This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/GDQ6e5DXxJl7e4a1PuFdPMdgdpA.roa File: GDQ6e5DXxJl7e4a1PuFdPMdgdpA.roa (raw, json) Hash identifier: NFAS/YPr7cmLSO+xfeJAnaGaDT/lXw4eBBakcDd+nG0= Subject key identifier: 18:34:3A:7B:90:D7:C4:99:7B:7B:86:B5:3E:E1:5D:3C:C7:60:76:90 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019BD8E2D0387912538DE1B61D2F559DDDFE Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/GDQ6e5DXxJl7e4a1PuFdPMdgdpA.roa Signing time: Tue 20 Jan 2026 00:51:41 +0000 ROA not before: Tue 20 Jan 2026 00:51:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25311 IP address blocks: 86.105.206.0/23 maxlen: 23 89.34.180.0/22 maxlen: 22 89.47.208.0/20 maxlen: 20 94.176.200.0/21 maxlen: 21 188.209.96.0/20 maxlen: 20 195.182.220.0/23 maxlen: 23 2a01:4700:8000::/33 maxlen: 33 2a03:9c20:2002::/48 maxlen: 48 2a03:9c20:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:e2:d0:38:79:12:53:8d:e1:b6:1d:2f:55:9d:dd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jan 20 00:51:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18343a7b90d7c4997b7b86b53ee15d3cc7607690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:0a:1c:03:7f:e3:b6:23:0a:e6:fb:9a:ac: 4d:4a:15:e2:11:a5:d8:09:03:9e:f9:a0:f7:e2:20: 13:fb:b7:f0:5b:5d:fc:fb:7c:7c:94:20:61:89:db: 86:b0:67:da:81:e7:5b:a0:14:e2:3f:b5:da:3d:26: fe:5c:ec:c6:9f:15:72:7e:3a:16:f3:0b:bb:09:bd: 97:67:e4:ed:84:c2:b4:0b:6a:75:cf:d2:02:c9:ed: 49:b6:14:7a:d5:f6:c2:40:2e:2f:23:7e:e2:dd:b2: 24:e1:da:dc:5b:1e:0f:95:9c:67:ee:da:17:a4:2c: e8:65:4a:81:b4:af:b6:77:b1:ae:dd:77:ac:d3:8d: 1d:c0:06:51:d0:bc:e1:e3:0d:09:4c:1d:b9:00:dd: 9d:dd:98:86:a8:a8:19:82:ed:b3:6b:0b:ac:eb:a9: ff:bf:04:fe:88:ef:ec:6d:59:41:a2:57:2d:97:c2: 13:f7:e1:a8:3b:4b:2a:c0:be:08:14:b3:87:4c:99: a2:b5:10:0d:f7:f7:fc:8b:bd:60:f4:b6:f1:bc:6e: bd:b4:b9:9f:00:b8:59:09:76:4a:ea:bd:20:3b:d1: b8:26:5e:ad:a7:13:ac:6a:c2:64:40:17:81:ef:da: 06:2e:12:83:45:e4:2e:9e:ce:8a:52:44:b0:cd:b5: fb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:34:3A:7B:90:D7:C4:99:7B:7B:86:B5:3E:E1:5D:3C:C7:60:76:90 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/GDQ6e5DXxJl7e4a1PuFdPMdgdpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.206.0/23 89.34.180.0/22 89.47.208.0/20 94.176.200.0/21 188.209.96.0/20 195.182.220.0/23 IPv6: 2a01:4700:8000::/33 2a03:9c20:2002::/48 2a03:9c20:3000::/36 Signature Algorithm: sha256WithRSAEncryption 96:2a:be:34:f8:26:d7:b3:25:da:e5:13:02:1a:72:51:13:23: ed:98:c8:aa:37:09:5d:12:f0:91:5f:6b:79:0a:91:91:99:08: 3a:39:c3:57:1b:a0:d8:d1:84:b1:76:47:84:1b:cf:66:71:ba: d2:cd:c6:05:71:b4:11:6f:98:b4:95:db:94:f7:8d:da:34:b3: ea:7c:b3:96:7f:e9:05:3b:b0:9b:85:51:4d:43:b9:d6:7b:fd: f7:01:71:6a:8d:22:9e:eb:54:ed:ae:d0:30:84:03:97:4b:b2: 6b:b6:e5:b4:c4:b4:17:08:36:a0:59:7f:5f:33:39:5d:2d:88: d0:f8:a2:f2:2d:17:0d:80:4a:ea:78:70:e1:d6:0f:4e:14:13: a3:53:16:77:64:bd:b1:73:ba:b6:22:bc:52:e5:32:af:68:01: bc:98:b8:03:c4:d2:9a:da:58:19:2d:7a:ba:5e:b4:2b:d5:5f: 57:40:94:86:76:d1:5b:fa:32:75:c4:e7:f5:d1:a2:2a:23:55: 87:cb:01:cf:96:0f:19:81:d1:8a:b2:a5:85:06:59:1a:36:45: 3c:46:97:c9:37:1b:7c:84:80:ff:ca:fc:7a:e2:56:31:9c:a2: 1e:d6:de:3d:e6:f7:f6:cf:2f:e7:e0:2e:6c:1c:b4:98:7f:a2: 78:f5:c9:95 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZvY4tA4eRJTjeG2HS9Vnd3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwMTIwMDA1MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODM0M2E3YjkwZDdjNDk5N2I3Yjg2YjUzZWUxNWQzY2M3NjA3NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM4KHAN/47YjCub7mqxNShXiEaXY CQOe+aD34iAT+7fwW138+3x8lCBhiduGsGfagedboBTiP7XaPSb+XOzGnxVyfjoW 8wu7Cb2XZ+TthMK0C2p1z9ICye1JthR61fbCQC4vI37i3bIk4drcWx4PlZxn7toX pCzoZUqBtK+2d7Gu3Xes040dwAZR0Lzh4w0JTB25AN2d3ZiGqKgZgu2zawus66n/ vwT+iO/sbVlBolctl8IT9+GoO0sqwL4IFLOHTJmitRAN9/f8i71g9LbxvG69tLmf ALhZCXZK6r0gO9G4Jl6tpxOsasJkQBeB79oGLhKDReQuns6KUkSwzbX7JwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBg0OnuQ18SZe3uGtT7hXTzHYHaQMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvR0RRNmU1RFh4Smw3ZTRhMVB1RmRQTWRnZHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAqBAIAATAkAwQBVmnOAwQC WSK0AwQEWS/QAwQDXrDIAwQEvNFgAwQBw7bcMB8EAgACMBkDBgcqAUcAgAMHACoD nCAgAgMGBCoDnCAwMA0GCSqGSIb3DQEBCwUAA4IBAQCWKr40+CbXsyXa5RMCGnJR EyPtmMiqNwldEvCRX2t5CpGRmQg6OcNXG6DY0YSxdkeEG89mcbrSzcYFcbQRb5i0 lduU943aNLPqfLOWf+kFO7CbhVFNQ7nWe/33AXFqjSKe61TtrtAwhAOXS7JrtuW0 xLQXCDagWX9fMzldLYjQ+KLyLRcNgErqeHDh1g9OFBOjUxZ3ZL2xc7q2IrxS5TKv aAG8mLgDxNKa2lgZLXq6XrQr1V9XQJSGdtFb+jJ1xOf10aIqI1WHywHPlg8ZgdGK sqWFBlkaNkU8RpfJNxt8hID/yvx64lYxnKIe1t495vf2zy/n4C5sHLSYf6J49cmV -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:57 2026 by rpki-client