This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa File: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (raw, json) Hash identifier: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo= Subject key identifier: 19:DF:F4:BB:E1:38:AB:D1:8E:35:D7:D1:68:32:89:DB:62:25:1A:8A Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Certificate serial: 019B7AC93D1558A06E34D6036E33E8ADE07B Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201102 IP address blocks: 185.82.224.0/22 maxlen: 22 185.194.4.0/22 maxlen: 22 195.184.75.0/24 maxlen: 24 2a05:9540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3d:15:58:a0:6e:34:d6:03:6e:33:e8:ad:e0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19dff4bbe138abd18e35d7d1683289db62251a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:a6:e8:01:c0:0a:ef:d9:af:d0:c3:86:ed: 13:14:c0:54:49:56:7d:b2:c4:fb:4e:ab:b8:33:51: de:4f:0e:d6:72:f3:67:4f:54:67:2d:5e:36:d0:60: ac:5d:aa:5c:31:21:f3:23:c8:57:19:56:af:50:dc: 78:c5:b7:aa:9f:ae:3e:2b:49:4b:e5:bc:b7:9d:01: 75:a6:6d:92:fe:00:a4:8b:77:b0:e7:1b:f7:db:6f: 01:86:bf:ec:db:10:f7:ba:ae:59:c2:2d:47:c7:ab: 29:ad:d2:ee:72:1a:66:8d:d1:a0:a9:90:4b:e3:28: d5:f8:94:ee:b5:68:a9:0e:95:90:53:92:02:e1:14: c6:05:a6:d1:10:0e:f4:15:28:5f:9b:46:0f:af:28: 0c:f3:5b:a8:73:ac:d0:8f:ba:a6:04:b6:ae:59:a2: a2:17:3c:10:67:a7:e2:b0:00:f1:2c:53:ad:1b:2d: 60:e5:9c:10:7c:db:6e:ed:6e:8e:a1:ea:01:68:eb: f9:40:7b:c4:d9:2b:66:4a:73:c9:61:12:7d:d9:f7: f0:5e:c5:d9:ad:b8:d3:75:06:e3:9a:51:62:56:d7: ad:ba:45:fd:4d:af:07:ee:d2:06:90:41:68:6a:14: ee:ef:ca:b2:bf:54:0f:b0:d4:5d:0a:0d:b3:46:43: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:F4:BB:E1:38:AB:D1:8E:35:D7:D1:68:32:89:DB:62:25:1A:8A X509v3 Authority Key Identifier: keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.224.0/22 185.194.4.0/22 195.184.75.0/24 IPv6: 2a05:9540::/29 Signature Algorithm: sha256WithRSAEncryption 1d:21:23:87:f0:ee:57:92:8f:a3:a6:3e:a3:c2:3e:dd:6c:68: 90:31:07:42:36:c7:67:91:56:22:4b:4d:70:11:b8:4d:50:8e: 64:78:13:60:83:08:5d:f5:59:eb:da:1f:ab:1d:01:71:00:64: 55:fe:29:66:3b:50:8a:c0:54:18:59:37:cd:f5:5b:40:02:65: a0:05:2a:66:de:ed:22:78:29:36:fb:19:2e:2a:95:c5:94:e2: f9:63:91:f0:d3:fc:17:db:67:85:5e:0a:af:6e:8d:f3:bc:3e: 8d:23:25:bf:0f:7f:8e:ac:c1:65:72:d3:4e:9b:2e:13:91:f5: a0:c7:10:c2:17:66:aa:c7:44:e4:d8:0c:06:19:7b:a4:cd:4f: 99:46:48:03:4f:d0:4a:13:c7:ef:b1:0d:ac:eb:2e:84:eb:75: 4a:d2:94:a1:e3:bf:63:22:d8:8f:ee:48:6b:42:73:75:f4:26: d6:1a:d8:73:29:32:42:51:cb:d2:77:5e:c7:3e:6d:bd:0e:d0: 62:6a:48:c7:79:71:8f:de:a4:0d:b1:fd:07:ce:fe:b3:97:57: ff:34:4c:1a:bc:d9:53:8f:79:57:d4:7c:1f:d4:41:c8:12:77: da:f4:f0:fb:7f:e7:22:a2:7e:e2:79:54:d4:2d:7a:d2:04:79: 3e:ef:28:50 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yT0VWKBuNNYDbjPoreB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm ZjJlMzAwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWRmZjRiYmUxMzhhYmQxOGUzNWQ3ZDE2ODMyODlkYjYyMjUxYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCym6AHACu/Zr9DDhu0TFMBUSVZ9 ssT7Tqu4M1HeTw7WcvNnT1RnLV420GCsXapcMSHzI8hXGVavUNx4xbeqn64+K0lL 5by3nQF1pm2S/gCki3ew5xv3228Bhr/s2xD3uq5Zwi1Hx6sprdLuchpmjdGgqZBL 4yjV+JTutWipDpWQU5IC4RTGBabREA70FShfm0YPrygM81uoc6zQj7qmBLauWaKi FzwQZ6fisADxLFOtGy1g5ZwQfNtu7W6OoeoBaOv5QHvE2StmSnPJYRJ92ffwXsXZ rbjTdQbjmlFiVtetukX9Ta8H7tIGkEFoahTu78qyv1QPsNRdCg2zRkOXFQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBnf9LvhOKvRjjXX0WgyidtiJRqKMB8GA1UdIwQY MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt ZGJjYThjMzFlYmM4LzEvR2RfMHUtRTRxOUdPTmRmUmFES0oyMklsR29vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4 LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuVLgAwQC ucIEAwQAw7hLMA0EAgACMAcDBQMqBZVAMA0GCSqGSIb3DQEBCwUAA4IBAQAdISOH 8O5Xko+jpj6jwj7dbGiQMQdCNsdnkVYiS01wEbhNUI5keBNggwhd9Vnr2h+rHQFx AGRV/ilmO1CKwFQYWTfN9VtAAmWgBSpm3u0ieCk2+xkuKpXFlOL5Y5Hw0/wX22eF Xgqvbo3zvD6NIyW/D3+OrMFlctNOmy4TkfWgxxDCF2aqx0Tk2AwGGXukzU+ZRkgD T9BKE8fvsQ2s6y6E63VK0pSh479jItiP7khrQnN19CbWGthzKTJCUcvSd17HPm29 DtBiakjHeXGP3qQNsf0Hzv6zl1f/NEwavNlTj3lX1Hwf1EHIEnfa9PD7f+cion7i eVTULXrSBHk+7yhQ -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:54 2026 by rpki-client