This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa File: gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa (raw, json) Hash identifier: Mp1A6bnLjG6e+iNvqlRY2Pi1q3kKD3uoZO/De04Jgqw= Subject key identifier: 82:97:75:9A:13:87:5E:23:11:8F:8B:01:0F:56:14:94:87:B4:38:A6 Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0 Certificate serial: 019B77C6B95A72378F0D8A68C51FE7900FA4 Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61220 IP address blocks: 84.54.14.0/24 maxlen: 24 86.104.14.0/24 maxlen: 24 89.43.78.0/24 maxlen: 24 176.98.42.0/24 maxlen: 24 176.98.43.0/24 maxlen: 24 185.81.152.0/24 maxlen: 24 185.81.153.0/24 maxlen: 24 185.81.154.0/24 maxlen: 24 185.81.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b9:5a:72:37:8f:0d:8a:68:c5:1f:e7:90:0f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8297759a13875e23118f8b010f56149487b438a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:11:7b:8f:26:59:7e:e1:4c:dc:c3:fe:9a: ac:93:ee:f1:04:6f:75:1b:02:d5:b0:65:42:8e:e0: 4a:b2:ee:d9:01:7e:f0:61:43:e1:fc:27:e5:74:0a: 01:d9:8d:5a:37:8e:10:65:c5:0d:03:bd:2d:da:d3: 30:35:2c:12:b8:a3:a3:29:b5:9f:42:43:63:69:38: a8:3d:9c:8c:25:80:02:95:9c:47:9f:3e:09:99:45: af:88:0e:bd:eb:6c:a1:f3:0d:95:00:3f:f1:83:8f: 31:cc:07:c6:d6:d1:a6:b9:f1:28:18:2c:48:2a:0a: 9c:f9:6d:56:a0:ab:d5:52:5c:9a:61:b8:8e:3b:24: b0:48:26:18:6c:91:db:f6:e1:3a:30:a3:f7:0a:4a: b7:2f:74:e0:80:7d:13:c3:6e:ac:b8:df:06:02:9b: 58:2d:ad:92:ee:b3:ce:aa:90:65:32:6e:c4:04:94: 97:06:54:b4:80:af:69:8d:4c:69:9f:5d:d7:ae:9c: f2:41:ee:d2:91:61:0b:6f:72:03:be:4d:20:e8:1b: ac:b6:e8:02:7b:10:df:eb:d7:f7:cb:73:5e:66:c8: 06:a9:3e:31:79:ea:bb:80:d1:e7:d0:5e:8b:71:87: 78:53:a1:8b:6e:b2:1e:4e:e4:d9:df:6f:eb:bb:d3: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:97:75:9A:13:87:5E:23:11:8F:8B:01:0F:56:14:94:87:B4:38:A6 X509v3 Authority Key Identifier: keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/gpd1mhOHXiMRj4sBD1YUlIe0OKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.14.0/24 86.104.14.0/24 89.43.78.0/24 176.98.42.0/23 185.81.152.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:ab:ba:43:d4:a7:6e:38:22:6d:25:f4:e3:40:6d:34:15:d8: 70:1a:67:64:51:c3:79:d6:ce:0b:bd:3b:3b:fc:f3:a5:28:3b: 6a:77:6b:7e:56:bb:44:81:b6:95:ba:65:ee:a7:2e:20:7a:5e: 29:b6:57:5b:3c:19:d6:c2:74:43:24:d3:63:82:e6:7a:b7:bb: 8f:0d:79:88:30:34:71:71:6e:20:db:65:ea:cc:06:2e:0b:12: 27:95:1d:3d:9f:2e:1b:ef:a1:81:80:5c:5d:27:36:7f:4f:58: 0f:ca:4c:22:23:77:50:80:ea:4a:cc:83:33:0b:cb:ed:82:cd: 24:7b:dd:7a:52:27:1d:9a:66:70:35:10:76:a1:95:d0:47:c8: a9:bc:97:bf:cc:c6:e3:9b:97:51:91:e5:fd:99:76:4b:7a:e3: 39:8b:e0:aa:05:54:2d:5e:46:e3:f0:6c:6b:a7:8c:27:2f:b8: 4a:16:08:37:d6:a2:dd:3f:e5:d6:7c:fb:00:4f:4e:d4:65:5d: 14:1e:c5:a5:da:01:9a:f5:08:a0:8a:8b:e5:4c:49:e2:ea:72: c1:ec:cd:b5:8e:f1:65:29:94:af:35:2c:8b:9d:0d:49:f9:aa: 0c:85:eb:ea:68:3e:6a:1b:74:76:f9:27:f7:53:c8:8b:60:cb: 52:74:d1:08 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xrlacjePDYpoxR/nkA+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx NzgzZDAwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjk3NzU5YTEzODc1ZTIzMTE4ZjhiMDEwZjU2MTQ5NDg3YjQzOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrwRe48mWX7hTNzD/pqsk+7xBG91 GwLVsGVCjuBKsu7ZAX7wYUPh/CfldAoB2Y1aN44QZcUNA70t2tMwNSwSuKOjKbWf QkNjaTioPZyMJYAClZxHnz4JmUWviA6962yh8w2VAD/xg48xzAfG1tGmufEoGCxI Kgqc+W1WoKvVUlyaYbiOOySwSCYYbJHb9uE6MKP3Ckq3L3TggH0Tw26suN8GAptY La2S7rPOqpBlMm7EBJSXBlS0gK9pjUxpn13XrpzyQe7SkWELb3IDvk0g6BustugC exDf69f3y3NeZsgGqT4xeeq7gNHn0F6LcYd4U6GLbrIeTuTZ32/ru9OntwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIKXdZoTh14jEY+LAQ9WFJSHtDimMB8GA1UdIwQY MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt NjI2NTUyMWY2ZGY3LzEvZ3BkMW1oT0hYaU1SajRzQkQxWVVsSWUwT0tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3 LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVDYOAwQA VmgOAwQAWStOAwQBsGIqAwQCuVGYMA0GCSqGSIb3DQEBCwUAA4IBAQBNq7pD1Kdu OCJtJfTjQG00FdhwGmdkUcN51s4LvTs7/POlKDtqd2t+VrtEgbaVumXupy4gel4p tldbPBnWwnRDJNNjguZ6t7uPDXmIMDRxcW4g22XqzAYuCxInlR09ny4b76GBgFxd JzZ/T1gPykwiI3dQgOpKzIMzC8vtgs0ke916UicdmmZwNRB2oZXQR8ipvJe/zMbj m5dRkeX9mXZLeuM5i+CqBVQtXkbj8Gxrp4wnL7hKFgg31qLdP+XWfPsAT07UZV0U HsWl2gGa9QigiovlTEni6nLB7M21jvFlKZSvNSyLnQ1J+aoMhevqaD5qG3R2+Sf3 U8iLYMtSdNEI -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:43 2026 by rpki-client