This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa File: GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa (raw, json) Hash identifier: 5BgcRj7E+Zjch4bi8qsfXSHZRBSk5RcNGFESWPAD6ZM= Subject key identifier: 1A:A0:8F:0B:47:1A:33:BB:D5:2F:27:F1:94:36:D7:AF:ED:5B:07:A4 Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Certificate serial: 019B77C76FB648A04498EC50A086A3130DE4 Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42619 IP address blocks: 194.92.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6f:b6:48:a0:44:98:ec:50:a0:86:a3:13:0d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa08f0b471a33bbd52f27f19436d7afed5b07a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:45:98:97:c1:1d:17:74:71:8a:de:36:64: ff:61:13:68:e8:4b:74:83:61:06:66:a3:20:d4:8d: 36:f7:e2:a1:4b:eb:75:06:f8:1e:62:40:52:bf:0a: 1f:09:cf:4d:01:c8:df:f9:a7:1d:09:fb:68:49:be: 90:dd:04:80:6f:75:e3:a6:a8:0c:c3:91:a8:fd:c8: f4:dd:00:7d:31:d6:ab:29:0f:45:b9:87:b5:39:c5: 6f:70:da:a5:b9:aa:6c:8f:04:c2:86:17:da:28:df: 83:1e:50:f3:47:36:a5:53:85:e8:3b:0d:43:01:62: 60:69:c2:ca:17:22:ae:3c:6a:7c:9a:a5:df:c4:bb: 33:49:4e:60:5d:d2:75:9c:84:6f:41:c0:3d:3c:99: 71:12:8f:02:de:46:9b:81:57:ac:2c:e9:58:2e:cd: 34:3a:fb:aa:8c:6d:36:20:ee:08:83:f4:bc:7f:c3: a0:b2:88:f6:3d:c2:49:34:91:3a:ae:31:b1:0d:be: 78:be:e7:0d:1b:e6:ec:a9:5d:c6:e4:ba:c1:5b:13: 50:10:f4:ad:37:25:c3:73:dc:f2:c3:c3:fd:30:2b: 48:85:4d:c6:f4:87:96:f2:70:7a:72:53:d8:91:29: 11:6e:44:53:57:4c:b8:96:de:00:ca:98:cb:02:a2: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A0:8F:0B:47:1A:33:BB:D5:2F:27:F1:94:36:D7:AF:ED:5B:07:A4 X509v3 Authority Key Identifier: keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/GqCPC0caM7vVLyfxlDbXr-1bB6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.92.108.0/22 Signature Algorithm: sha256WithRSAEncryption 66:0b:34:c9:fc:53:b3:b3:40:b3:33:aa:cd:94:2f:ce:62:60: d4:15:0c:7c:d8:9c:3f:35:d7:34:11:7d:9c:70:99:96:16:d2: 12:e8:dc:c5:4f:cb:61:82:5d:02:13:2d:78:75:1a:fa:96:18: 45:13:73:1c:71:84:54:3f:3c:c7:b6:d6:67:98:48:f8:da:0d: c1:be:63:c3:c6:2f:3b:65:37:c0:17:fd:d0:95:90:3b:78:de: a5:48:12:1a:fb:4e:6c:60:92:92:c9:c6:44:e3:8c:62:66:8a: 65:b4:5a:24:e0:a7:6c:52:67:df:59:5c:02:c3:0f:41:5e:a7: 74:f8:4a:bb:48:71:20:8a:af:51:f3:fb:89:18:5a:0f:54:8b: 49:3d:35:94:de:3f:ab:06:ec:27:bb:de:6f:84:b7:60:0e:1f: 43:c5:bd:40:0a:4e:97:6a:b8:0b:5b:b8:c6:fc:2a:04:ed:d6: f8:c5:c5:9d:7e:a3:a2:f8:27:2e:bd:49:66:c3:c7:af:e2:0d: bc:f2:ef:34:76:67:ad:19:0d:f5:b4:cd:8c:26:05:63:44:c8: 45:8c:f6:47:c3:b1:cc:94:8f:cc:a9:52:36:31:46:8a:a3:58: 4b:75:c6:2d:25:88:cb:df:24:d9:66:28:6a:6b:a4:5d:5f:51: 0e:e6:15:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2+2SKBEmOxQoIajEw3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm NjA3MzkwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWEwOGYwYjQ3MWEzM2JiZDUyZjI3ZjE5NDM2ZDdhZmVkNWIwN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1RFmJfBHRd0cYreNmT/YRNo6Et0 g2EGZqMg1I029+KhS+t1BvgeYkBSvwofCc9NAcjf+acdCftoSb6Q3QSAb3XjpqgM w5Go/cj03QB9MdarKQ9FuYe1OcVvcNqluapsjwTChhfaKN+DHlDzRzalU4XoOw1D AWJgacLKFyKuPGp8mqXfxLszSU5gXdJ1nIRvQcA9PJlxEo8C3kabgVesLOlYLs00 OvuqjG02IO4Ig/S8f8Ogsoj2PcJJNJE6rjGxDb54vucNG+bsqV3G5LrBWxNQEPSt NyXDc9zyw8P9MCtIhU3G9IeW8nB6clPYkSkRbkRTV0y4lt4AypjLAqJBeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqgjwtHGjO71S8n8ZQ216/tWwekMB8GA1UdIwQY MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt YmFmNGUwYjRhNjllLzEvR3FDUEMwY2FNN3ZWTHlmeGxEYlhyLTFiQjZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwlxsMA0G CSqGSIb3DQEBCwUAA4IBAQBmCzTJ/FOzs0CzM6rNlC/OYmDUFQx82Jw/Ndc0EX2c cJmWFtIS6NzFT8thgl0CEy14dRr6lhhFE3MccYRUPzzHttZnmEj42g3BvmPDxi87 ZTfAF/3QlZA7eN6lSBIa+05sYJKSycZE44xiZopltFok4KdsUmffWVwCww9BXqd0 +Eq7SHEgiq9R8/uJGFoPVItJPTWU3j+rBuwnu95vhLdgDh9Dxb1ACk6XargLW7jG /CoE7db4xcWdfqOi+CcuvUlmw8ev4g288u80dmetGQ31tM2MJgVjRMhFjPZHw7HM lI/MqVI2MUaKo1hLdcYtJYjL3yTZZihqa6RdX1EO5hVN -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client