This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/gArRCC3q1YnlfTTgUixtQVGvcFs.roa File: gArRCC3q1YnlfTTgUixtQVGvcFs.roa (raw, json) Hash identifier: narCCTYRY9LX6p6g8xSiiHiFz+JGuLFkwOfUQUNN3Rw= Subject key identifier: 80:0A:D1:08:2D:EA:D5:89:E5:7D:34:E0:52:2C:6D:41:51:AF:70:5B Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Certificate serial: 019B7E38E3C9E1D99C5AEC32683687C9F7B9 Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/gArRCC3q1YnlfTTgUixtQVGvcFs.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35066 IP address blocks: 185.95.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e3:c9:e1:d9:9c:5a:ec:32:68:36:87:c9:f7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=800ad1082dead589e57d34e0522c6d4151af705b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:1b:da:65:93:e7:5a:90:a3:8c:f8:7f:e4: 77:63:86:bf:ed:4d:50:db:03:8c:61:b7:95:58:f7: be:08:fb:15:07:4b:b3:29:80:dd:65:f9:1d:37:82: 75:29:54:c4:b3:0e:36:cc:07:bb:76:72:1f:b7:66: 1b:8d:b0:eb:7f:5d:81:19:02:22:4f:1e:34:11:56: 04:3a:ad:d9:5c:d0:12:a9:05:9f:4f:90:9c:07:bc: c7:43:d0:15:9e:24:61:08:d2:ce:fe:ee:f3:19:da: b3:ec:fe:a0:d9:e0:34:c9:42:02:bc:a2:c7:4c:05: af:8e:82:ba:95:4f:a6:4c:1e:91:3c:e3:1e:ed:7e: c5:5a:b6:8e:0c:ba:0a:51:73:9a:6c:89:52:b0:ba: df:f5:5f:0e:2e:ce:5d:fa:80:4a:2e:88:66:60:44: b7:cc:e4:fe:ba:bd:a4:59:d8:ad:c6:1b:b3:0d:e3: 4f:fc:91:30:e1:b0:58:f0:80:62:7e:3b:89:87:e0: 6f:0a:05:be:e1:ad:32:1b:7f:d8:98:26:ca:72:e8: 0c:51:9e:e5:97:67:04:0d:04:93:07:e2:af:e7:ff: 56:60:a6:5d:6d:49:c3:23:32:6e:eb:b6:66:6f:7f: 3b:1e:26:9d:57:93:f8:ce:3e:8a:ca:29:35:0e:88: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0A:D1:08:2D:EA:D5:89:E5:7D:34:E0:52:2C:6D:41:51:AF:70:5B X509v3 Authority Key Identifier: keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/gArRCC3q1YnlfTTgUixtQVGvcFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.144.0/22 Signature Algorithm: sha256WithRSAEncryption b3:30:5e:9e:3c:c9:e3:97:9c:15:45:a5:33:3b:ea:bd:bc:72: 9b:16:27:f8:cd:43:a0:00:8d:23:31:d5:dc:fd:59:b1:c7:fc: a7:03:58:75:33:b5:fc:92:c8:5f:b9:23:18:9f:bb:52:3f:27: 60:80:04:1b:0a:ad:59:c8:bc:05:7f:7c:1c:c6:dc:e2:9c:74: b8:37:eb:0a:ba:b1:cb:3e:b3:f5:02:b3:a7:2b:4d:82:a9:94: f7:97:b7:74:23:fa:cf:03:fb:e5:5f:60:d9:4d:1c:0d:f4:3d: ba:fd:a3:2d:60:c2:2b:1e:8d:43:a7:e8:30:1a:15:30:07:d9: 97:d0:32:88:7e:ae:76:ed:cc:76:b1:5c:ff:5e:a9:57:9a:94: 95:00:b4:fb:79:63:13:2f:17:f7:f4:4f:94:e6:85:93:a7:e6: 0e:e9:4a:04:01:60:3e:0e:72:52:de:28:4d:37:bb:dc:13:b7: 50:d4:31:71:5a:f5:e9:00:99:fd:45:a4:b0:64:44:71:be:69: f4:08:7a:42:1b:a4:3a:12:10:bd:2e:4a:49:08:31:90:07:c8: 40:c0:4b:87:82:60:f0:ca:80:86:01:86:19:e8:eb:5c:a0:d8: de:60:ad:3f:19:3c:0f:73:58:92:3a:38:b1:cd:d9:c0:00:56: 0a:de:b4:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOPJ4dmcWuwyaDaHyfe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOGM3YmQwYzQ0ODZiYTA3M2NlMmRlNTNiYTA3NGQ3MGU0 NWI1ZTcwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDBhZDEwODJkZWFkNTg5ZTU3ZDM0ZTA1MjJjNmQ0MTUxYWY3MDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHIb2mWT51qQo4z4f+R3Y4a/7U1Q 2wOMYbeVWPe+CPsVB0uzKYDdZfkdN4J1KVTEsw42zAe7dnIft2YbjbDrf12BGQIi Tx40EVYEOq3ZXNASqQWfT5CcB7zHQ9AVniRhCNLO/u7zGdqz7P6g2eA0yUICvKLH TAWvjoK6lU+mTB6RPOMe7X7FWraODLoKUXOabIlSsLrf9V8OLs5d+oBKLohmYES3 zOT+ur2kWditxhuzDeNP/JEw4bBY8IBifjuJh+BvCgW+4a0yG3/YmCbKcugMUZ7l l2cEDQSTB+Kv5/9WYKZdbUnDIzJu67Zmb387HiadV5P4zj6Kyik1DogX9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAK0Qgt6tWJ5X004FIsbUFRr3BbMB8GA1UdIwQY MBaAFEuMe9DESGugc84t5TugdNcORbXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgt MDI0MGU3NDQ3NmE3LzEvZ0FyUkNDM3ExWW5sZlRUZ1VpeHRRVkd2Y0ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgtMDI0MGU3NDQ3NmE3 LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV+QMA0G CSqGSIb3DQEBCwUAA4IBAQCzMF6ePMnjl5wVRaUzO+q9vHKbFif4zUOgAI0jMdXc /Vmxx/ynA1h1M7X8kshfuSMYn7tSPydggAQbCq1ZyLwFf3wcxtzinHS4N+sKurHL PrP1ArOnK02CqZT3l7d0I/rPA/vlX2DZTRwN9D26/aMtYMIrHo1Dp+gwGhUwB9mX 0DKIfq527cx2sVz/XqlXmpSVALT7eWMTLxf39E+U5oWTp+YO6UoEAWA+DnJS3ihN N7vcE7dQ1DFxWvXpAJn9RaSwZERxvmn0CHpCG6Q6EhC9LkpJCDGQB8hAwEuHgmDw yoCGAYYZ6OtcoNjeYK0/GTwPc1iSOjixzdnAAFYK3rSr -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:45 2026 by rpki-client