This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/1-GJxYFfHhPUGldIW84G9cSjaROo.roa File: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (raw, json) Hash identifier: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg= Subject key identifier: F8:62:71:60:57:C7:84:F5:06:95:D2:16:F3:81:BD:71:28:DA:44:EA Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a Certificate serial: 019B7F8329E36209442593FB56E10186CD91 Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/1-GJxYFfHhPUGldIW84G9cSjaROo.roa Signing time: Fri 02 Jan 2026 16:21:00 +0000 ROA not before: Fri 02 Jan 2026 16:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196798 IP address blocks: 185.110.208.0/22 maxlen: 22 188.94.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:29:e3:62:09:44:25:93:fb:56:e1:01:86:cd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a Validity Not Before: Jan 2 16:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f862716057c784f50695d216f381bd7128da44ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:51:a0:26:1b:ee:78:0d:83:c2:be:43:59: 76:7d:8d:a9:d5:dd:dd:ed:19:7c:ff:da:71:20:f9: 4f:33:dc:28:41:4a:b0:6e:4e:7e:9c:43:97:59:42: fb:91:41:f6:aa:00:13:a4:2b:d5:81:c3:17:47:e1: f3:41:cf:fa:a0:9e:b2:b7:62:42:a1:e5:1f:2e:51: 49:95:ca:3d:79:ce:11:d1:ff:1a:be:13:1c:53:6c: 17:a9:92:81:83:7a:30:23:05:bf:38:06:86:c6:a0: 5f:3c:0f:29:21:38:4f:33:3a:d4:c3:94:77:cc:ac: 90:8d:d8:0b:88:c8:e7:23:f3:a2:88:23:e0:11:be: 27:7c:4a:81:ee:49:cd:60:93:1a:2c:1e:8d:b9:ae: bb:31:b8:00:5c:0f:d0:4d:03:4a:70:f9:9b:6c:4c: 9c:1a:37:8d:af:8c:07:9e:9e:a1:85:57:b6:21:3d: 33:f0:2f:58:a9:9a:b2:d7:bb:94:85:95:f5:7e:63: ac:79:07:f5:4a:c2:4e:63:58:cb:c4:17:64:0e:ae: d9:0f:66:1b:c7:62:f6:cc:b1:4d:3a:c5:36:26:93: bd:fc:26:b5:27:da:c9:4a:6b:81:a0:bb:ad:0f:5f: 72:8e:ca:b1:82:37:63:27:11:87:a6:1b:cf:79:74: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:62:71:60:57:C7:84:F5:06:95:D2:16:F3:81:BD:71:28:DA:44:EA X509v3 Authority Key Identifier: keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/1-GJxYFfHhPUGldIW84G9cSjaROo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.208.0/22 188.94.224.0/21 Signature Algorithm: sha256WithRSAEncryption 94:d7:09:1a:20:b2:31:bb:e0:bd:e1:04:62:b9:e4:89:b5:5a: 41:b5:cc:c3:06:b0:67:fa:5d:91:d9:25:e3:83:90:bb:77:6a: ed:f3:7d:e1:53:7a:e4:a3:c8:c7:36:0e:21:f4:27:aa:59:a1: b7:7c:49:7c:44:e9:ce:07:e9:81:f0:57:56:4a:f8:93:49:3b: 76:33:f9:c1:20:ab:a4:e4:15:57:0c:c0:3a:82:7e:76:a5:65: 65:a0:28:b8:f8:77:46:f3:c3:a6:b2:a7:e5:b7:00:2c:5f:ae: 22:06:fb:8f:9b:5d:12:61:5c:1a:f7:ae:f6:ac:a5:0d:4e:de: a9:37:67:17:b1:a1:8a:35:f0:f0:33:d0:28:c3:dd:a8:40:cb: eb:64:ca:a1:a0:ca:e2:75:e0:aa:d3:66:35:18:b3:2d:4f:15: fb:56:ab:3a:f4:46:e5:60:70:0c:95:fd:91:6b:7f:5c:95:90: e1:d4:48:44:06:0f:89:b0:1f:2f:48:ea:a0:bd:58:1a:89:9a: 83:31:ed:02:aa:58:d1:61:83:4e:fa:51:75:23:ab:93:2f:d2: a5:ab:b4:7c:3e:0c:af:69:f7:67:0f:f2:23:1d:5b:86:8b:54: d6:61:5a:bf:75:b7:55:7a:04:34:62:7b:4a:62:b7:f8:49:71: 2b:2b:a6:96 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/gynjYglEJZP7VuEBhs2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMGNkNTBkYjQzN2M3ODk0NjRjYjY0ZGZhYmZlNDA1Y2E5 ODFiMWEwHhcNMjYwMTAyMTYyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODYyNzE2MDU3Yzc4NGY1MDY5NWQyMTZmMzgxYmQ3MTI4ZGE0NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY1RoCYb7ngNg8K+Q1l2fY2p1d3d 7Rl8/9pxIPlPM9woQUqwbk5+nEOXWUL7kUH2qgATpCvVgcMXR+HzQc/6oJ6yt2JC oeUfLlFJlco9ec4R0f8avhMcU2wXqZKBg3owIwW/OAaGxqBfPA8pIThPMzrUw5R3 zKyQjdgLiMjnI/OiiCPgEb4nfEqB7knNYJMaLB6Nua67MbgAXA/QTQNKcPmbbEyc GjeNr4wHnp6hhVe2IT0z8C9YqZqy17uUhZX1fmOseQf1SsJOY1jLxBdkDq7ZD2Yb x2L2zLFNOsU2JpO9/Ca1J9rJSmuBoLutD19yjsqxgjdjJxGHphvPeXSvlwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPhicWBXx4T1BpXSFvOBvXEo2kTqMB8GA1UdIwQY MBaAFIEM1Q20N8eJRky2Tfq/5AXKmBsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2Yt NmI3NTk5ZmNkYzMzLzEvMS1HSnhZRmZIaFBVR2xkSVc4NEc5Y1NqYVJPby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmYvZWNhYTk2LTlhZjYtNGI5OS05NTdmLTZiNzU5OWZjZGMz My8xL2dRelZEYlEzeDRsR1RMWk4tcl9rQmNxWUd4by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArlu0AME A7xe4DANBgkqhkiG9w0BAQsFAAOCAQEAlNcJGiCyMbvgveEEYrnkibVaQbXMwwaw Z/pdkdkl44OQu3dq7fN94VN65KPIxzYOIfQnqlmht3xJfETpzgfpgfBXVkr4k0k7 djP5wSCrpOQVVwzAOoJ+dqVlZaAouPh3RvPDprKn5bcALF+uIgb7j5tdEmFcGveu 9qylDU7eqTdnF7GhijXw8DPQKMPdqEDL62TKoaDK4nXgqtNmNRizLU8V+1arOvRG 5WBwDJX9kWt/XJWQ4dRIRAYPibAfL0jqoL1YGomagzHtAqpY0WGDTvpRdSOrky/S pau0fD4Mr2n3Zw/yIx1bhotU1mFav3W3VXoENGJ7SmK3+ElxKyumlg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client