This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/Gf-VCYosyBVpPyCAGx0D3HqWf9w.roa File: Gf-VCYosyBVpPyCAGx0D3HqWf9w.roa (raw, json) Hash identifier: DDyjNSe2l/f8wPKhdcTUlF9QrQA73oZdOx4+g2X9b/g= Subject key identifier: 19:FF:95:09:8A:2C:C8:15:69:3F:20:80:1B:1D:03:DC:7A:96:7F:DC Certificate issuer: /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf Certificate serial: 019B7F15258AE88113484CA6D28C09617A64 Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/Gf-VCYosyBVpPyCAGx0D3HqWf9w.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29468 IP address blocks: 185.102.16.0/22 maxlen: 22 185.102.16.0/23 maxlen: 23 185.102.16.0/24 maxlen: 24 185.102.17.0/24 maxlen: 24 185.102.18.0/24 maxlen: 24 185.102.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:25:8a:e8:81:13:48:4c:a6:d2:8c:09:61:7a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19ff95098a2cc815693f20801b1d03dc7a967fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:55:d4:a0:cb:a3:44:54:45:ce:a8:03:2e: 36:80:31:3b:de:b4:1b:d4:fd:0b:99:35:15:66:4a: f5:96:6f:4a:16:8c:24:a8:fe:75:1a:1c:44:36:d2: 6d:59:57:5b:21:51:63:1f:33:99:a6:80:63:f6:83: 9c:00:9e:23:94:73:cb:b1:2c:d1:cc:88:3c:eb:fa: 14:a7:f2:9c:3a:97:8a:df:e9:4c:18:b0:a6:41:97: b7:1a:dd:41:b1:f8:10:2f:cb:d7:97:ae:d3:93:43: 39:78:30:6e:7b:e5:73:8e:6c:ff:33:62:91:a2:af: 4c:a9:8b:fc:00:52:69:6f:d6:5b:9d:94:e3:f7:2b: e6:be:d5:ab:de:6e:e8:16:4c:cb:bd:67:0a:5b:ca: b5:6c:7a:bc:a1:c5:e6:1b:a6:b8:cb:b9:df:71:65: 18:38:89:36:da:61:8e:8d:72:3b:2c:3c:30:91:ec: f9:91:b5:a3:08:84:6f:1c:8c:6a:7a:de:30:36:0a: d6:ec:e2:0a:ca:fb:55:07:00:e6:e3:d9:a1:d9:7c: b7:bd:70:dc:a3:ba:2b:88:4e:56:21:ac:34:9a:5e: dc:ba:80:f4:10:79:f5:d6:66:50:65:86:47:f3:a0: b8:f9:88:6b:1b:b0:6b:4e:d6:4c:99:ef:36:a6:75: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FF:95:09:8A:2C:C8:15:69:3F:20:80:1B:1D:03:DC:7A:96:7F:DC X509v3 Authority Key Identifier: keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/Gf-VCYosyBVpPyCAGx0D3HqWf9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.16.0/22 Signature Algorithm: sha256WithRSAEncryption 08:e6:88:97:42:46:4e:34:99:59:4e:8d:a3:e4:25:02:e0:63: 1c:6f:8f:fc:6a:71:fa:84:09:13:8b:67:77:a8:e5:af:9f:80: 82:0a:54:62:9f:9e:d2:f8:7e:d7:9a:69:6b:9a:8b:f4:49:72: 06:e1:5a:c9:11:08:f2:3b:01:c4:f4:76:61:2b:03:71:92:f9: 6d:fa:43:b4:17:3f:2c:4e:32:1f:69:e6:f7:6d:6e:cd:eb:dd: 2f:4d:4b:01:bb:4a:a5:5a:20:4c:eb:cc:ca:5d:29:5f:39:6b: e3:51:a2:fe:95:37:21:7d:dc:65:ff:0e:88:06:70:53:d3:7f: dd:8b:ea:7b:3e:0c:7a:a4:12:e7:8e:49:c6:46:f0:01:b8:4a: b5:22:86:62:c1:c3:e1:ed:32:ec:73:c3:dd:a2:ce:a3:d2:88: 66:2b:b6:2f:7c:47:67:36:4f:dd:bf:58:30:32:1a:91:dc:76: a3:cc:f2:da:80:90:4e:a8:72:44:69:ea:30:6a:5f:70:f9:ea: a1:eb:8e:84:f8:7d:62:85:b0:a4:ea:90:dc:4b:cf:76:c1:5b: d2:3a:7d:0d:13:40:db:67:ac:60:ec:a8:7f:1d:fb:cb:2d:bd: 80:27:1b:ce:3c:ed:e4:c8:ae:f7:25:94:24:27:cc:51:e2:10: 6e:56:4f:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSWK6IETSEym0owJYXpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTVkZmQxMzAyMWQ1ODU1ZmYxOTQ1MzQ5MzNjZDdkNmNh Y2Q2Y2YwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWZmOTUwOThhMmNjODE1NjkzZjIwODAxYjFkMDNkYzdhOTY3ZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEZV1KDLo0RURc6oAy42gDE73rQb 1P0LmTUVZkr1lm9KFowkqP51GhxENtJtWVdbIVFjHzOZpoBj9oOcAJ4jlHPLsSzR zIg86/oUp/KcOpeK3+lMGLCmQZe3Gt1BsfgQL8vXl67Tk0M5eDBue+Vzjmz/M2KR oq9MqYv8AFJpb9ZbnZTj9yvmvtWr3m7oFkzLvWcKW8q1bHq8ocXmG6a4y7nfcWUY OIk22mGOjXI7LDwwkez5kbWjCIRvHIxqet4wNgrW7OIKyvtVBwDm49mh2Xy3vXDc o7oriE5WIaw0ml7cuoD0EHn11mZQZYZH86C4+YhrG7BrTtZMme82pnU18QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBn/lQmKLMgVaT8ggBsdA9x6ln/cMB8GA1UdIwQY MBaAFOpV39EwIdWFX/GUU0kzzX1srNbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxYZjBUQWgxWVZmOFpSVFNUUE5mV3lzMXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82ZjQzM2ItZGMzMi00NWEyLTk3OWUt ZmYxNDMzNjg3NTNmLzEvR2YtVkNZb3N5QlZwUHlDQUd4MEQzSHFXZjl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82ZjQzM2ItZGMzMi00NWEyLTk3OWUtZmYxNDMzNjg3NTNm LzEvNmxYZjBUQWgxWVZmOFpSVFNUUE5mV3lzMXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWYQMA0G CSqGSIb3DQEBCwUAA4IBAQAI5oiXQkZONJlZTo2j5CUC4GMcb4/8anH6hAkTi2d3 qOWvn4CCClRin57S+H7Xmmlrmov0SXIG4VrJEQjyOwHE9HZhKwNxkvlt+kO0Fz8s TjIfaeb3bW7N690vTUsBu0qlWiBM68zKXSlfOWvjUaL+lTchfdxl/w6IBnBT03/d i+p7Pgx6pBLnjknGRvABuEq1IoZiwcPh7TLsc8Pdos6j0ohmK7YvfEdnNk/dv1gw MhqR3HajzPLagJBOqHJEaeowal9w+eqh646E+H1ihbCk6pDcS892wVvSOn0NE0Db Z6xg7Kh/HfvLLb2AJxvOPO3kyK73JZQkJ8xR4hBuVk+8 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:36 2026 by rpki-client