This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_GqqN9unjathUuGulEam40heLsI.roa File: _GqqN9unjathUuGulEam40heLsI.roa (raw, json) Hash identifier: BB+x27/REpXeugmA5D0sDjX/NSB3LrMz0OiCVCOe2Zw= Subject key identifier: FC:6A:AA:37:DB:A7:8D:AB:61:52:E1:AE:94:46:A6:E3:48:5E:2E:C2 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149B4E3991C86AD5720A68171C63C9 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_GqqN9unjathUuGulEam40heLsI.roa Signing time: Fri 02 Jan 2026 14:20:15 +0000 ROA not before: Fri 02 Jan 2026 14:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 92.71.68.0/22 maxlen: 24 195.86.241.0/24 maxlen: 24 213.169.192.0/23 maxlen: 23 213.201.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:9b:4e:39:91:c8:6a:d5:72:0a:68:17:1c:63:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc6aaa37dba78dab6152e1ae9446a6e3485e2ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:09:a6:5e:40:6d:73:64:07:55:46:ab:60: c2:ae:ee:0b:7b:42:15:7f:8e:22:e1:a1:2e:32:12: 82:d5:b5:9f:ab:3b:c7:b7:59:e6:28:5d:76:25:64: 0a:cd:e0:1f:70:dd:29:93:5f:cf:55:07:a6:4b:01: 4f:ae:e4:48:8e:4b:01:61:f2:ce:df:e1:78:aa:c5: 71:d2:50:28:53:85:c3:07:4d:b2:3c:77:5d:8e:d2: db:ae:b8:e0:38:0f:fa:c5:e8:c0:b0:db:26:f1:66: ff:37:aa:34:61:a2:f7:41:f0:76:89:60:36:2d:e7: cc:d8:00:13:a8:66:c2:76:e4:2f:2f:c5:b7:5f:54: f0:67:72:0b:af:f7:c5:08:72:b5:dd:0f:df:7b:e7: f2:3c:ac:f4:8f:63:c5:4d:e0:f6:1a:de:7b:aa:a3: fe:fb:b8:50:0b:d5:ea:63:f9:3b:c3:1e:42:3d:93: 68:6a:b4:84:5f:5c:47:fd:b7:2c:13:c0:7a:97:71: f7:95:5a:3a:b0:cb:c8:71:8a:6e:4b:3f:09:af:05: 2f:23:d7:01:b7:a9:6d:6a:96:ea:6d:e5:84:39:b7: 87:4f:a3:68:04:73:f8:9e:fd:98:9f:7b:45:27:5c: 59:d3:b3:50:30:5d:dc:51:11:2b:59:5b:fc:72:c7: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6A:AA:37:DB:A7:8D:AB:61:52:E1:AE:94:46:A6:E3:48:5E:2E:C2 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_GqqN9unjathUuGulEam40heLsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.71.68.0/22 195.86.241.0/24 213.169.192.0/23 213.201.250.0/23 Signature Algorithm: sha256WithRSAEncryption 02:11:fc:2e:8b:ff:c1:1f:88:04:76:39:93:8a:70:f0:7a:27: 9b:34:75:1f:45:4a:d6:84:46:f7:f6:2a:e3:59:66:ca:96:37: 1c:cf:e2:65:62:e8:d2:d0:1e:cb:43:33:17:2a:9a:ff:88:2b: f0:fa:d2:fd:33:a0:23:67:d5:1d:66:98:cf:b5:2f:c0:51:39: 07:9d:9f:fc:8c:e0:92:de:65:66:87:38:fa:9a:3c:e6:52:c6: 23:00:40:03:06:b2:39:4e:03:e7:00:a4:e2:15:e5:b2:52:f5: aa:25:58:d9:44:d1:93:cc:26:01:51:23:07:09:17:a0:67:64: 9d:32:ca:d4:b8:3a:0d:a7:5a:78:e7:ba:5a:85:a1:43:2f:32: a8:78:75:30:9e:3a:17:88:ff:d9:d3:a5:d8:1f:de:5b:76:54: 4c:09:06:eb:46:2a:20:ba:5d:66:43:6f:1d:81:6f:96:8c:0e: 21:1c:08:99:38:56:ec:5e:a1:70:02:f2:49:7e:0e:ff:93:a4: a2:03:fd:d1:cc:dd:ce:09:b3:c5:95:a9:a4:1c:87:f9:53:a2: 53:e7:01:ba:37:d2:99:df:8e:8c:18:5d:bd:73:d9:1e:2c:c8: 1b:95:34:ff:1a:5e:1e:f8:57:96:74:63:13:38:fd:38:15:0f: 56:ad:5c:11 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FJtOOZHIatVyCmgXHGPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzZhYWEzN2RiYTc4ZGFiNjE1MmUxYWU5NDQ2YTZlMzQ4NWUyZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeEJpl5AbXNkB1VGq2DCru4Le0IV f44i4aEuMhKC1bWfqzvHt1nmKF12JWQKzeAfcN0pk1/PVQemSwFPruRIjksBYfLO 3+F4qsVx0lAoU4XDB02yPHddjtLbrrjgOA/6xejAsNsm8Wb/N6o0YaL3QfB2iWA2 LefM2AATqGbCduQvL8W3X1TwZ3ILr/fFCHK13Q/fe+fyPKz0j2PFTeD2Gt57qqP+ +7hQC9XqY/k7wx5CPZNoarSEX1xH/bcsE8B6l3H3lVo6sMvIcYpuSz8JrwUvI9cB t6ltapbqbeWEObeHT6NoBHP4nv2Yn3tFJ1xZ07NQMF3cURErWVv8csfHVwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPxqqjfbp42rYVLhrpRGpuNIXi7CMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvX0dxcU45dW5qYXRoVXVHdWxFYW00MGhlTHNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXEdEAwQA w1bxAwQB1anAAwQB1cn6MA0GCSqGSIb3DQEBCwUAA4IBAQACEfwui//BH4gEdjmT inDweiebNHUfRUrWhEb39irjWWbKljccz+JlYujS0B7LQzMXKpr/iCvw+tL9M6Aj Z9UdZpjPtS/AUTkHnZ/8jOCS3mVmhzj6mjzmUsYjAEADBrI5TgPnAKTiFeWyUvWq JVjZRNGTzCYBUSMHCRegZ2SdMsrUuDoNp1p457pahaFDLzKoeHUwnjoXiP/Z06XY H95bdlRMCQbrRiogul1mQ28dgW+WjA4hHAiZOFbsXqFwAvJJfg7/k6SiA/3RzN3O CbPFlamkHIf5U6JT5wG6N9KZ346MGF29c9keLMgblTT/Gl4e+FeWdGMTOP04FQ9W rVwR -----END CERTIFICATE-----Generated at Fri Jan 23 16:03:53 2026 by rpki-client