This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GGAS4jK2WkzGfaHYYJBNXOsbuWI.roa File: GGAS4jK2WkzGfaHYYJBNXOsbuWI.roa (raw, json) Hash identifier: /JsrzPHZgmaSnfgWJBwKyLsALUhzFTbxznFASdDgno4= Subject key identifier: 18:60:12:E2:32:B6:5A:4C:C6:7D:A1:D8:60:90:4D:5C:EB:1B:B9:62 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3570354B80CB602E02A89F9E3C4E7E Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GGAS4jK2WkzGfaHYYJBNXOsbuWI.roa Signing time: Thu 01 Jan 2026 20:17:38 +0000 ROA not before: Thu 01 Jan 2026 20:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42568 IP address blocks: 85.120.60.0/24 maxlen: 24 85.121.180.0/23 maxlen: 23 194.153.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:70:35:4b:80:cb:60:2e:02:a8:9f:9e:3c:4e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=186012e232b65a4cc67da1d860904d5ceb1bb962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:3d:64:61:78:5d:fe:8b:43:b7:6c:16:f4: e7:5e:f7:ae:6b:1c:88:41:48:73:59:ff:53:58:67: 7c:62:e7:22:77:d4:76:86:6e:33:8c:db:9c:19:08: 11:bf:4c:fb:e0:ad:42:b8:6a:31:6a:df:91:ea:1c: a8:24:00:4b:e4:e6:a2:33:1d:fb:51:d5:d2:bf:71: 64:75:52:a8:a5:88:cb:c0:f5:4d:68:d5:31:33:cf: 99:84:99:8b:f1:08:c5:89:43:ba:f6:7f:47:00:ab: 1a:39:15:b7:20:7e:47:9b:52:b8:7d:f9:4d:09:96: 62:4b:04:ca:b8:54:d7:8d:ca:7a:ef:02:36:38:96: f6:78:52:bd:0f:7c:b1:0f:8a:31:82:ee:c3:de:ae: 28:f6:5c:28:f6:fe:bd:d7:dd:99:67:00:1d:5b:95: 2e:9d:9d:62:ea:32:75:d1:73:10:e2:bd:33:19:6a: 2a:ac:23:a4:3a:d8:88:2d:6c:12:30:1c:39:6b:c4: 6f:b9:ac:aa:82:3b:29:c9:0b:55:cc:40:80:be:60: 61:2e:a0:7f:a8:ee:ba:53:9a:45:05:44:e6:12:dc: 25:d9:54:f4:09:bd:c8:20:91:50:a0:e3:ae:0f:6c: 0c:0c:82:e4:d5:52:65:1a:17:2d:ce:ea:04:c1:ee: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:60:12:E2:32:B6:5A:4C:C6:7D:A1:D8:60:90:4D:5C:EB:1B:B9:62 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/GGAS4jK2WkzGfaHYYJBNXOsbuWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.60.0/24 85.121.180.0/23 194.153.249.0/24 Signature Algorithm: sha256WithRSAEncryption a4:9f:c8:49:ac:2f:05:95:82:aa:06:e3:08:c2:28:3a:7b:cd: b1:a3:16:37:46:ef:0c:26:a7:18:5e:f6:a9:15:d4:a4:41:0c: c3:ba:de:25:6b:48:d0:8c:e9:c6:d9:cf:7d:2f:4c:0c:ab:86: 9b:e8:65:5f:37:97:81:3e:15:21:78:ae:55:73:4d:9c:af:5b: 18:26:2a:06:6a:f5:9b:60:c9:65:7f:f8:c6:df:72:29:f0:4d: b0:5f:be:e5:84:97:9d:f1:ef:f3:02:1a:df:b2:73:54:1c:1b: 35:3b:73:73:3c:17:f0:63:38:f1:1c:91:da:f8:3d:47:b0:09: 2f:40:d2:76:bc:2e:77:78:ca:16:4b:5e:33:c2:8f:cf:b4:de: b4:8d:2d:dc:bb:f1:7d:76:59:54:e9:de:25:be:fd:4c:fe:cf: bd:99:02:fe:a5:e9:93:61:b4:ae:1b:57:ff:4f:80:06:81:e8: 9c:21:9c:04:f4:92:b8:4a:2a:95:4f:ce:43:f9:17:e7:9f:01: cb:98:84:2b:d4:ea:13:52:58:6a:aa:49:7f:fd:84:b4:84:9d: 8e:8c:e7:c6:38:fe:03:14:80:be:59:08:82:20:cd:9a:e1:e9: cc:69:71:db:4d:a7:8e:f2:f9:63:f2:d6:a0:73:76:80:0a:9d: 68:81:e5:ff -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NXA1S4DLYC4CqJ+ePE5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODYwMTJlMjMyYjY1YTRjYzY3ZGExZDg2MDkwNGQ1Y2ViMWJiOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ns9ZGF4Xf6LQ7dsFvTnXveuaxyI QUhzWf9TWGd8Yucid9R2hm4zjNucGQgRv0z74K1CuGoxat+R6hyoJABL5OaiMx37 UdXSv3FkdVKopYjLwPVNaNUxM8+ZhJmL8QjFiUO69n9HAKsaORW3IH5Hm1K4fflN CZZiSwTKuFTXjcp67wI2OJb2eFK9D3yxD4oxgu7D3q4o9lwo9v69192ZZwAdW5Uu nZ1i6jJ10XMQ4r0zGWoqrCOkOtiILWwSMBw5a8RvuayqgjspyQtVzECAvmBhLqB/ qO66U5pFBUTmEtwl2VT0Cb3IIJFQoOOuD2wMDILk1VJlGhctzuoEwe4prwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBhgEuIytlpMxn2h2GCQTVzrG7liMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvR0dBUzRqSzJXa3pHZmFIWVlKQk5YT3NidVdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVXg8AwQB VXm0AwQAwpn5MA0GCSqGSIb3DQEBCwUAA4IBAQCkn8hJrC8FlYKqBuMIwig6e82x oxY3Ru8MJqcYXvapFdSkQQzDut4la0jQjOnG2c99L0wMq4ab6GVfN5eBPhUheK5V c02cr1sYJioGavWbYMllf/jG33Ip8E2wX77lhJed8e/zAhrfsnNUHBs1O3NzPBfw YzjxHJHa+D1HsAkvQNJ2vC53eMoWS14zwo/PtN60jS3cu/F9dllU6d4lvv1M/s+9 mQL+pemTYbSuG1f/T4AGgeicIZwE9JK4SiqVT85D+RfnnwHLmIQr1OoTUlhqqkl/ /YS0hJ2OjOfGOP4DFIC+WQiCIM2a4enMaXHbTaeO8vlj8tagc3aACp1ogeX/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:22 2026 by rpki-client