This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/GjYFPpu5qly7WNCNE9H02v19rGI.roa File: GjYFPpu5qly7WNCNE9H02v19rGI.roa (raw, json) Hash identifier: uxe1X+ooLHVVasEJs6z37Wqr1Cj+mkgqkDhXbJ6i0VM= Subject key identifier: 1A:36:05:3E:9B:B9:AA:5C:BB:58:D0:8D:13:D1:F4:DA:FD:7D:AC:62 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F817698274E379B4631CE6C6AB4A6DA Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/GjYFPpu5qly7WNCNE9H02v19rGI.roa Signing time: Fri 02 Jan 2026 16:19:09 +0000 ROA not before: Fri 02 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61161 IP address blocks: 185.17.72.0/22 maxlen: 24 185.100.56.0/22 maxlen: 24 2a04:600::/29 maxlen: 48 2a0d:3200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:76:98:27:4e:37:9b:46:31:ce:6c:6a:b4:a6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a36053e9bb9aa5cbb58d08d13d1f4dafd7dac62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:fc:e7:e3:dc:74:74:6a:1b:57:2a:0d:7e: af:84:53:ea:16:33:80:48:ac:b7:8f:e1:ab:87:71: cf:fe:a0:54:3e:fd:99:88:49:96:a1:3c:13:87:92: dd:21:87:39:02:53:c3:61:55:87:c3:0a:e1:d4:21: 92:e0:ec:51:a5:a5:9f:d1:bb:fa:8a:3d:96:80:17: 3d:ef:de:d5:6e:3c:71:05:e3:67:57:2c:d2:f3:ec: 0e:a7:85:06:2d:23:b8:75:24:36:e2:05:66:12:5e: 4f:ca:01:1c:b2:67:6f:e8:40:45:45:b4:30:8d:f4: a2:13:9f:a0:57:c7:92:02:b8:da:50:8e:85:6c:49: 64:43:e5:c3:22:76:4a:41:a2:42:3c:41:40:e6:1c: f7:eb:86:ca:24:3e:0d:21:e4:a6:47:e3:b4:44:13: 34:6e:36:c2:97:09:17:88:e7:7b:2a:1c:79:e6:0c: a2:a6:e8:21:44:0a:f7:9a:1c:63:41:bb:c1:e9:39: 82:11:dc:47:7a:20:bb:59:e2:b5:bf:d9:38:64:5f: b9:df:c0:f3:37:7c:11:b4:90:c0:ee:d3:ac:29:a2: ca:95:4c:2a:bc:8c:ef:48:c3:4c:7a:3e:c6:46:86: e7:23:4b:f6:73:6f:71:e4:a1:f2:ce:cc:a7:13:dd: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:36:05:3E:9B:B9:AA:5C:BB:58:D0:8D:13:D1:F4:DA:FD:7D:AC:62 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/GjYFPpu5qly7WNCNE9H02v19rGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.72.0/22 185.100.56.0/22 IPv6: 2a04:600::/29 2a0d:3200::/29 Signature Algorithm: sha256WithRSAEncryption a7:d2:17:fc:d1:96:03:56:df:b9:17:8f:7f:c2:14:bf:a5:62: 5d:bc:3e:b1:ab:13:3c:3b:00:ee:a6:f5:d3:6c:b1:4d:ec:c5: 4b:2b:7f:e7:31:4d:8e:37:a9:29:3b:21:93:d4:99:2c:27:6a: 42:cb:8d:31:b2:de:aa:fe:61:16:4c:86:3e:04:46:88:f7:e5: 04:8b:aa:fe:98:45:30:87:f5:83:d1:2c:e6:32:ce:1a:19:32: f3:45:f0:5c:7f:e6:62:70:38:96:a6:a5:23:42:1a:0c:8d:c8: 1c:8d:0d:cc:bf:e4:be:b3:21:1b:ca:2b:28:d1:af:b4:2a:2d: 7a:20:93:39:e9:6b:a9:0d:25:19:ae:a8:41:87:dd:f9:4d:38: 62:d6:07:ce:c5:aa:e9:8e:92:b6:34:d3:1a:0e:eb:df:56:c4: 81:7f:7e:a8:d3:0b:85:c3:8b:56:a9:ac:f5:24:95:d0:a4:95: 9d:b5:ca:4d:1d:f7:bf:51:62:5c:6f:62:15:8e:37:d3:99:b0: 6b:98:39:63:9c:f3:53:48:80:77:28:6e:a9:f3:6e:ea:3e:f4: 0c:ad:bc:b6:d1:19:26:d5:42:e1:65:32:57:d1:11:ab:a4:24: 93:f5:97:4f:2e:a3:f2:7c:92:2b:74:4a:75:35:f4:8b:d8:eb: db:1f:a5:4b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/gXaYJ043m0YxzmxqtKbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTM2MDUzZTliYjlhYTVjYmI1OGQwOGQxM2QxZjRkYWZkN2RhYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sj85+PcdHRqG1cqDX6vhFPqFjOA SKy3j+Grh3HP/qBUPv2ZiEmWoTwTh5LdIYc5AlPDYVWHwwrh1CGS4OxRpaWf0bv6 ij2WgBc9797VbjxxBeNnVyzS8+wOp4UGLSO4dSQ24gVmEl5PygEcsmdv6EBFRbQw jfSiE5+gV8eSArjaUI6FbElkQ+XDInZKQaJCPEFA5hz364bKJD4NIeSmR+O0RBM0 bjbClwkXiOd7Khx55gyipughRAr3mhxjQbvB6TmCEdxHeiC7WeK1v9k4ZF+538Dz N3wRtJDA7tOsKaLKlUwqvIzvSMNMej7GRobnI0v2c29x5KHyzsynE91kcwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBo2BT6buapcu1jQjRPR9Nr9faxiMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvR2pZRlBwdTVxbHk3V05DTkU5SDAydjE5ckdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuRFIAwQC uWQ4MBQEAgACMA4DBQMqBAYAAwUDKg0yADANBgkqhkiG9w0BAQsFAAOCAQEAp9IX /NGWA1bfuRePf8IUv6ViXbw+sasTPDsA7qb102yxTezFSyt/5zFNjjepKTshk9SZ LCdqQsuNMbLeqv5hFkyGPgRGiPflBIuq/phFMIf1g9Es5jLOGhky80XwXH/mYnA4 lqalI0IaDI3IHI0NzL/kvrMhG8orKNGvtCoteiCTOelrqQ0lGa6oQYfd+U04YtYH zsWq6Y6StjTTGg7r31bEgX9+qNMLhcOLVqms9SSV0KSVnbXKTR33v1FiXG9iFY43 05mwa5g5Y5zzU0iAdyhuqfNu6j70DK28ttEZJtVC4WUyV9ERq6Qkk/WXTy6j8nyS K3RKdTX0i9jr2x+lSw== -----END CERTIFICATE-----Generated at Fri Jan 9 16:52:10 2026 by rpki-client