This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/GkQSlEUvi4fNNDdQ901XpFZgHGc.roa File: GkQSlEUvi4fNNDdQ901XpFZgHGc.roa (raw, json) Hash identifier: BPA4YpVmwzK85pZgbFRFxFl8S/GQjk30Xmm4tS0QUjA= Subject key identifier: 1A:44:12:94:45:2F:8B:87:CD:34:37:50:F7:4D:57:A4:56:60:1C:67 Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C76CE3255FEDDB580AD63014BD9BF7 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/GkQSlEUvi4fNNDdQ901XpFZgHGc.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216127 IP address blocks: 94.228.161.0/24 maxlen: 24 178.236.253.0/24 maxlen: 24 178.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:e3:25:5f:ed:db:58:0a:d6:30:14:bd:9b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a441294452f8b87cd343750f74d57a456601c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:f9:c6:6c:96:ee:ee:2d:0c:d9:a3:e2:36: 0c:28:83:a9:1c:6f:03:78:6c:e3:9e:57:30:87:d6: 0b:04:c7:ac:c8:88:a5:dc:4f:96:62:d8:4b:39:c2: e0:d3:7a:a0:da:85:f6:e3:8c:70:5e:d6:3e:0b:c9: a3:98:30:61:10:bd:56:4a:c0:8a:a6:f7:f0:b6:b6: 4f:f5:7b:19:4f:b1:c9:00:12:4c:f5:5f:80:ed:e1: f2:de:b2:fa:06:94:5c:ae:11:af:98:47:22:5c:eb: 12:85:3c:d7:5d:c8:09:87:4b:c1:25:ec:e7:2e:46: e9:8c:09:90:0d:4a:5a:b7:bb:a9:92:85:1c:3e:cd: 79:c3:e7:19:ed:b5:a0:ef:20:dd:3a:7b:ce:14:67: 08:56:8f:fc:1f:14:c6:5e:0f:b2:ae:c3:71:7c:63: e4:f1:bc:d8:95:fc:d4:c6:34:1a:bc:39:2a:f0:b8: 60:f7:b1:9d:e2:fc:3f:be:18:e9:9a:9c:d8:11:da: 99:56:83:b2:4b:e3:55:1d:b3:d1:92:56:72:8a:3f: 2b:3f:61:62:6c:79:00:06:9b:9b:2f:36:7a:b7:8e: 77:62:d8:ff:98:78:bc:81:96:09:9e:c3:a7:f5:a4: ed:63:37:ad:9a:47:dd:fb:dc:d4:86:3c:93:9f:ba: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:12:94:45:2F:8B:87:CD:34:37:50:F7:4D:57:A4:56:60:1C:67 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/GkQSlEUvi4fNNDdQ901XpFZgHGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.161.0/24 178.236.253.0-178.236.254.255 Signature Algorithm: sha256WithRSAEncryption 4c:68:f4:50:ce:b8:31:98:f5:ca:1c:d0:2a:e1:6a:6b:2b:df: e8:6a:cf:21:c6:de:28:43:1f:cc:bb:45:3f:ba:c9:19:f0:7f: 53:04:7f:c4:4c:e6:38:81:ad:3a:91:8a:55:85:d6:73:87:99: 2d:ab:5e:5b:2e:b5:ff:07:50:7d:13:22:22:f6:90:3c:96:0b: 11:82:b6:65:89:2d:a2:b1:6e:c3:8c:63:16:9a:60:8f:ea:b1: a0:77:53:80:d0:67:2c:24:01:f5:a9:68:4a:c1:36:95:69:1e: 7b:4e:ba:13:d8:d4:cc:a6:33:5b:01:3e:e4:ff:fe:63:6d:6c: 2d:ca:18:33:80:00:b2:aa:20:07:7a:a9:cf:ca:42:95:04:74: 8b:19:42:e4:c4:0a:d6:38:cc:2b:3e:4d:e6:33:6d:85:40:8e: 13:67:5e:63:9a:69:4e:af:78:7c:ab:74:e2:9b:3f:24:14:70: dc:9a:11:e8:29:85:f4:31:fb:dc:b3:fd:88:4f:6c:65:8c:a1: 52:f1:72:9a:a5:59:de:2e:5b:c4:95:ff:7d:e7:a1:4c:72:3b: d1:8d:3b:e2:d1:fa:c6:26:03:6d:4a:0e:c9:23:e3:9e:f0:79: 1b:e3:cb:d2:12:e8:fc:3e:56:2f:f2:dc:ed:3f:c2:1c:e7:02: 60:8c:51:ea -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3x2zjJV/t21gK1jAUvZv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTQ0MTI5NDQ1MmY4Yjg3Y2QzNDM3NTBmNzRkNTdhNDU2NjAxYzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXL5xmyW7u4tDNmj4jYMKIOpHG8D eGzjnlcwh9YLBMesyIil3E+WYthLOcLg03qg2oX244xwXtY+C8mjmDBhEL1WSsCK pvfwtrZP9XsZT7HJABJM9V+A7eHy3rL6BpRcrhGvmEciXOsShTzXXcgJh0vBJezn LkbpjAmQDUpat7upkoUcPs15w+cZ7bWg7yDdOnvOFGcIVo/8HxTGXg+yrsNxfGPk 8bzYlfzUxjQavDkq8Lhg97Gd4vw/vhjpmpzYEdqZVoOyS+NVHbPRklZyij8rP2Fi bHkABpubLzZ6t453Ytj/mHi8gZYJnsOn9aTtYzetmkfd+9zUhjyTn7p9XQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBpEEpRFL4uHzTQ3UPdNV6RWYBxnMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvR2tRU2xFVXZpNGZOTkRkUTkwMVhwRlpnSEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXuShMAwD BACy7P0DBACy7P4wDQYJKoZIhvcNAQELBQADggEBAExo9FDOuDGY9coc0Crhamsr 3+hqzyHG3ihDH8y7RT+6yRnwf1MEf8RM5jiBrTqRilWF1nOHmS2rXlsutf8HUH0T IiL2kDyWCxGCtmWJLaKxbsOMYxaaYI/qsaB3U4DQZywkAfWpaErBNpVpHntOuhPY 1MymM1sBPuT//mNtbC3KGDOAALKqIAd6qc/KQpUEdIsZQuTECtY4zCs+TeYzbYVA jhNnXmOaaU6veHyrdOKbPyQUcNyaEegphfQx+9yz/YhPbGWMoVLxcpqlWd4uW8SV /33noUxyO9GNO+LR+sYmA21KDskj457weRvjy9IS6Pw+Vi/y3O0/whznAmCMUeo= -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:34 2026 by rpki-client