This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/_gDnsGaDxX5qfjhTgT91rNbt8PQ.roa File: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (raw, json) Hash identifier: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U= Subject key identifier: FE:00:E7:B0:66:83:C5:7E:6A:7E:38:53:81:3F:75:AC:D6:ED:F0:F4 Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Certificate serial: 019B7EA6A7BC7C2053F1CF91AC1C319A3FFA Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/_gDnsGaDxX5qfjhTgT91rNbt8PQ.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 185.192.36.0/22 maxlen: 22 185.192.36.0/23 maxlen: 23 185.192.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a7:bc:7c:20:53:f1:cf:91:ac:1c:31:9a:3f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe00e7b06683c57e6a7e3853813f75acd6edf0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:34:3f:c3:dc:bf:d5:05:13:e1:0f:8b:05: 16:cd:74:39:5e:a2:10:32:06:9d:56:c6:e9:4a:ea: 35:38:51:c0:05:a9:d5:33:84:e5:1e:d4:db:ac:1d: fe:0b:6c:3e:8f:70:ac:90:d9:db:ba:cf:b1:ca:32: 42:e0:d2:86:df:d6:5a:d3:cc:e4:ad:13:ea:22:6e: 00:87:36:03:a0:79:b7:cf:d1:1c:17:f8:38:b5:01: 73:4a:4b:d5:d5:1f:17:da:8c:7a:80:7a:f4:d2:9b: b0:9c:d9:ed:65:8f:9b:dd:35:a8:96:83:90:af:72: b8:81:86:5b:74:15:75:f9:3e:de:31:65:ae:56:ef: 9a:30:12:68:13:d9:a3:4d:64:78:0e:6e:75:0b:31: ae:d1:41:82:26:07:4a:4f:f0:a5:5e:78:88:7c:1b: 13:5d:f9:ad:68:89:c2:0e:4e:6f:a0:ca:66:5c:25: 1a:ed:58:dd:74:60:17:4b:90:d4:91:ba:5b:cb:84: 8c:4d:9c:56:26:ae:bf:0a:a3:c1:a0:f0:92:c6:7c: b4:92:37:da:8b:cc:f0:42:e7:d2:93:fc:03:5d:84: 7b:a4:9b:9c:3f:da:c7:55:2e:fb:a2:b5:a7:e2:95: 04:db:51:90:1f:29:74:24:17:e9:26:bc:a8:55:4b: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:00:E7:B0:66:83:C5:7E:6A:7E:38:53:81:3F:75:AC:D6:ED:F0:F4 X509v3 Authority Key Identifier: keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/_gDnsGaDxX5qfjhTgT91rNbt8PQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.36.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:3b:c7:56:f9:88:f5:69:84:f5:ef:00:3d:48:ac:a1:15:a1: c6:02:3a:bc:46:23:32:3f:b5:48:2b:3c:94:2a:af:b0:85:b2: b5:4a:66:6e:1e:7b:0e:38:82:22:08:0d:c2:0f:a0:69:aa:86: 9e:d4:fb:c8:75:8c:5a:b1:44:d9:c5:a0:62:a8:dd:64:f0:55: a4:e2:37:09:55:3d:78:23:7d:2c:f4:45:68:a2:94:c9:3f:ae: 5e:d0:35:44:6a:df:b6:91:4e:cb:62:55:b6:bb:ac:ad:72:11: 5b:15:9a:eb:42:77:44:0e:31:96:43:ff:b0:16:b6:79:0d:55: bb:ac:11:f9:66:e9:27:a1:9d:97:36:87:68:85:07:25:23:a8: d1:b7:ff:75:83:19:16:e9:f9:63:31:f5:60:2d:27:f7:05:1d: 50:48:89:5e:61:77:1d:cd:94:4f:36:94:85:55:8f:57:f7:f2: 8c:fa:09:12:f7:d4:7c:98:ea:a9:b1:6f:ba:8f:df:9d:30:24: cc:85:53:78:3a:1d:fb:03:4d:3b:72:01:df:fd:51:13:09:ea: a7:47:84:b5:a8:69:e2:bb:cf:13:65:7c:35:fd:03:0e:88:7e: 73:a6:74:1c:1b:ec:07:cc:d9:d9:2f:bd:66:7c:b8:e1:65:6c: ea:c6:35:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqe8fCBT8c+RrBwxmj/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYThkYjNiNTRkMDgxYzMwYmY1MWJkYzdiMTllNGY2NDgw YjdmNTMwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTAwZTdiMDY2ODNjNTdlNmE3ZTM4NTM4MTNmNzVhY2Q2ZWRmMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cE0P8Pcv9UFE+EPiwUWzXQ5XqIQ MgadVsbpSuo1OFHABanVM4TlHtTbrB3+C2w+j3CskNnbus+xyjJC4NKG39Za08zk rRPqIm4AhzYDoHm3z9EcF/g4tQFzSkvV1R8X2ox6gHr00puwnNntZY+b3TWoloOQ r3K4gYZbdBV1+T7eMWWuVu+aMBJoE9mjTWR4Dm51CzGu0UGCJgdKT/ClXniIfBsT XfmtaInCDk5voMpmXCUa7VjddGAXS5DUkbpby4SMTZxWJq6/CqPBoPCSxny0kjfa i8zwQufSk/wDXYR7pJucP9rHVS77orWn4pUE21GQHyl0JBfpJryoVUvxNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP4A57Bmg8V+an44U4E/dazW7fD0MB8GA1UdIwQY MBaAFOuo2ztU0IHDC/Ub3HsZ5PZIC39TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2Yt ZTlkYzNmMWNmODI0LzEvX2dEbnNHYUR4WDVxZmpoVGdUOTFyTmJ0OFBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2YtZTlkYzNmMWNmODI0 LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucAkMA0G CSqGSIb3DQEBCwUAA4IBAQBLO8dW+Yj1aYT17wA9SKyhFaHGAjq8RiMyP7VIKzyU Kq+whbK1SmZuHnsOOIIiCA3CD6Bpqoae1PvIdYxasUTZxaBiqN1k8FWk4jcJVT14 I30s9EVoopTJP65e0DVEat+2kU7LYlW2u6ytchFbFZrrQndEDjGWQ/+wFrZ5DVW7 rBH5ZuknoZ2XNodohQclI6jRt/91gxkW6fljMfVgLSf3BR1QSIleYXcdzZRPNpSF VY9X9/KM+gkS99R8mOqpsW+6j9+dMCTMhVN4Oh37A007cgHf/VETCeqnR4S1qGni u88TZXw1/QMOiH5zpnQcG+wHzNnZL71mfLjhZWzqxjWr -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:15 2026 by rpki-client