:33:4b:aa: fd:68:cf:83:e7:72:f4:70:e5:af:18:24:26:6e:06:8a:54:cb: 5c:9b:88:d7:bd:cf:7b:b9:3c:4c:93:46:1b:68:2a:0f:1b:c6: 7e:dc:df:fe:da:bb:b1:92:9e:83:30:5f:fd:98:d0:62:65:69: 7e:69:29:f1:86:31:42:62:f2:48:3b:98:c9:4d:8a:3a:28:8c: 17:5b:dd:05:4b:fa:d6:73:95:e9:96:d7:4d:4f:5c:f8:0b:62: 6f:b5:2c:33 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87hEcsA2yBeMGx+oDGxgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3 OGRjNzEwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODQ5YWIxZDk4YTg3MmUzZjdiODYxYWVkOWY3NWZmNDY4ODdmZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/9jKeHQbychEIetW7HIOTDU+1Zo kXj8k1TVTvE6qOK2jmj3F7opoWicQv939oO4HWyOisrPcYCBUCqZlSY6NIhEr0el 2ykeM9T8mfKc2zot4zOu3euW+fFeFC9kxmzull4b75JaA4TpXEjfpZ+9OnJyFHo1 8ff6I0UnLg80+gzgbwlVzGHbO05gQtgxMX/i3MpCzddOeo0j6ijuU0eUlAhqg4n+ STRbjejUqO8tdYSsUjzBKnSXAC2C1aes01DyxZKIag6s0EPQfHCXr7kXtto15v6p y826Swdy+ZuihW86sS4HsGBjZ3l4L9lSdFKfxVmwE027Oi8iD8Gv26BueQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBhJqx2YqHLj97hhrtn3X/Roh/6CMB8GA1UdIwQY MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi LTZkOGZkMzMwZTlhYS8xL0dFbXJIWmlvY3VQM3VHR3UyZmRmOUdpSF9vSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhiLTZkOGZkMzMwZTlh YS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5vVww DQYJKoZIhvcNAQELBQADggEBABl/83ki3g1cviDUqDxYSWfyaS/1q/aL5Y1aKee8 hUHEuZUprIGBTHZBJu/QD3b/z821p+BoLrSu1QOOp0MejifWHfE9vKv6Ih7GfGev Lsw/w26wWZk21FznlgRUmXZVI3SRQz8ryF20jzRmwBOwGu9l7oHIy15Q4LqZLdJa RHesSipt+SbMO353o1dvGS0dl1Ggmnm8yAC1GrdaB/hJhDNLqv1oz4PncvRw5a8Y JCZuBopUy1ybiNe9z3u5PEyTRhtoKg8bxn7c3/7au7GSnoMwX/2Y0GJlaX5pKfGG MUJi8kg7mMlNijoojBdb3QVL+tZzlemW101PXPgLYm+1LDM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:35 2026 by rpki-client