This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/GEGiKoKY0hN4sR4MLds9oQqw1YI.roa File: GEGiKoKY0hN4sR4MLds9oQqw1YI.roa (raw, json) Hash identifier: rXAjEWn2A3H7k9JELvBBmzV+GLgz1+0bT9XggiN44TA= Subject key identifier: 18:41:A2:2A:82:98:D2:13:78:B1:1E:0C:2D:DB:3D:A1:0A:B0:D5:82 Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019B77C7332788F6E8F151BE17194A723774 Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/GEGiKoKY0hN4sR4MLds9oQqw1YI.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49367 IP address blocks: 185.54.80.0/22 maxlen: 24 2a02:4460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:33:27:88:f6:e8:f1:51:be:17:19:4a:72:37:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1841a22a8298d21378b11e0c2ddb3da10ab0d582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:7e:87:87:97:90:3f:c4:2d:58:c4:b0:dc: 86:e9:4e:4f:20:ca:a9:2d:2b:cb:79:10:ed:e1:02: 96:f4:27:4f:59:c6:bc:f8:06:66:af:8c:81:14:a0: 0f:ac:a0:eb:64:d8:6b:e0:47:98:77:2a:c0:45:77: a6:1a:fc:bd:4d:97:31:e6:2b:59:98:f7:cc:aa:6d: 97:b2:1f:ed:d8:a9:8c:a6:65:fd:b6:ff:f3:d2:e7: 6f:2e:e5:70:aa:99:3f:c1:aa:40:93:74:15:bb:48: 6f:08:d2:8b:1c:34:60:de:95:3c:6b:75:63:05:3d: bc:2d:5b:2e:4d:54:cf:40:f4:d0:41:a4:79:83:32: 29:05:cd:c8:12:23:4b:52:2d:5b:12:cd:55:79:a3: d3:a2:4c:81:42:38:59:dd:41:f6:04:68:df:26:80: 3a:6c:fc:bf:a7:5a:fc:12:c2:7b:85:ba:73:19:dc: 8d:c6:d7:ce:8f:ed:82:99:f7:7e:8e:ab:ed:af:c9: 6e:7b:4f:47:3a:3f:5b:ea:22:68:fa:02:71:d2:8b: e9:a7:e4:49:cf:08:38:f6:2d:79:4e:ea:fe:64:25: ea:c9:ae:99:a6:0d:00:55:62:ed:b0:f0:fc:4e:57: e7:e9:41:9f:0f:c1:86:25:3b:91:96:3c:86:4a:ef: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:41:A2:2A:82:98:D2:13:78:B1:1E:0C:2D:DB:3D:A1:0A:B0:D5:82 X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/GEGiKoKY0hN4sR4MLds9oQqw1YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.80.0/22 IPv6: 2a02:4460::/32 Signature Algorithm: sha256WithRSAEncryption cf:2f:35:ac:1a:70:f1:ba:06:5f:49:c9:6b:5e:23:da:ff:0a: 75:85:ca:1f:dd:62:a9:13:a9:67:49:9c:fe:0c:7d:67:09:d2: a3:01:a2:f6:59:00:f2:81:0b:2e:b8:14:c5:34:ab:62:d6:ea: 25:9a:70:ec:6f:78:3e:fa:9f:aa:e2:9c:9c:ff:74:16:38:d4: 90:fa:e0:d5:4c:92:4b:9e:a8:94:47:ce:c9:a1:29:79:61:f1: b5:01:ec:ce:a2:c9:2a:ed:8c:5b:aa:71:1c:8b:55:4a:2d:4d: 6b:7f:62:38:ef:e5:14:93:b2:f7:81:1d:84:ad:ca:59:0f:bd: ce:2a:b8:fe:e7:70:0e:4e:94:67:e6:d1:53:52:95:3e:5d:43: e1:44:e1:66:82:37:a0:c6:5f:f4:e3:cc:3a:6d:be:1d:47:45: c4:86:83:b2:cc:1d:74:ce:c8:23:a2:b1:0d:8a:b7:0d:bd:a5: 8a:99:c7:f8:64:dc:12:44:f9:69:0b:03:b0:cd:a8:2c:6f:99: 1c:f3:df:5e:1f:e1:13:95:89:63:d9:72:72:c1:16:63:26:b9: 60:b1:8a:d8:8e:f5:f5:2c:8f:a1:70:14:d6:3b:bb:02:00:05: c8:ad:ec:44:dd:03:15:d5:a0:76:fe:2c:b2:8f:23:ca:26:46: dc:8d:58:1f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xzMniPbo8VG+FxlKcjd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODQxYTIyYTgyOThkMjEzNzhiMTFlMGMyZGRiM2RhMTBhYjBkNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr39+h4eXkD/ELVjEsNyG6U5PIMqp LSvLeRDt4QKW9CdPWca8+AZmr4yBFKAPrKDrZNhr4EeYdyrARXemGvy9TZcx5itZ mPfMqm2Xsh/t2KmMpmX9tv/z0udvLuVwqpk/wapAk3QVu0hvCNKLHDRg3pU8a3Vj BT28LVsuTVTPQPTQQaR5gzIpBc3IEiNLUi1bEs1VeaPTokyBQjhZ3UH2BGjfJoA6 bPy/p1r8EsJ7hbpzGdyNxtfOj+2Cmfd+jqvtr8lue09HOj9b6iJo+gJx0ovpp+RJ zwg49i15Tur+ZCXqya6Zpg0AVWLtsPD8Tlfn6UGfD8GGJTuRljyGSu+OQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBhBoiqCmNITeLEeDC3bPaEKsNWCMB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvR0VHaUtvS1kwaE40c1I0TUxkczlvUXF3MVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTZQMA0E AgACMAcDBQAqAkRgMA0GCSqGSIb3DQEBCwUAA4IBAQDPLzWsGnDxugZfSclrXiPa /wp1hcof3WKpE6lnSZz+DH1nCdKjAaL2WQDygQsuuBTFNKti1uolmnDsb3g++p+q 4pyc/3QWONSQ+uDVTJJLnqiUR87JoSl5YfG1AezOoskq7YxbqnEci1VKLU1rf2I4 7+UUk7L3gR2ErcpZD73OKrj+53AOTpRn5tFTUpU+XUPhROFmgjegxl/048w6bb4d R0XEhoOyzB10zsgjorENircNvaWKmcf4ZNwSRPlpCwOwzagsb5kc899eH+ETlYlj 2XJywRZjJrlgsYrYjvX1LI+hcBTWO7sCAAXIrexE3QMV1aB2/iyyjyPKJkbcjVgf -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:26 2026 by rpki-client