This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/C_loy0B7_p9VbknMqKT5_-soGMw.roa File: C_loy0B7_p9VbknMqKT5_-soGMw.roa (raw, json) Hash identifier: lXBtx5TCEhT3yUAY172G+wMVb0Mu6qGMrAg/+UmSriM= Subject key identifier: 0B:F9:68:CB:40:7B:FE:9F:55:6E:49:CC:A8:A4:F9:FF:EB:28:18:CC Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Certificate serial: 019B7FF26C353CFE347EC289EA8EE4975DCA Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/C_loy0B7_p9VbknMqKT5_-soGMw.roa Signing time: Fri 02 Jan 2026 18:22:32 +0000 ROA not before: Fri 02 Jan 2026 18:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5607 IP address blocks: 185.110.178.0/23 maxlen: 23 2a01:f8c0::/29 maxlen: 29 2a01:f8c0::/32 maxlen: 32 2a01:f8c1::/32 maxlen: 32 2a01:f8c2::/32 maxlen: 32 2a01:f8c3::/32 maxlen: 32 2a01:f8c4::/32 maxlen: 32 2a01:f8c5::/32 maxlen: 32 2a01:f8c6::/32 maxlen: 32 2a01:f8c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:6c:35:3c:fe:34:7e:c2:89:ea:8e:e4:97:5d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794 Validity Not Before: Jan 2 18:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bf968cb407bfe9f556e49cca8a4f9ffeb2818cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:90:04:1e:a9:75:3a:d2:87:50:24:ad:49:22: e8:8a:d5:bd:d4:51:68:66:1f:52:7b:42:6a:00:15: a2:59:3a:3b:40:cc:f4:b6:ce:7e:91:86:dc:e6:1c: f3:2d:ce:79:7d:9d:18:4b:eb:fc:e8:86:b0:ec:af: bc:a6:6c:5c:92:5d:65:3a:73:15:8a:d5:85:fe:86: 0c:b4:97:2b:88:8f:ae:f3:d4:6e:b9:62:c4:f0:83: 94:0c:09:c6:74:9a:b1:83:4a:bf:ab:86:2f:11:48: 59:31:58:75:2b:44:84:e1:7b:9c:1b:2d:2d:d3:fc: 7a:19:20:57:57:a7:ad:e8:e3:fe:e8:82:2c:7e:6c: 5c:bd:ce:06:1b:de:1f:af:36:12:d6:a0:01:68:a9: a5:67:f6:b8:43:57:0d:dc:28:fb:54:8e:89:53:22: c4:d1:ca:ba:d1:3a:5b:1b:ed:a6:c5:d3:ef:7f:28: 2e:d6:c0:2e:41:c0:c5:c9:7e:57:fd:ee:ef:6c:4d: ca:a6:48:25:61:0d:62:47:bc:93:19:d1:88:3f:c0: 38:e0:76:f0:be:df:3e:2c:48:94:85:3f:cb:49:e5: 0e:b7:30:bb:c9:8b:0b:66:42:6e:a3:8f:cf:ea:41: 2f:a8:1c:d8:f8:ff:e3:71:45:4a:91:d8:2a:50:49: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F9:68:CB:40:7B:FE:9F:55:6E:49:CC:A8:A4:F9:FF:EB:28:18:CC X509v3 Authority Key Identifier: keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/C_loy0B7_p9VbknMqKT5_-soGMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.178.0/23 IPv6: 2a01:f8c0::/29 Signature Algorithm: sha256WithRSAEncryption 88:fd:bd:f5:2c:48:43:67:a2:27:88:df:27:5c:87:06:43:c6: 72:3d:4f:b4:07:69:69:94:83:40:21:a4:c3:b1:0e:1e:87:4a: 4b:87:6b:62:d3:a5:cc:1f:9e:1f:07:98:f0:69:4d:3e:12:40: e0:99:30:0c:37:ef:54:f3:18:06:a7:8d:69:ad:f6:b5:85:6c: 5b:26:0e:32:90:55:31:e7:db:c3:d7:41:a0:cf:54:60:dc:30: 5d:17:b4:8e:57:ff:3b:25:16:1d:bd:e0:2c:7a:bf:8d:50:14: fe:60:5b:ab:5b:a3:40:a1:26:ed:88:ab:d7:ee:11:33:59:cc: 9c:1f:c3:28:26:c0:aa:76:1c:d2:a9:35:88:7a:56:89:82:98: ce:ae:69:3f:26:78:20:a0:98:77:f8:2a:ef:f9:9c:f0:90:04: 5d:95:64:e9:35:14:30:b1:6f:94:d4:8b:20:b3:7b:fa:06:a8: ae:4c:92:d8:5a:e1:19:d1:47:a2:6c:c8:b9:e6:44:62:4d:8c: 5e:55:f3:93:38:9d:56:e2:fd:de:17:aa:a0:32:72:14:05:2d: 0e:af:c5:f3:dc:c0:75:39:af:21:5d:d9:aa:f7:9c:13:55:a6: ef:59:8a:e9:d5:2a:51:f8:ce:39:19:d9:6e:e4:9c:f7:42:4c: b9:c9:57:a7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8mw1PP40fsKJ6o7kl13KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx YTc3OTQwHhcNMjYwMTAyMTgyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmY5NjhjYjQwN2JmZTlmNTU2ZTQ5Y2NhOGE0ZjlmZmViMjgxOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65AEHql1OtKHUCStSSLoitW91FFo Zh9Se0JqABWiWTo7QMz0ts5+kYbc5hzzLc55fZ0YS+v86Iaw7K+8pmxckl1lOnMV itWF/oYMtJcriI+u89RuuWLE8IOUDAnGdJqxg0q/q4YvEUhZMVh1K0SE4XucGy0t 0/x6GSBXV6et6OP+6IIsfmxcvc4GG94frzYS1qABaKmlZ/a4Q1cN3Cj7VI6JUyLE 0cq60TpbG+2mxdPvfygu1sAuQcDFyX5X/e7vbE3KpkglYQ1iR7yTGdGIP8A44Hbw vt8+LEiUhT/LSeUOtzC7yYsLZkJuo4/P6kEvqBzY+P/jcUVKkdgqUEm2UwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAv5aMtAe/6fVW5JzKik+f/rKBjMMB8GA1UdIwQY MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt N2E4MGVkNjIxNzgxLzEvQ19sb3kwQjdfcDlWYmtuTXFLVDVfLXNvR013LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuW6yMA0E AgACMAcDBQMqAfjAMA0GCSqGSIb3DQEBCwUAA4IBAQCI/b31LEhDZ6IniN8nXIcG Q8ZyPU+0B2lplINAIaTDsQ4eh0pLh2ti06XMH54fB5jwaU0+EkDgmTAMN+9U8xgG p41prfa1hWxbJg4ykFUx59vD10Ggz1Rg3DBdF7SOV/87JRYdveAser+NUBT+YFur W6NAoSbtiKvX7hEzWcycH8MoJsCqdhzSqTWIelaJgpjOrmk/JnggoJh3+Crv+Zzw kARdlWTpNRQwsW+U1Isgs3v6BqiuTJLYWuEZ0UeibMi55kRiTYxeVfOTOJ1W4v3e F6qgMnIUBS0Or8Xz3MB1Oa8hXdmq95wTVabvWYrp1SpR+M45Gdlu5Jz3Qky5yVen -----END CERTIFICATE-----Generated at Tue Jan 20 23:29:27 2026 by rpki-client