This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa File: gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa (raw, json) Hash identifier: JnttzcUryU3xosibqHjelq7W7OqvhTZhKK40TmRyAXo= Subject key identifier: 82:4B:DC:A9:16:A6:FC:FE:4A:B5:21:4A:62:BB:7F:4E:A7:6A:D4:FA Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd Certificate serial: 019B7D5C19F7EC9FBA2E9D320C2B3D7A1F8A Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa Signing time: Fri 02 Jan 2026 06:19:06 +0000 ROA not before: Fri 02 Jan 2026 06:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215771 IP address blocks: 185.214.236.0/24 maxlen: 24 185.214.239.0/24 maxlen: 24 2a0b:af40:1::/48 maxlen: 48 2a0b:af40:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:19:f7:ec:9f:ba:2e:9d:32:0c:2b:3d:7a:1f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd Validity Not Before: Jan 2 06:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=824bdca916a6fcfe4ab5214a62bb7f4ea76ad4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:c6:fb:f7:b3:6d:cc:e4:fc:13:b3:09:48: 87:95:b0:73:4c:a8:85:02:88:18:0a:ac:37:9f:ff: 6b:cf:13:f5:29:a5:92:e0:79:23:93:eb:2f:b5:9c: e0:ed:3f:89:d8:40:7e:29:e5:33:bf:b0:a8:b8:66: 5c:ce:bb:52:f8:11:4b:ae:b9:ba:a9:76:ca:19:33: 58:57:87:39:f4:fd:b3:46:fa:df:55:82:3c:45:11: 08:66:82:0e:0c:02:35:a1:1e:40:4c:43:92:57:d5: 30:ec:fc:cb:68:2d:79:e6:b2:a1:fa:4c:2b:e8:28: a4:11:7e:22:62:ac:57:43:49:f3:34:92:aa:cf:bc: a7:3a:4e:d2:24:1b:d4:54:cf:b8:35:26:af:e8:16: e0:18:e4:cf:c2:3d:0f:99:db:72:0b:46:bd:5d:fe: c7:c9:63:99:a6:28:44:7f:5f:3c:c7:7c:fe:99:69: fe:dd:d2:b1:95:57:3d:47:c6:40:2a:0e:85:be:53: 3f:1e:e3:39:9b:8b:10:40:0c:c7:a6:e6:91:27:d3: 2b:cc:d7:99:56:10:c2:a7:e7:9e:62:f7:f8:c8:d9: ca:51:03:10:59:bd:90:9d:0e:45:d1:84:50:29:70: e4:59:2f:7e:f4:bc:3f:21:18:80:a9:20:8d:a1:ce: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4B:DC:A9:16:A6:FC:FE:4A:B5:21:4A:62:BB:7F:4E:A7:6A:D4:FA X509v3 Authority Key Identifier: keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.236.0/24 185.214.239.0/24 IPv6: 2a0b:af40:1::/48 2a0b:af40:2000::/36 Signature Algorithm: sha256WithRSAEncryption 99:07:29:60:c3:40:09:45:6a:e3:c6:d8:d7:32:0a:ce:d1:88: 21:fc:a4:38:f7:38:71:02:01:93:e1:c0:e8:41:74:b0:2c:c4: 8e:54:ef:8b:d7:fc:51:74:b7:81:22:f6:3c:a0:fc:0e:5e:f4: 71:92:77:55:87:b9:8d:cf:60:01:ef:ea:ef:f5:74:75:ee:c7: 4e:90:2b:3f:41:3d:1e:dd:a2:eb:5f:d5:e7:ad:0f:4f:5a:45: 87:aa:5f:d7:cc:43:ff:b6:2c:5b:30:48:3f:37:89:78:db:0d: 7d:f8:89:8d:53:ff:0f:a0:dc:6b:ae:c9:11:c6:2d:5b:55:09: 50:4b:7d:f8:25:4d:be:21:f3:0c:9b:9b:1e:0a:be:ef:8b:af: f5:a8:86:12:e5:c5:1c:97:1e:c4:af:b1:6e:d7:c7:c4:b0:83: 75:2d:a0:0f:27:91:2b:9d:b9:22:d2:ca:dd:70:36:c7:e0:ee: 88:cd:63:3c:c0:e4:79:41:3c:62:45:98:5b:e7:c0:28:c5:d6: 5b:b8:f9:d3:6e:67:94:11:e4:93:1b:64:09:5b:20:ed:cc:4e: b3:b1:9d:1a:9d:7f:90:b9:4c:d5:29:47:9b:79:bf:d6:e8:4f: 9d:f2:a9:32:20:3e:0a:d5:44:75:f3:91:1c:fd:5a:e4:39:02: fe:c7:5a:40 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt9XBn37J+6Lp0yDCs9eh+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGM1NzNjMmQ4M2M3ZDhmZDJhM2NmOWE3ZjUzNmY5Mjky NWEzYmQwHhcNMjYwMTAyMDYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjRiZGNhOTE2YTZmY2ZlNGFiNTIxNGE2MmJiN2Y0ZWE3NmFkNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YrG+/ezbczk/BOzCUiHlbBzTKiF AogYCqw3n/9rzxP1KaWS4Hkjk+svtZzg7T+J2EB+KeUzv7CouGZczrtS+BFLrrm6 qXbKGTNYV4c59P2zRvrfVYI8RREIZoIODAI1oR5ATEOSV9Uw7PzLaC155rKh+kwr 6CikEX4iYqxXQ0nzNJKqz7ynOk7SJBvUVM+4NSav6BbgGOTPwj0PmdtyC0a9Xf7H yWOZpihEf188x3z+mWn+3dKxlVc9R8ZAKg6FvlM/HuM5m4sQQAzHpuaRJ9MrzNeZ VhDCp+eeYvf4yNnKUQMQWb2QnQ5F0YRQKXDkWS9+9Lw/IRiAqSCNoc7ylQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFIJL3KkWpvz+SrUhSmK7f06natT6MB8GA1UdIwQY MBaAFJCMVzwtg8fY/So8+af1NvkpJaO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEt NGU4NWJmZDdkMDU4LzEvZ2t2Y3FSYW1fUDVLdFNGS1lydF9UcWRxMVBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEtNGU4NWJmZDdkMDU4 LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQAudbsAwQA udbvMBcEAgACMBEDBwAqC69AAAEDBgQqC69AIDANBgkqhkiG9w0BAQsFAAOCAQEA mQcpYMNACUVq48bY1zIKztGIIfykOPc4cQIBk+HA6EF0sCzEjlTvi9f8UXS3gSL2 PKD8Dl70cZJ3VYe5jc9gAe/q7/V0de7HTpArP0E9Ht2i61/V560PT1pFh6pf18xD /7YsWzBIPzeJeNsNffiJjVP/D6Dca67JEcYtW1UJUEt9+CVNviHzDJubHgq+74uv 9aiGEuXFHJcexK+xbtfHxLCDdS2gDyeRK525ItLK3XA2x+DuiM1jPMDkeUE8YkWY W+fAKMXWW7j5025nlBHkkxtkCVsg7cxOs7GdGp1/kLlM1SlHm3m/1uhPnfKpMiA+ CtVEdfORHP1a5DkC/sdaQA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:24 2026 by rpki-client