This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/G8RD2uK8jegsTsE-7XQ_nINovw8.roa File: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (raw, json) Hash identifier: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU= Subject key identifier: 1B:C4:43:DA:E2:BC:8D:E8:2C:4E:C1:3E:ED:74:3F:9C:83:68:BF:0F Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Certificate serial: 019B7DCAB9742544FAF6E0FF04F94E4BB47C Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/G8RD2uK8jegsTsE-7XQ_nINovw8.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20746 IP address blocks: 185.63.228.0/22 maxlen: 22 185.63.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b9:74:25:44:fa:f6:e0:ff:04:f9:4e:4b:b4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bc443dae2bc8de82c4ec13eed743f9c8368bf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:ee:fd:b2:61:c1:60:db:33:04:c1:6d:84: fa:88:64:60:18:5a:9d:82:db:00:96:28:0f:51:df: 42:6a:8c:09:07:73:e8:03:5a:96:e7:9d:7e:79:2b: aa:f4:58:46:b2:0c:0f:2f:17:c3:47:90:cb:e8:2a: 89:99:10:e0:6c:30:42:f5:b3:70:dd:6a:a7:f9:15: f5:07:b4:97:e1:71:25:e0:d0:cd:bc:34:e1:3b:d5: 89:b4:15:4e:da:e4:d2:cc:92:f2:19:7b:fc:21:78: 88:b2:8a:50:1f:59:9c:e9:3d:51:69:a4:10:07:8b: f2:4b:2c:8f:dd:74:09:81:75:7f:6b:7a:a3:16:46: ae:ba:17:2e:74:a2:ae:03:48:c6:df:41:11:b1:c8: 6a:58:15:17:99:51:d1:b1:fe:bb:df:c4:2c:0b:a9: 76:e1:8d:9d:aa:25:7d:9f:ca:c2:ea:50:c4:d4:ad: d7:66:ed:b0:67:21:28:12:6b:b5:66:ec:e8:a7:8f: 71:2b:ff:60:84:07:47:41:72:a8:cf:fe:66:96:d1: 2a:94:23:0f:26:96:eb:5c:5b:ad:d4:f2:56:61:6a: 57:32:33:5f:a7:1c:cd:84:81:73:91:6c:bc:9e:e5: 37:68:57:14:b5:a0:e8:fd:f8:cc:f6:79:c5:8c:a8: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C4:43:DA:E2:BC:8D:E8:2C:4E:C1:3E:ED:74:3F:9C:83:68:BF:0F X509v3 Authority Key Identifier: keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/G8RD2uK8jegsTsE-7XQ_nINovw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.228.0/22 Signature Algorithm: sha256WithRSAEncryption 30:cc:0f:56:c0:71:1e:56:2b:24:86:55:14:36:2f:ed:20:87: ac:df:26:22:08:04:a1:59:5b:f2:7b:4c:47:ae:8f:57:85:42: 35:90:28:f0:8d:c8:8f:9c:76:da:11:c5:66:34:88:24:5e:f3: da:af:f1:79:33:2c:18:67:15:2c:95:24:8b:22:90:f5:c9:e3: 92:91:f4:f8:69:89:9e:a8:b8:fc:e2:00:d9:b5:be:af:a1:df: 09:fe:97:22:9c:78:d7:dc:31:df:fe:fd:92:b7:e9:81:1d:62: ce:2b:52:ac:dc:f5:12:20:31:23:d0:b9:ff:0f:cd:f5:56:35: 1a:1c:71:a8:5f:18:4a:a1:b9:65:a9:7f:d3:87:32:bd:fd:e8: 27:c7:7d:d5:c1:98:80:8b:74:17:5f:db:7c:0c:76:91:a6:c5: c3:24:4c:a8:b6:65:41:f1:fc:c9:b5:e0:64:76:d7:f2:34:28: 8b:f8:5b:23:a3:d7:72:f1:54:5d:bb:f8:c9:0c:c7:5b:4c:4d: 20:6e:af:6b:6b:c1:3a:1e:56:01:66:7b:2b:98:f4:b7:d2:bf: da:78:65:a7:0f:f3:62:8b:1c:db:2f:2d:b5:e3:be:1b:39:b0: eb:8d:0f:47:8b:3a:54:bb:ee:08:a3:7e:2b:c2:5d:fa:7b:5d: da:e2:bf:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yrl0JUT69uD/BPlOS7R8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3 ZTViMmYwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmM0NDNkYWUyYmM4ZGU4MmM0ZWMxM2VlZDc0M2Y5YzgzNjhiZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiXu/bJhwWDbMwTBbYT6iGRgGFqd gtsAligPUd9CaowJB3PoA1qW551+eSuq9FhGsgwPLxfDR5DL6CqJmRDgbDBC9bNw 3Wqn+RX1B7SX4XEl4NDNvDThO9WJtBVO2uTSzJLyGXv8IXiIsopQH1mc6T1RaaQQ B4vySyyP3XQJgXV/a3qjFkauuhcudKKuA0jG30ERschqWBUXmVHRsf6738QsC6l2 4Y2dqiV9n8rC6lDE1K3XZu2wZyEoEmu1Zuzop49xK/9ghAdHQXKoz/5mltEqlCMP JpbrXFut1PJWYWpXMjNfpxzNhIFzkWy8nuU3aFcUtaDo/fjM9nnFjKjKxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvEQ9rivI3oLE7BPu10P5yDaL8PMB8GA1UdIwQY MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt ZGVjZWM0MWE3MWQxLzEvRzhSRDJ1SzhqZWdzVHNFLTdYUV9uSU5vdnc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT/kMA0G CSqGSIb3DQEBCwUAA4IBAQAwzA9WwHEeViskhlUUNi/tIIes3yYiCAShWVvye0xH ro9XhUI1kCjwjciPnHbaEcVmNIgkXvPar/F5MywYZxUslSSLIpD1yeOSkfT4aYme qLj84gDZtb6vod8J/pcinHjX3DHf/v2St+mBHWLOK1Ks3PUSIDEj0Ln/D831VjUa HHGoXxhKobllqX/ThzK9/egnx33VwZiAi3QXX9t8DHaRpsXDJEyotmVB8fzJteBk dtfyNCiL+Fsjo9dy8VRdu/jJDMdbTE0gbq9ra8E6HlYBZnsrmPS30r/aeGWnD/Ni ixzbLy21474bObDrjQ9HizpUu+4Io34rwl36e13a4r/x -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:04 2026 by rpki-client