This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/ggsIrEG_pjBN7NymXoDR3lMKSmc.roa File: ggsIrEG_pjBN7NymXoDR3lMKSmc.roa (raw, json) Hash identifier: NRoN77G1sKo2JMNbfCRILKnaLnywaXx2abNeVRqQfhI= Subject key identifier: 82:0B:08:AC:41:BF:A6:30:4D:EC:DC:A6:5E:80:D1:DE:53:0A:4A:67 Certificate issuer: /CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4 Certificate serial: 019B7EA4BA3B838EDD27B2E905D67B2A02B0 Authority key identifier: 8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/ggsIrEG_pjBN7NymXoDR3lMKSmc.roa Signing time: Fri 02 Jan 2026 12:18:03 +0000 ROA not before: Fri 02 Jan 2026 12:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197013 IP address blocks: 85.93.160.0/19 maxlen: 19 178.22.112.0/21 maxlen: 24 185.57.228.0/23 maxlen: 23 185.63.24.0/22 maxlen: 22 185.184.252.0/23 maxlen: 24 2a02:5480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ba:3b:83:8e:dd:27:b2:e9:05:d6:7b:2a:02:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4 Validity Not Before: Jan 2 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=820b08ac41bfa6304decdca65e80d1de530a4a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:51:01:37:2d:8a:db:1c:d4:c4:0a:66:a2: 73:f8:44:e0:6a:70:2c:ce:22:02:34:29:00:07:e6: c7:31:2e:17:fe:9d:41:be:69:9b:2e:fc:9c:59:c3: 0b:a9:ae:dd:ab:e5:9b:43:1d:dd:40:01:42:3d:3f: 02:85:d1:ab:03:cc:2f:80:51:10:77:5e:54:2b:9e: fc:5e:bf:81:0a:d7:97:48:85:c6:11:fb:b8:bb:ff: 9f:9a:9c:d0:c4:2f:8e:a9:e3:13:87:f8:4c:b3:63: d8:c6:a4:14:1e:af:5e:4e:3f:33:d1:ca:a4:58:d8: f4:41:73:13:6b:d9:f4:bb:7f:38:89:f7:b8:6c:ce: 3a:65:f6:ed:82:08:cb:62:75:4b:b8:ad:5e:f5:e2: b6:d3:57:76:3e:fb:b8:9e:89:22:09:b2:0b:53:e3: be:29:2b:41:43:0e:0a:2a:3e:e4:7a:f5:15:56:ff: de:9b:65:4c:c9:74:65:fa:64:54:5d:58:41:11:0a: 46:30:58:c7:8c:ea:d7:34:0a:37:8d:4c:52:86:66: 71:eb:0e:4d:fe:04:ad:e7:dd:d6:5b:4e:61:38:a1: 70:13:97:9a:90:cb:e5:a5:ec:d8:7e:4d:30:a5:14: fb:56:ee:e9:23:09:7f:0d:85:23:99:3d:8c:3b:48: a8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0B:08:AC:41:BF:A6:30:4D:EC:DC:A6:5E:80:D1:DE:53:0A:4A:67 X509v3 Authority Key Identifier: keyid:8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/ggsIrEG_pjBN7NymXoDR3lMKSmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.93.160.0/19 178.22.112.0/21 185.57.228.0/23 185.63.24.0/22 185.184.252.0/23 IPv6: 2a02:5480::/32 Signature Algorithm: sha256WithRSAEncryption 7e:11:df:ee:68:46:3e:d6:18:46:5c:08:0d:8a:a6:a6:73:b6: