This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/GTw1p6dp2oTAJwFXKyAJ9e_9LzQ.roa File: GTw1p6dp2oTAJwFXKyAJ9e_9LzQ.roa (raw, json) Hash identifier: FDQLcvT4V2CG+9wZjgpFjWusMGtaovIUYoYdZ/3vEjw= Subject key identifier: 19:3C:35:A7:A7:69:DA:84:C0:27:01:57:2B:20:09:F5:EF:FD:2F:34 Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Certificate serial: 019B7BA5398F2320FC01A266CE98BE1E278C Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/GTw1p6dp2oTAJwFXKyAJ9e_9LzQ.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42184 IP address blocks: 88.218.84.0/22 maxlen: 22 185.72.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:39:8f:23:20:fc:01:a2:66:ce:98:be:1e:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=193c35a7a769da84c02701572b2009f5effd2f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:57:01:b1:99:97:f8:c1:89:49:7c:b6:92: a3:d1:45:ec:57:96:0d:43:6b:cb:7b:2b:c8:83:e1: 22:04:e0:54:02:88:6c:60:65:fc:55:9d:3d:eb:6f: f5:85:25:57:b9:c8:f5:07:26:ec:f1:a5:13:86:72: c8:ee:34:31:05:4e:a7:67:e6:a4:4f:c0:1c:d4:0f: 3a:48:2e:15:75:79:42:47:92:d6:56:c0:68:d0:0b: bb:5d:56:bf:fa:46:0f:21:26:e5:5d:96:c4:02:f0: f0:88:48:5a:21:13:ee:31:8f:90:e0:0e:24:93:3c: ac:d5:17:83:68:b8:fd:23:db:5e:57:72:19:d1:f8: e6:55:72:63:3c:d5:09:8d:3b:5e:55:cd:1a:b5:0e: 20:90:ea:60:33:11:d3:f6:32:7f:6d:77:b7:68:85: 4b:29:35:56:c8:16:a3:87:0a:99:e1:52:b7:5e:b7: c0:48:5b:93:cc:cf:f5:2b:53:23:01:b8:a8:f4:24: 51:d0:ab:76:2c:1e:95:61:d6:37:39:3b:68:95:bd: 40:ca:ba:be:cb:be:5a:be:ce:d0:23:5e:81:81:6d: 69:ed:fc:1a:24:85:f2:4b:1e:60:dd:b2:fd:c3:a6: 1f:d3:ee:b5:ca:bc:4b:07:d4:06:be:60:5d:4e:7a: 05:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3C:35:A7:A7:69:DA:84:C0:27:01:57:2B:20:09:F5:EF:FD:2F:34 X509v3 Authority Key Identifier: keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/GTw1p6dp2oTAJwFXKyAJ9e_9LzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.84.0/22 185.72.200.0/22 Signature Algorithm: sha256WithRSAEncryption b6:73:a9:0f:cb:ce:e9:2e:16:09:28:8a:cf:f8:7d:11:a5:97: b7:ca:c9:0a:21:1a:d1:20:38:93:49:a1:9c:c1:5e:e2:30:96: e9:ba:a1:3d:69:91:89:5f:fa:ff:11:bc:3d:42:6e:e5:ae:11: 9f:dd:5e:49:e8:2d:66:48:2f:9d:66:84:e0:6d:38:e2:19:9c: 54:f4:71:c7:75:37:16:8e:74:b3:06:e2:67:92:d0:e3:e0:d5: 39:b3:0d:e7:31:65:cd:74:f9:34:b5:42:5e:32:92:7c:c6:fa: 5d:5a:03:7b:98:ea:4f:53:52:de:80:ce:56:95:7b:a0:b4:ed: cd:40:bf:72:d5:65:27:52:ba:c3:a6:48:59:42:e6:5c:18:10: 58:21:74:2c:55:0e:93:97:df:91:70:af:17:5d:80:74:62:1c: 74:6a:4e:73:d5:a0:56:6d:39:52:be:a7:b3:02:b8:ac:29:c7: 93:d6:22:a7:9f:7e:4d:82:a9:6f:c0:61:f5:7a:2e:d0:c2:d9: d3:90:da:02:2d:83:41:f0:43:6d:b8:1f:06:86:84:89:a6:af: 7d:fb:77:bf:ca:d5:94:09:e4:e7:0d:db:04:dd:f6:bb:44:7e: b4:cf:ac:74:45:58:64:24:fd:34:34:e4:33:6b:6f:3b:91:93: 56:1e:e8:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pTmPIyD8AaJmzpi+HieMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTQxM2ViMjlhNDNkMmU0NWZlY2RkODhlZTUzOTZjOTZi ZjFjYjUwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTNjMzVhN2E3NjlkYTg0YzAyNzAxNTcyYjIwMDlmNWVmZmQyZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6RXAbGZl/jBiUl8tpKj0UXsV5YN Q2vLeyvIg+EiBOBUAohsYGX8VZ0962/1hSVXucj1Bybs8aUThnLI7jQxBU6nZ+ak T8Ac1A86SC4VdXlCR5LWVsBo0Au7XVa/+kYPISblXZbEAvDwiEhaIRPuMY+Q4A4k kzys1ReDaLj9I9teV3IZ0fjmVXJjPNUJjTteVc0atQ4gkOpgMxHT9jJ/bXe3aIVL KTVWyBajhwqZ4VK3XrfASFuTzM/1K1MjAbio9CRR0Kt2LB6VYdY3OTtolb1Ayrq+ y75avs7QI16BgW1p7fwaJIXySx5g3bL9w6Yf0+61yrxLB9QGvmBdTnoFHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBk8NaenadqEwCcBVysgCfXv/S80MB8GA1UdIwQY MBaAFNlUE+sppD0uRf7N2I7lOWyWvxy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWIt YTgwNjE2M2VjMjk0LzEvR1R3MXA2ZHAyb1RBSndGWEt5QUo5ZV85THpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWItYTgwNjE2M2VjMjk0 LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCWNpUAwQC uUjIMA0GCSqGSIb3DQEBCwUAA4IBAQC2c6kPy87pLhYJKIrP+H0RpZe3yskKIRrR IDiTSaGcwV7iMJbpuqE9aZGJX/r/Ebw9Qm7lrhGf3V5J6C1mSC+dZoTgbTjiGZxU 9HHHdTcWjnSzBuJnktDj4NU5sw3nMWXNdPk0tUJeMpJ8xvpdWgN7mOpPU1LegM5W lXugtO3NQL9y1WUnUrrDpkhZQuZcGBBYIXQsVQ6Tl9+RcK8XXYB0Yhx0ak5z1aBW bTlSvqezArisKceT1iKnn35NgqlvwGH1ei7QwtnTkNoCLYNB8ENtuB8GhoSJpq99 +3e/ytWUCeTnDdsE3fa7RH60z6x0RVhkJP00NOQza287kZNWHuh5 -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:50 2026 by rpki-client