This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/gItssa-B0b0X--YWiS_dUYtbwpY.roa File: gItssa-B0b0X--YWiS_dUYtbwpY.roa (raw, json) Hash identifier: iVUV0DWttepgFWqqg65SaE3OlJIh4Ep6A/pLvMT4l8I= Subject key identifier: 80:8B:6C:B1:AF:81:D1:BD:17:FB:E6:16:89:2F:DD:51:8B:5B:C2:96 Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f Certificate serial: 019B7F83E6ADB37A8E6030E8EB714F59445C Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/gItssa-B0b0X--YWiS_dUYtbwpY.roa Signing time: Fri 02 Jan 2026 16:21:49 +0000 ROA not before: Fri 02 Jan 2026 16:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39122 IP address blocks: 185.94.44.0/24 maxlen: 24 185.94.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e6:ad:b3:7a:8e:60:30:e8:eb:71:4f:59:44:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464dcfa96399716692d245a804887c09da451f8f Validity Not Before: Jan 2 16:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=808b6cb1af81d1bd17fbe616892fdd518b5bc296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:b2:40:66:63:67:35:5a:2a:51:01:35:41: b3:6d:7e:c3:06:22:a0:51:45:95:f3:86:7c:fc:c8: ac:f1:8f:43:41:fb:30:55:90:51:9b:f6:31:49:4b: b7:c5:a9:2f:ad:11:26:ab:a2:cc:29:22:98:ce:af: 1a:30:aa:f0:45:cc:9c:9b:b2:a1:32:fd:c2:bb:d3: 4e:5c:dd:71:21:ad:b4:91:65:1f:5a:31:d8:21:6c: 91:d2:c7:10:19:25:ca:27:d0:40:ab:9c:76:ae:6c: d4:66:fd:ca:c8:a9:66:a2:60:35:62:cc:43:37:87: b7:d2:89:d1:64:6f:b3:56:45:8f:81:fe:70:58:ae: eb:49:69:d6:2c:c1:a6:27:16:64:5f:79:1e:f7:08: 6f:b9:c0:81:34:3f:e4:93:dd:5b:d9:29:d3:a8:66: e9:06:7f:d3:f1:cf:4e:70:f1:a9:78:4c:1a:30:86: 91:6d:95:45:dd:19:b6:d1:6e:b5:f5:e9:7b:56:1a: 8f:84:71:7e:eb:ea:de:a0:d2:0f:c3:cb:49:79:26: 9d:3a:2c:cf:34:ca:98:44:8f:3d:c7:62:f8:53:6b: 92:4d:c9:6b:f0:f7:60:20:67:63:c4:90:52:0c:58: 14:28:df:ac:49:2c:81:c6:df:28:54:3d:72:f4:7c: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:6C:B1:AF:81:D1:BD:17:FB:E6:16:89:2F:DD:51:8B:5B:C2:96 X509v3 Authority Key Identifier: keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/gItssa-B0b0X--YWiS_dUYtbwpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.44.0/23 Signature Algorithm: sha256WithRSAEncryption 32:99:11:79:04:3d:d1:7d:3d:49:e6:08:72:de:f4:3c:3e:10: d6:7c:39:c3:af:14:9d:e2:23:ec:e2:e6:1a:9f:c7:01:61:bb: 5f:ff:24:9b:96:33:2f:f3:e2:d2:8b:a4:a7:ae:5c:7a:85:28: 58:1a:69:4d:c7:ca:52:32:9b:6f:14:94:f8:d1:f2:4f:5d:52: 06:ca:ee:e7:4f:b2:f3:cd:02:50:37:49:92:66:35:9d:7f:a4: 55:ec:7b:e6:2a:64:8d:bb:9a:8f:71:bf:9c:c7:aa:eb:26:da: 11:9b:43:2c:98:55:f7:b8:d1:5c:62:b7:29:0c:8e:f4:ce:86: 2b:d8:db:a8:93:f0:73:bc:7b:5c:d4:15:a4:16:ac:1f:14:74: 76:31:3a:39:51:6c:86:0a:84:bc:7c:03:78:93:7f:7c:7d:8d: 62:4d:6d:96:c0:2c:16:15:d0:3a:00:23:f7:f1:38:14:77:9f: 3c:bb:be:e6:e7:ef:06:4f:c3:5b:12:a6:c1:b9:e1:77:dd:26: 66:c6:67:fd:22:b2:c1:01:c8:dc:f8:32:a9:cc:52:b2:3d:fb: bd:ea:51:3b:55:09:8d:18:59:b5:4f:0e:b4:0d:40:38:43:7a: 9b:8e:e6:b9:c7:77:2b:b8:e0:7d:48:91:07:12:35:d2:5c:b3: e2:37:80:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+ats3qOYDDo63FPWURcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0 NTFmOGYwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDhiNmNiMWFmODFkMWJkMTdmYmU2MTY4OTJmZGQ1MThiNWJjMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk86yQGZjZzVaKlEBNUGzbX7DBiKg UUWV84Z8/Mis8Y9DQfswVZBRm/YxSUu3xakvrREmq6LMKSKYzq8aMKrwRcycm7Kh Mv3Cu9NOXN1xIa20kWUfWjHYIWyR0scQGSXKJ9BAq5x2rmzUZv3KyKlmomA1YsxD N4e30onRZG+zVkWPgf5wWK7rSWnWLMGmJxZkX3ke9whvucCBND/kk91b2SnTqGbp Bn/T8c9OcPGpeEwaMIaRbZVF3Rm20W619el7VhqPhHF+6+reoNIPw8tJeSadOizP NMqYRI89x2L4U2uSTclr8PdgIGdjxJBSDFgUKN+sSSyBxt8oVD1y9HxltwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICLbLGvgdG9F/vmFokv3VGLW8KWMB8GA1UdIwQY MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct YWYxZjM2ODExMDk4LzEvZ0l0c3NhLUIwYjBYLS1ZV2lTX2RVWXRid3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4 LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuV4sMA0G CSqGSIb3DQEBCwUAA4IBAQAymRF5BD3RfT1J5ghy3vQ8PhDWfDnDrxSd4iPs4uYa n8cBYbtf/ySbljMv8+LSi6Snrlx6hShYGmlNx8pSMptvFJT40fJPXVIGyu7nT7Lz zQJQN0mSZjWdf6RV7HvmKmSNu5qPcb+cx6rrJtoRm0MsmFX3uNFcYrcpDI70zoYr 2Nuok/BzvHtc1BWkFqwfFHR2MTo5UWyGCoS8fAN4k398fY1iTW2WwCwWFdA6ACP3 8TgUd588u77m5+8GT8NbEqbBueF33SZmxmf9IrLBAcjc+DKpzFKyPfu96lE7VQmN GFm1Tw60DUA4Q3qbjua5x3cruOB9SJEHEjXSXLPiN4AB -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:42 2026 by rpki-client