This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/gQ7St51r5tRsr1STgJZSpb51fy0.roa File: gQ7St51r5tRsr1STgJZSpb51fy0.roa (raw, json) Hash identifier: 2Qh2IkkpDn5a2bQBxP6BJ08eMuKLDD2wyJNu9l57aaw= Subject key identifier: 81:0E:D2:B7:9D:6B:E6:D4:6C:AF:54:93:80:96:52:A5:BE:75:7F:2D Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Certificate serial: 019B79ED3833F1ED23236E4FBFDFC8CCDB8B Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/gQ7St51r5tRsr1STgJZSpb51fy0.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203615 IP address blocks: 185.127.180.0/22 maxlen: 24 185.127.180.0/24 maxlen: 24 185.127.181.0/24 maxlen: 24 2a06:cb00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:38:33:f1:ed:23:23:6e:4f:bf:df:c8:cc:db:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=810ed2b79d6be6d46caf5493809652a5be757f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:27:ab:99:98:9c:b0:ad:dc:78:14:3e:25: d1:78:b4:1e:ef:76:e7:d2:1a:39:09:f3:68:42:c0: e6:b6:04:7f:e6:2e:85:00:d9:b1:b8:36:89:eb:ac: f6:49:87:91:b4:76:62:aa:7c:19:29:12:4b:1f:05: 7f:eb:87:f1:ca:8f:a9:4e:77:6c:64:b9:6d:65:15: 2b:58:37:7b:c9:d7:ba:97:82:6c:4c:f4:e0:53:16: 93:81:5b:da:7d:69:ad:84:42:87:60:15:30:bd:46: 9f:62:7d:53:18:58:4c:b0:62:01:1f:db:bb:18:6e: 82:7c:af:cd:d2:fc:59:15:33:74:c9:40:5d:cf:c7: be:3b:90:1f:c2:a6:69:51:de:ff:8b:ff:90:fa:d1: 19:7f:0d:4e:35:43:a9:80:51:4e:78:3e:4a:54:98: 0f:e3:99:1c:26:3b:4e:b0:72:88:bc:76:73:30:3d: 38:85:ef:56:ea:51:4f:12:81:8b:eb:47:be:2b:14: f6:e0:af:dc:6d:13:a9:57:3f:e8:26:55:5b:d9:c7: 5d:96:7a:1c:ed:e9:7d:4c:57:49:c1:3f:7f:74:c2: 22:bb:04:ed:fa:05:ae:d6:ef:ae:e3:fa:9f:a3:fa: a1:0b:91:8b:bc:a4:3c:64:21:c9:d1:c8:97:f4:51: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0E:D2:B7:9D:6B:E6:D4:6C:AF:54:93:80:96:52:A5:BE:75:7F:2D X509v3 Authority Key Identifier: keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/gQ7St51r5tRsr1STgJZSpb51fy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.180.0/22 IPv6: 2a06:cb00::/29 Signature Algorithm: sha256WithRSAEncryption 90:42:85:7f:e9:28:4d:f4:7c:56:1f:60:e4:de:52:84:6e:d2: 58:8e:9b:dd:a2:6f:cd:4c:63:e4:77:b9:17:40:91:de:05:62: 2c:93:b2:d2:d9:f0:35:eb:77:2a:39:11:4c:2e:41:f9:12:7f: 69:fd:1e:17:7c:21:47:22:08:9e:16:94:a9:33:db:01:e8:9f: dd:bf:97:01:20:5d:03:52:57:1f:bd:41:7d:57:35:58:f9:99: b4:2c:06:c6:84:f2:39:c7:29:eb:83:e3:6e:a7:33:b9:51:5f: 1a:a6:e1:ba:c8:88:f5:37:91:6e:ff:5b:fb:94:d2:af:09:7c: 60:9a:52:d7:59:3c:2c:fa:87:78:1f:41:4e:80:4e:8d:21:3c: 22:59:ff:63:48:9d:26:91:e5:43:4a:e1:09:7d:ba:da:9a:0d: f7:63:f5:c6:c4:fe:a2:b1:5c:c9:e8:8a:5f:43:63:f3:aa:b2: fb:84:b6:c8:e8:54:61:6e:c4:70:18:5d:1f:c8:9a:38:be:3b: 7c:42:13:76:82:f1:13:50:8e:a3:fe:5d:7f:31:b1:70:a6:01: 7e:7b:b0:52:50:ea:53:b2:0d:19:ff:13:0a:4d:96:e0:d5:3c: c0:67:9c:6f:f7:2c:c9:c0:ea:ce:25:17:d9:48:7c:a7:de:8e: f4:7b:95:2c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Tgz8e0jI25Pv9/IzNuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4 MzNjNTYwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTBlZDJiNzlkNmJlNmQ0NmNhZjU0OTM4MDk2NTJhNWJlNzU3ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t0nq5mYnLCt3HgUPiXReLQe73bn 0ho5CfNoQsDmtgR/5i6FANmxuDaJ66z2SYeRtHZiqnwZKRJLHwV/64fxyo+pTnds ZLltZRUrWDd7yde6l4JsTPTgUxaTgVvafWmthEKHYBUwvUafYn1TGFhMsGIBH9u7 GG6CfK/N0vxZFTN0yUBdz8e+O5AfwqZpUd7/i/+Q+tEZfw1ONUOpgFFOeD5KVJgP 45kcJjtOsHKIvHZzMD04he9W6lFPEoGL60e+KxT24K/cbROpVz/oJlVb2cddlnoc 7el9TFdJwT9/dMIiuwTt+gWu1u+u4/qfo/qhC5GLvKQ8ZCHJ0ciX9FEqXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIEO0reda+bUbK9Uk4CWUqW+dX8tMB8GA1UdIwQY MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt OGM1NmQ4ZmUxN2I1LzEvZ1E3U3Q1MXI1dFJzcjFTVGdKWlNwYjUxZnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1 LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX+0MA0E AgACMAcDBQMqBssAMA0GCSqGSIb3DQEBCwUAA4IBAQCQQoV/6ShN9HxWH2Dk3lKE btJYjpvdom/NTGPkd7kXQJHeBWIsk7LS2fA163cqORFMLkH5En9p/R4XfCFHIgie FpSpM9sB6J/dv5cBIF0DUlcfvUF9VzVY+Zm0LAbGhPI5xynrg+NupzO5UV8apuG6 yIj1N5Fu/1v7lNKvCXxgmlLXWTws+od4H0FOgE6NITwiWf9jSJ0mkeVDSuEJfbra mg33Y/XGxP6isVzJ6IpfQ2PzqrL7hLbI6FRhbsRwGF0fyJo4vjt8QhN2gvETUI6j /l1/MbFwpgF+e7BSUOpTsg0Z/xMKTZbg1TzAZ5xv9yzJwOrOJRfZSHyn3o70e5Us -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:30 2026 by rpki-client