This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/GgOMAQruAzmkXd3YxcVIPj0Q92A.roa File: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (raw, json) Hash identifier: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE= Subject key identifier: 1A:03:8C:01:0A:EE:03:39:A4:5D:DD:D8:C5:C5:48:3E:3D:10:F7:60 Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0 Certificate serial: 019B7C1344C0270605BE660F607E0AB1EE8E Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/GgOMAQruAzmkXd3YxcVIPj0Q92A.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33987 IP address blocks: 84.21.224.0/21 maxlen: 21 84.21.232.0/23 maxlen: 23 84.21.234.0/23 maxlen: 23 84.21.236.0/23 maxlen: 23 84.21.238.0/23 maxlen: 23 84.21.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:44:c0:27:06:05:be:66:0f:60:7e:0a:b1:ee:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a038c010aee0339a45dddd8c5c5483e3d10f760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:31:3d:8b:f6:d4:5a:2a:8e:b3:e3:2c:dc: 1f:30:e6:38:2e:f9:c7:1c:95:5f:ae:c1:62:f3:7f: 06:50:bc:91:d3:cf:9d:c8:07:be:9c:04:82:df:de: 13:2e:5f:20:64:36:e6:fc:a8:c3:fc:44:7f:ea:16: 4e:57:0e:b8:c3:ea:2a:5c:2e:45:f2:cb:87:45:ec: bd:ce:1e:ae:27:7e:39:2f:d6:22:a8:c6:5f:af:02: 98:12:0e:09:b2:d2:43:87:16:c8:8e:9e:8e:af:f4: 43:63:26:97:1d:34:c1:51:11:ba:35:69:aa:39:7a: 86:8c:53:57:35:c5:b1:bc:8b:26:16:bf:10:4e:64: d1:f6:d2:aa:c0:eb:70:64:2a:30:a6:e9:f2:bb:10: 29:7e:78:8f:71:d3:69:00:46:f2:fa:06:35:03:01: 3b:c9:6a:16:8f:f6:ac:cb:36:f1:04:40:8d:57:d9: b3:4e:21:7b:b3:da:3f:b3:00:79:b1:35:47:9f:53: 48:6a:15:a9:24:67:fc:1e:1f:60:7a:07:5d:f4:74: 97:28:58:70:f9:fe:58:5c:c4:4b:05:af:bb:3b:54: 0d:6a:70:2c:50:6a:e8:3b:7f:87:38:4c:22:cd:23: c1:ec:e4:a5:23:8f:d6:f5:61:76:b3:86:5d:e0:4e: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:8C:01:0A:EE:03:39:A4:5D:DD:D8:C5:C5:48:3E:3D:10:F7:60 X509v3 Authority Key Identifier: keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/GgOMAQruAzmkXd3YxcVIPj0Q92A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.224.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:72:5b:7d:2b:ab:0b:38:31:a3:b8:68:df:a5:e3:a6:9f:3a: e4:cf:c2:09:a9:ce:58:c5:03:7d:76:d5:4d:cd:66:ea:3b:42: 8a:2f:c4:35:a3:75:93:16:88:f3:cc:1c:26:4c:c8:7e:2a:ca: b1:bd:a7:60:d2:c6:fb:60:10:8c:75:c2:c2:8e:28:2c:1a:f9: 09:d7:16:84:c6:dc:ea:fe:32:f6:05:10:fb:66:ba:49:6a:cd: 80:3f:24:01:2f:3e:85:4b:8f:55:6e:5c:be:c0:47:86:ad:0b: 82:1f:b3:64:a9:8e:1a:9c:9c:65:f4:e8:49:05:33:da:19:6d: 0d:69:f0:10:f5:7b:8e:19:55:ee:d9:f9:88:3f:75:93:8d:d7: 40:2c:19:b1:0c:7f:ca:11:3c:60:75:04:f9:3c:90:20:7d:90: 42:aa:b2:16:25:50:01:b1:b4:7a:a8:45:70:88:aa:bd:dd:23: 0b:44:9a:f5:ee:9b:4f:25:92:e4:8b:d7:d9:e2:40:10:f5:73: dc:1d:e2:31:d4:7c:2d:73:a9:a8:5b:27:f3:eb:23:ee:cd:a2: ce:a8:cc:1c:2a:ac:99:16:94:0a:65:48:62:e6:f4:20:8f:74: 62:74:2b:87:1f:ff:8b:ff:a5:98:46:7b:bf:0f:d4:94:43:c4: 97:f9:74:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0TAJwYFvmYPYH4Kse6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZWFiYTUzZDZkZmJhYjRlOTc2MTIwYzFlMjAyNjhiYmZl OGEwZTAwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTAzOGMwMTBhZWUwMzM5YTQ1ZGRkZDhjNWM1NDgzZTNkMTBmNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcsxPYv21FoqjrPjLNwfMOY4LvnH HJVfrsFi838GULyR08+dyAe+nASC394TLl8gZDbm/KjD/ER/6hZOVw64w+oqXC5F 8suHRey9zh6uJ345L9YiqMZfrwKYEg4JstJDhxbIjp6Or/RDYyaXHTTBURG6NWmq OXqGjFNXNcWxvIsmFr8QTmTR9tKqwOtwZCowpunyuxApfniPcdNpAEby+gY1AwE7 yWoWj/asyzbxBECNV9mzTiF7s9o/swB5sTVHn1NIahWpJGf8Hh9gegdd9HSXKFhw +f5YXMRLBa+7O1QNanAsUGroO3+HOEwizSPB7OSlI4/W9WF2s4Zd4E5RBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBoDjAEK7gM5pF3d2MXFSD49EPdgMB8GA1UdIwQY MBaAFNfqulPW37q06XYSDB4gJou/6KDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQt MmFlNzkzZGE0NzcwLzEvR2dPTUFRcnVBem1rWGQzWXhjVklQajBROTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85YWZlMzUtMGUzZi00ZDcwLWIxYTQtMmFlNzkzZGE0Nzcw LzEvMS1xNlU5YmZ1clRwZGhJTUhpQW1pN19vb09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFVBXgMA0G CSqGSIb3DQEBCwUAA4IBAQCMclt9K6sLODGjuGjfpeOmnzrkz8IJqc5YxQN9dtVN zWbqO0KKL8Q1o3WTFojzzBwmTMh+Ksqxvadg0sb7YBCMdcLCjigsGvkJ1xaExtzq /jL2BRD7ZrpJas2APyQBLz6FS49Vbly+wEeGrQuCH7NkqY4anJxl9OhJBTPaGW0N afAQ9XuOGVXu2fmIP3WTjddALBmxDH/KETxgdQT5PJAgfZBCqrIWJVABsbR6qEVw iKq93SMLRJr17ptPJZLki9fZ4kAQ9XPcHeIx1Hwtc6moWyfz6yPuzaLOqMwcKqyZ FpQKZUhi5vQgj3RidCuHH/+L/6WYRnu/D9SUQ8SX+XQN -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:09 2026 by rpki-client