This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa File: gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa (raw, json) Hash identifier: FSsCz3l2v0+0v9doEdJtlcnkPmunLIWLZEkaSuag6Ws= Subject key identifier: 80:1A:0D:51:0F:C2:4C:69:D6:81:43:34:EC:61:6B:FA:B0:56:06:36 Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a Certificate serial: 019B7C7FF97A60DB13F1E56F4E314EAAC979 Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa Signing time: Fri 02 Jan 2026 02:18:40 +0000 ROA not before: Fri 02 Jan 2026 02:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43606 IP address blocks: 85.116.182.0/24 maxlen: 24 91.212.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f9:7a:60:db:13:f1:e5:6f:4e:31:4e:aa:c9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a Validity Not Before: Jan 2 02:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=801a0d510fc24c69d6814334ec616bfab0560636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:f7:bc:2f:fa:36:1f:df:39:70:16:b9:80: ba:1e:7d:18:77:b1:65:63:05:fb:ea:56:81:e0:3e: 42:9b:08:80:dd:bd:23:b4:b0:0b:6e:a1:ec:20:22: 6d:2b:10:88:5e:a5:78:9b:30:c1:e0:52:e4:7e:b1: 17:2c:72:cf:4e:be:ae:22:07:6d:0a:c8:98:bc:02: 47:18:a4:fe:f8:f4:1c:73:ac:f3:c6:87:8c:e0:22: e6:6a:20:64:b1:03:1c:03:9b:88:03:ed:07:59:f9: 1c:1a:1b:82:ad:69:0b:c5:96:c4:dd:d1:b8:cd:96: d8:9d:c3:fa:5c:19:d2:48:8c:7a:20:b0:3b:44:86: 8d:29:8c:c1:b2:a0:f6:14:40:17:68:18:ff:5a:65: 7f:20:47:a0:32:75:2a:5b:77:a8:87:56:57:ba:50: ea:3b:35:56:b4:8b:11:3c:58:2a:86:bb:91:ab:dc: 57:c0:d2:1c:93:d4:e1:64:03:07:c0:5d:e8:56:82: 22:34:1a:4e:ce:ae:5b:3c:d4:f4:8c:4c:94:56:73: d6:2e:3d:42:f4:43:3b:bf:25:9d:83:6c:75:55:80: a2:63:c9:84:cd:81:be:2a:27:68:61:90:c2:26:61: 49:49:c6:2c:44:f5:84:f3:90:38:9f:ff:f1:49:e2: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1A:0D:51:0F:C2:4C:69:D6:81:43:34:EC:61:6B:FA:B0:56:06:36 X509v3 Authority Key Identifier: keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.182.0/24 91.212.93.0/24 Signature Algorithm: sha256WithRSAEncryption 03:e5:59:e5:ea:e1:17:4f:0d:02:4b:91:b6:ea:d4:d0:7b:f6: 50:7e:05:e2:41:6b:0c:b9:86:45:7c:b5:f2:67:19:06:06:65: 9f:5f:b6:89:eb:1d:94:c0:af:d3:a6:f2:c0:c6:79:cd:ee:af: b7:c3:62:5f:ec:3c:ce:16:7e:49:b0:fb:aa:62:5a:f4:29:26: 41:d0:80:1d:5d:ce:ef:0f:ac:b7:0e:85:20:aa:1c:c6:31:77: 1a:85:f1:db:f7:9e:38:67:21:fd:be:6c:ce:97:a9:f0:61:b0: e9:f1:40:c3:03:76:42:7e:0c:e2:ae:31:b8:a7:4c:87:49:e5: f5:5a:21:de:e8:74:e3:2d:8e:63:d6:64:28:93:72:82:8d:7d: 97:8a:77:6a:d8:d9:dc:75:70:a2:eb:89:d7:10:a4:cf:ba:b2: c3:bd:74:0d:8d:6a:7e:db:46:6f:98:5e:ba:1a:ba:af:ff:b6: 12:47:12:35:72:a6:2f:1f:61:6f:bc:3f:a2:53:49:a0:b3:20: 44:19:d6:88:4f:d2:da:6e:a9:cb:06:c2:4d:ad:80:99:c2:0a: 27:55:45:22:c0:fa:e2:b7:b0:86:f9:6f:0b:34:43:a7:e4:07: 39:de:50:67:28:fc:9e:b2:eb:79:9c:4b:dd:41:c4:4f:05:cb: 06:dd:76:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f/l6YNsT8eVvTjFOqsl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzExMzQxM2QwZGY1YjhmYTA2OTAxMWVlYjEwOWYwNjdi NTU3OWEwHhcNMjYwMTAyMDIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDFhMGQ1MTBmYzI0YzY5ZDY4MTQzMzRlYzYxNmJmYWIwNTYwNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2b3vC/6Nh/fOXAWuYC6Hn0Yd7Fl YwX76laB4D5CmwiA3b0jtLALbqHsICJtKxCIXqV4mzDB4FLkfrEXLHLPTr6uIgdt CsiYvAJHGKT++PQcc6zzxoeM4CLmaiBksQMcA5uIA+0HWfkcGhuCrWkLxZbE3dG4 zZbYncP6XBnSSIx6ILA7RIaNKYzBsqD2FEAXaBj/WmV/IEegMnUqW3eoh1ZXulDq OzVWtIsRPFgqhruRq9xXwNIck9ThZAMHwF3oVoIiNBpOzq5bPNT0jEyUVnPWLj1C 9EM7vyWdg2x1VYCiY8mEzYG+KidoYZDCJmFJScYsRPWE85A4n//xSeLMzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIAaDVEPwkxp1oFDNOxha/qwVgY2MB8GA1UdIwQY MBaAFPDBE0E9DfW4+gaQEe6xCfBntVeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUt NTAyNjFiMTE5MTZiLzEvZ0JvTlVRX0NUR25XZ1VNMDdHRnItckJXQmpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUtNTAyNjFiMTE5MTZi LzEvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXS2AwQA W9RdMA0GCSqGSIb3DQEBCwUAA4IBAQAD5Vnl6uEXTw0CS5G26tTQe/ZQfgXiQWsM uYZFfLXyZxkGBmWfX7aJ6x2UwK/TpvLAxnnN7q+3w2Jf7DzOFn5JsPuqYlr0KSZB 0IAdXc7vD6y3DoUgqhzGMXcahfHb9544ZyH9vmzOl6nwYbDp8UDDA3ZCfgzirjG4 p0yHSeX1WiHe6HTjLY5j1mQok3KCjX2Xindq2NncdXCi64nXEKTPurLDvXQNjWp+ 20ZvmF66Grqv/7YSRxI1cqYvH2FvvD+iU0mgsyBEGdaIT9LabqnLBsJNrYCZwgon VUUiwPrit7CG+W8LNEOn5Ac53lBnKPyesut5nEvdQcRPBcsG3XYF -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:59 2026 by rpki-client