This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/GQnKZuqaC1lQKqAxlcLfxGrGlG4.roa File: GQnKZuqaC1lQKqAxlcLfxGrGlG4.roa (raw, json) Hash identifier: t7oFwi/gWuIS94bw7inznVjQJgQaV/0WoJ43tPdgbEo= Subject key identifier: 19:09:CA:66:EA:9A:0B:59:50:2A:A0:31:95:C2:DF:C4:6A:C6:94:6E Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3916E9BE9C66EDE0AE81AE354E88C2 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/GQnKZuqaC1lQKqAxlcLfxGrGlG4.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210276 IP address blocks: 85.143.238.0/24 maxlen: 24 86.110.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:16:e9:be:9c:66:ed:e0:ae:81:ae:35:4e:88:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1909ca66ea9a0b59502aa03195c2dfc46ac6946e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:6a:cb:e6:6f:05:a3:88:93:f8:71:a4:75: a1:3c:e4:d5:a5:04:0b:ee:1c:b2:1d:4d:89:06:7f: 20:f3:5b:e8:09:d7:57:8a:9d:b1:be:47:e9:22:5b: ab:0a:8c:68:fe:33:a9:da:16:bd:ea:80:31:68:08: 8f:c9:c7:3b:72:ee:f1:e1:60:d6:9d:45:bc:b1:82: 88:94:66:d4:2b:e9:f5:4f:d3:82:d1:62:ca:76:e6: 4f:bb:89:fd:4a:c1:1e:e5:a5:a1:e1:2f:60:c5:04: 52:1f:20:37:18:3b:57:0d:3d:46:c8:83:f9:58:43: 2f:20:04:c9:09:5c:d8:fb:38:8b:b6:79:52:68:e7: 44:56:88:c2:6d:11:91:de:de:37:f9:38:88:7d:b2: 90:04:a6:3a:d0:c5:12:2a:3c:43:9c:a2:47:0d:66: 55:11:ef:6a:1f:90:63:df:37:23:ca:8f:80:28:90: 24:6b:0c:7a:0b:b1:4b:33:48:dd:0f:24:b7:b2:ab: 43:22:72:c9:f7:dc:32:c3:26:c3:ca:27:ae:65:6e: 2c:ab:3d:80:d6:06:f7:e8:62:a2:ef:8c:92:27:3c: 68:c2:7e:0e:40:7a:d6:2a:d7:47:dc:ac:a2:33:17: b9:b7:e9:fe:81:9b:27:ac:1f:9d:f3:5e:2e:ea:5d: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:CA:66:EA:9A:0B:59:50:2A:A0:31:95:C2:DF:C4:6A:C6:94:6E X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/GQnKZuqaC1lQKqAxlcLfxGrGlG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.238.0/24 86.110.100.0/24 Signature Algorithm: sha256WithRSAEncryption 66:e8:b4:1a:4c:35:7c:d2:8e:07:e7:fd:09:26:f7:0a:de:62: e8:c7:ad:b7:8e:93:99:a7:0d:dd:90:01:d1:7f:98:51:5e:96: a9:27:76:46:03:3e:c0:36:d2:6e:b2:af:82:ef:e2:12:90:b3: 76:15:f5:95:45:70:bd:f6:36:cd:87:42:2c:92:6b:fd:b2:10: 8d:3b:84:ad:ba:e9:65:15:36:b9:f3:42:1b:bc:f4:a7:9f:b0: fd:7f:31:e8:f4:50:d6:48:d0:6e:c2:0b:97:f7:46:58:77:6b: ed:91:34:34:43:52:35:bb:df:ce:e4:44:66:1a:93:ce:23:22: f0:ad:4b:39:05:76:86:b2:5e:4a:6d:a3:be:85:04:ed:64:cf: a3:16:91:02:9a:8c:f2:75:ae:6a:c2:6b:e9:45:ae:db:b3:04: 9e:ea:93:10:e0:da:5b:5d:45:e7:7c:c3:17:75:ab:c9:f4:61: c5:cf:ee:46:9d:ca:50:c4:de:df:87:b5:ae:61:0c:59:e0:de: df:e6:11:94:30:2a:2c:17:92:20:17:0e:b3:a6:6e:ad:6f:b6: d9:15:9f:01:6f:45:a3:e8:e5:ae:f4:ba:35:fc:eb:75:5d:df: aa:cc:04:31:f8:0c:bf:58:b7:2d:42:c6:d5:5a:ab:e5:0c:5e: e0:6e:5b:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ORbpvpxm7eCuga41TojCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTA5Y2E2NmVhOWEwYjU5NTAyYWEwMzE5NWMyZGZjNDZhYzY5NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtipqy+ZvBaOIk/hxpHWhPOTVpQQL 7hyyHU2JBn8g81voCddXip2xvkfpIlurCoxo/jOp2ha96oAxaAiPycc7cu7x4WDW nUW8sYKIlGbUK+n1T9OC0WLKduZPu4n9SsEe5aWh4S9gxQRSHyA3GDtXDT1GyIP5 WEMvIATJCVzY+ziLtnlSaOdEVojCbRGR3t43+TiIfbKQBKY60MUSKjxDnKJHDWZV Ee9qH5Bj3zcjyo+AKJAkawx6C7FLM0jdDyS3sqtDInLJ99wywybDyieuZW4sqz2A 1gb36GKi74ySJzxown4OQHrWKtdH3KyiMxe5t+n+gZsnrB+d814u6l224QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBkJymbqmgtZUCqgMZXC38RqxpRuMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvR1FuS1p1cWFDMWxRS3FBeGxjTGZ4R3JHbEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVY/uAwQA Vm5kMA0GCSqGSIb3DQEBCwUAA4IBAQBm6LQaTDV80o4H5/0JJvcK3mLox623jpOZ pw3dkAHRf5hRXpapJ3ZGAz7ANtJusq+C7+ISkLN2FfWVRXC99jbNh0Iskmv9shCN O4StuullFTa580IbvPSnn7D9fzHo9FDWSNBuwguX90ZYd2vtkTQ0Q1I1u9/O5ERm GpPOIyLwrUs5BXaGsl5KbaO+hQTtZM+jFpECmozyda5qwmvpRa7bswSe6pMQ4Npb XUXnfMMXdavJ9GHFz+5GncpQxN7fh7WuYQxZ4N7f5hGUMCosF5IgFw6zpm6tb7bZ FZ8Bb0Wj6OWu9Lo1/Ot1Xd+qzAQx+Ay/WLctQsbVWqvlDF7gbluE -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:51 2026 by rpki-client