This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/0gZfDChuJla6eM1gPCQ2Ns2axdk.roa File: 0gZfDChuJla6eM1gPCQ2Ns2axdk.roa (raw, json) Hash identifier: dWlp+0ox1WU+4HrOxeX31WBVyLMqro8s5Kw4UmWvewE= Subject key identifier: D2:06:5F:0C:28:6E:26:56:BA:78:CD:60:3C:24:36:36:CD:9A:C5:D9 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F816D24472888F03D8471B771446051 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/0gZfDChuJla6eM1gPCQ2Ns2axdk.roa Signing time: Fri 02 Jan 2026 16:19:07 +0000 ROA not before: Fri 02 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 92.50.0.0/19 maxlen: 19 92.50.32.0/19 maxlen: 19 147.136.68.0/22 maxlen: 24 147.136.76.0/22 maxlen: 24 147.136.84.0/22 maxlen: 24 168.199.128.0/22 maxlen: 24 168.199.160.0/22 maxlen: 24 168.199.192.0/22 maxlen: 24 168.199.212.0/23 maxlen: 23 185.101.244.0/23 maxlen: 24 185.101.246.0/23 maxlen: 24 185.101.252.0/23 maxlen: 23 185.101.254.0/23 maxlen: 23 185.171.252.0/23 maxlen: 23 185.171.253.0/24 maxlen: 24 185.171.254.0/23 maxlen: 23 185.226.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:6d:24:47:28:88:f0:3d:84:71:b7:71:44:60:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2065f0c286e2656ba78cd603c243636cd9ac5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:3b:70:14:3c:08:5e:60:2c:87:ce:48:70: b8:a9:c9:7f:31:29:e0:db:5a:45:39:a8:36:4d:6d: d3:28:70:b0:ec:9f:56:dc:8c:8f:37:bc:9d:0e:fd: 42:33:5e:58:8e:b5:31:ad:75:fb:b7:92:bc:f8:fd: 6e:19:54:bf:cd:f2:52:60:81:af:2f:de:a0:81:82: 68:e6:a9:27:2a:3b:56:08:55:19:a2:b3:79:0f:f4: 98:b9:f3:19:c2:10:21:f4:bf:8b:c5:21:36:01:fc: 80:bf:cf:65:ea:36:f3:7a:86:a6:5d:e4:a1:d4:42: f1:ba:c6:4a:e9:2f:83:f5:3e:2d:57:1a:2e:ec:22: 61:cb:f5:f7:0d:d8:15:d2:cc:bf:2d:a9:01:7a:e8: 78:91:e3:75:26:d5:a2:ab:b9:e4:b8:65:47:1a:bc: 04:a7:62:28:0b:54:7f:5a:dc:3e:0c:d6:b1:23:b4: c7:f5:be:b4:a3:04:31:bf:4a:a8:6e:53:dd:cc:77: b0:22:98:b6:41:d5:ba:e7:f7:9a:e1:d5:01:0a:72: a5:7e:0e:67:13:fd:8f:7d:92:c3:32:7e:78:11:bb: 28:eb:d4:35:35:1d:e0:0b:cb:58:2e:5e:20:75:99: 25:d1:c7:dd:5f:ce:62:e6:ee:29:79:ca:99:19:ce: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:5F:0C:28:6E:26:56:BA:78:CD:60:3C:24:36:36:CD:9A:C5:D9 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/0gZfDChuJla6eM1gPCQ2Ns2axdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.50.0.0/18 147.136.68.0/22 147.136.76.0/22 