This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/gKFSZ12cdmISn4h5sbRx_f8ayV0.roa File: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (raw, json) Hash identifier: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA= Subject key identifier: 80:A1:52:67:5D:9C:76:62:12:9F:88:79:B1:B4:71:FD:FF:1A:C9:5D Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed Certificate serial: 019B79ED59862F6111A11D4D5430D1F84F16 Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/gKFSZ12cdmISn4h5sbRx_f8ayV0.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201668 IP address blocks: 185.65.252.0/24 maxlen: 24 185.65.253.0/24 maxlen: 24 185.65.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:59:86:2f:61:11:a1:1d:4d:54:30:d1:f8:4f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80a152675d9c7662129f8879b1b471fdff1ac95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:a7:d4:d9:53:be:ff:87:58:7e:a0:bf:53: bb:bf:70:e5:db:d7:7c:55:6b:09:e0:1a:1e:1f:83: 32:a6:0f:8b:64:e3:ba:01:a8:7b:97:52:c5:42:2d: fb:69:53:c4:d5:37:99:33:cc:f3:d4:8d:90:8b:da: d4:57:b1:05:b9:80:b0:74:91:01:e0:a1:c1:ab:2d: 4c:39:c0:27:65:ce:26:6d:00:14:04:b5:4a:93:0c: bd:b4:31:06:97:00:9b:50:83:2f:fb:66:1b:82:1d: 14:00:d1:e3:05:e8:fc:79:54:fc:87:fa:1c:5a:0c: 68:5b:85:7d:7c:55:b1:a6:b6:a8:db:66:a8:02:38: f5:bf:b3:7e:13:5a:47:5c:95:ab:51:46:e0:f3:c0: da:d3:8a:b6:2e:50:53:60:cb:c4:03:8f:7e:3e:1d: 33:9f:bc:b7:70:5e:5b:27:b1:4d:c3:db:b3:07:80: 5e:9f:3d:3f:5d:c5:7c:75:b3:a3:36:a4:4d:18:64: 68:97:ff:59:c2:c4:de:83:43:f0:cd:cd:95:98:56: 1d:b4:d6:4b:10:47:39:37:fd:67:10:ca:ae:4d:bc: c6:e2:19:42:b2:8a:b5:3a:a4:ec:63:ce:24:5c:44: bc:3f:c5:8f:97:7c:2e:fb:e3:05:cb:8c:bf:18:16: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:52:67:5D:9C:76:62:12:9F:88:79:B1:B4:71:FD:FF:1A:C9:5D X509v3 Authority Key Identifier: keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/gKFSZ12cdmISn4h5sbRx_f8ayV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.252.0-185.65.254.255 Signature Algorithm: sha256WithRSAEncryption bb:b8:8c:95:65:2c:3e:81:d6:2e:9b:61:9a:3b:26:d3:d1:ab: b8:e1:da:84:2a:fb:86:da:89:9a:73:a8:ef:64:f3:a9:79:73: a6:7d:37:89:2a:c4:dd:e9:ec:9d:3e:3f:ec:35:95:7e:48:92: f3:41:af:c9:0c:f3:62:d0:77:55:df:fc:89:0b:c6:b4:ee:81: 88:86:e0:bf:79:22:51:01:d6:25:9f:a7:31:bc:8d:51:b0:0a: e3:10:e8:b0:3a:7a:e9:40:49:0f:14:75:3a:99:67:e3:ac:9c: 1b:e3:7f:a5:61:c5:7b:bf:39:8a:aa:57:f3:6a:6d:f4:57:ac: 46:ab:14:0f:71:37:e0:a5:f5:ae:6e:06:c7:c7:30:ac:6c:f7: 06:e5:21:2b:87:b9:89:d4:ec:d9:16:34:64:aa:38:ac:8e:55: 93:c8:cf:3d:73:47:f5:7b:2a:1f:e5:dd:3a:17:df:85:8f:13: 2a:09:8b:ee:32:0c:2f:1b:51:a8:89:7e:76:af:9f:74:87:1b: f6:b5:6d:46:f0:1f:40:43:4a:56:39:93:04:5c:5c:94:f5:6f: 9e:a3:44:1b:ea:e2:78:42:d1:0e:45:71:14:44:c9:80:41:e9: b1:d9:05:2e:86:f0:c1:02:9c:7a:68:44:8a:24:1d:00:31:39: 74:9a:53:31 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57VmGL2ERoR1NVDDR+E8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl Yjc2ZWQwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGExNTI2NzVkOWM3NjYyMTI5Zjg4NzliMWI0NzFmZGZmMWFjOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HOn1NlTvv+HWH6gv1O7v3Dl29d8 VWsJ4BoeH4Mypg+LZOO6Aah7l1LFQi37aVPE1TeZM8zz1I2Qi9rUV7EFuYCwdJEB 4KHBqy1MOcAnZc4mbQAUBLVKkwy9tDEGlwCbUIMv+2Ybgh0UANHjBej8eVT8h/oc WgxoW4V9fFWxprao22aoAjj1v7N+E1pHXJWrUUbg88Da04q2LlBTYMvEA49+Ph0z n7y3cF5bJ7FNw9uzB4Benz0/XcV8dbOjNqRNGGRol/9ZwsTeg0Pwzc2VmFYdtNZL EEc5N/1nEMquTbzG4hlCsoq1OqTsY84kXES8P8WPl3wu++MFy4y/GBZnxwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIChUmddnHZiEp+IebG0cf3/GsldMB8GA1UdIwQY MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt ZjQ3YWU3ZGRhZWMwLzEvZ0tGU1oxMmNkbUlTbjRoNXNiUnhfZjhheVYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5QfwD BAC5Qf4wDQYJKoZIhvcNAQELBQADggEBALu4jJVlLD6B1i6bYZo7JtPRq7jh2oQq +4baiZpzqO9k86l5c6Z9N4kqxN3p7J0+P+w1lX5IkvNBr8kM82LQd1Xf/IkLxrTu gYiG4L95IlEB1iWfpzG8jVGwCuMQ6LA6eulASQ8UdTqZZ+OsnBvjf6VhxXu/OYqq V/NqbfRXrEarFA9xN+Cl9a5uBsfHMKxs9wblISuHuYnU7NkWNGSqOKyOVZPIzz1z R/V7Kh/l3ToX34WPEyoJi+4yDC8bUaiJfnavn3SHG/a1bUbwH0BDSlY5kwRcXJT1 b56jRBvq4nhC0Q5FcRREyYBB6bHZBS6G8MECnHpoRIokHQAxOXSaUzE= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:22 2026 by rpki-client