This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa File: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (raw, json) Hash identifier: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc= Subject key identifier: 1A:46:95:EA:3E:63:3F:3D:66:3F:E0:E7:F5:59:1E:D2:A2:2C:05:11 Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Certificate serial: 019B7EA58F2EDF03EA327E8CA4D0DA34D6A5 Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa Signing time: Fri 02 Jan 2026 12:18:57 +0000 ROA not before: Fri 02 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20625 IP address blocks: 185.197.92.0/22 maxlen: 22 2a02:ae8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8f:2e:df:03:ea:32:7e:8c:a4:d0:da:34:d6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be Validity Not Before: Jan 2 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a4695ea3e633f3d663fe0e7f5591ed2a22c0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:40:90:ec:70:58:2f:2f:24:d8:0b:1f:ca: f6:6d:aa:11:d7:1b:78:27:b2:22:be:d7:b9:c4:40: 0d:23:1d:51:56:f0:bf:e0:37:38:64:e4:40:89:da: e8:e1:4d:f7:c7:28:dc:48:e4:c7:5a:64:79:34:21: 03:6b:c7:4f:1d:ab:da:19:23:38:77:c4:d8:da:32: a5:ef:51:db:55:21:98:7f:01:94:a4:78:55:85:25: 60:3b:27:a5:23:bf:59:d8:32:8e:8f:b0:40:ff:fa: 88:da:83:98:f0:b5:a1:e0:cc:e7:74:f9:80:f6:3e: e7:78:dc:f8:0a:49:9b:f3:fb:c2:e1:87:0a:59:43: 22:f7:18:e4:f2:90:3a:8c:14:28:47:d7:24:c4:49: 4c:17:73:40:d9:43:1d:fa:f6:9b:cc:50:a2:53:da: 1b:98:af:2f:74:d2:35:01:a0:42:1b:87:8a:0e:fc: ca:31:49:47:bc:92:b5:37:8e:de:8e:79:93:38:57: 66:54:eb:b6:20:d2:1d:c0:77:e6:74:2b:f0:f1:38: d4:0e:bf:9c:54:a0:d7:ed:c3:62:d1:d0:ef:19:23: 1f:2f:11:06:4b:f7:7d:45:9f:82:a4:7d:b1:23:60: 4c:55:58:af:77:a0:d7:7c:f0:bc:92:8b:ac:a9:2c: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:46:95:EA:3E:63:3F:3D:66:3F:E0:E7:F5:59:1E:D2:A2:2C:05:11 X509v3 Authority Key Identifier: keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.92.0/22 IPv6: 2a02:ae8::/29 Signature Algorithm: sha256WithRSAEncryption 14:fd:fe:d9:60:cf:33:23:a3:99:bd:40:aa:d0:35:a8:52:f3: 9b:77:5c:e7:d9:9f:70:df:ca:07:4c:31:68:e7:39:f7:c9:80: be:c9:33:0a:20:54:51:fa:e3:8e:4d:0a:5e:47:58:9e:81:65: db:f7:84:2d:e8:8e:93:9a:97:3a:58:b5:cc:b8:d1:85:60:cb: 7f:f3:25:43:a8:5a:4b:e9:c4:97:68:f3:40:b5:8d:6b:f0:f1: f8:1f:95:7f:8b:4e:2a:3e:85:03:8d:3b:e4:98:4b:5a:d2:64: ce:aa:1a:8e:ce:34:12:cb:fc:36:99:15:fa:f2:a6:f1:f6:b7: 47:6f:3b:8d:8b:4b:d3:4a:da:7c:eb:46:f1:84:b6:00:c1:ac: 47:0a:3a:52:96:8d:46:df:10:09:69:49:54:c6:75:e4:af:4b: 91:d6:91:db:36:9c:2b:c0:d3:52:cf:32:b2:57:64:37:5c:59: 4e:22:5d:92:ce:25:f5:8e:0b:8a:db:f1:d4:41:f0:34:65:02: 5f:30:f2:ee:ad:f3:97:b9:d5:5b:f8:8e:01:39:20:0b:78:23: 10:ca:d4:2e:c9:08:89:d2:cb:45:f6:cf:3a:67:b0:ee:60:1b: 52:21:61:2f:9a:f6:bc:1b:5d:fa:7e:72:9e:7a:b8:7d:c4:c8: 90:11:0f:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pY8u3wPqMn6MpNDaNNalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz ZjIzYmUwHhcNMjYwMTAyMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTQ2OTVlYTNlNjMzZjNkNjYzZmUwZTdmNTU5MWVkMmEyMmMwNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRRAkOxwWC8vJNgLH8r2baoR1xt4 J7Iivte5xEANIx1RVvC/4Dc4ZORAidro4U33xyjcSOTHWmR5NCEDa8dPHavaGSM4 d8TY2jKl71HbVSGYfwGUpHhVhSVgOyelI79Z2DKOj7BA//qI2oOY8LWh4MzndPmA 9j7neNz4Ckmb8/vC4YcKWUMi9xjk8pA6jBQoR9ckxElMF3NA2UMd+vabzFCiU9ob mK8vdNI1AaBCG4eKDvzKMUlHvJK1N47ejnmTOFdmVOu2INIdwHfmdCvw8TjUDr+c VKDX7cNi0dDvGSMfLxEGS/d9RZ+CpH2xI2BMVVivd6DXfPC8kousqSwd0QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBpGleo+Yz89Zj/g5/VZHtKiLAURMB8GA1UdIwQY MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt MDA3OTc4YmRiMDUyLzEvR2thVjZqNWpQejFtUC1EbjlWa2UwcUlzQlJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucVcMA0E AgACMAcDBQMqAgroMA0GCSqGSIb3DQEBCwUAA4IBAQAU/f7ZYM8zI6OZvUCq0DWo UvObd1zn2Z9w38oHTDFo5zn3yYC+yTMKIFRR+uOOTQpeR1iegWXb94Qt6I6Tmpc6 WLXMuNGFYMt/8yVDqFpL6cSXaPNAtY1r8PH4H5V/i04qPoUDjTvkmEta0mTOqhqO zjQSy/w2mRX68qbx9rdHbzuNi0vTStp860bxhLYAwaxHCjpSlo1G3xAJaUlUxnXk r0uR1pHbNpwrwNNSzzKyV2Q3XFlOIl2SziX1jguK2/HUQfA0ZQJfMPLurfOXudVb +I4BOSALeCMQytQuyQiJ0stF9s86Z7DuYBtSIWEvmva8G136fnKeerh9xMiQEQ+u -----END CERTIFICATE-----Generated at Sun Jan 25 16:56:02 2026 by rpki-client