147.136.84.0/22 168.199.128.0/22 168.199.160.0/22 168.199.192.0/22 168.199.212.0/23 185.101.244.0/22 185.101.252.0/22 185.171.252.0/22 185.226.204.0/23 Signature Algorithm: sha256WithRSAEncryption 99:21:3f:62:bd:58:77:b8:fd:e1:18:7f:86:ea:23:32:b3:04: c6:07:63:ce:91:de:05:97:4e:15:30:77:e7:73:ab:11:80:f5: ba:f8:fb:89:88:86:04:b2:04:68:6c:bc:80:37:fd:94:32:d8: 6b:d8:97:0d:e7:46:94:5d:1f:77:73:25:ee:81:fb:4e:ed:9b: fc:77:bc:4c:d0:56:13:db:34:5d:60:2d:93:98:b4:a3:93:a7: 67:52:06:76:1e:78:ea:fb:1d:68:b3:f7:1c:25:0e:e2:a2:71: 48:e6:6c:79:0a:15:3e:b9:18:b2:ef:9e:02:22:42:12:c1:57: 72:56:4f:4b:dc:71:b7:82:e8:0f:42:f3:21:77:06:18:cd:b3: 68:7c:86:c0:37:8c:d2:65:31:ae:cc:ca:0b:41:3a:ec:f6:b3: 35:94:5e:dd:07:01:8f:a5:91:9c:f2:54:0f:8c:2a:fc:ae:0e: c2:96:98:8f:58:23:8b:23:da:d0:35:5f:3e:f0:5a:b4:7d:84: 4d:70:10:d5:4a:50:0e:bb:a3:21:b5:9e:ce:a1:60:bc:c3:d0: 49:a8:e9:43:64:8b:78:a2:fc:c1:71:c9:76:c6:5f:9e:9b:9e: 0e:9f:47:37:f1:55:4c:04:17:e3:4a:09:6c:ed:42:d5:66:e6: 44:1f:3b:56 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/gW0kRyiI8D2EcbdxRGBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjA2NWYwYzI4NmUyNjU2YmE3OGNkNjAzYzI0MzYzNmNkOWFjNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufI7cBQ8CF5gLIfOSHC4qcl/MSng 21pFOag2TW3TKHCw7J9W3IyPN7ydDv1CM15YjrUxrXX7t5K8+P1uGVS/zfJSYIGv L96ggYJo5qknKjtWCFUZorN5D/SYufMZwhAh9L+LxSE2AfyAv89l6jbzeoamXeSh 1ELxusZK6S+D9T4tVxou7CJhy/X3DdgV0sy/LakBeuh4keN1JtWiq7nkuGVHGrwE p2IoC1R/Wtw+DNaxI7TH9b60owQxv0qoblPdzHewIpi2QdW65/ea4dUBCnKlfg5n E/2PfZLDMn54Ebso69Q1NR3gC8tYLl4gdZkl0cfdX85i5u4pecqZGc4UYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNIGXwwobiZWunjNYDwkNjbNmsXZMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvMGdaZkRDaHVKbGE2ZU0xZ1BDUTJOczJheGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQGXDIAAwQC k4hEAwQCk4hMAwQCk4hUAwQCqMeAAwQCqMegAwQCqMfAAwQBqMfUAwQCuWX0AwQC uWX8AwQCuav8AwQBueLMMA0GCSqGSIb3DQEBCwUAA4IBAQCZIT9ivVh3uP3hGH+G 6iMyswTGB2POkd4Fl04VMHfnc6sRgPW6+PuJiIYEsgRobLyAN/2UMthr2JcN50aU XR93cyXugftO7Zv8d7xM0FYT2zRdYC2TmLSjk6dnUgZ2Hnjq+x1os/ccJQ7ionFI 5mx5ChU+uRiy754CIkISwVdyVk9L3HG3gugPQvMhdwYYzbNofIbAN4zSZTGuzMoL QTrs9rM1lF7dBwGPpZGc8lQPjCr8rg7ClpiPWCOLI9rQNV8+8Fq0fYRNcBDVSlAO u6MhtZ7OoWC8w9BJqOlDZIt4ovzBccl2xl+em54On0c38VVMBBfjSgls7ULVZuZE HztW -----END CERTIFICATE-----Generated at Fri Jan 9 16:51:09 2026 by rpki-client