This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/gaFppvVddFLc9YOMVwUzFNcCgUQ.roa File: gaFppvVddFLc9YOMVwUzFNcCgUQ.roa (raw, json) Hash identifier: i+Kh8i4+DKnTEKBuSgTv7ekccdiOHpGuMvTmjdxcqYc= Subject key identifier: 81:A1:69:A6:F5:5D:74:52:DC:F5:83:8C:57:05:33:14:D7:02:81:44 Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Certificate serial: 019B7910AEFD37684A9D8943AA80C0D5E1F0 Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/gaFppvVddFLc9YOMVwUzFNcCgUQ.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29453 IP address blocks: 195.140.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ae:fd:37:68:4a:9d:89:43:aa:80:c0:d5:e1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81a169a6f55d7452dcf5838c57053314d7028144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:20:3c:45:7b:3e:6f:71:11:b0:0b:c8:5f: f1:5b:cc:1e:4e:57:1d:03:f9:29:b6:c9:c3:c8:b6: 81:3e:a8:dc:47:22:d1:f6:a9:26:30:a7:a7:65:0a: 1d:ec:d2:e6:d8:2c:22:fd:9e:a7:05:a4:ac:fb:0e: db:fe:8d:e9:1b:60:0f:0d:8c:7a:32:89:a7:d4:30: 98:6f:93:10:54:c9:fd:9f:ca:bf:92:2d:cb:f6:5c: 88:37:5b:bf:aa:ca:a6:93:50:8d:8d:9c:67:5e:db: fa:5c:90:78:6a:23:91:39:cf:b5:c4:65:7b:90:55: 64:92:18:0c:68:b4:93:70:4d:56:55:ea:1d:e7:41: 5a:68:d1:d6:72:a0:6c:7e:0d:96:8f:17:6d:25:fe: c7:4f:ed:c3:de:b8:69:ea:37:5f:a9:27:4f:c3:60: 07:fe:5e:b2:93:46:4b:2a:74:ca:56:50:8f:94:d6: 68:d5:94:66:3c:06:23:88:ca:23:4f:8f:32:5a:89: f6:a4:92:ec:fc:1f:91:60:da:1c:e5:de:36:1e:85: 54:b1:57:46:e9:fe:c6:9c:13:e8:02:05:d7:46:fc: 6b:45:bb:01:07:fe:7d:69:4e:22:ed:7e:da:d8:38: ab:88:ce:6c:f1:0a:a7:d4:1e:9c:71:ff:d6:6f:b4: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A1:69:A6:F5:5D:74:52:DC:F5:83:8C:57:05:33:14:D7:02:81:44 X509v3 Authority Key Identifier: keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/gaFppvVddFLc9YOMVwUzFNcCgUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.140.164.0/22 Signature Algorithm: sha256WithRSAEncryption 74:fe:29:93:d1:4a:01:84:b5:63:e5:d4:fe:66:27:ce:c1:a3: 5c:a8:0b:e3:00:b1:5e:75:26:87:f9:5b:86:76:d0:a8:70:c1: e7:ab:8b:a9:94:2e:f9:aa:90:1e:69:62:62:30:19:07:70:93: 04:0d:40:8a:9b:ad:de:db:3a:a1:29:9b:5a:2e:be:06:b2:08: 86:04:04:a4:46:12:a4:07:5f:7c:67:50:cb:13:b5:3f:b4:1b: 87:60:2a:81:29:93:aa:c0:c0:60:08:d2:df:df:b4:01:b3:62: a0:8a:92:fb:ed:b9:6c:9d:c6:28:29:9c:0e:20:78:d6:86:2c: 6a:2e:41:4a:1f:73:17:9a:57:04:9b:d4:94:bc:50:9b:d7:40: 83:f5:fb:8f:f4:40:82:d5:96:27:32:f3:ba:57:35:3c:33:2f: eb:8c:d2:73:de:3b:65:0f:66:a3:01:be:5b:6c:04:26:c1:13: 80:14:50:20:91:55:bb:68:a2:fa:55:88:cd:b3:17:a2:df:e8: 98:57:47:54:14:55:a0:1b:71:c9:83:52:0a:41:9c:35:f7:44: 97:ae:e9:20:7f:54:3f:c7:6c:d4:e8:28:39:8b:d8:b3:c6:d5: 08:90:19:09:51:92:a0:29:9f:8b:d2:b7:a9:cd:4a:7d:04:0e: 4f:f6:e1:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EK79N2hKnYlDqoDA1eHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2E5MTdkZGNmYzI2ZThjODdiMzA4NThiNmYwN2YyOWEz ZGI0M2UwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWExNjlhNmY1NWQ3NDUyZGNmNTgzOGM1NzA1MzMxNGQ3MDI4MTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFsgPEV7Pm9xEbALyF/xW8weTlcd A/kptsnDyLaBPqjcRyLR9qkmMKenZQod7NLm2Cwi/Z6nBaSs+w7b/o3pG2APDYx6 Momn1DCYb5MQVMn9n8q/ki3L9lyIN1u/qsqmk1CNjZxnXtv6XJB4aiOROc+1xGV7 kFVkkhgMaLSTcE1WVeod50FaaNHWcqBsfg2WjxdtJf7HT+3D3rhp6jdfqSdPw2AH /l6yk0ZLKnTKVlCPlNZo1ZRmPAYjiMojT48yWon2pJLs/B+RYNoc5d42HoVUsVdG 6f7GnBPoAgXXRvxrRbsBB/59aU4i7X7a2DiriM5s8Qqn1B6ccf/Wb7SslwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGhaab1XXRS3PWDjFcFMxTXAoFEMB8GA1UdIwQY MBaAFEp6kX3c/CboyHswhYtvB/KaPbQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODIt ODIwMTZkZTQyMjEyLzEvZ2FGcHB2VmRkRkxjOVlPTVZ3VXpGTmNDZ1VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNGMyYmItNzllYS00ZjM5LWFjODItODIwMTZkZTQyMjEy LzEvU25xUmZkejhKdWpJZXpDRmkyOEg4cG85dEQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4ykMA0G CSqGSIb3DQEBCwUAA4IBAQB0/imT0UoBhLVj5dT+ZifOwaNcqAvjALFedSaH+VuG dtCocMHnq4uplC75qpAeaWJiMBkHcJMEDUCKm63e2zqhKZtaLr4GsgiGBASkRhKk B198Z1DLE7U/tBuHYCqBKZOqwMBgCNLf37QBs2KgipL77blsncYoKZwOIHjWhixq LkFKH3MXmlcEm9SUvFCb10CD9fuP9ECC1ZYnMvO6VzU8My/rjNJz3jtlD2ajAb5b bAQmwROAFFAgkVW7aKL6VYjNsxei3+iYV0dUFFWgG3HJg1IKQZw190SXrukgf1Q/ x2zU6Cg5i9izxtUIkBkJUZKgKZ+L0repzUp9BA5P9uHs -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:11 2026 by rpki-client