This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/gkon8URGKawWYsPCktsOv4GJyC0.roa File: gkon8URGKawWYsPCktsOv4GJyC0.roa (raw, json) Hash identifier: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM= Subject key identifier: 82:4A:27:F1:44:46:29:AC:16:62:C3:C2:92:DB:0E:BF:81:89:C8:2D Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2 Certificate serial: 019BDB3F0F6AD6D84A8E78BF213B6A31B972 Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/gkon8URGKawWYsPCktsOv4GJyC0.roa Signing time: Tue 20 Jan 2026 11:51:41 +0000 ROA not before: Tue 20 Jan 2026 11:51:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 46.175.131.0/24 maxlen: 24 185.46.173.0/24 maxlen: 24 185.218.207.0/24 maxlen: 24 2a12:4180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:3f:0f:6a:d6:d8:4a:8e:78:bf:21:3b:6a:31:b9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2 Validity Not Before: Jan 20 11:51:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=824a27f1444629ac1662c3c292db0ebf8189c82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:e0:31:de:b1:95:84:ff:8e:4c:a1:68:22: 9a:16:ee:ae:03:0c:05:3f:ba:ae:0a:96:fb:81:03: 96:3a:b3:94:85:9e:34:68:2f:46:c9:19:75:aa:48: 02:75:e7:38:b1:92:b7:9f:bd:91:7f:56:89:43:70: 59:8d:2e:f6:65:bc:1d:b6:27:b9:ec:4c:ed:83:71: 76:b0:a8:86:6d:25:7d:b8:c3:6e:c7:a6:81:2b:38: 14:09:43:fe:6e:0a:70:39:fc:31:4c:e4:54:a5:8f: b0:77:dc:51:6c:19:8a:f5:2a:6a:ae:a4:76:a6:98: 48:9b:2d:2c:1f:fa:14:8a:e8:be:0b:76:44:1e:44: 1f:d8:d3:f0:2c:11:e2:71:26:71:bf:86:40:10:f3: e4:b1:17:6b:94:f0:63:fc:58:ee:80:f7:73:a2:fb: 57:a0:df:25:ca:8c:30:29:8b:50:63:3f:50:61:e8: a1:a1:7d:00:5a:42:67:bc:3b:1b:4f:f3:b2:f7:70: cf:7e:30:db:bd:34:12:5c:9d:d6:eb:a2:dd:dd:38: f3:79:ac:30:5d:3f:89:e6:8c:f6:d1:6e:14:f2:49: 3e:4d:85:00:19:3b:63:87:56:a4:7a:cc:47:a1:33: 3a:e6:5b:85:ad:c2:f8:6a:22:36:02:39:63:af:20: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:27:F1:44:46:29:AC:16:62:C3:C2:92:DB:0E:BF:81:89:C8:2D X509v3 Authority Key Identifier: keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/gkon8URGKawWYsPCktsOv4GJyC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.131.0/24 185.46.173.0/24 185.218.207.0/24 IPv6: 2a12:4180::/29 Signature Algorithm: sha256WithRSAEncryption 9c:90:eb:1d:6e:b8:1c:24:46:15:8a:81:aa:75:ff:42:74:6d: 83:be:8e:df:94:89:e5:64:0f:2e:b1:8f:79:21:f8:aa:be:b0: 8b:45:43:cd:77:ec:17:51:85:f4:99:5c:05:fa:e8:a7:8d:b8: 34:3f:5a:6a:cf:b6:c8:23:19:3e:da:ff:34:ad:8d:4b:68:f9: 06:ed:ab:61:dc:e5:66:33:d4:64:f4:ac:e8:0d:a9:26:2a:61: 44:4a:48:34:1d:f6:47:24:74:82:49:04:1c:2f:2c:cf:8b:82: 28:a4:0e:4b:ab:b0:3f:ed:13:20:44:54:a4:eb:90:e0:24:66: 26:94:0b:2c:8a:cf:7d:a6:b9:c5:df:a3:25:e8:92:98:b1:12: c1:e3:3b:39:f6:54:21:82:26:8a:3b:75:84:05:db:ca:6c:fa: 5a:f7:19:e1:95:b4:42:3f:57:9a:43:e3:37:89:41:a6:1c:c0: 92:83:e8:a2:13:f5:17:f7:63:ae:51:fd:fa:a1:e9:95:e2:b9: 72:f7:dd:b0:b3:97:e1:d0:d7:95:13:3e:07:05:c4:fc:13:15: 99:bb:10:b1:6a:0a:9f:e6:a4:8b:64:83:a8:ae:ff:f6:d0:92: cd:26:b4:b2:a0:b3:6a:1c:bc:a6:87:f6:8c:7c:32:c0:68:e9: c3:bd:54:b1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZvbPw9q1thKjni/ITtqMblyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi OTNjYzIwHhcNMjYwMTIwMTE1MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjRhMjdmMTQ0NDYyOWFjMTY2MmMzYzI5MmRiMGViZjgxODljODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IDgMd6xlYT/jkyhaCKaFu6uAwwF P7quCpb7gQOWOrOUhZ40aC9GyRl1qkgCdec4sZK3n72Rf1aJQ3BZjS72Zbwdtie5 7Eztg3F2sKiGbSV9uMNux6aBKzgUCUP+bgpwOfwxTORUpY+wd9xRbBmK9SpqrqR2 pphImy0sH/oUiui+C3ZEHkQf2NPwLBHicSZxv4ZAEPPksRdrlPBj/FjugPdzovtX oN8lyowwKYtQYz9QYeihoX0AWkJnvDsbT/Oy93DPfjDbvTQSXJ3W66Ld3Tjzeaww XT+J5oz20W4U8kk+TYUAGTtjh1akesxHoTM65luFrcL4aiI2AjljryAbLwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIJKJ/FERimsFmLDwpLbDr+BicgtMB8GA1UdIwQY MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et ZmYwNWQ0NDZlN2ZkLzEvZ2tvbjhVUkdLYXdXWXNQQ2t0c092NEdKeUMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2EtZmYwNWQ0NDZlN2Zk LzEvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALq+DAwQA uS6tAwQAudrPMA0EAgACMAcDBQMqEkGAMA0GCSqGSIb3DQEBCwUAA4IBAQCckOsd brgcJEYVioGqdf9CdG2Dvo7flInlZA8usY95IfiqvrCLRUPNd+wXUYX0mVwF+uin jbg0P1pqz7bIIxk+2v80rY1LaPkG7ath3OVmM9Rk9KzoDakmKmFESkg0HfZHJHSC SQQcLyzPi4IopA5Lq7A/7RMgRFSk65DgJGYmlAssis99prnF36Ml6JKYsRLB4zs5 9lQhgiaKO3WEBdvKbPpa9xnhlbRCP1eaQ+M3iUGmHMCSg+iiE/UX92OuUf36oemV 4rly992ws5fh0NeVEz4HBcT8ExWZuxCxagqf5qSLZIOorv/20JLNJrSyoLNqHLym h/aMfDLAaOnDvVSx -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:41 2026 by rpki-client