This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/GEKxvGic2KzXVJsj3dcok72CGco.roa File: GEKxvGic2KzXVJsj3dcok72CGco.roa (raw, json) Hash identifier: aFBfIqFU6Ts846KW9SXo+ReP3IL9/U988JwYsIxQACw= Subject key identifier: 18:42:B1:BC:68:9C:D8:AC:D7:54:9B:23:DD:D7:28:93:BD:82:19:CA Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 019B7F83615A2E3AA147441C3D2D6821B9FB Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/GEKxvGic2KzXVJsj3dcok72CGco.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206849 IP address blocks: 95.173.166.0/24 maxlen: 24 95.173.167.0/24 maxlen: 24 95.173.173.0/24 maxlen: 24 95.173.174.0/24 maxlen: 24 95.173.175.0/24 maxlen: 24 95.173.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:61:5a:2e:3a:a1:47:44:1c:3d:2d:68:21:b9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1842b1bc689cd8acd7549b23ddd72893bd8219ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:cd:a6:86:fe:bd:66:ac:38:b7:f3:1d:ec: 83:5c:10:84:fc:de:85:fa:15:b2:04:3c:0b:f6:c0: 15:83:13:a5:66:78:17:8e:e1:9c:32:f2:9b:2c:80: 4f:bd:19:48:38:59:f9:67:39:56:74:ba:eb:72:d2: cd:3e:c7:d3:f7:b8:5a:04:0d:6b:d5:a0:b5:e5:98: e4:38:8e:08:78:2d:1d:0f:84:87:22:7a:33:5e:c5: c3:64:e9:f9:6b:6b:a5:22:4a:de:26:1a:8e:35:b0: be:ef:30:09:92:e4:bf:bf:45:1f:b7:c6:21:5e:9d: f2:ca:b1:9a:7d:a3:58:66:8f:04:58:5b:ce:a3:b4: 23:13:41:37:42:a0:45:37:42:98:96:a9:69:43:21: a8:ea:f3:e2:eb:8e:db:07:0f:de:74:4b:f2:6d:ad: 40:c0:f0:32:53:df:22:2e:88:50:6d:0e:98:fb:dc: 02:36:e0:ab:09:39:ed:6b:cc:d2:b0:3b:63:bf:7b: 46:17:6c:52:58:5a:9c:39:ce:2d:ba:da:88:8e:38: f7:4b:67:3a:15:96:ff:80:c2:1d:2e:ec:ad:37:33: b9:0c:cc:07:3a:03:26:4d:8b:ac:95:a6:dc:8b:48: 40:3e:df:47:a9:49:af:d6:e9:da:2e:c4:da:0e:34: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:42:B1:BC:68:9C:D8:AC:D7:54:9B:23:DD:D7:28:93:BD:82:19:CA X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/GEKxvGic2KzXVJsj3dcok72CGco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.173.166.0/23 95.173.173.0-95.173.176.255 Signature Algorithm: sha256WithRSAEncryption 71:43:f7:d1:00:10:8e:54:f0:d1:eb:98:29:da:94:91:15:3d: 66:0e:30:c7:77:22:6c:be:03:e0:f9:1f:c6:e6:1b:56:ee:3d: c2:97:e8:2c:dc:08:34:8b:10:c8:08:51:3e:e5:ec:ee:2f:ec: ba:a1:55:b0:27:3b:1b:ee:89:51:25:b7:c6:01:0a:3a:c3:cd: 65:42:04:be:ce:cb:81:f1:4f:83:72:2d:f7:84:52:ec:bd:7e: 18:a0:ff:c4:23:c9:f1:88:43:07:ee:35:e6:a6:0e:e9:ce:65: b7:f8:c0:94:68:78:b8:18:0f:9a:7a:c1:8c:f7:3d:c0:e0:e0: fe:0b:3b:f2:4e:bb:39:80:d7:f0:ef:60:87:48:08:77:f6:90: ce:52:20:d4:f7:3d:e4:93:77:1b:d5:46:57:17:cb:d8:0d:32: 20:5d:bb:08:5c:61:54:c2:95:15:ac:01:4e:6e:c2:13:51:51: 1e:ba:5e:c5:7b:c1:e1:56:01:80:9e:ad:39:af:be:cc:5e:16: bb:6c:4d:06:12:49:ca:8e:ec:7d:3c:83:66:b8:2e:ba:79:8a: da:57:0f:64:fa:41:02:7d:2a:96:e5:9f:dc:61:39:49:8c:8f: 6f:45:62:d4:9a:a4:cd:58:95:67:d9:c8:89:6b:c5:e5:52:39: 42:6a:3e:45 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/g2FaLjqhR0QcPS1oIbn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODQyYjFiYzY4OWNkOGFjZDc1NDliMjNkZGQ3Mjg5M2JkODIxOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzbNpob+vWasOLfzHeyDXBCE/N6F +hWyBDwL9sAVgxOlZngXjuGcMvKbLIBPvRlIOFn5ZzlWdLrrctLNPsfT97haBA1r 1aC15ZjkOI4IeC0dD4SHInozXsXDZOn5a2ulIkreJhqONbC+7zAJkuS/v0Uft8Yh Xp3yyrGafaNYZo8EWFvOo7QjE0E3QqBFN0KYlqlpQyGo6vPi647bBw/edEvyba1A wPAyU98iLohQbQ6Y+9wCNuCrCTnta8zSsDtjv3tGF2xSWFqcOc4tutqIjjj3S2c6 FZb/gMIdLuytNzO5DMwHOgMmTYuslabci0hAPt9HqUmv1unaLsTaDjTeMwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBhCsbxonNis11SbI93XKJO9ghnKMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvR0VLeHZHaWMyS3pYVkpzajNkY29rNzJDR2NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBX62mMAwD BABfra0DBABfrbAwDQYJKoZIhvcNAQELBQADggEBAHFD99EAEI5U8NHrmCnalJEV PWYOMMd3Imy+A+D5H8bmG1buPcKX6CzcCDSLEMgIUT7l7O4v7LqhVbAnOxvuiVEl t8YBCjrDzWVCBL7Oy4HxT4NyLfeEUuy9fhig/8QjyfGIQwfuNeamDunOZbf4wJRo eLgYD5p6wYz3PcDg4P4LO/JOuzmA1/DvYIdICHf2kM5SINT3PeSTdxvVRlcXy9gN MiBduwhcYVTClRWsAU5uwhNRUR66XsV7weFWAYCerTmvvsxeFrtsTQYSScqO7H08 g2a4Lrp5itpXD2T6QQJ9Kpbln9xhOUmMj29FYtSapM1YlWfZyIlrxeVSOUJqPkU= -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:40 2026 by rpki-client