This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/gXTGqs4LKJz0Vrtvliei4acD1Ew.roa File: gXTGqs4LKJz0Vrtvliei4acD1Ew.roa (raw, json) Hash identifier: p/wSJPqOIsg3ZzxrAAFzNgFBQSzliYRj4Gqn0szjKSQ= Subject key identifier: 81:74:C6:AA:CE:0B:28:9C:F4:56:BB:6F:96:27:A2:E1:A7:03:D4:4C Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601 Certificate serial: 019B77C6ED810CDA7F13672A9A378DE1E3DA Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/gXTGqs4LKJz0Vrtvliei4acD1Ew.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41354 IP address blocks: 185.80.84.0/22 maxlen: 22 185.80.84.0/23 maxlen: 23 185.80.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ed:81:0c:da:7f:13:67:2a:9a:37:8d:e1:e3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8174c6aace0b289cf456bb6f9627a2e1a703d44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:91:fc:c3:3c:d6:b3:87:a2:65:8e:14:75: 02:be:8b:db:9e:8e:7b:51:5b:33:bd:f3:e3:e4:a4: 34:87:b5:f8:b3:c9:c1:3f:9f:99:fa:ce:55:e6:2b: 58:e3:17:9f:89:85:2f:c9:06:65:64:a1:7c:84:29: f6:44:78:a0:fa:ce:48:bf:16:3e:b2:f2:02:00:93: 9c:a7:f9:41:28:a0:d7:72:2e:e0:7d:86:e2:23:20: a9:1c:ac:39:0c:d3:97:9c:bf:98:f7:45:ca:45:28: b9:69:94:06:34:a2:61:94:82:13:a6:a1:d4:f7:79: 06:7c:80:4e:2f:cd:85:43:1b:58:ad:a1:22:42:42: 7d:15:ba:71:c8:fb:c0:0d:19:59:cd:e0:bb:b8:e0: 4e:b9:63:30:60:13:ab:72:f8:1c:de:75:47:b2:40: d7:69:f8:aa:9b:c0:c6:46:e4:2b:30:ff:2f:b3:28: c5:20:52:35:9e:89:fe:d6:dc:a0:2b:fd:a0:e3:13: bc:63:bf:ea:2e:70:d6:a2:12:de:62:bc:4b:74:4f: 7d:0b:79:3c:58:27:36:0c:26:bd:38:5b:16:82:b8: ec:63:3d:9e:ab:7a:ea:6b:e6:de:08:d5:7f:b6:9d: 6d:80:df:ad:6d:24:d8:76:c8:14:b6:bb:95:7a:f5: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:74:C6:AA:CE:0B:28:9C:F4:56:BB:6F:96:27:A2:E1:A7:03:D4:4C X509v3 Authority Key Identifier: keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/gXTGqs4LKJz0Vrtvliei4acD1Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.84.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:33:a0:e6:50:68:c5:ea:47:41:02:10:a1:0e:15:57:c9:6c: ae:bf:aa:d0:33:18:72:26:2e:a2:ef:6d:e0:96:60:95:2a:e1: e1:bd:19:9f:2a:1a:a8:83:62:83:56:b3:90:58:3f:73:d1:f4: 2b:8c:3e:42:23:b3:28:45:52:5e:74:31:e4:b1:28:fc:cd:c7: 97:20:ec:77:87:4f:9a:7f:ba:e3:10:22:4e:84:16:f0:5d:ce: f4:24:99:e7:61:82:1e:64:92:4a:88:67:04:da:d1:6f:89:c7: e2:f3:32:54:2b:fd:58:d7:29:de:12:b5:d2:80:02:7a:2f:7b: 14:f8:58:30:97:46:be:d6:10:29:8f:17:91:cf:2c:a7:4d:2c: b3:1c:a6:9e:17:ab:13:df:c0:5e:66:f4:20:53:cf:b6:cf:0e: c0:45:b6:c3:ca:99:4c:af:e2:e9:c2:49:fd:54:cf:79:df:1b: 25:03:3c:ea:64:15:57:ed:32:cc:06:d0:84:04:70:94:5f:4b: 20:3e:67:3c:67:43:6f:ae:a8:2d:29:cf:72:80:f1:ae:c1:34: d2:e2:99:78:32:42:2a:31:c7:a5:dc:39:f5:c6:3e:97:11:57: a6:37:a3:eb:26:00:98:16:23:9b:f9:cb:5a:78:44:fc:30:09: 2f:c4:c0:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xu2BDNp/E2cqmjeN4ePaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDI3NzExOTA2ZTQxZDBiZmQ3YWUwMWJjMGEzOGQzZTc5 ZTI2MDEwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTc0YzZhYWNlMGIyODljZjQ1NmJiNmY5NjI3YTJlMWE3MDNkNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYiR/MM81rOHomWOFHUCvovbno57 UVszvfPj5KQ0h7X4s8nBP5+Z+s5V5itY4xefiYUvyQZlZKF8hCn2RHig+s5IvxY+ svICAJOcp/lBKKDXci7gfYbiIyCpHKw5DNOXnL+Y90XKRSi5aZQGNKJhlIITpqHU 93kGfIBOL82FQxtYraEiQkJ9FbpxyPvADRlZzeC7uOBOuWMwYBOrcvgc3nVHskDX afiqm8DGRuQrMP8vsyjFIFI1non+1tygK/2g4xO8Y7/qLnDWohLeYrxLdE99C3k8 WCc2DCa9OFsWgrjsYz2eq3rqa+beCNV/tp1tgN+tbSTYdsgUtruVevUxjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIF0xqrOCyic9Fa7b5YnouGnA9RMMB8GA1UdIwQY MBaAFBHSdxGQbkHQv9euAbwKONPnniYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEt ZmFhNzQxMjdkYzc4LzEvZ1hUR3FzNExLSnowVnJ0dmxpZWk0YWNEMUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi83NWFkNjctNmY0OC00OWM1LWJmNGEtZmFhNzQxMjdkYzc4 LzEvRWRKM0VaQnVRZENfMTY0QnZBbzQwLWVlSmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVBUMA0G CSqGSIb3DQEBCwUAA4IBAQA/M6DmUGjF6kdBAhChDhVXyWyuv6rQMxhyJi6i723g lmCVKuHhvRmfKhqog2KDVrOQWD9z0fQrjD5CI7MoRVJedDHksSj8zceXIOx3h0+a f7rjECJOhBbwXc70JJnnYYIeZJJKiGcE2tFvicfi8zJUK/1Y1yneErXSgAJ6L3sU +Fgwl0a+1hApjxeRzyynTSyzHKaeF6sT38BeZvQgU8+2zw7ARbbDyplMr+Lpwkn9 VM953xslAzzqZBVX7TLMBtCEBHCUX0sgPmc8Z0NvrqgtKc9ygPGuwTTS4pl4MkIq Mcel3Dn1xj6XEVemN6PrJgCYFiOb+ctaeET8MAkvxMB1 -----END CERTIFICATE-----Generated at Mon Jan 26 06:02:58 2026 by rpki-client