This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JV9qqXJgthdEV9gSEtaAmKrXJH8.roa File: JV9qqXJgthdEV9gSEtaAmKrXJH8.roa (raw, json) Hash identifier: HbqSFDLUPF4aIt4hRE8wj3agSeKulUgEDvc2yx+tlBw= Subject key identifier: 25:5F:6A:A9:72:60:B6:17:44:57:D8:12:12:D6:80:98:AA:D7:24:7F Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F1509EA9581E7A6A627F63B90C2D90F Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JV9qqXJgthdEV9gSEtaAmKrXJH8.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396856 IP address blocks: 188.64.108.0/22 maxlen: 24 188.64.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:09:ea:95:81:e7:a6:a6:27:f6:3b:90:c2:d9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=255f6aa97260b6174457d81212d68098aad7247f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:f0:56:60:1f:4a:6c:79:88:4b:67:f9:83: b5:8c:8e:16:17:29:65:87:ec:d8:ad:63:b8:d0:ea: cc:97:45:05:3a:93:8e:74:93:03:7a:6a:85:a1:5c: 78:e8:47:aa:ab:c4:61:0c:42:7c:68:10:d8:1f:01: 4d:16:e4:f3:71:8d:20:9a:74:29:6b:cd:7d:e5:f4: ba:4e:d5:60:75:68:1a:50:a6:55:81:cb:f7:14:96: 44:87:31:b6:dc:6e:b7:a4:2e:a6:52:74:c1:b4:ec: 06:22:d3:ff:e5:89:32:eb:45:c7:67:14:40:7c:6e: 31:50:60:05:3c:23:22:ba:c8:69:38:6a:42:8f:1e: ff:9b:91:9b:99:be:c2:a1:31:9b:ac:22:7c:23:84: 59:a6:b3:cb:f9:06:7e:e5:d6:98:fc:27:76:45:24: fa:20:05:fd:6d:0d:1c:7b:aa:a6:e8:9a:55:d4:c8: 77:c4:2e:ec:16:fd:b9:5c:97:3d:95:ed:72:1e:3c: 1a:fe:73:f4:60:f0:cd:f4:ed:2f:17:2f:04:04:1c: b0:ae:84:b5:a0:95:92:7f:67:ce:b9:14:f9:15:90: 9e:33:01:03:d5:56:b2:5c:3b:12:48:41:f1:11:d5: af:bf:3a:24:18:e9:d5:f8:b5:6d:b3:3e:c5:f7:8a: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5F:6A:A9:72:60:B6:17:44:57:D8:12:12:D6:80:98:AA:D7:24:7F X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/JV9qqXJgthdEV9gSEtaAmKrXJH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.108.0/22 Signature Algorithm: sha256WithRSAEncryption a7:fd:1a:42:32:8c:94:9a:63:1d:df:a1:fd:72:dd:a6:95:50: 0a:f9:72:13:9a:cc:bb:ed:29:b4:a6:cb:03:34:1f:8c:13:94: 4d:dd:d5:b4:b2:55:36:23:96:65:46:58:5f:e9:dd:44:d8:e5: bc:c4:d9:03:34:e4:aa:1a:01:fb:a1:d2:d5:43:5f:e4:48:83: aa:75:85:c2:10:78:5d:1b:5f:db:da:68:26:03:09:be:25:04: f9:a4:dd:7b:64:50:d9:31:4a:df:fd:86:da:97:b6:f5:1f:fa: ee:60:37:20:36:a2:77:37:41:61:b4:91:63:fd:b5:ab:57:b4: 00:26:f5:86:3a:09:4b:32:05:f7:b9:74:75:bb:4d:3e:91:00: fe:70:51:55:98:cc:73:f1:ed:c2:ad:6d:d0:71:23:3c:d4:89: bc:2c:c2:e6:e5:96:ff:eb:9c:0b:87:03:84:5f:02:52:9f:a9: 98:36:eb:60:a6:62:38:e5:92:54:28:91:6e:a3:5a:66:12:de: f5:ce:fc:c3:d1:eb:bd:0f:69:9d:e5:db:55:af:fb:67:5b:62: 77:75:8d:7c:d3:6a:7f:70:c6:43:a3:74:63:e1:fa:70:c0:69: 1b:f9:6a:4c:e4:0e:14:74:90:55:eb:a0:12:fd:10:11:f7:c4: cc:4e:ee:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQnqlYHnpqYn9juQwtkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTVmNmFhOTcyNjBiNjE3NDQ1N2Q4MTIxMmQ2ODA5OGFhZDcyNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwPwVmAfSmx5iEtn+YO1jI4WFyll h+zYrWO40OrMl0UFOpOOdJMDemqFoVx46Eeqq8RhDEJ8aBDYHwFNFuTzcY0gmnQp a8195fS6TtVgdWgaUKZVgcv3FJZEhzG23G63pC6mUnTBtOwGItP/5Yky60XHZxRA fG4xUGAFPCMiushpOGpCjx7/m5Gbmb7CoTGbrCJ8I4RZprPL+QZ+5daY/Cd2RST6 IAX9bQ0ce6qm6JpV1Mh3xC7sFv25XJc9le1yHjwa/nP0YPDN9O0vFy8EBBywroS1 oJWSf2fOuRT5FZCeMwED1VayXDsSSEHxEdWvvzokGOnV+LVtsz7F94qL8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCVfaqlyYLYXRFfYEhLWgJiq1yR/MB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvSlY5cXFYSmd0aGRFVjlnU0V0YUFtS3JYSkg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvEBsMA0G CSqGSIb3DQEBCwUAA4IBAQCn/RpCMoyUmmMd36H9ct2mlVAK+XITmsy77Sm0pssD NB+ME5RN3dW0slU2I5ZlRlhf6d1E2OW8xNkDNOSqGgH7odLVQ1/kSIOqdYXCEHhd G1/b2mgmAwm+JQT5pN17ZFDZMUrf/Ybal7b1H/ruYDcgNqJ3N0FhtJFj/bWrV7QA JvWGOglLMgX3uXR1u00+kQD+cFFVmMxz8e3CrW3QcSM81Im8LMLm5Zb/65wLhwOE XwJSn6mYNutgpmI45ZJUKJFuo1pmEt71zvzD0eu9D2md5dtVr/tnW2J3dY1802p/ cMZDo3Rj4fpwwGkb+WpM5A4UdJBV66AS/RAR98TMTu7c -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:53 2026 by rpki-client