This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/GF0MLu9rUCMKqqUs-tw36g9XAm8.roa File: GF0MLu9rUCMKqqUs-tw36g9XAm8.roa (raw, json) Hash identifier: CGs8wTMFQfIv83nixyW2lwUi4DwWo83SvcVxQaC6KDo= Subject key identifier: 18:5D:0C:2E:EF:6B:50:23:0A:AA:A5:2C:FA:DC:37:EA:0F:57:02:6F Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Certificate serial: 019B7F83BC16175EBB8436E972D627987780 Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/GF0MLu9rUCMKqqUs-tw36g9XAm8.roa Signing time: Fri 02 Jan 2026 16:21:38 +0000 ROA not before: Fri 02 Jan 2026 16:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56834 IP address blocks: 95.214.12.0/22 maxlen: 22 217.18.216.0/22 maxlen: 22 2a09:d280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:bc:16:17:5e:bb:84:36:e9:72:d6:27:98:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec Validity Not Before: Jan 2 16:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=185d0c2eef6b50230aaaa52cfadc37ea0f57026f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:ae:c0:9a:c6:c6:21:72:c3:84:a9:60:bd: 7b:85:e5:d3:dd:2a:55:01:54:a7:8f:c9:88:78:c2: 90:f8:32:5c:49:1a:f1:90:f5:24:76:fa:9b:04:f4: e8:39:39:68:03:18:7b:b8:02:ca:13:97:81:f1:aa: 0f:cf:c0:5b:e7:4c:66:73:ab:32:58:ee:89:83:1c: fd:da:f7:9a:d5:76:3b:42:c6:65:bf:47:a5:24:d2: 36:7c:e5:b0:00:01:a8:cc:bf:7e:66:1f:09:e0:d6: 4f:19:97:3b:ea:48:be:ea:44:dd:a5:d4:26:a9:68: 0a:a0:e2:dd:9c:26:57:0f:5d:90:cb:55:34:7c:a6: 35:76:af:ca:e1:f9:a9:67:9c:06:37:5f:7b:de:7a: b8:f6:79:54:55:38:e3:57:58:16:b7:dc:f8:3d:92: 1b:b6:c5:49:3f:7c:a7:43:9c:4e:75:10:ae:7d:de: bd:50:3e:df:a9:10:fb:42:f3:e0:cb:de:12:2a:0c: f8:47:34:e6:86:ed:77:f5:0f:1f:3f:d5:a7:6c:88: a4:87:00:95:82:f5:d2:dc:ed:f9:4c:1b:e1:4a:d2: da:d3:84:e8:f4:dd:09:f7:32:b8:9c:0f:03:f4:0e: de:fb:54:e2:83:c0:19:0c:43:b4:5d:11:14:2e:de: ef:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:0C:2E:EF:6B:50:23:0A:AA:A5:2C:FA:DC:37:EA:0F:57:02:6F X509v3 Authority Key Identifier: keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/GF0MLu9rUCMKqqUs-tw36g9XAm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.12.0/22 217.18.216.0/22 IPv6: 2a09:d280::/29 Signature Algorithm: sha256WithRSAEncryption 2f:2a:f7:7d:3e:1d:68:14:6b:06:44:64:ff:46:f5:97:f0:c2: 14:58:ef:01:1f:2c:f3:6c:10:6c:61:2f:44:d8:79:cf:fc:ac: b5:29:18:ca:bb:14:9c:46:c3:11:9f:e2:b5:7c:fc:83:39:f8: a5:dd:9e:13:26:a9:4b:f4:c3:58:54:1b:2d:e1:47:f0:53:66: bc:5c:90:d9:88:08:47:e8:16:5c:69:18:47:bb:a5:26:d5:3d: f8:a2:6d:9a:bb:3d:0b:2a:6e:5d:17:d5:a6:38:aa:73:f9:ca: b6:09:bd:8f:fb:4a:3d:09:c6:06:f1:05:5f:44:bc:36:87:69: 7e:4a:05:2e:19:7f:bc:95:f9:f7:10:d7:0c:83:8d:64:81:4e: 4e:8a:c7:d5:e7:d4:03:05:e6:43:b6:b0:41:48:e0:40:8c:c8: 54:99:92:90:25:7c:c5:36:75:45:df:62:c5:79:1a:c3:6a:4a: bc:d9:b3:7f:0c:d9:f8:cf:a1:f0:54:87:3e:ad:2e:94:f2:d3: aa:43:1c:cf:b5:32:3d:b9:38:7e:a3:62:09:7f:b6:72:f0:40: cf:42:d8:4c:01:f8:2f:8a:f4:7d:bc:24:9e:a1:aa:57:90:c2: 33:12:95:21:5e:13:d1:36:d0:ec:f2:93:f4:29:6f:8f:e0:3d: fb:37:1c:6f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/g7wWF167hDbpctYnmHeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZmUzMGEwMTQ3ODQ2MjVkYjJjOWRjOTBhZTNjZTE1ZTU0 YTg4ZWMwHhcNMjYwMTAyMTYyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODVkMGMyZWVmNmI1MDIzMGFhYWE1MmNmYWRjMzdlYTBmNTcwMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13CuwJrGxiFyw4SpYL17heXT3SpV AVSnj8mIeMKQ+DJcSRrxkPUkdvqbBPToOTloAxh7uALKE5eB8aoPz8Bb50xmc6sy WO6Jgxz92vea1XY7QsZlv0elJNI2fOWwAAGozL9+Zh8J4NZPGZc76ki+6kTdpdQm qWgKoOLdnCZXD12Qy1U0fKY1dq/K4fmpZ5wGN1973nq49nlUVTjjV1gWt9z4PZIb tsVJP3ynQ5xOdRCufd69UD7fqRD7QvPgy94SKgz4RzTmhu139Q8fP9WnbIikhwCV gvXS3O35TBvhStLa04To9N0J9zK4nA8D9A7e+1Tig8AZDEO0XREULt7vIQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBhdDC7va1AjCqqlLPrcN+oPVwJvMB8GA1UdIwQY MBaAFJ3+MKAUeEYl2yydyQrjzhXlSojsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTIt NjA0ZTIzNzQ3NzY5LzEvR0YwTUx1OXJVQ01LcXFVcy10dzM2ZzlYQW04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8zZDE0OTUtMGVmOC00OWIxLTk5ZTItNjA0ZTIzNzQ3NzY5 LzEvbmY0d29CUjRSaVhiTEozSkN1UE9GZVZLaU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCX9YMAwQC 2RLYMA0EAgACMAcDBQMqCdKAMA0GCSqGSIb3DQEBCwUAA4IBAQAvKvd9Ph1oFGsG RGT/RvWX8MIUWO8BHyzzbBBsYS9E2HnP/Ky1KRjKuxScRsMRn+K1fPyDOfil3Z4T JqlL9MNYVBst4UfwU2a8XJDZiAhH6BZcaRhHu6Um1T34om2auz0LKm5dF9WmOKpz +cq2Cb2P+0o9CcYG8QVfRLw2h2l+SgUuGX+8lfn3ENcMg41kgU5OisfV59QDBeZD trBBSOBAjMhUmZKQJXzFNnVF32LFeRrDakq82bN/DNn4z6HwVIc+rS6U8tOqQxzP tTI9uTh+o2IJf7Zy8EDPQthMAfgvivR9vCSeoapXkMIzEpUhXhPRNtDs8pP0KW+P 4D37Nxxv -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:28 2026 by rpki-client