This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa File: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (raw, json) Hash identifier: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk= Subject key identifier: 1A:A8:36:FA:C0:9D:78:09:F1:23:18:E7:0A:A3:A3:16:48:78:A7:26 Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab Certificate serial: 019B78A34720D3D1543F9257940D864D9E16 Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 185.193.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:47:20:d3:d1:54:3f:92:57:94:0d:86:4d:9e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa836fac09d7809f12318e70aa3a3164878a726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:fc:19:62:58:f1:76:96:b0:fd:7d:19:69: 07:6f:73:6f:f3:06:e4:98:d3:5a:25:98:48:c7:44: 02:1f:d6:bc:46:c7:7f:cf:18:da:d7:26:24:22:88: e7:e9:83:95:40:bb:98:0d:7a:e0:9e:89:24:3c:a1: c2:47:70:f1:25:cd:a4:83:cc:39:f2:f1:bb:83:0e: c6:ed:85:d9:5e:be:8c:bd:c3:f1:bd:ba:08:af:e1: e0:10:e3:fd:13:5d:96:49:62:f9:22:35:ba:9a:39: 3e:49:c8:e8:f8:a9:8c:48:ad:ce:84:b2:b3:5a:90: d5:b4:2f:85:73:1e:03:ef:ec:5a:33:91:44:b0:22: f4:ca:fc:e6:c0:76:88:1f:85:c0:67:c1:bd:d1:8f: ce:f8:c8:23:e6:88:fc:b2:6d:75:38:62:6c:dd:db: a5:3d:56:10:5c:51:fd:a6:ee:36:8e:93:c8:f6:96: 8f:83:24:5c:87:ea:a8:bd:b4:2a:c0:96:ed:3c:cb: c7:4e:36:e7:5e:d4:52:61:3f:37:82:af:c0:5f:27: 1e:f3:51:ce:ed:59:18:20:ad:59:12:55:14:b5:8d: 2d:e3:dd:61:e2:f5:cb:40:1c:1c:98:a7:20:59:a3: 7e:c3:c6:1f:d4:66:90:5d:09:1b:fd:e3:d9:c9:8e: ac:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:36:FA:C0:9D:78:09:F1:23:18:E7:0A:A3:A3:16:48:78:A7:26 X509v3 Authority Key Identifier: keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.167.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:d8:73:c5:62:f3:35:0a:f6:ca:02:b6:83:9e:54:c6:5b:2b: cd:11:17:d5:dc:be:88:8e:f0:b6:b2:dd:67:7c:fa:be:95:02: e7:6a:64:ae:71:b1:7c:27:0e:02:7d:6b:a3:e3:40:31:05:55: c4:fe:e8:29:eb:6c:39:b0:f2:76:e0:c5:17:be:c3:f9:b9:2b: b6:37:3b:43:73:10:bf:4e:1b:6a:9c:22:42:8a:b0:2b:75:a1: 8a:e8:99:8e:fa:bf:15:d4:20:be:96:5e:b8:79:18:a7:6c:f6: 88:2e:95:a9:19:83:fc:3a:87:82:38:6b:f4:b3:54:bd:53:73: 74:48:01:96:2a:5c:04:9c:88:41:79:37:66:9c:8d:5b:33:23: 6d:b4:53:1d:1e:50:53:aa:4c:5d:37:a9:ff:7e:3f:0c:0e:62: af:a1:2e:2f:e7:50:20:7a:9f:cd:a2:d5:4b:7f:4e:c4:3f:ec: 63:b6:6e:20:a5:67:92:29:d0:6f:30:18:58:de:81:eb:c8:c7: 64:1b:ea:ff:17:e4:ff:d9:d2:be:5e:d6:0b:ef:52:36:60:c2: 6e:e6:03:5b:43:bf:d6:bc:47:96:8b:31:77:be:04:3d:b4:e2: 0a:67:65:87:37:31:7f:51:7e:99:0d:62:98:a1:5d:8e:a9:b7: 76:db:d4:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0cg09FUP5JXlA2GTZ4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm MzcxYWIwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWE4MzZmYWMwOWQ3ODA5ZjEyMzE4ZTcwYWEzYTMxNjQ4NzhhNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7/8GWJY8XaWsP19GWkHb3Nv8wbk mNNaJZhIx0QCH9a8Rsd/zxja1yYkIojn6YOVQLuYDXrgnokkPKHCR3DxJc2kg8w5 8vG7gw7G7YXZXr6MvcPxvboIr+HgEOP9E12WSWL5IjW6mjk+Scjo+KmMSK3OhLKz WpDVtC+Fcx4D7+xaM5FEsCL0yvzmwHaIH4XAZ8G90Y/O+Mgj5oj8sm11OGJs3dul PVYQXFH9pu42jpPI9paPgyRch+qovbQqwJbtPMvHTjbnXtRSYT83gq/AXyce81HO 7VkYIK1ZElUUtY0t491h4vXLQBwcmKcgWaN+w8Yf1GaQXQkb/ePZyY6sHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqoNvrAnXgJ8SMY5wqjoxZIeKcmMB8GA1UdIwQY MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt YjkyMTFlMWZjMWFjLzEvR3FnMi1zQ2RlQW54SXhqbkNxT2pGa2g0cHlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucGnMA0G CSqGSIb3DQEBCwUAA4IBAQAf2HPFYvM1CvbKAraDnlTGWyvNERfV3L6IjvC2st1n fPq+lQLnamSucbF8Jw4CfWuj40AxBVXE/ugp62w5sPJ24MUXvsP5uSu2NztDcxC/ ThtqnCJCirArdaGK6JmO+r8V1CC+ll64eRinbPaILpWpGYP8OoeCOGv0s1S9U3N0 SAGWKlwEnIhBeTdmnI1bMyNttFMdHlBTqkxdN6n/fj8MDmKvoS4v51Agep/NotVL f07EP+xjtm4gpWeSKdBvMBhY3oHryMdkG+r/F+T/2dK+XtYL71I2YMJu5gNbQ7/W vEeWizF3vgQ9tOIKZ2WHNzF/UX6ZDWKYoV2Oqbd229R2 -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:17 2026 by rpki-client