b5:33:d1:0b:4f:8a:aa:4c:19:90:d4:c7:65:87:2d:0c:d2:04: 58:a2:6b:0e:b4:d5:20:21:65:c0:79:3b:fa:b5:b8:a0:e8:85: f8:97:1b:36:6f:d5:c5:a7:8a:8d:ab:53:5c:c0:7b:4e:66:db: 53:21:40:e0:a8:0f:23:6f:e2:30:d1:89:3f:9f:77:49:5b:6b: ca:28:11:e6:b3:3c:36:fe:93:c9:ca:17:fe:62:d5:d0:a8:f2: d3:92:c9:fc:cd:f7:d8:be:b3:3a:2c:45:48:ae:8b:49:e7:80: e7:19:41:b5:57:ee:f8:18:71:51:d7:f0:c9:d3:e0:cc:c9:0b: 91:d5:00:d0:a9:2b:c9:73:11:e4:78:c8:83:16:80:b5:ad:b0: 10:a8:8e:75:f5:24:63:22:ff:25:de:41:e6:be:99:f3:74:25: 63:32:ff:e1:3a:97:39:65:f4:89:1b:b5:70:69:3c:93:42:7f: a9:bd:9b:dc:a1:c8:44:6c:b0:e4:8a:02:f1:99:21:f3:9d:49: 96:5f:ed:50:74:ab:bb:d5:1b:0a:a2:1e:9a:67:4f:a0:48:e9: 18:97:a7:65:ae:da:b2:26:69:f4:33:ef:6c:d9:8f:5d:06:1d: 45:2a:93:9a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+pLo7g47dJ7LpBdZ7KgKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOGY3NzQ3YjdhYTA2YTc1NDI1MTY2MjBlZGUzOTlkMDFl NWM3ZTQwHhcNMjYwMTAyMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjBiMDhhYzQxYmZhNjMwNGRlY2RjYTY1ZTgwZDFkZTUzMGE0YTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ1RATctitsc1MQKZqJz+ETganAs ziICNCkAB+bHMS4X/p1BvmmbLvycWcMLqa7dq+WbQx3dQAFCPT8ChdGrA8wvgFEQ d15UK578Xr+BCteXSIXGEfu4u/+fmpzQxC+OqeMTh/hMs2PYxqQUHq9eTj8z0cqk WNj0QXMTa9n0u384ife4bM46ZfbtggjLYnVLuK1e9eK201d2Pvu4nokiCbILU+O+ KStBQw4KKj7kevUVVv/em2VMyXRl+mRUXVhBEQpGMFjHjOrXNAo3jUxShmZx6w5N /gSt593WW05hOKFwE5eakMvlpezYfk0wpRT7Vu7pIwl/DYUjmT2MO0ioTQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIILCKxBv6YwTezcpl6A0d5TCkpnMB8GA1UdIwQY MBaAFI+Pd0e3qganVCUWYg7eOZ0B5cfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83YmViOWUtMDE0MS00ODI1LTlhMTgt Y2JlNDc1ZDMyYzYzLzEvZ2dzSXJFR19wakJON055bVhvRFIzbE1LU21jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83YmViOWUtMDE0MS00ODI1LTlhMTgtY2JlNDc1ZDMyYzYz LzEvajQ5M1I3ZXFCcWRVSlJaaUR0NDVuUUhseC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFVV2gAwQD shZwAwQBuTnkAwQCuT8YAwQBubj8MA0EAgACMAcDBQAqAlSAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Ed/uaEY+1hhGXAgNiqamc7a1M9ELT4qqTBmQ1Mdlhy0M0gRYomsO tNUgIWXAeTv6tbig6IX4lxs2b9XFp4qNq1NcwHtOZttTIUDgqA8jb+Iw0Yk/n3dJ W2vKKBHmszw2/pPJyhf+YtXQqPLTksn8zffYvrM6LEVIrotJ54DnGUG1V+74GHFR 1/DJ0+DMyQuR1QDQqSvJcxHkeMiDFoC1rbAQqI519SRjIv8l3kHmvpnzdCVjMv/h Opc5ZfSJG7VwaTyTQn+pvZvcochEbLDkigLxmSHznUmWX+1QdKu71RsKoh6aZ0+g SOkYl6dlrtqyJmn0M+9s2Y9dBh1FKpOa -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:22 2026 by rpki-client