This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GKwqF0OXF5vx1vi3kjXqC_qDYz4.roa File: GKwqF0OXF5vx1vi3kjXqC_qDYz4.roa (raw, json) Hash identifier: lLtKncTZA2NWJ2KxQ5FTNadrcCKtcyHuvexVTxDDl6w= Subject key identifier: 18:AC:2A:17:43:97:17:9B:F1:D6:F8:B7:92:35:EA:0B:FA:83:63:3E Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019AA6C146361223ED7E4D3B67612A18ABD5 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GKwqF0OXF5vx1vi3kjXqC_qDYz4.roa Signing time: Fri 21 Nov 2025 14:11:15 +0000 ROA not before: Fri 21 Nov 2025 14:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212301 IP address blocks: 185.86.4.0/24 maxlen: 24 185.141.33.0/24 maxlen: 24 185.184.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:c1:46:36:12:23:ed:7e:4d:3b:67:61:2a:18:ab:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Nov 21 14:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=18ac2a174397179bf1d6f8b79235ea0bfa83633e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:90:18:0a:f3:f7:19:03:7f:af:6d:21:5a: ae:7e:68:e3:df:04:e6:80:95:c8:fe:25:bf:70:f0: 82:6f:42:c8:45:b9:4a:28:69:fc:12:1e:4a:16:31: 2e:a4:27:5b:0a:00:c2:ab:34:6e:f3:76:94:69:ba: c0:9e:0a:2f:9f:40:b3:c5:11:13:92:ef:67:66:dd: 4c:a7:55:19:73:d3:4e:9a:7c:17:6c:e8:de:5b:46: c2:81:2b:41:b2:ee:08:45:b0:b9:f7:95:6e:67:55: 64:b4:9b:15:54:7d:27:3d:f3:98:1a:d2:21:04:0e: 73:dc:26:9c:c6:7e:91:67:e5:35:6d:08:8a:f7:4d: 08:63:26:db:bb:34:5c:fe:a8:3c:a1:d3:36:9b:79: b1:50:fc:ed:6c:af:56:d7:c7:a7:c2:26:f9:55:e5: 34:0b:0c:c4:db:14:52:24:32:88:82:2f:29:a6:33: 20:a9:00:d9:94:89:91:d3:48:35:ea:5a:62:7b:49: 03:69:64:a5:90:fd:5e:e2:68:02:a0:b7:15:32:3e: 33:1c:6b:2d:43:ec:5a:32:a1:f8:af:c7:e0:ab:ed: 4f:f1:b1:43:62:24:40:83:85:6c:41:17:56:dd:34: 8b:6a:bd:36:08:d1:4d:25:9e:b6:ff:0b:aa:6d:b9: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AC:2A:17:43:97:17:9B:F1:D6:F8:B7:92:35:EA:0B:FA:83:63:3E X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/GKwqF0OXF5vx1vi3kjXqC_qDYz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.4.0/24 185.141.33.0/24 185.184.27.0/24 Signature Algorithm: sha256WithRSAEncryption 02:02:79:80:03:5d:8f:19:72:53:73:a9:67:d8:cc:a8:81:7e: bf:23:f0:04:ed:bd:8f:6a:7b:f4:96:7c:99:33:42:79:52:e9: f0:f8:b2:13:61:22:fc:03:54:83:37:de:e9:45:a0:ed:30:18: d7:6b:2c:2d:58:53:b7:c3:8d:0a:00:f1:cb:f3:f8:73:81:41: c8:e2:ac:a1:5a:fe:88:0f:ca:ed:89:54:1a:73:d3:c1:ba:32: 3b:8d:a5:b6:a9:f1:87:63:b8:06:fa:d7:b9:ee:b4:0e:75:b4: 6a:b5:e4:23:f0:53:4c:9d:41:6f:56:6d:07:cb:d7:6b:29:91: 4a:dd:4e:7a:0d:8c:73:4f:31:64:9f:28:9e:c8:7f:8e:d5:f0: aa:98:fd:3a:f9:6c:25:d5:48:55:e7:56:3e:22:38:bf:6c:c8: cb:ab:4d:76:02:2d:0e:66:65:e6:98:af:34:f4:cb:38:08:ea: ef:b0:82:6e:19:a3:46:a9:12:11:1a:f9:57:6b:1a:eb:bd:37: c8:ec:d8:ea:dc:a8:63:6b:5d:9c:67:51:a1:fb:17:91:b8:84: 22:55:f5:81:84:10:34:2f:7d:70:da:05:15:54:f6:24:0b:55: 36:6f:d7:38:cc:c3:2b:04:6d:0f:93:31:71:99:c4:9b:7b:25: 75:af:d6:74 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqmwUY2EiPtfk07Z2EqGKvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjUxMTIxMTQxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGFjMmExNzQzOTcxNzliZjFkNmY4Yjc5MjM1ZWEwYmZhODM2MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcWQGArz9xkDf69tIVqufmjj3wTm gJXI/iW/cPCCb0LIRblKKGn8Eh5KFjEupCdbCgDCqzRu83aUabrAngovn0CzxRET ku9nZt1Mp1UZc9NOmnwXbOjeW0bCgStBsu4IRbC595VuZ1VktJsVVH0nPfOYGtIh BA5z3Cacxn6RZ+U1bQiK900IYybbuzRc/qg8odM2m3mxUPztbK9W18enwib5VeU0 CwzE2xRSJDKIgi8ppjMgqQDZlImR00g16lpie0kDaWSlkP1e4mgCoLcVMj4zHGst Q+xaMqH4r8fgq+1P8bFDYiRAg4VsQRdW3TSLar02CNFNJZ62/wuqbbnkfwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBisKhdDlxeb8db4t5I16gv6g2M+MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvR0t3cUYwT1hGNXZ4MXZpM2tqWHFDX3FEWXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuVYEAwQA uY0hAwQAubgbMA0GCSqGSIb3DQEBCwUAA4IBAQACAnmAA12PGXJTc6ln2MyogX6/ I/AE7b2Panv0lnyZM0J5Uunw+LITYSL8A1SDN97pRaDtMBjXaywtWFO3w40KAPHL 8/hzgUHI4qyhWv6ID8rtiVQac9PBujI7jaW2qfGHY7gG+te57rQOdbRqteQj8FNM nUFvVm0Hy9drKZFK3U56DYxzTzFknyieyH+O1fCqmP06+Wwl1UhV51Y+Iji/bMjL q012Ai0OZmXmmK809Ms4COrvsIJuGaNGqRIRGvlXaxrrvTfI7Njq3Khja12cZ1Gh +xeRuIQiVfWBhBA0L31w2gUVVPYkC1U2b9c4zMMrBG0PkzFxmcSbeyV1r9Z0 -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:45 2025 by rpki-client