This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Gor6jgbSu6nxmrOSvnny5XrJBRQ.roa File: Gor6jgbSu6nxmrOSvnny5XrJBRQ.roa (raw, json) Hash identifier: POmA9o+5y81N4kniffL+ybGeKoG8gBGREwaCbA6QFwE= Subject key identifier: 1A:8A:FA:8E:06:D2:BB:A9:F1:9A:B3:92:BE:79:F2:E5:7A:C9:05:14 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791079D4D779E16E69A589E62C5C43C6 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Gor6jgbSu6nxmrOSvnny5XrJBRQ.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216356 IP address blocks: 185.17.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:79:d4:d7:79:e1:6e:69:a5:89:e6:2c:5c:43:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a8afa8e06d2bba9f19ab392be79f2e57ac90514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:25:cd:c4:c2:cb:26:05:63:73:37:f8:cc: e3:17:20:d0:20:c5:ee:b3:ad:4d:47:17:d8:c2:ec: c1:33:2f:a6:9d:b6:70:88:27:bc:10:ae:b0:bb:41: 26:c2:db:62:b6:c1:f2:f3:65:e5:42:7a:6f:82:f4: f3:56:7a:5a:b9:f7:76:f9:a3:33:74:bd:a8:0f:8d: ad:62:a2:e4:1b:f9:ba:2e:15:6b:63:7a:1b:fc:78: f1:37:55:96:a3:46:0b:f2:e1:2b:6a:68:76:0a:fa: 68:9c:25:46:b1:64:4c:a5:68:17:3e:39:c7:84:a8: 5f:4f:97:e6:c4:35:02:f0:cc:26:8d:b0:ee:bf:46: 58:a6:00:40:1f:4b:a5:56:36:90:39:4a:74:88:e8: e6:44:1f:69:5f:c6:3a:9b:dc:e1:d9:9a:3b:e3:f9: b0:76:07:ba:cb:7c:f2:5b:b9:60:f6:01:dc:64:e7: c8:a2:37:b0:d4:ab:1f:af:93:1a:27:d5:c4:85:74: ae:2a:04:24:13:be:0d:99:ea:20:58:dd:6d:02:00: d3:2c:c9:be:95:5a:bd:05:a5:0b:22:58:f2:5d:5d: 52:c7:90:73:78:c1:80:20:51:b1:f7:6f:c9:0c:e1: 42:8c:8d:40:9d:d6:63:41:86:76:04:30:50:25:80: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8A:FA:8E:06:D2:BB:A9:F1:9A:B3:92:BE:79:F2:E5:7A:C9:05:14 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Gor6jgbSu6nxmrOSvnny5XrJBRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.137.0/24 Signature Algorithm: sha256WithRSAEncryption 47:25:a7:74:63:4c:78:32:52:e3:20:0b:15:97:aa:e5:6e:a9: 76:55:0b:3b:cf:38:a8:ec:fb:1a:b2:38:94:ca:39:30:69:1c: 7c:9c:6f:04:9e:04:91:6b:23:9c:25:5a:60:72:d6:f9:06:ea: 11:90:52:f5:2a:a9:29:91:27:8c:dc:05:d6:1d:14:a4:c2:0b: ca:6f:4e:07:42:a1:b9:76:68:e8:26:e4:04:83:f5:be:94:2d: ee:16:21:af:84:60:20:22:5c:bb:ce:e6:6c:96:55:82:46:98: 3b:e9:f7:80:04:f3:ad:92:5e:10:bf:17:f9:1f:91:67:76:02: b0:03:19:23:7b:39:ee:33:36:85:66:83:c2:d0:11:c2:64:8c: a2:6d:17:d1:68:44:d5:05:8a:69:ae:3a:15:69:35:94:5d:93: 92:2b:b6:1c:ab:28:f2:b2:ed:41:d5:64:12:cf:73:17:e7:fa: 6b:a1:71:ac:dc:84:f1:35:95:51:28:9e:59:13:d5:3f:95:ce: 1b:85:c5:34:8a:8d:06:4e:56:e7:bb:d4:e4:d3:c9:42:e6:03: c7:07:9a:60:d1:48:59:22:37:b9:ec:89:e3:98:61:1a:e5:d2: 94:ee:4a:45:cb:a1:ed:69:6f:cf:30:fc:02:e2:a5:66:c5:a1: 1c:41:5a:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHnU13nhbmmlieYsXEPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYThhZmE4ZTA2ZDJiYmE5ZjE5YWIzOTJiZTc5ZjJlNTdhYzkwNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBElzcTCyyYFY3M3+MzjFyDQIMXu s61NRxfYwuzBMy+mnbZwiCe8EK6wu0EmwttitsHy82XlQnpvgvTzVnpaufd2+aMz dL2oD42tYqLkG/m6LhVrY3ob/HjxN1WWo0YL8uEramh2CvponCVGsWRMpWgXPjnH hKhfT5fmxDUC8MwmjbDuv0ZYpgBAH0ulVjaQOUp0iOjmRB9pX8Y6m9zh2Zo74/mw dge6y3zyW7lg9gHcZOfIojew1Ksfr5MaJ9XEhXSuKgQkE74NmeogWN1tAgDTLMm+ lVq9BaULIljyXV1Sx5BzeMGAIFGx92/JDOFCjI1AndZjQYZ2BDBQJYBq5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqK+o4G0rup8Zqzkr558uV6yQUUMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvR29yNmpnYlN1Nm54bXJPU3Zubnk1WHJKQlJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRGJMA0G CSqGSIb3DQEBCwUAA4IBAQBHJad0Y0x4MlLjIAsVl6rlbql2VQs7zzio7PsasjiU yjkwaRx8nG8EngSRayOcJVpgctb5BuoRkFL1KqkpkSeM3AXWHRSkwgvKb04HQqG5 dmjoJuQEg/W+lC3uFiGvhGAgIly7zuZsllWCRpg76feABPOtkl4Qvxf5H5FndgKw AxkjeznuMzaFZoPC0BHCZIyibRfRaETVBYpprjoVaTWUXZOSK7Ycqyjysu1B1WQS z3MX5/proXGs3ITxNZVRKJ5ZE9U/lc4bhcU0io0GTlbnu9Tk08lC5gPHB5pg0UhZ Ije57InjmGEa5dKU7kpFy6HtaW/PMPwC4qVmxaEcQVpy -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:46 2026 by rpki-client