This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/gfglKvvvimegFAA6FxPdy5LdJC0.roa File: gfglKvvvimegFAA6FxPdy5LdJC0.roa (raw, json) Hash identifier: ULQvRCAQAoY7WWQNJkS/YT9oAOOrbWXvPf9Hs5STvkw= Subject key identifier: 81:F8:25:2A:FB:EF:8A:67:A0:14:00:3A:17:13:DD:CB:92:DD:24:2D Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984 Certificate serial: 019B7910321AB59F1A19F5B8157D1DF9679B Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/gfglKvvvimegFAA6FxPdy5LdJC0.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29668 IP address blocks: 185.62.76.0/22 maxlen: 22 2a01:90::/40 maxlen: 40 2a01:90:200::/40 maxlen: 40 2a01:90:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:32:1a:b5:9f:1a:19:f5:b8:15:7d:1d:f9:67:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984 Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81f8252afbef8a67a014003a1713ddcb92dd242d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:66:4a:2d:90:8a:5b:c9:96:6b:f4:47:58: 1f:f3:b8:72:19:44:12:a0:a2:80:9c:53:77:3f:80: d4:19:0b:2e:1e:10:4f:b0:b3:70:9f:81:7e:a2:a8: d3:05:52:c0:7e:2d:69:71:6f:9c:50:1a:d4:7e:88: 31:8f:b6:d3:97:42:30:9b:e1:4e:dc:fb:a9:32:e2: ac:0e:6b:7a:d4:59:ab:d4:59:9f:eb:0e:2d:de:af: 4d:04:21:2b:8c:6b:8f:e6:e4:c4:09:3b:a6:5e:10: 33:9b:ee:78:e9:d7:8b:ba:6c:ee:88:0b:2f:09:31: ef:ea:cc:d1:a2:f3:99:97:ba:d2:db:b2:4f:42:cf: e8:51:10:e7:ed:df:51:1a:e5:73:72:cf:a5:dc:c9: 9f:eb:d1:32:98:b6:23:4c:7d:f6:64:38:84:52:98: 82:42:73:b3:ac:29:18:3f:cb:70:57:3e:05:09:a7: 76:8f:25:2e:ac:19:b8:04:48:c2:d3:ac:af:c1:5d: aa:2a:89:b7:cc:aa:e3:2d:b8:bc:ab:b6:6e:26:4c: 26:08:59:93:7d:da:77:25:3c:df:e9:b6:2a:95:2f: ea:ce:23:13:b6:9f:9a:f3:fa:ba:bc:39:a1:14:8b: 06:44:b6:f7:a2:5a:a3:f3:4f:81:e0:3c:b9:a0:7e: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:25:2A:FB:EF:8A:67:A0:14:00:3A:17:13:DD:CB:92:DD:24:2D X509v3 Authority Key Identifier: keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/gfglKvvvimegFAA6FxPdy5LdJC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.76.0/22 IPv6: 2a01:90::/40 2a01:90:200::/40 2a01:90:400::/48 Signature Algorithm: sha256WithRSAEncryption 2e:49:ab:5c:39:4f:1d:b1:18:6a:a7:ad:df:9b:4f:e0:ac:4f: 09:7d:97:19:45:08:5c:84:4f:aa:e3:54:29:6d:87:0e:eb:df: 08:8b:35:26:80:05:12:e6:a1:bb:6e:54:37:85:fa:83:56:12: 81:f4:9d:26:cc:1a:1a:22:0c:f6:20:9a:61:7a:65:19:4a:90: d9:32:a6:32:65:7b:16:b0:8c:dd:9e:49:f2:4f:aa:ee:aa:c6: 8b:74:56:93:1b:af:04:9e:bc:67:a5:6f:fc:ef:95:02:53:73: b5:e7:7a:b7:11:be:86:d8:96:0d:df:b7:1c:c7:a0:42:e4:f7: 38:d4:d7:6e:ba:61:2e:96:9f:ea:ab:6b:af:ce:84:23:81:89: 88:fd:c3:fc:19:f7:3c:ec:cd:5a:41:7c:4a:8f:04:19:09:67: da:de:67:c8:ba:82:97:7f:be:9b:fd:db:4f:2f:58:0d:ec:07: ed:98:6e:37:0f:1b:77:1b:e6:a7:08:ea:65:c0:c2:dc:0b:7f: f6:a9:05:18:bc:f0:0e:8e:b6:1d:72:f4:74:f1:4b:99:06:4a: 07:69:91:ea:ea:18:65:ef:58:e0:e4:26:30:46:5a:7a:da:47: 71:08:bb:da:ae:51:35:d3:6f:0d:f3:64:e6:c8:76:c3:ba:57: a2:7c:ff:fe -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5EDIatZ8aGfW4FX0d+WebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYTU5YjA5NjBlYTY1ZDZiOTIzOTNlZTAzNDdhMWE4MzJm OWI5ODQwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWY4MjUyYWZiZWY4YTY3YTAxNDAwM2ExNzEzZGRjYjkyZGQyNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPBmSi2QilvJlmv0R1gf87hyGUQS oKKAnFN3P4DUGQsuHhBPsLNwn4F+oqjTBVLAfi1pcW+cUBrUfogxj7bTl0Iwm+FO 3PupMuKsDmt61Fmr1Fmf6w4t3q9NBCErjGuP5uTECTumXhAzm+546deLumzuiAsv CTHv6szRovOZl7rS27JPQs/oURDn7d9RGuVzcs+l3Mmf69EymLYjTH32ZDiEUpiC QnOzrCkYP8twVz4FCad2jyUurBm4BEjC06yvwV2qKom3zKrjLbi8q7ZuJkwmCFmT fdp3JTzf6bYqlS/qziMTtp+a8/q6vDmhFIsGRLb3olqj80+B4Dy5oH6tuwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIH4JSr774pnoBQAOhcT3cuS3SQtMB8GA1UdIwQY MBaAFEGlmwlg6mXWuSOT7gNHoagy+bmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMt YmZkZWMwYzExMmUzLzEvZ2ZnbEt2dnZpbWVnRkFBNkZ4UGR5NUxkSkMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMtYmZkZWMwYzExMmUz LzEvUWFXYkNXRHFaZGE1STVQdUEwZWhxREw1dVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQCuT5MMB8E AgACMBkDBgAqAQCQAAMGACoBAJACAwcAKgEAkAQAMA0GCSqGSIb3DQEBCwUAA4IB AQAuSatcOU8dsRhqp63fm0/grE8JfZcZRQhchE+q41QpbYcO698IizUmgAUS5qG7 blQ3hfqDVhKB9J0mzBoaIgz2IJphemUZSpDZMqYyZXsWsIzdnknyT6ruqsaLdFaT G68EnrxnpW/875UCU3O153q3Eb6G2JYN37ccx6BC5Pc41NduumEulp/qq2uvzoQj gYmI/cP8Gfc87M1aQXxKjwQZCWfa3mfIuoKXf76b/dtPL1gN7AftmG43Dxt3G+an COplwMLcC3/2qQUYvPAOjrYdcvR08UuZBkoHaZHq6hhl71jg5CYwRlp62kdxCLva rlE1028N82TmyHbDuleifP/+ -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:13 2026 by rpki-client