This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/G4a9H5UHMlOF2anZRkuQjAXLX4M.roa File: G4a9H5UHMlOF2anZRkuQjAXLX4M.roa (raw, json) Hash identifier: rQpuKOb5jMaJjw/2N1tUEol0BJNqAbDDuFn8EFF/SWA= Subject key identifier: 1B:86:BD:1F:95:07:32:53:85:D9:A9:D9:46:4B:90:8C:05:CB:5F:83 Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553 Certificate serial: 019B7BA513A65F19B3BA9E72ADCD027A8E4B Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/G4a9H5UHMlOF2anZRkuQjAXLX4M.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203322 IP address blocks: 185.138.172.0/22 maxlen: 22 185.138.172.0/23 maxlen: 23 185.138.174.0/23 maxlen: 23 2a07:fc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:13:a6:5f:19:b3:ba:9e:72:ad:cd:02:7a:8e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553 Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b86bd1f9507325385d9a9d9464b908c05cb5f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:ac:98:08:fa:b8:11:17:4c:fe:58:5d:82: 89:f7:c3:d8:54:e4:d1:20:b7:7a:05:91:4d:fe:1c: df:a2:c0:1e:e6:43:78:12:28:ac:ae:2c:ba:e9:cb: ef:c0:6f:50:8e:de:b4:14:c7:67:41:2d:2c:28:50: 5c:9f:6a:bf:7c:4c:55:2d:ca:6d:b2:bf:87:42:22: 20:a9:49:45:fb:ed:3f:35:13:14:51:f8:47:3b:ff: 85:a2:33:5b:3a:80:b4:d6:78:41:c0:85:d3:cc:79: da:66:0f:00:72:71:6a:22:fb:55:cc:ec:a5:31:65: e2:04:fb:0c:22:b8:ba:1a:f4:b2:1c:fb:ce:42:7e: 19:6e:c6:be:2f:8c:6c:78:43:cf:16:b6:e8:c3:62: 9e:16:23:b2:c3:ae:69:2d:ab:20:21:9f:2e:33:c3: 97:ef:34:39:3d:24:b1:8c:c6:d5:8e:5c:0a:b7:3e: f8:a6:6f:67:94:7c:6a:dd:f1:db:af:c3:82:bb:7c: 32:f4:13:8d:ff:95:c9:b7:18:66:cc:dd:b0:2b:91: 7e:52:4a:2e:43:6c:56:0c:6e:4c:76:fe:69:de:e5: 98:32:35:79:3e:6c:58:63:aa:de:7c:b0:9a:f9:bc: c1:ef:17:7a:18:86:94:4b:5d:15:0a:89:04:3e:d4: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:86:BD:1F:95:07:32:53:85:D9:A9:D9:46:4B:90:8C:05:CB:5F:83 X509v3 Authority Key Identifier: keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/G4a9H5UHMlOF2anZRkuQjAXLX4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.172.0/22 IPv6: 2a07:fc0::/29 Signature Algorithm: sha256WithRSAEncryption 39:5e:46:91:08:77:3c:fd:27:9d:85:e1:a1:5f:a4:5e:b5:18: 2d:d4:45:01:57:5d:90:ed:ec:92:d1:5f:ed:41:71:27:6e:14: 01:d5:88:d7:52:01:b7:c5:87:cd:22:ce:dd:b4:30:bd:cb:78: 83:38:ab:c4:84:a5:86:1c:40:9c:53:17:b1:6b:1c:a3:ca:45: 57:ce:63:21:97:eb:bf:99:f8:78:57:8c:9a:bf:e0:cb:06:3f: c3:e4:84:8b:ae:c9:cc:9f:c0:fe:62:9d:18:1b:54:f1:dd:d5: b3:72:de:67:5c:de:a9:97:f2:c7:5f:55:12:7c:d5:e7:bc:ad: e8:e4:ca:0d:62:60:fd:f0:cb:ed:7a:0b:01:97:c6:64:c6:23: bb:5f:82:25:a2:32:9e:9a:f4:bb:4f:7b:a0:57:77:59:4b:90: b6:38:5c:5f:5d:a3:5f:57:c4:a0:37:00:52:55:69:63:af:a8: 8a:84:4f:df:81:e3:e2:fc:72:47:9d:bc:6f:a6:10:9e:74:ea: 62:03:0b:1d:9a:9b:ce:a0:26:61:96:3f:39:fc:54:ad:5f:b0: fb:d6:82:ac:24:59:4a:4e:ef:2e:b2:7b:1d:33:72:f8:0c:f2: a2:d9:63:b4:c9:1e:dd:4c:76:21:7f:8e:e4:39:cc:61:50:b1: a0:2d:4a:e8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pROmXxmzup5yrc0Ceo5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYzg2YzhjMmQ0OTVjOWViZTQyNjY1YTE1MTNkZTY5YTli ZjY1NTMwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjg2YmQxZjk1MDczMjUzODVkOWE5ZDk0NjRiOTA4YzA1Y2I1ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKesmAj6uBEXTP5YXYKJ98PYVOTR ILd6BZFN/hzfosAe5kN4Eiisriy66cvvwG9Qjt60FMdnQS0sKFBcn2q/fExVLcpt sr+HQiIgqUlF++0/NRMUUfhHO/+FojNbOoC01nhBwIXTzHnaZg8AcnFqIvtVzOyl MWXiBPsMIri6GvSyHPvOQn4Zbsa+L4xseEPPFrbow2KeFiOyw65pLasgIZ8uM8OX 7zQ5PSSxjMbVjlwKtz74pm9nlHxq3fHbr8OCu3wy9BON/5XJtxhmzN2wK5F+Ukou Q2xWDG5Mdv5p3uWYMjV5PmxYY6refLCa+bzB7xd6GIaUS10VCokEPtQEjQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBuGvR+VBzJThdmp2UZLkIwFy1+DMB8GA1UdIwQY MBaAFOvIbIwtSVyevkJmWhUT3mmpv2VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYt MDZkMTRjZjBhNDZiLzEvRzRhOUg1VUhNbE9GMmFuWlJrdVFqQVhMWDRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wYjI1MmQtZGI0Yy00MjU2LWFiMDYtMDZkMTRjZjBhNDZi LzEvNjhoc2pDMUpYSjYtUW1aYUZSUGVhYW1fWlZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYqsMA0E AgACMAcDBQMqBw/AMA0GCSqGSIb3DQEBCwUAA4IBAQA5XkaRCHc8/SedheGhX6Re tRgt1EUBV12Q7eyS0V/tQXEnbhQB1YjXUgG3xYfNIs7dtDC9y3iDOKvEhKWGHECc UxexaxyjykVXzmMhl+u/mfh4V4yav+DLBj/D5ISLrsnMn8D+Yp0YG1Tx3dWzct5n XN6pl/LHX1USfNXnvK3o5MoNYmD98MvtegsBl8ZkxiO7X4IlojKemvS7T3ugV3dZ S5C2OFxfXaNfV8SgNwBSVWljr6iKhE/fgePi/HJHnbxvphCedOpiAwsdmpvOoCZh lj85/FStX7D71oKsJFlKTu8usnsdM3L4DPKi2WO0yR7dTHYhf47kOcxhULGgLUro -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:39 2026 by rpki-client