This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/GkysysiUBXozBtdhxp6l182WpJ8.roa File: GkysysiUBXozBtdhxp6l182WpJ8.roa (raw, json) Hash identifier: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454= Subject key identifier: 1A:4C:AC:CA:C8:94:05:7A:33:06:D7:61:C6:9E:A5:D7:CD:96:A4:9F Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Certificate serial: 019B7BA4566BA6702E5E42F299D5AF156B52 Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/GkysysiUBXozBtdhxp6l182WpJ8.roa Signing time: Thu 01 Jan 2026 22:18:46 +0000 ROA not before: Thu 01 Jan 2026 22:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202844 IP address blocks: 185.151.208.0/22 maxlen: 22 185.151.208.0/23 maxlen: 23 185.151.210.0/23 maxlen: 23 2a0e:e640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:56:6b:a6:70:2e:5e:42:f2:99:d5:af:15:6b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Validity Not Before: Jan 1 22:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a4caccac894057a3306d761c69ea5d7cd96a49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:88:07:06:35:67:e6:70:97:92:f1:ff:2e: be:0d:c4:a0:15:6f:ed:7d:2d:6c:3a:c6:18:b6:1c: 38:98:31:36:1b:3e:b7:db:8f:94:2d:43:7c:d4:8d: 29:8f:37:aa:89:7e:21:8b:56:4e:f0:7d:9b:6a:39: 5e:25:5c:0b:36:3b:0c:11:82:28:b4:4e:4b:cf:f5: 3d:35:6a:44:9f:b3:c3:b7:62:0a:9c:66:6e:82:a7: e1:0c:f8:60:6f:cb:3f:6d:80:e1:3e:6c:b6:5c:13: ba:dd:aa:2e:57:6a:0e:d8:f0:82:e6:b5:2b:80:8d: c8:77:7a:f7:33:bf:a1:8f:ef:42:0e:95:db:f0:3e: 93:80:0a:c2:e2:06:ba:ba:58:a5:62:64:b2:4c:d9: 7d:15:36:38:8f:00:57:01:df:8d:68:bb:f5:2b:84: 3a:47:90:79:97:62:dd:59:53:c1:01:18:1a:e7:e3: 5a:fe:41:13:46:9c:ec:85:19:16:a2:7d:67:13:b1: 10:72:53:10:a7:48:a4:c6:e6:d8:9a:7b:28:a4:46: 53:4b:26:e5:0f:23:46:f5:96:f1:50:9d:42:3c:e3: f5:e4:25:43:ed:84:9d:4a:9d:44:5e:b8:82:e8:18: eb:c4:d6:aa:bd:7c:e1:97:55:fb:79:40:2b:45:d2: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4C:AC:CA:C8:94:05:7A:33:06:D7:61:C6:9E:A5:D7:CD:96:A4:9F X509v3 Authority Key Identifier: keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/GkysysiUBXozBtdhxp6l182WpJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.208.0/22 IPv6: 2a0e:e640::/29 Signature Algorithm: sha256WithRSAEncryption 63:e3:f4:a6:18:7a:15:b5:fd:96:14:96:4c:f6:94:b5:51:89: 1d:11:35:73:9f:99:c0:e4:4c:91:b2:95:26:6f:02:20:d1:f5: 30:44:06:45:06:31:19:94:fe:3e:ef:d7:6c:c4:39:e8:6a:1a: ba:b2:eb:93:f5:55:84:9f:05:5f:10:3f:b9:8f:5f:1b:80:0d: 7f:ed:a7:ca:d8:b9:cb:a4:78:01:a8:aa:66:58:6f:e8:83:c2: 57:e0:d5:d1:c9:be:56:1d:a1:67:ee:59:40:f0:57:2b:a3:52: 30:21:2e:b8:cf:15:b9:ab:cd:ea:22:c2:ae:64:f6:e3:d3:d5: 93:4f:e5:8a:33:7d:62:a3:5e:9e:80:3d:3a:0d:bc:ae:64:0f: be:7c:46:91:a4:fd:a1:2e:60:38:ff:97:0a:5b:7c:29:fc:8a: 84:14:fc:e0:90:60:cb:3f:fb:21:29:cc:00:18:05:f4:34:73: 4c:6c:23:0f:15:0b:12:8f:ce:5a:4a:d0:d6:ff:e1:20:af:f7: 09:57:9d:2c:93:f9:b2:47:71:bc:7c:38:1e:ad:26:8e:66:8a: 2e:72:67:a9:f4:70:b6:d2:72:df:9a:59:d1:48:68:9c:a8:fe: 65:3f:07:0b:60:7f:0c:30:63:44:6b:95:8b:f8:31:b1:f9:46: 3a:31:c2:2d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pFZrpnAuXkLymdWvFWtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4 MDVlZjEwHhcNMjYwMTAxMjIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTRjYWNjYWM4OTQwNTdhMzMwNmQ3NjFjNjllYTVkN2NkOTZhNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpuIBwY1Z+Zwl5Lx/y6+DcSgFW/t fS1sOsYYthw4mDE2Gz6324+ULUN81I0pjzeqiX4hi1ZO8H2bajleJVwLNjsMEYIo tE5Lz/U9NWpEn7PDt2IKnGZugqfhDPhgb8s/bYDhPmy2XBO63aouV2oO2PCC5rUr gI3Id3r3M7+hj+9CDpXb8D6TgArC4ga6ulilYmSyTNl9FTY4jwBXAd+NaLv1K4Q6 R5B5l2LdWVPBARga5+Na/kETRpzshRkWon1nE7EQclMQp0ikxubYmnsopEZTSybl DyNG9ZbxUJ1CPOP15CVD7YSdSp1EXriC6BjrxNaqvXzhl1X7eUArRdKkQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBpMrMrIlAV6MwbXYcaepdfNlqSfMB8GA1UdIwQY MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt NzdjM2UxYzhmNmRlLzEvR2t5c3lzaVVCWG96QnRkaHhwNmwxODJXcEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZfQMA0E AgACMAcDBQMqDuZAMA0GCSqGSIb3DQEBCwUAA4IBAQBj4/SmGHoVtf2WFJZM9pS1 UYkdETVzn5nA5EyRspUmbwIg0fUwRAZFBjEZlP4+79dsxDnoahq6suuT9VWEnwVf ED+5j18bgA1/7afK2LnLpHgBqKpmWG/og8JX4NXRyb5WHaFn7llA8Fcro1IwIS64 zxW5q83qIsKuZPbj09WTT+WKM31io16egD06DbyuZA++fEaRpP2hLmA4/5cKW3wp /IqEFPzgkGDLP/shKcwAGAX0NHNMbCMPFQsSj85aStDW/+Egr/cJV50sk/myR3G8 fDgerSaOZooucmep9HC20nLfmlnRSGicqP5lPwcLYH8MMGNEa5WL+DGx+UY6McIt -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:43 2026 by rpki-client