This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ggcombk9N_G2IsO7EpSrajmpQH0.roa File: Ggcombk9N_G2IsO7EpSrajmpQH0.roa (raw, json) Hash identifier: uOilGoXuUD9LoMb2HNH1s4EIkCHO4YaCk/leG8yOmS0= Subject key identifier: 1A:07:28:99:B9:3D:37:F1:B6:22:C3:BB:12:94:AB:6A:39:A9:40:7D Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593B85336DCE5F45FBAAD9D8380E9B Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ggcombk9N_G2IsO7EpSrajmpQH0.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 85.204.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3b:85:33:6d:ce:5f:45:fb:aa:d9:d8:38:0e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a072899b93d37f1b622c3bb1294ab6a39a9407d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:67:a9:9a:77:17:35:c7:6f:db:f8:93:4e: 88:b2:87:6f:eb:09:12:62:03:4f:cf:0f:06:68:29: 28:b1:1c:5a:57:34:2b:13:c7:2a:76:1d:78:52:00: e2:21:67:4c:59:ad:ce:36:d9:c8:84:45:e1:cc:04: 00:1a:0b:67:80:26:ac:fb:b3:73:64:70:ca:5c:70: 4a:9f:76:b2:84:2e:f9:d4:fe:df:eb:4c:12:8a:1a: ff:dc:f6:dd:49:ca:9b:52:11:51:84:17:c8:4d:0b: 53:43:9f:b0:f9:b2:a8:5f:10:fd:b8:b7:98:31:8d: 05:b3:6d:5b:84:0a:d9:85:3b:33:8d:57:95:91:db: 75:3d:87:47:a6:57:ca:4a:a9:dc:9e:4c:b5:4d:4a: 0e:1d:56:bd:ae:a1:cd:65:5f:3b:21:29:ca:52:ad: db:eb:87:09:24:a8:23:cd:67:cc:4e:61:16:8f:4a: ed:b7:fd:76:b1:94:8a:18:e2:a6:4c:1e:2f:5e:08: 21:95:26:48:a3:0d:04:be:6b:06:e2:62:38:50:be: b8:00:e5:95:8e:18:b9:10:45:32:44:8c:ef:af:1c: fe:f6:58:6a:a6:81:a1:06:fc:b5:68:6c:4b:51:60: f9:de:51:2f:75:c6:a4:17:36:5c:10:09:66:20:d2: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:07:28:99:B9:3D:37:F1:B6:22:C3:BB:12:94:AB:6A:39:A9:40:7D X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Ggcombk9N_G2IsO7EpSrajmpQH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.99.0/24 Signature Algorithm: sha256WithRSAEncryption 05:df:5e:4b:5a:0b:16:ab:fb:16:54:64:b0:0d:bd:fc:da:f6: 41:91:ed:fa:c7:9b:e4:82:8c:18:6e:f1:d9:4b:01:9b:b5:72: b8:47:21:0e:4e:19:24:26:b6:62:b4:91:ac:0f:4d:45:e2:b5: ea:e1:11:0d:00:00:b7:60:e1:7b:1b:c8:06:e0:9f:97:eb:ee: 15:2b:d1:27:2c:2b:14:1f:c2:e1:37:98:a7:0b:06:e7:f8:08: cb:c3:29:51:3f:58:5c:bc:8c:c7:f8:ae:f9:23:bc:cf:79:61: 39:f6:03:26:e3:e2:e6:ca:90:f5:72:fd:36:7f:e8:78:1e:70: 67:55:0f:5a:f9:9e:3a:c1:84:9a:de:e4:94:d9:41:4e:7d:4a: ea:7f:71:98:9b:fd:5e:75:93:38:40:8b:a0:e5:66:58:a3:41: c6:94:3e:da:0a:25:2d:13:04:f9:7e:45:d5:8e:52:40:3d:65: 0c:d9:24:33:b7:bf:bb:b1:fc:ff:f0:39:ad:97:9d:b9:f0:aa: f0:8d:e0:94:1f:6d:40:50:55:a1:4f:d1:cf:1b:da:2f:01:47: 87:a8:d2:5f:b6:b5:8d:c3:c7:9a:d2:c3:1e:9f:d8:62:97:54: d4:d9:8a:4f:a8:2d:d0:6d:b2:28:c0:90:71:b2:c0:a9:52:6d: 3f:1a:c3:c0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WTuFM23OX0X7qtnYOA6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTA3Mjg5OWI5M2QzN2YxYjYyMmMzYmIxMjk0YWI2YTM5YTk0MDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqFnqZp3FzXHb9v4k06Isodv6wkS YgNPzw8GaCkosRxaVzQrE8cqdh14UgDiIWdMWa3ONtnIhEXhzAQAGgtngCas+7Nz ZHDKXHBKn3ayhC751P7f60wSihr/3PbdScqbUhFRhBfITQtTQ5+w+bKoXxD9uLeY MY0Fs21bhArZhTszjVeVkdt1PYdHplfKSqncnky1TUoOHVa9rqHNZV87ISnKUq3b 64cJJKgjzWfMTmEWj0rtt/12sZSKGOKmTB4vXgghlSZIow0EvmsG4mI4UL64AOWV jhi5EEUyRIzvrxz+9lhqpoGhBvy1aGxLUWD53lEvdcakFzZcEAlmINJNYQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBoHKJm5PTfxtiLDuxKUq2o5qUB9MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0dnY29tYms5Tl9HMklzTzdFcFNyYWptcFFIMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABVzGMw DQYJKoZIhvcNAQELBQADggEBAAXfXktaCxar+xZUZLANvfza9kGR7frHm+SCjBhu 8dlLAZu1crhHIQ5OGSQmtmK0kawPTUXiterhEQ0AALdg4XsbyAbgn5fr7hUr0Scs KxQfwuE3mKcLBuf4CMvDKVE/WFy8jMf4rvkjvM95YTn2Aybj4ubKkPVy/TZ/6Hge cGdVD1r5njrBhJre5JTZQU59Sup/cZib/V51kzhAi6DlZlijQcaUPtoKJS0TBPl+ RdWOUkA9ZQzZJDO3v7ux/P/wOa2XnbnwqvCN4JQfbUBQVaFP0c8b2i8BR4eo0l+2 tY3Dx5rSwx6f2GKXVNTZik+oLdBtsijAkHGywKlSbT8aw8A= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:47 2026 by rpki-client