This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa File: gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa (raw, json) Hash identifier: 5WHbZVFPJqF6d7sQt81f3HSwNWk6p/6vqblB7r2uSB0= Subject key identifier: 82:A7:08:18:5E:1C:9D:0E:D9:A3:EB:3A:BC:14:1E:C8:C4:59:DC:AC Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Certificate serial: 019B77C7124A411E8C15146FA19CA3DC9EB5 Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39918 IP address blocks: 85.112.73.0/24 maxlen: 24 212.98.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:12:4a:41:1e:8c:15:14:6f:a1:9c:a3:dc:9e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82a708185e1c9d0ed9a3eb3abc141ec8c459dcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6b:87:aa:c0:e9:2c:0a:0d:03:47:a6:c3:67: 3c:ec:c1:31:4d:50:af:ba:95:bf:aa:ff:4c:c4:00: c6:72:57:cd:d1:c7:13:cf:fa:06:54:7d:0b:5c:1c: 3e:a6:1c:a2:8d:bb:df:7b:6e:86:c9:5a:fb:b9:27: de:31:c0:16:4f:f2:e3:74:e3:59:19:f0:3f:3b:64: 54:15:42:7a:fa:0b:fb:51:60:ed:e6:15:4f:10:ca: 09:e1:b3:d8:47:9c:01:2a:fa:09:89:e1:e8:89:ad: e4:5f:f2:38:ed:91:5a:fa:86:fd:3b:6a:97:c0:9f: 29:d1:19:58:d9:01:5c:27:8c:24:0a:63:59:ad:17: bb:6f:6f:b4:e9:bf:91:f9:69:d0:5c:f1:36:dd:85: 40:05:18:97:75:1d:f4:ca:ac:a5:d5:c1:2b:f8:51: 2a:44:6d:e2:8d:e0:ad:04:88:22:99:9f:17:a5:0b: 64:c4:77:66:5d:19:87:06:9e:e1:2e:31:fc:38:a9: 09:e8:c4:0c:e3:bc:d5:2b:c8:91:96:1c:36:28:5c: a4:b3:98:f3:ee:21:1c:98:ff:be:f9:ef:d5:e2:ef: d2:e8:dc:97:40:47:32:fa:0b:3f:90:45:98:eb:d4: 65:b6:84:18:7f:b7:9a:a2:e1:76:a8:e6:62:84:13: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A7:08:18:5E:1C:9D:0E:D9:A3:EB:3A:BC:14:1E:C8:C4:59:DC:AC X509v3 Authority Key Identifier: keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.112.73.0/24 212.98.128.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:d3:70:7c:6b:c5:04:fd:3c:b4:84:f4:e0:6a:f1:81:b3:1e: 50:54:01:e5:75:41:cf:65:32:66:17:23:de:bd:40:b3:f6:b5: 1d:35:e9:24:19:40:d5:e1:d8:49:b0:4f:c3:e9:69:6b:e4:c1: c0:fe:2a:e3:80:d1:7e:f5:0e:46:53:6e:c9:38:d0:65:1a:cc: 4c:2b:fe:6a:e2:f1:a5:9f:13:a0:a5:8a:0c:05:e0:a1:5a:d9: f0:28:43:b5:e9:08:b8:97:9a:c3:f7:15:6c:f8:ad:d9:1c:58: 06:ca:c7:85:7f:5b:73:35:ef:90:53:9c:e5:d0:2a:57:7c:bc: eb:d8:ad:ba:6c:c8:83:49:31:bb:b7:e7:00:31:a0:87:e3:93: e9:97:03:d0:ea:10:40:4e:b7:8e:9d:09:a6:d3:31:45:34:cd: 8e:03:08:79:0f:21:02:3e:24:e4:94:f3:dd:56:71:5b:75:15: 85:c8:5e:a1:ec:6a:0e:e4:f4:52:d2:b0:53:79:33:41:11:be: f3:21:be:41:1e:61:d6:b3:71:05:09:e2:60:d3:ec:f8:ce:ae: dc:d7:f4:41:7c:77:11:3e:95:fc:c0:8d:16:85:72:d3:66:b7: 03:9c:36:20:d1:b4:9f:2b:36:11:88:ff:59:0e:ff:95:95:b0: cd:85:e8:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xxJKQR6MFRRvoZyj3J61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj MjVkODUwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmE3MDgxODVlMWM5ZDBlZDlhM2ViM2FiYzE0MWVjOGM0NTlkY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82uHqsDpLAoNA0emw2c87MExTVCv upW/qv9MxADGclfN0ccTz/oGVH0LXBw+phyijbvfe26GyVr7uSfeMcAWT/LjdONZ GfA/O2RUFUJ6+gv7UWDt5hVPEMoJ4bPYR5wBKvoJieHoia3kX/I47ZFa+ob9O2qX wJ8p0RlY2QFcJ4wkCmNZrRe7b2+06b+R+WnQXPE23YVABRiXdR30yqyl1cEr+FEq RG3ijeCtBIgimZ8XpQtkxHdmXRmHBp7hLjH8OKkJ6MQM47zVK8iRlhw2KFyks5jz 7iEcmP+++e/V4u/S6NyXQEcy+gs/kEWY69RltoQYf7eaouF2qOZihBPTzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIKnCBheHJ0O2aPrOrwUHsjEWdysMB8GA1UdIwQY MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt MWVjZGUxNzkxNTExLzEvZ3FjSUdGNGNuUTdaby1zNnZCUWV5TVJaM0t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXBJAwQA 1GKAMA0GCSqGSIb3DQEBCwUAA4IBAQB803B8a8UE/Ty0hPTgavGBsx5QVAHldUHP ZTJmFyPevUCz9rUdNekkGUDV4dhJsE/D6Wlr5MHA/irjgNF+9Q5GU27JONBlGsxM K/5q4vGlnxOgpYoMBeChWtnwKEO16Qi4l5rD9xVs+K3ZHFgGyseFf1tzNe+QU5zl 0CpXfLzr2K26bMiDSTG7t+cAMaCH45PplwPQ6hBATreOnQmm0zFFNM2OAwh5DyEC PiTklPPdVnFbdRWFyF6h7GoO5PRS0rBTeTNBEb7zIb5BHmHWs3EFCeJg0+z4zq7c 1/RBfHcRPpX8wI0WhXLTZrcDnDYg0bSfKzYRiP9ZDv+VlbDNhehs -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:17 2026 by rpki-client