This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/gpNyyPFk3KKe68AIXHTHDLuNtSQ.roa File: gpNyyPFk3KKe68AIXHTHDLuNtSQ.roa (raw, json) Hash identifier: 3RXb4qGbt/U1/6emGhsmKxRYbAy4tLr4uQSkGzFnik0= Subject key identifier: 82:93:72:C8:F1:64:DC:A2:9E:EB:C0:08:5C:74:C7:0C:BB:8D:B5:24 Certificate issuer: /CN=8f0db79be87bd38655bab703a60e774c4d6c2357 Certificate serial: 019B76EB92081220B02B4DF95DAD3A63D492 Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/gpNyyPFk3KKe68AIXHTHDLuNtSQ.roa Signing time: Thu 01 Jan 2026 00:18:28 +0000 ROA not before: Thu 01 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197138 IP address blocks: 91.206.50.0/23 maxlen: 24 2001:67c:354::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:92:08:12:20:b0:2b:4d:f9:5d:ad:3a:63:d4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357 Validity Not Before: Jan 1 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=829372c8f164dca29eebc0085c74c70cbb8db524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:14:08:30:6c:0e:13:8f:43:cd:76:45:4f: 9a:d2:08:bc:2b:06:31:e7:9b:44:0c:1a:70:c0:58: a7:54:25:10:0c:f9:b1:10:aa:c3:5f:87:0b:c7:aa: e7:1e:c1:a2:e2:c3:41:97:40:fd:85:67:81:0d:6e: 47:c9:93:9b:1f:eb:0f:6f:e1:20:d9:29:ef:ec:80: b6:71:74:a4:b0:3b:49:5a:23:51:b0:4c:ed:4c:92: 56:b5:9e:52:d8:e5:a8:b5:5e:9d:8f:db:5a:c9:40: f8:30:4e:32:2d:85:f6:91:4c:97:05:f7:c0:1c:de: ef:1a:53:86:86:e3:a7:ea:fc:58:74:37:27:f6:7a: 93:50:82:8b:ca:83:45:f8:d0:01:b4:0f:b7:fe:73: ac:24:d9:39:7c:9e:50:f7:96:b0:7a:c0:61:c3:47: a1:83:e1:36:7d:a8:26:98:df:ba:a8:ee:d9:b6:a5: 3a:7f:ac:b2:ed:4d:5e:69:d7:d4:5c:9a:fa:7b:bd: 33:f8:69:2d:fc:3e:3c:7f:f0:d6:68:98:6f:38:75: 05:a5:80:f1:5f:4f:02:a6:0a:b1:27:a1:8f:47:63: f2:c2:26:e4:9c:c2:ba:18:12:1b:99:1f:22:25:68: e0:e1:b9:52:33:fb:25:93:b0:eb:dc:ad:38:24:a9: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:93:72:C8:F1:64:DC:A2:9E:EB:C0:08:5C:74:C7:0C:BB:8D:B5:24 X509v3 Authority Key Identifier: keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/gpNyyPFk3KKe68AIXHTHDLuNtSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.50.0/23 IPv6: 2001:67c:354::/48 Signature Algorithm: sha256WithRSAEncryption 90:40:96:69:09:40:21:80:17:0a:a3:69:c0:99:19:76:2c:4f: 65:c1:80:84:b0:7d:78:19:39:99:b5:58:e6:97:23:59:15:8f: c9:e8:c6:e7:0d:04:c9:66:8c:d7:a9:a5:53:68:92:61:3e:fb: 55:01:29:50:ca:2b:38:65:8f:61:81:00:eb:e2:48:18:c0:ba: 03:f5:02:c4:3b:24:08:46:22:ff:82:cb:6f:b7:de:e4:5d:55: 0e:12:13:c2:ce:5a:f7:af:32:a5:c0:95:8d:b2:db:8e:19:92: a9:1e:d2:6d:1f:d0:84:13:47:fd:84:01:6a:e6:ae:b1:a6:47: 10:ba:a7:64:3f:4a:12:b2:aa:86:9f:b2:7d:0b:a7:46:08:65: 14:a6:bf:cc:f1:e2:75:e8:f7:d5:f7:ec:d7:02:8f:06:4b:fa: 65:c5:4b:bf:1d:3c:99:ca:ba:7d:d5:58:80:bd:71:a7:0a:70: 49:8e:26:dc:fa:b6:51:b9:e0:8d:12:04:27:69:8f:d7:51:6a: e2:fb:b9:38:6a:32:5d:bf:75:09:83:48:d2:ee:fe:4e:c6:14: 0f:fa:57:f7:af:bd:90:41:ab:e7:12:54:0d:b4:9b:b4:a4:40: 84:d2:d3:69:f4:08:35:2c:f0:cc:a4:c8:68:49:26:4b:80:69: 8b:dd:d7:6b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt265IIEiCwK035Xa06Y9SSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGRiNzliZTg3YmQzODY1NWJhYjcwM2E2MGU3NzRjNGQ2 YzIzNTcwHhcNMjYwMTAxMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjkzNzJjOGYxNjRkY2EyOWVlYmMwMDg1Yzc0YzcwY2JiOGRiNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymMUCDBsDhOPQ812RU+a0gi8KwYx 55tEDBpwwFinVCUQDPmxEKrDX4cLx6rnHsGi4sNBl0D9hWeBDW5HyZObH+sPb+Eg 2Snv7IC2cXSksDtJWiNRsEztTJJWtZ5S2OWotV6dj9tayUD4ME4yLYX2kUyXBffA HN7vGlOGhuOn6vxYdDcn9nqTUIKLyoNF+NABtA+3/nOsJNk5fJ5Q95awesBhw0eh g+E2fagmmN+6qO7ZtqU6f6yy7U1eadfUXJr6e70z+Gkt/D48f/DWaJhvOHUFpYDx X08CpgqxJ6GPR2PywibknMK6GBIbmR8iJWjg4blSM/slk7Dr3K04JKlAowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIKTcsjxZNyinuvACFx0xwy7jbUkMB8GA1UdIwQY MBaAFI8Nt5voe9OGVbq3A6YOd0xNbCNXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84NTlmMzAtMWU0Yi00NWZlLWI3ZWMt NmQwNzgxNTMyYTQ4LzEvZ3BOeXlQRmszS0tlNjhBSVhIVEhETHVOdFNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84NTlmMzAtMWU0Yi00NWZlLWI3ZWMtNmQwNzgxNTMyYTQ4 LzEvancyM20taDcwNFpWdXJjRHBnNTNURTFzSTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW84yMA8E AgACMAkDBwAgAQZ8A1QwDQYJKoZIhvcNAQELBQADggEBAJBAlmkJQCGAFwqjacCZ GXYsT2XBgISwfXgZOZm1WOaXI1kVj8noxucNBMlmjNeppVNokmE++1UBKVDKKzhl j2GBAOviSBjAugP1AsQ7JAhGIv+Cy2+33uRdVQ4SE8LOWvevMqXAlY2y244Zkqke 0m0f0IQTR/2EAWrmrrGmRxC6p2Q/ShKyqoafsn0Lp0YIZRSmv8zx4nXo99X37NcC jwZL+mXFS78dPJnKun3VWIC9cacKcEmOJtz6tlG54I0SBCdpj9dRauL7uThqMl2/ dQmDSNLu/k7GFA/6V/evvZBBq+cSVA20m7SkQITS02n0CDUs8MykyGhJJkuAaYvd 12s= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:24 2026 by rpki-client