This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/gyKjgff4xPWR_xT3GYAWWCaM6V8.roa File: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (raw, json) Hash identifier: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk= Subject key identifier: 83:22:A3:81:F7:F8:C4:F5:91:FF:14:F7:19:80:16:58:26:8C:E9:5F Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129 Certificate serial: 019C1373509EA401017CDAC348396E6C66C3 Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/gyKjgff4xPWR_xT3GYAWWCaM6V8.roa Signing time: Sat 31 Jan 2026 09:47:30 +0000 ROA not before: Sat 31 Jan 2026 09:47:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41938 IP address blocks: 94.229.20.0/24 maxlen: 24 94.229.21.0/24 maxlen: 24 94.229.22.0/24 maxlen: 24 185.66.218.0/23 maxlen: 23 195.20.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:13:73:50:9e:a4:01:01:7c:da:c3:48:39:6e:6c:66:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129 Validity Not Before: Jan 31 09:47:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8322a381f7f8c4f591ff14f719801658268ce95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:91:90:97:13:9b:69:92:0e:68:9c:99:d7: 75:ce:b6:6d:c2:22:1b:be:4c:a5:49:8e:a3:00:77: 80:64:3a:50:42:22:ee:71:02:17:63:95:ac:f0:ff: 2a:25:78:73:6e:8a:c8:13:7c:b8:27:4d:f3:a4:57: 7f:c6:1e:4e:c4:6c:f5:c0:b1:ce:cf:90:ef:e4:5a: 22:36:67:45:36:f3:e5:35:2a:2d:1c:e4:8d:5a:53: 24:e6:e9:67:df:db:76:9e:58:20:1c:2a:ab:80:e5: 36:bc:89:ce:61:fc:69:51:f1:6b:0a:ca:dd:29:04: 82:fa:c9:c6:fb:9e:fc:85:d5:a4:63:ca:b0:03:a0: 95:e6:85:bb:21:71:ed:04:2c:01:eb:56:10:67:b4: 62:57:6a:5d:87:06:a7:84:d4:5f:e2:87:10:a6:1c: fc:8d:cc:6d:1a:d4:4a:39:62:cf:48:fb:b0:67:46: 6a:b3:7d:c2:a0:85:30:88:77:2c:da:9d:67:4d:40: 7a:88:cd:d9:7a:ed:23:7e:85:1d:34:94:2a:16:23: f4:70:96:11:0f:b6:80:09:b7:5d:3e:2a:b4:b8:6b: 55:16:50:e3:f6:e3:25:4a:fb:8b:70:db:57:13:b1: af:5d:3f:ca:97:1a:9f:5d:2d:e3:31:b1:9f:be:cc: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:22:A3:81:F7:F8:C4:F5:91:FF:14:F7:19:80:16:58:26:8C:E9:5F X509v3 Authority Key Identifier: keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/gyKjgff4xPWR_xT3GYAWWCaM6V8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.20.0-94.229.22.255 185.66.218.0/23 195.20.196.0/23 Signature Algorithm: sha256WithRSAEncryption a9:02:04:ff:cb:77:86:a4:4d:3c:24:8a:33:2a:d1:54:1f:89: 00:8d:be:19:a4:22:9f:b2:19:d6:90:7c:39:e5:82:91:dc:4f: 50:6f:e7:40:0e:97:0c:5a:61:a2:9f:19:83:dd:2e:16:9c:f5: 4f:ab:89:ce:fe:56:44:c1:03:8a:d0:ac:87:45:e5:51:9a:6a: b1:d7:a9:15:63:c3:5e:ea:c6:35:4c:60:8c:9e:47:b6:79:ad: 68:2e:a1:2d:c1:e9:4c:21:6b:ef:2a:d7:c1:a0:08:04:8f:58: f6:0b:10:3a:ed:42:dc:ff:e2:97:6d:1b:c9:65:f3:83:9c:04: 9e:58:0b:84:e7:3a:5b:d2:75:b6:3c:45:08:52:f1:19:b5:40: 96:7c:b6:ae:69:51:61:04:10:e6:54:5e:f6:c8:05:9d:18:be: c4:34:83:db:f9:96:e3:59:52:2d:30:fa:a4:94:e5:9c:ae:eb: 3c:05:34:24:3a:ff:e6:fa:58:60:a2:52:23:cd:df:5b:b6:04: 82:ae:27:0b:70:10:57:ad:ad:16:52:1b:e5:2b:cf:7c:62:8c: 85:a1:a7:44:d7:97:5a:e2:db:51:08:59:25:45:b0:44:d5:44: 78:66:01:a1:03:d3:d5:13:16:77:b7:a5:e5:05:41:1b:16:ab: a2:58:02:52 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZwTc1CepAEBfNrDSDlubGbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl NTIxMjkwHhcNMjYwMTMxMDk0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzIyYTM4MWY3ZjhjNGY1OTFmZjE0ZjcxOTgwMTY1ODI2OGNlOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvyRkJcTm2mSDmicmdd1zrZtwiIb vkylSY6jAHeAZDpQQiLucQIXY5Ws8P8qJXhzborIE3y4J03zpFd/xh5OxGz1wLHO z5Dv5FoiNmdFNvPlNSotHOSNWlMk5uln39t2nlggHCqrgOU2vInOYfxpUfFrCsrd KQSC+snG+578hdWkY8qwA6CV5oW7IXHtBCwB61YQZ7RiV2pdhwanhNRf4ocQphz8 jcxtGtRKOWLPSPuwZ0Zqs33CoIUwiHcs2p1nTUB6iM3Zeu0jfoUdNJQqFiP0cJYR D7aACbddPiq0uGtVFlDj9uMlSvuLcNtXE7GvXT/KlxqfXS3jMbGfvswtHQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFIMio4H3+MT1kf8U9xmAFlgmjOlfMB8GA1UdIwQY MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt OWQyZDlmNmVlZTkzLzEvZ3lLamdmZjR4UFdSX3hUM0dZQVdXQ2FNNlY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAJe5RQD BABe5RYDBAG5QtoDBAHDFMQwDQYJKoZIhvcNAQELBQADggEBAKkCBP/Ld4akTTwk ijMq0VQfiQCNvhmkIp+yGdaQfDnlgpHcT1Bv50AOlwxaYaKfGYPdLhac9U+ric7+ VkTBA4rQrIdF5VGaarHXqRVjw17qxjVMYIyeR7Z5rWguoS3B6Uwha+8q18GgCASP WPYLEDrtQtz/4pdtG8ll84OcBJ5YC4TnOlvSdbY8RQhS8Rm1QJZ8tq5pUWEEEOZU XvbIBZ0YvsQ0g9v5luNZUi0w+qSU5Zyu6zwFNCQ6/+b6WGCiUiPN31u2BIKuJwtw EFetrRZSG+Urz3xijIWhp0TXl1ri21EIWSVFsETVRHhmAaED09UTFne3peUFQRsW q6JYAlI= -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:47 2026 by rpki-client