This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa File: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (raw, json) Hash identifier: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc= Subject key identifier: 1A:92:B5:AB:24:66:45:D4:13:32:FF:6B:26:E0:6F:AC:B3:C0:3C:20 Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615 Certificate serial: 019B7A5A8D2B724D9E97357BA5B644CAA86D Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215946 IP address blocks: 185.120.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8d:2b:72:4d:9e:97:35:7b:a5:b6:44:ca:a8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a92b5ab246645d41332ff6b26e06facb3c03c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:eb:c2:f3:a3:3a:b1:ee:19:3d:ad:af:06:35: 7b:4e:8a:f9:e9:69:cd:01:f6:d5:b6:ec:f3:e8:3d: 5e:92:95:64:35:c4:1b:ec:22:48:68:69:21:4a:ed: a4:72:ba:08:7b:f2:c9:a4:a8:7f:77:c7:f5:fe:32: 8d:e9:46:f6:a5:20:00:b1:de:dd:3e:27:4c:dc:b1: 38:71:2a:ce:58:d6:6d:05:0b:f8:98:60:a7:2d:26: 3d:89:ae:92:2c:87:c7:ed:94:bd:1a:0d:d0:fa:39: f1:32:31:af:d9:85:bc:e4:a7:0e:0e:13:fa:75:7e: 97:da:ec:e2:48:4e:83:a1:9f:aa:35:84:eb:69:be: 1a:6d:0c:9b:63:15:bc:94:5f:c6:fc:3e:46:61:db: d8:9b:49:83:bd:57:2e:85:96:c1:18:0a:52:61:3c: 81:a9:c9:3a:8b:7d:2a:fd:24:78:0c:2d:50:fd:5f: c5:dd:df:4c:3b:71:2b:0e:99:8f:ce:92:48:31:c4: 4f:ac:20:5b:56:01:e4:a7:93:02:f7:84:3d:e0:bf: df:71:f9:51:45:73:2f:97:ad:60:cf:d8:d1:ee:1e: 6e:0c:74:2c:d9:84:23:f7:7b:e1:e3:15:02:21:41: 9c:3d:2f:20:54:38:42:f0:40:ce:29:d5:b6:29:48: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:92:B5:AB:24:66:45:D4:13:32:FF:6B:26:E0:6F:AC:B3:C0:3C:20 X509v3 Authority Key Identifier: keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.39.0/24 Signature Algorithm: sha256WithRSAEncryption 51:aa:af:d5:80:ac:64:e6:9d:44:a0:c4:ee:48:73:50:78:ac: 52:0a:e3:8a:46:33:b4:1d:88:06:c2:57:df:c5:cf:22:42:35: 3a:24:77:b3:1b:6c:dc:e4:d0:90:1a:7a:96:8d:f7:c9:02:5b: 55:5f:3e:43:d0:85:12:6b:5b:b3:d0:0b:b8:7e:c5:3d:48:5f: c9:d0:2d:fd:b0:01:9c:52:70:ce:eb:b4:c4:36:72:f7:cb:5c: 08:6c:a4:57:10:17:f1:28:34:e2:cf:b3:05:fd:08:ce:ad:1a: 74:b4:1c:cb:17:51:49:99:e7:7e:19:9a:66:a8:4d:05:08:7d: fd:d0:83:e8:04:d4:5e:50:e1:58:23:90:5f:35:4a:00:56:81: b1:81:c5:2d:cc:ac:7c:f8:18:b9:d8:e2:87:21:b3:f9:d0:53: 48:ca:22:b7:45:3a:64:7a:89:03:a6:61:6a:ed:2e:3a:57:13: c6:aa:a7:6d:a1:7e:1c:59:8c:f3:ee:3b:f6:ad:50:80:9e:ce: 14:93:9b:37:8d:75:df:ea:c0:8f:18:b6:a2:c2:e8:9f:85:6a: e8:2b:8e:4f:b7:80:e0:68:e4:82:57:ce:1e:67:70:64:c2:07: 50:60:65:67:58:2b:bc:c5:82:9a:7c:f8:8f:0d:47:8d:6b:af: dc:4c:18:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wo0rck2elzV7pbZEyqhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk NDE2MTUwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTkyYjVhYjI0NjY0NWQ0MTMzMmZmNmIyNmUwNmZhY2IzYzAzYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uvC86M6se4ZPa2vBjV7Tor56WnN AfbVtuzz6D1ekpVkNcQb7CJIaGkhSu2kcroIe/LJpKh/d8f1/jKN6Ub2pSAAsd7d PidM3LE4cSrOWNZtBQv4mGCnLSY9ia6SLIfH7ZS9Gg3Q+jnxMjGv2YW85KcODhP6 dX6X2uziSE6DoZ+qNYTrab4abQybYxW8lF/G/D5GYdvYm0mDvVcuhZbBGApSYTyB qck6i30q/SR4DC1Q/V/F3d9MO3ErDpmPzpJIMcRPrCBbVgHkp5MC94Q94L/fcflR RXMvl61gz9jR7h5uDHQs2YQj93vh4xUCIUGcPS8gVDhC8EDOKdW2KUgvKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqStaskZkXUEzL/aybgb6yzwDwgMB8GA1UdIwQY MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt MTgxZTY0MDU5ZDMxLzEvR3BLMXF5Um1SZFFUTXY5ckp1QnZyTFBBUENBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXgnMA0G CSqGSIb3DQEBCwUAA4IBAQBRqq/VgKxk5p1EoMTuSHNQeKxSCuOKRjO0HYgGwlff xc8iQjU6JHezG2zc5NCQGnqWjffJAltVXz5D0IUSa1uz0Au4fsU9SF/J0C39sAGc UnDO67TENnL3y1wIbKRXEBfxKDTiz7MF/QjOrRp0tBzLF1FJmed+GZpmqE0FCH39 0IPoBNReUOFYI5BfNUoAVoGxgcUtzKx8+Bi52OKHIbP50FNIyiK3RTpkeokDpmFq 7S46VxPGqqdtoX4cWYzz7jv2rVCAns4Uk5s3jXXf6sCPGLaiwuifhWroK45Pt4Dg aOSCV84eZ3BkwgdQYGVnWCu8xYKafPiPDUeNa6/cTBiR -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:38 2026 by rpki-client