This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa File: G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa (raw, json) Hash identifier: tpJ2/AVYhiDqHmd6oabX9AFZV9PFSJLtrHg1I6lP9Xg= Subject key identifier: 1B:6A:FD:2A:C5:13:B5:BC:47:28:1E:49:28:D0:B6:45:54:2D:C5:43 Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e Certificate serial: 019B7A5A9C9B21EF5A6CA2E30AB8B90A281F Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198682 IP address blocks: 185.87.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9c:9b:21:ef:5a:6c:a2:e3:0a:b8:b9:0a:28:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b6afd2ac513b5bc47281e4928d0b645542dc543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:21:7d:2e:a1:78:84:59:07:34:f3:42:f5: c8:f2:3f:82:4e:1b:a2:01:8d:db:b4:ab:0c:5e:b1: 0c:32:12:2e:91:57:81:f1:99:86:ba:4b:67:ec:4b: 81:ef:a1:ec:81:12:ca:d5:bd:ac:dd:3e:37:20:39: 60:d9:32:05:f3:0b:a8:0d:6b:a2:1a:76:92:bf:dd: eb:b5:dd:f7:5c:4b:c7:0f:df:b5:c1:e2:80:c1:da: 90:3c:3b:a3:fc:6d:f3:c5:f7:19:d3:5a:1d:66:9f: 96:a3:fc:88:6c:07:51:8c:69:8a:11:0f:1e:5a:e4: d8:be:57:4c:91:c2:66:39:5e:91:bf:20:f4:12:e8: 35:86:0d:f0:7d:83:0b:db:91:a3:31:15:2e:f0:e9: 9a:a5:3d:80:6d:e4:1c:07:99:50:26:04:fd:9d:fa: a1:a7:84:17:2e:fe:9f:a2:f8:10:ef:74:8a:e1:2c: c3:5f:77:64:8f:e6:aa:8a:c7:bb:8d:32:66:ae:b6: f2:a7:22:b3:71:84:c9:0e:a6:92:29:21:40:4a:68: 48:6f:26:2c:ec:7d:b2:da:6d:f5:85:15:55:1a:55: 14:87:1b:a9:ba:44:3e:9d:7f:55:05:71:17:02:d4: 5e:6d:00:07:7d:a3:af:3a:38:93:ae:d8:ea:cd:12: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6A:FD:2A:C5:13:B5:BC:47:28:1E:49:28:D0:B6:45:54:2D:C5:43 X509v3 Authority Key Identifier: keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.64.0/22 Signature Algorithm: sha256WithRSAEncryption 26:0e:b9:4b:61:83:ff:1e:19:01:69:fc:90:97:86:88:13:06: 1e:b3:02:7b:37:9f:ec:ce:6e:b0:cf:32:60:9d:85:00:5a:ea: 02:80:2d:4c:a8:7a:fa:21:02:5a:06:d0:47:5f:05:53:24:44: a8:d6:70:b1:3f:45:14:65:c9:0b:a1:3e:1b:40:fd:f5:69:e1: 2c:a5:f8:8f:d3:1f:63:11:ad:f6:c7:ab:57:c8:33:fe:69:4b: 26:9c:95:f5:40:5a:8a:bb:67:1a:33:e1:34:d7:f3:2f:e7:8d: 48:59:fd:07:c5:5e:72:ae:de:3f:31:7e:f4:bf:64:cd:28:29: 6c:10:34:df:0d:c9:ab:a1:9d:33:2f:9a:bd:88:8b:42:ca:9c: 75:c5:ac:dc:cf:01:10:bf:bb:f7:6e:53:a6:a4:db:98:7f:ec: 13:b5:64:4e:e0:57:b5:fa:32:7f:0c:cc:26:38:78:ea:eb:14: 22:d0:8a:fc:e4:b6:7e:e2:81:6f:09:c1:a1:08:80:6e:c2:d0: 73:85:0c:a0:03:13:15:1c:36:60:24:24:3f:41:02:64:71:50: 1e:a7:38:44:27:32:b5:c1:53:d1:df:5b:24:74:28:6a:e6:75: d0:e7:5f:55:84:d8:5f:b1:93:d2:b6:75:9f:8c:b6:cb:77:79: 29:b8:87:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WpybIe9abKLjCri5CigfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz NzJmM2UwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjZhZmQyYWM1MTNiNWJjNDcyODFlNDkyOGQwYjY0NTU0MmRjNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymUhfS6heIRZBzTzQvXI8j+CThui AY3btKsMXrEMMhIukVeB8ZmGuktn7EuB76HsgRLK1b2s3T43IDlg2TIF8wuoDWui GnaSv93rtd33XEvHD9+1weKAwdqQPDuj/G3zxfcZ01odZp+Wo/yIbAdRjGmKEQ8e WuTYvldMkcJmOV6RvyD0Eug1hg3wfYML25GjMRUu8OmapT2AbeQcB5lQJgT9nfqh p4QXLv6fovgQ73SK4SzDX3dkj+aqise7jTJmrrbypyKzcYTJDqaSKSFASmhIbyYs 7H2y2m31hRVVGlUUhxupukQ+nX9VBXEXAtRebQAHfaOvOjiTrtjqzRKntQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtq/SrFE7W8RygeSSjQtkVULcVDMB8GA1UdIwQY MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt ODA0YzQ2NzkwOTNmLzEvRzJyOUtzVVR0YnhIS0I1SktOQzJSVlF0eFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVdAMA0G CSqGSIb3DQEBCwUAA4IBAQAmDrlLYYP/HhkBafyQl4aIEwYeswJ7N5/szm6wzzJg nYUAWuoCgC1MqHr6IQJaBtBHXwVTJESo1nCxP0UUZckLoT4bQP31aeEspfiP0x9j Ea32x6tXyDP+aUsmnJX1QFqKu2caM+E01/Mv541IWf0HxV5yrt4/MX70v2TNKCls EDTfDcmroZ0zL5q9iItCypx1xazczwEQv7v3blOmpNuYf+wTtWRO4Fe1+jJ/DMwm OHjq6xQi0Ir85LZ+4oFvCcGhCIBuwtBzhQygAxMVHDZgJCQ/QQJkcVAepzhEJzK1 wVPR31skdChq5nXQ519VhNhfsZPStnWfjLbLd3kpuIeO -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:37 2026 by rpki-client