This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/Gk0VdZH80LfuSionJyzH6apHdMk.roa File: Gk0VdZH80LfuSionJyzH6apHdMk.roa (raw, json) Hash identifier: v8qmy5Rl4qBq/+q1ZOoFGDMALQWTll59ihxVCNxLx/c= Subject key identifier: 1A:4D:15:75:91:FC:D0:B7:EE:4A:2A:27:27:2C:C7:E9:AA:47:74:C9 Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba Certificate serial: 019B7D5CA528D0264429FBCC7F4DE21676AD Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/Gk0VdZH80LfuSionJyzH6apHdMk.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59574 IP address blocks: 95.215.230.0/23 maxlen: 23 95.215.230.0/24 maxlen: 24 95.215.231.0/24 maxlen: 24 185.204.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a5:28:d0:26:44:29:fb:cc:7f:4d:e2:16:76:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a4d157591fcd0b7ee4a2a27272cc7e9aa4774c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ae:f3:f5:48:3c:3e:aa:12:04:04:d6:7f:cf: 53:76:72:19:ac:8c:b3:1a:92:b9:6c:82:62:06:18: ed:d8:f9:ef:0f:7b:52:3b:87:72:a1:0b:cf:08:54: 76:91:9c:0e:18:6b:aa:45:5a:28:f4:b3:13:62:75: ad:d4:2d:ca:73:b4:00:61:ad:88:ea:de:e8:39:0a: ac:0c:11:ec:58:89:21:f4:29:58:72:98:a0:32:b9: c5:61:2d:ba:09:82:d8:11:f8:f0:6f:ed:78:8d:9b: a5:c8:a5:40:aa:12:af:28:b4:6c:65:52:37:f5:8a: 61:ca:74:51:d8:18:0c:10:b8:2a:29:b7:a2:3b:53: f8:ad:1d:6e:87:40:f1:d7:00:6e:56:1d:e2:bd:12: 95:8e:17:bd:6f:1a:7e:8a:82:6e:9b:84:70:83:27: b7:59:06:6a:7d:b9:85:17:68:36:c6:7e:73:8a:fe: 97:c1:46:0f:1a:4e:f8:39:8e:69:c5:89:f4:ed:a2: 4a:ec:f6:39:b0:70:aa:18:f2:08:aa:e7:5e:90:54: 19:f0:97:1d:2e:df:43:f6:e0:b3:6a:00:44:c8:13: 39:87:3f:4b:5d:96:89:13:ae:6f:22:59:c1:e2:c9: 8e:2d:13:c1:b6:8d:d8:ea:71:03:cd:f6:7b:ba:c8: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4D:15:75:91:FC:D0:B7:EE:4A:2A:27:27:2C:C7:E9:AA:47:74:C9 X509v3 Authority Key Identifier: keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/Gk0VdZH80LfuSionJyzH6apHdMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.230.0/23 185.204.110.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:2b:c0:5b:a0:b9:fe:47:c2:32:30:04:9c:d4:56:a7:5b:48: 4a:24:40:66:60:8a:4c:1d:6b:4c:7c:fd:3b:37:6d:b4:85:56: 4c:ab:27:22:b8:ae:42:5b:1b:55:a4:0e:54:2b:4c:54:58:61: 7b:8b:1b:c1:95:06:5a:77:e3:02:f4:4e:82:45:d9:cb:30:3b: b3:7b:32:bc:3c:a4:28:11:02:34:45:0b:c3:e5:23:e3:45:14: 40:68:1a:41:a8:a0:25:4b:1d:76:ff:b0:f7:e1:eb:e6:11:22: 10:07:6c:5b:6f:5a:76:9a:53:d8:ec:70:c2:7c:f5:4c:ca:0f: 9e:d5:c7:e4:44:26:fa:48:59:54:bf:39:a7:28:f5:95:0b:97: 25:d8:32:61:25:d1:09:2f:d9:bb:2d:5d:b1:8d:53:25:90:8c: e6:c5:4b:ce:8d:4f:b6:31:d3:2d:fa:37:f2:2b:e5:14:88:b7: 83:86:55:a6:00:80:96:1c:81:11:2a:0a:d3:f1:82:97:b8:6d: 8d:8a:3e:07:96:2f:53:30:75:0d:eb:09:2e:0e:84:4c:7b:b8: 24:f3:e1:ab:3e:15:db:45:5f:6f:28:54:30:2a:90:2f:30:91: 22:e8:b5:7e:16:68:38:6c:96:3a:47:5d:18:30:6b:93:a2:36: e2:4d:44:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XKUo0CZEKfvMf03iFnatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MjMwNGNlY2U3ZmI2NTUxZDYyMWUyNTc3NDM3NTNkN2Qz ZTdlYmEwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTRkMTU3NTkxZmNkMGI3ZWU0YTJhMjcyNzJjYzdlOWFhNDc3NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA467z9Ug8PqoSBATWf89TdnIZrIyz GpK5bIJiBhjt2PnvD3tSO4dyoQvPCFR2kZwOGGuqRVoo9LMTYnWt1C3Kc7QAYa2I 6t7oOQqsDBHsWIkh9ClYcpigMrnFYS26CYLYEfjwb+14jZulyKVAqhKvKLRsZVI3 9YphynRR2BgMELgqKbeiO1P4rR1uh0Dx1wBuVh3ivRKVjhe9bxp+ioJum4Rwgye3 WQZqfbmFF2g2xn5ziv6XwUYPGk74OY5pxYn07aJK7PY5sHCqGPIIqudekFQZ8Jcd Lt9D9uCzagBEyBM5hz9LXZaJE65vIlnB4smOLRPBto3Y6nEDzfZ7usgZ2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBpNFXWR/NC37koqJycsx+mqR3TJMB8GA1UdIwQY MBaAFHkjBM7Of7ZVHWIeJXdDdT19Pn66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEt ZWQ4MmFlN2RiZDU5LzEvR2swVmRaSDgwTGZ1U2lvbkp5ekg2YXBIZE1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEtZWQ4MmFlN2RiZDU5 LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBX9fmAwQA ucxuMA0GCSqGSIb3DQEBCwUAA4IBAQBMK8BboLn+R8IyMASc1FanW0hKJEBmYIpM HWtMfP07N220hVZMqyciuK5CWxtVpA5UK0xUWGF7ixvBlQZad+MC9E6CRdnLMDuz ezK8PKQoEQI0RQvD5SPjRRRAaBpBqKAlSx12/7D34evmESIQB2xbb1p2mlPY7HDC fPVMyg+e1cfkRCb6SFlUvzmnKPWVC5cl2DJhJdEJL9m7LV2xjVMlkIzmxUvOjU+2 MdMt+jfyK+UUiLeDhlWmAICWHIERKgrT8YKXuG2Nij4Hli9TMHUN6wkuDoRMe7gk 8+GrPhXbRV9vKFQwKpAvMJEi6LV+Fmg4bJY6R10YMGuTojbiTURB -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:21 2026 by rpki-client