This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GK8ThGDBrH03bTCq07eW6oxQ4wU.roa File: GK8ThGDBrH03bTCq07eW6oxQ4wU.roa (raw, json) Hash identifier: YIQF/rrQx3ADHCNSZmJEkEmslag1W5QUmVoWPFs7gf4= Subject key identifier: 18:AF:13:84:60:C1:AC:7D:37:6D:30:AA:D3:B7:96:EA:8C:50:E3:05 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77017A33F75846D9367F61B98F1D7 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GK8ThGDBrH03bTCq07eW6oxQ4wU.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58229 IP address blocks: 37.16.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:70:17:a3:3f:75:84:6d:93:67:f6:1b:98:f1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18af138460c1ac7d376d30aad3b796ea8c50e305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:18:e3:00:7d:4e:f4:c3:b3:0b:61:61:fa: 42:2d:43:94:5f:f5:e4:d1:4c:89:59:f7:eb:7e:1c: ad:83:f0:b4:ee:90:42:4a:f1:d3:d4:27:3c:7f:b3: ce:9c:b3:1d:4d:de:f0:b6:d1:f2:7a:9f:c9:d9:b3: 52:de:44:bc:3a:50:12:a6:83:b9:dc:7a:b5:16:69: 1d:5d:6e:3e:c3:5e:51:d8:f9:98:0f:eb:7c:53:62: 85:01:54:66:be:da:ce:84:72:fa:ef:1d:78:08:76: 74:84:77:f7:b3:a0:1c:d6:88:98:f7:44:58:20:41: 95:3f:57:1e:c7:08:ec:0c:5e:56:c0:3a:f7:89:9d: 2e:2a:e5:63:ab:a2:32:13:10:3f:d8:b2:44:a3:bb: 07:4e:6c:38:3c:61:98:1c:43:a4:7a:b2:8a:1d:9d: c0:89:05:1e:28:8b:ca:54:cd:dd:0e:77:db:be:72: b9:cf:a9:00:95:68:aa:99:b6:03:3c:b6:94:c9:dd: 1f:ea:46:82:99:de:e3:c0:1f:8d:be:08:b0:2c:69: 1c:00:90:6a:47:95:a7:df:fd:8b:dd:6c:62:d8:aa: ca:c4:bb:7d:81:12:3e:d9:b8:32:53:c7:ed:86:75: 20:e0:f2:d3:ca:97:b3:84:cc:6d:a0:16:28:b7:e3: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AF:13:84:60:C1:AC:7D:37:6D:30:AA:D3:B7:96:EA:8C:50:E3:05 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GK8ThGDBrH03bTCq07eW6oxQ4wU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.85.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:5b:97:37:08:35:58:36:f3:6f:27:e5:18:0c:9a:32:40:cd: 49:15:aa:a6:85:3f:95:f2:07:ae:8e:f7:12:63:48:9b:48:dd: 53:48:d3:e0:e3:77:bc:55:db:ca:eb:c3:63:2d:46:f8:97:b7: 60:0d:45:e7:f0:2e:bc:2f:30:29:ad:63:46:30:f0:af:a6:0c: 13:1b:75:dd:ec:44:55:4c:7e:8a:7a:e0:1d:d6:51:f5:7d:f4: af:62:9b:6d:84:52:22:09:f0:63:72:65:01:cd:38:de:a9:82: 07:f4:c4:49:6e:9d:66:02:06:bf:a3:ef:51:ac:cc:78:61:6d: eb:e4:c4:1f:bd:1c:45:4b:7c:4d:de:4f:38:ee:50:83:b6:06: 16:25:f2:97:2b:79:33:c8:b2:80:af:5f:8b:7b:a6:24:9d:e1: 2e:1d:f5:a9:3a:65:b2:f0:b4:9e:79:da:6b:30:01:6b:37:6a: bf:41:0a:a6:25:91:62:7a:b9:7d:03:34:fd:cb:be:e5:9f:d8: 02:4d:02:2b:b2:f7:e3:97:c9:c0:82:98:4e:a9:9a:04:bb:37: 80:6d:3f:e7:e8:35:ce:78:a6:1e:fc:71:f0:c4:31:49:0a:a1: 8a:69:61:5d:cc:31:8c:52:d5:cc:b1:35:a0:fa:7f:45:20:12: dd:3d:b7:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3AXoz91hG2TZ/YbmPHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGFmMTM4NDYwYzFhYzdkMzc2ZDMwYWFkM2I3OTZlYThjNTBlMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNoY4wB9TvTDswthYfpCLUOUX/Xk 0UyJWffrfhytg/C07pBCSvHT1Cc8f7POnLMdTd7wttHyep/J2bNS3kS8OlASpoO5 3Hq1FmkdXW4+w15R2PmYD+t8U2KFAVRmvtrOhHL67x14CHZ0hHf3s6Ac1oiY90RY IEGVP1cexwjsDF5WwDr3iZ0uKuVjq6IyExA/2LJEo7sHTmw4PGGYHEOkerKKHZ3A iQUeKIvKVM3dDnfbvnK5z6kAlWiqmbYDPLaUyd0f6kaCmd7jwB+NvgiwLGkcAJBq R5Wn3/2L3Wxi2KrKxLt9gRI+2bgyU8fthnUg4PLTypezhMxtoBYot+OcHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBivE4Rgwax9N20wqtO3luqMUOMFMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvR0s4VGhHREJySDAzYlRDcTA3ZVc2b3hRNHdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBVMA0G CSqGSIb3DQEBCwUAA4IBAQA9W5c3CDVYNvNvJ+UYDJoyQM1JFaqmhT+V8geujvcS Y0ibSN1TSNPg43e8VdvK68NjLUb4l7dgDUXn8C68LzAprWNGMPCvpgwTG3Xd7ERV TH6KeuAd1lH1ffSvYptthFIiCfBjcmUBzTjeqYIH9MRJbp1mAga/o+9RrMx4YW3r 5MQfvRxFS3xN3k847lCDtgYWJfKXK3kzyLKAr1+Le6YkneEuHfWpOmWy8LSeedpr MAFrN2q/QQqmJZFierl9AzT9y77ln9gCTQIrsvfjl8nAgphOqZoEuzeAbT/n6DXO eKYe/HHwxDFJCqGKaWFdzDGMUtXMsTWg+n9FIBLdPbez -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:47 2026 by rpki-client