This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa File: gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa (raw, json) Hash identifier: e/eKhQXOYdcX2mvHX19L23nQ2fqxt3RSAqyp2KP3N3o= Subject key identifier: 80:39:8D:7F:2A:36:A7:04:17:40:73:4F:30:18:43:70:F4:75:BA:DF Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Certificate serial: 019B7EA6A8215206E0F8268476DD80F34CF0 Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa Signing time: Fri 02 Jan 2026 12:20:09 +0000 ROA not before: Fri 02 Jan 2026 12:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 185.218.220.0/24 maxlen: 24 185.218.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a8:21:52:06:e0:f8:26:84:76:dd:80:f3:4c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Validity Not Before: Jan 2 12:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80398d7f2a36a7041740734f30184370f475badf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:fb:75:26:85:22:f6:1a:0e:f4:69:31:64: 89:7e:15:f0:8e:b7:33:37:0a:d4:5a:78:81:e8:53: 54:96:fb:0a:76:b9:12:dc:e9:b4:50:df:77:5a:74: b5:d2:48:f3:1d:36:83:17:63:b4:1f:34:b6:bd:16: 04:91:2d:f4:76:5a:92:ec:24:d7:2e:74:7f:db:d3: 2a:36:c9:3d:9a:83:e9:19:88:c7:f1:8b:13:86:47: 54:e8:08:5a:9f:22:15:11:bc:cc:72:eb:3f:e3:f4: 13:36:c1:d3:6e:a8:11:f4:5c:33:ca:74:ac:35:a0: 7b:f3:68:35:02:ee:60:68:70:ab:df:c9:fa:ae:27: d0:e1:bc:6a:ca:3e:b9:af:4c:ba:7c:73:4a:94:4a: 20:2e:82:96:e6:df:58:2b:94:d7:a6:5e:7e:47:db: 11:b2:80:20:5d:2a:c8:0f:0c:5c:c9:40:2b:6c:5e: 2b:43:7a:77:46:08:69:b3:d3:4f:3d:c9:b2:2c:95: a3:ec:e7:b7:37:01:18:6f:66:ff:cd:b1:64:d5:b4: c1:40:4d:2d:e5:a9:be:ed:ea:5d:94:85:0f:73:80: c8:42:79:f4:b2:c4:61:2b:55:ed:ec:17:8a:07:b1: e7:41:3c:10:48:30:77:4c:79:0d:fa:95:7d:e7:18: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:39:8D:7F:2A:36:A7:04:17:40:73:4F:30:18:43:70:F4:75:BA:DF X509v3 Authority Key Identifier: keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.220.0/23 Signature Algorithm: sha256WithRSAEncryption cb:a0:93:65:3c:0f:a3:6e:12:b0:72:ca:a4:5d:f6:f6:9f:02: 5d:36:35:2c:a6:c2:01:5c:6c:9f:c8:f5:c2:bd:5e:c9:96:a6: 30:e9:00:a5:68:0d:8d:67:fc:38:e3:7d:ff:3d:f6:1a:30:15: 04:5f:94:ca:89:17:65:7e:5e:e2:9b:61:6d:53:4b:05:1d:c6: 1c:65:0f:c0:fd:ea:c8:30:0c:f7:be:80:90:60:1d:df:4f:cc: e6:c7:55:d2:4c:27:b7:0e:f0:be:19:f1:5d:84:26:1e:0f:b9: f4:cd:b3:4a:8f:06:c1:e9:8e:f2:32:8f:7f:ee:b3:91:ac:17: 8b:cf:74:35:87:b9:b3:4b:fb:af:93:c4:d8:aa:3a:f6:72:09: 67:e3:ad:dc:54:96:ff:55:78:cc:78:84:29:46:3d:1c:05:01: 75:cc:52:c5:b8:e4:b2:1a:1f:f5:9c:13:22:22:66:36:76:cd: c8:47:2a:f0:2c:0e:5a:5b:59:57:c7:8b:17:85:df:28:03:20: 55:b9:f6:4c:1f:89:d0:2c:e5:cb:f9:6b:ab:9e:a9:93:50:a3: aa:7f:a8:12:83:b9:e7:1b:7d:aa:0f:dd:fc:7d:2c:cb:69:94: 83:d4:f2:87:f6:ad:b8:fa:1c:31:61:c3:0c:8c:c6:bb:73:4b: 8e:e2:6a:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pqghUgbg+CaEdt2A80zwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYThkYjNiNTRkMDgxYzMwYmY1MWJkYzdiMTllNGY2NDgw YjdmNTMwHhcNMjYwMTAyMTIyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDM5OGQ3ZjJhMzZhNzA0MTc0MDczNGYzMDE4NDM3MGY0NzViYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvH7dSaFIvYaDvRpMWSJfhXwjrcz NwrUWniB6FNUlvsKdrkS3Om0UN93WnS10kjzHTaDF2O0HzS2vRYEkS30dlqS7CTX LnR/29MqNsk9moPpGYjH8YsThkdU6AhanyIVEbzMcus/4/QTNsHTbqgR9FwzynSs NaB782g1Au5gaHCr38n6rifQ4bxqyj65r0y6fHNKlEogLoKW5t9YK5TXpl5+R9sR soAgXSrIDwxcyUArbF4rQ3p3Rghps9NPPcmyLJWj7Oe3NwEYb2b/zbFk1bTBQE0t 5am+7epdlIUPc4DIQnn0ssRhK1Xt7BeKB7HnQTwQSDB3THkN+pV95xiEowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIA5jX8qNqcEF0BzTzAYQ3D0dbrfMB8GA1UdIwQY MBaAFOuo2ztU0IHDC/Ub3HsZ5PZIC39TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2Yt ZTlkYzNmMWNmODI0LzEvZ0RtTmZ5bzJwd1FYUUhOUE1CaERjUFIxdXQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2YtZTlkYzNmMWNmODI0 LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudrcMA0G CSqGSIb3DQEBCwUAA4IBAQDLoJNlPA+jbhKwcsqkXfb2nwJdNjUspsIBXGyfyPXC vV7JlqYw6QClaA2NZ/w4433/PfYaMBUEX5TKiRdlfl7im2FtU0sFHcYcZQ/A/erI MAz3voCQYB3fT8zmx1XSTCe3DvC+GfFdhCYeD7n0zbNKjwbB6Y7yMo9/7rORrBeL z3Q1h7mzS/uvk8TYqjr2cgln463cVJb/VXjMeIQpRj0cBQF1zFLFuOSyGh/1nBMi ImY2ds3IRyrwLA5aW1lXx4sXhd8oAyBVufZMH4nQLOXL+WurnqmTUKOqf6gSg7nn G32qD938fSzLaZSD1PKH9q24+hwxYcMMjMa7c0uO4mqh -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:21 2026 by rpki-client