This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/gkbICmY92gO5yWh3UUqQ3JZEKOM.roa File: gkbICmY92gO5yWh3UUqQ3JZEKOM.roa (raw, json) Hash identifier: RZ4WGmwrPF1CwIYf7Eiia3Ji+NZJkZQF8Et1XMrVS7E= Subject key identifier: 82:46:C8:0A:66:3D:DA:03:B9:C9:68:77:51:4A:90:DC:96:44:28:E3 Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e Certificate serial: 019B7A5A7CDD36CAE4F49FE02C7BB1FF6C93 Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/gkbICmY92gO5yWh3UUqQ3JZEKOM.roa Signing time: Thu 01 Jan 2026 16:18:29 +0000 ROA not before: Thu 01 Jan 2026 16:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 185.190.214.0/24 maxlen: 24 185.190.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7c:dd:36:ca:e4:f4:9f:e0:2c:7b:b1:ff:6c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e Validity Not Before: Jan 1 16:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8246c80a663dda03b9c96877514a90dc964428e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:1a:83:02:7b:2f:9e:0f:4e:38:47:5c:88: c8:ce:f3:3b:a7:3f:25:8d:74:b4:0d:c2:37:b6:71: 29:39:14:23:09:cf:b1:6b:55:22:7c:4a:82:e5:cc: 63:33:b7:77:be:18:ea:79:b7:fe:10:09:c7:6a:e8: 04:e5:10:b7:b6:89:11:82:12:67:39:97:e6:08:0e: 2c:38:06:ab:9d:3d:a8:81:02:a6:8c:a3:8c:f6:82: f5:f1:a5:8b:ac:aa:e8:2b:27:aa:b6:b5:9e:b8:83: 8b:b9:24:ef:ff:12:2e:47:a4:cb:85:c5:6d:57:86: de:a6:19:6c:b2:33:3d:25:85:ea:dc:2c:c2:b5:a0: f3:3a:38:81:32:35:cf:0f:69:10:36:1f:4e:be:36: 48:d9:91:e9:29:7b:f8:10:fd:fe:1d:5e:ed:eb:d1: 59:68:da:14:2d:fc:1c:e5:35:55:a1:a7:99:42:37: d0:12:47:f3:0f:8e:5b:c1:66:7c:41:1a:3c:3b:57: 3d:da:ff:eb:02:b3:3b:3c:6e:e6:79:3c:33:c7:2f: 18:19:4b:d3:8b:ee:e2:08:32:71:f5:fd:3f:de:50: 7a:c6:68:3f:ab:f2:23:fb:61:fc:1f:47:48:be:87: 00:ef:8b:e6:e5:16:ee:d1:a0:8b:4d:de:85:4d:66: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:46:C8:0A:66:3D:DA:03:B9:C9:68:77:51:4A:90:DC:96:44:28:E3 X509v3 Authority Key Identifier: keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/gkbICmY92gO5yWh3UUqQ3JZEKOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.214.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:42:f1:03:e6:85:e6:e9:ab:62:ae:da:27:af:ff:fb:80:4b: 55:ee:40:4e:c6:41:81:34:c3:81:ef:38:84:de:b4:84:8e:4b: e7:f5:33:6b:2c:f0:d9:ee:6e:72:3e:7a:c0:5e:c8:90:5a:25: 59:99:ae:fd:34:15:ec:ea:b3:9c:9a:a2:67:2c:e3:cf:35:a7: 56:ed:04:bf:34:1d:18:d8:ff:1c:aa:b0:3a:ec:08:bb:1e:73: 8e:8a:7d:af:5f:e4:9f:51:79:32:17:e2:cf:6a:dc:56:46:fc: 1c:52:11:8d:3a:53:2f:ec:e2:4b:dc:11:76:01:b8:bf:99:c9: b6:11:85:e9:6e:b0:02:98:f1:2f:7d:bf:1d:9a:96:8c:e5:fe: f7:de:0f:da:37:61:95:4e:f1:1e:6d:cb:8b:1b:5d:ba:7d:60: 0a:fd:67:36:30:35:aa:cf:51:be:43:e0:41:d3:97:11:96:5d: 89:8f:51:3f:3a:27:60:6c:0c:d0:1b:91:63:d3:15:5d:c8:fa: da:86:ff:24:fc:e1:2d:d4:8d:80:9e:5f:6a:27:8c:0b:9f:57: 8c:c6:a4:3d:4d:71:d0:f6:dc:b4:c8:36:7b:80:6e:f0:d3:0c: a0:5e:3b:8a:b5:f7:cd:26:0e:09:82:9f:0a:e3:94:51:79:50: a3:23:42:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WnzdNsrk9J/gLHux/2yTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZDEwYjg4ZWIyNGY2MjYyZDkzMTUzNjhhNWQwMWUxZTA4 NjBjNGUwHhcNMjYwMTAxMTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjQ2YzgwYTY2M2RkYTAzYjljOTY4Nzc1MTRhOTBkYzk2NDQyOGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDIagwJ7L54PTjhHXIjIzvM7pz8l jXS0DcI3tnEpORQjCc+xa1UifEqC5cxjM7d3vhjqebf+EAnHaugE5RC3tokRghJn OZfmCA4sOAarnT2ogQKmjKOM9oL18aWLrKroKyeqtrWeuIOLuSTv/xIuR6TLhcVt V4bephlssjM9JYXq3CzCtaDzOjiBMjXPD2kQNh9OvjZI2ZHpKXv4EP3+HV7t69FZ aNoULfwc5TVVoaeZQjfQEkfzD45bwWZ8QRo8O1c92v/rArM7PG7meTwzxy8YGUvT i+7iCDJx9f0/3lB6xmg/q/Ij+2H8H0dIvocA74vm5Rbu0aCLTd6FTWYMeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIJGyApmPdoDuclod1FKkNyWRCjjMB8GA1UdIwQY MBaAFEHRC4jrJPYmLZMVNopdAeHghgxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAt ZWY5NzAwNmM0NTBiLzEvZ2tiSUNtWTkyZ081eVdoM1VVcVEzSlpFS09NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85OTg3ODYtODcxOS00ZDhlLTk1MDAtZWY5NzAwNmM0NTBi LzEvUWRFTGlPc2s5aVl0a3hVMmlsMEI0ZUNHREU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub7WMA0G CSqGSIb3DQEBCwUAA4IBAQA/QvED5oXm6atirtonr//7gEtV7kBOxkGBNMOB7ziE 3rSEjkvn9TNrLPDZ7m5yPnrAXsiQWiVZma79NBXs6rOcmqJnLOPPNadW7QS/NB0Y 2P8cqrA67Ai7HnOOin2vX+SfUXkyF+LPatxWRvwcUhGNOlMv7OJL3BF2Abi/mcm2 EYXpbrACmPEvfb8dmpaM5f733g/aN2GVTvEebcuLG126fWAK/Wc2MDWqz1G+Q+BB 05cRll2Jj1E/OidgbAzQG5Fj0xVdyPrahv8k/OEt1I2Anl9qJ4wLn1eMxqQ9TXHQ 9ty0yDZ7gG7w0wygXjuKtffNJg4Jgp8K45RReVCjI0J3 -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:58 2026 by rpki-client