This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa File: GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa (raw, json) Hash identifier: bXptPxFQyb9Owh/hKmiA83+wjy1OBwsMr11rFf9sFDQ= Subject key identifier: 18:A9:60:18:94:84:5D:99:D3:BB:C2:D5:E7:2E:41:81:E6:3B:01:AC Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0 Certificate serial: 019B7CEE49D92339057127619AD9CBC64BCE Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa Signing time: Fri 02 Jan 2026 04:19:09 +0000 ROA not before: Fri 02 Jan 2026 04:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49103 IP address blocks: 185.57.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:49:d9:23:39:05:71:27:61:9a:d9:cb:c6:4b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0 Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18a9601894845d99d3bbc2d5e72e4181e63b01ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:26:68:14:45:81:eb:e0:34:b4:5f:d8:7d: fa:3f:4a:96:04:f5:e0:6a:0f:e7:44:68:01:bf:dd: 5d:27:cc:95:30:fa:9d:1f:2a:67:b9:f6:b1:0c:28: b5:95:52:ad:93:02:d5:06:b1:af:a5:3a:f8:dc:54: 86:65:d4:31:e6:9b:a2:b5:5d:2b:da:c0:4e:43:47: 82:00:90:1d:15:1e:98:66:90:03:ec:a4:f6:95:2e: de:81:3e:62:78:79:0c:ec:9f:43:a2:6c:78:3a:af: c1:4b:69:e6:bb:9f:bf:97:17:38:54:40:30:61:d8: da:4c:32:4c:af:73:88:b6:26:40:f0:96:ca:c8:ed: e4:fc:38:e3:fb:b5:89:aa:6d:b4:fa:c3:12:47:8e: f3:39:d1:e7:49:a0:2b:32:f0:fb:4f:9c:58:6e:aa: 96:96:04:05:b6:2e:cd:0c:fd:58:59:5a:32:a6:3c: 0b:13:70:d9:b4:fa:10:c5:91:54:29:e5:73:dc:a6: 2d:52:fe:30:1c:8b:6a:5a:f3:29:1a:75:0e:f5:18: b6:1e:5a:64:c2:3e:a0:8f:3c:7d:1f:a1:56:4f:53: 2b:1e:8a:59:b3:24:15:55:8a:39:75:fd:7b:57:67: d6:51:25:63:df:60:c7:c6:b7:80:e6:21:5c:8a:cd: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A9:60:18:94:84:5D:99:D3:BB:C2:D5:E7:2E:41:81:E6:3B:01:AC X509v3 Authority Key Identifier: keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.164.0/22 Signature Algorithm: sha256WithRSAEncryption 75:e3:d4:3a:cc:dc:40:1e:58:86:46:b8:e3:79:0e:73:bb:fa: d2:3d:a3:91:24:79:ef:8c:48:ee:fc:d7:47:29:ed:1f:b2:63: e4:c8:1a:be:e9:43:07:b7:c6:0e:86:f1:31:c4:7e:a2:86:d8: 05:40:a8:27:b2:16:0a:64:df:7a:63:07:f7:4c:7f:80:f5:93: e4:89:27:91:29:58:1d:1c:04:24:10:de:9d:2a:e5:cf:93:7a: 48:59:7b:c3:e6:3f:00:87:ac:04:97:10:5c:54:7e:89:de:f7: 10:6c:2d:3b:ac:54:08:e2:40:b7:0c:59:fa:ca:5a:56:d9:bf: bc:3b:72:b0:26:68:82:b3:9e:c1:2c:80:7b:2f:0f:9a:00:85: 8b:81:64:e8:09:1f:d5:06:37:1c:0f:06:d7:be:01:ce:cb:96: 1d:d9:fc:b0:37:93:37:d3:0a:70:36:5e:5e:1d:83:19:a5:95: c2:13:3f:71:95:85:2d:2a:39:42:10:7a:9a:18:a4:e0:39:85: 55:8d:4f:c3:0f:4e:d8:a4:6b:7a:4a:6d:b5:49:4d:60:9a:09: c6:c1:ea:e1:cd:90:39:3b:a6:05:30:4e:66:90:bc:1c:7c:37: 4f:79:a1:9d:f3:f3:9e:22:de:62:5a:9d:31:ef:f9:f1:09:81: 84:28:af:6b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87knZIzkFcSdhmtnLxkvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk MDM5YjAwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGE5NjAxODk0ODQ1ZDk5ZDNiYmMyZDVlNzJlNDE4MWU2M2IwMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU4maBRFgevgNLRf2H36P0qWBPXg ag/nRGgBv91dJ8yVMPqdHypnufaxDCi1lVKtkwLVBrGvpTr43FSGZdQx5puitV0r 2sBOQ0eCAJAdFR6YZpAD7KT2lS7egT5ieHkM7J9Domx4Oq/BS2nmu5+/lxc4VEAw YdjaTDJMr3OItiZA8JbKyO3k/Djj+7WJqm20+sMSR47zOdHnSaArMvD7T5xYbqqW lgQFti7NDP1YWVoypjwLE3DZtPoQxZFUKeVz3KYtUv4wHItqWvMpGnUO9Ri2Hlpk wj6gjzx9H6FWT1MrHopZsyQVVYo5df17V2fWUSVj32DHxreA5iFcis1nZQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBipYBiUhF2Z07vC1ecuQYHmOwGsMB8GA1UdIwQY MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy LTc0NDJmMGUyYmQxNy8xL0dLbGdHSlNFWFpuVHU4TFY1eTVCZ2VZN0Fhdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEyLTc0NDJmMGUyYmQx Ny8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5OaQw DQYJKoZIhvcNAQELBQADggEBAHXj1DrM3EAeWIZGuON5DnO7+tI9o5Ekee+MSO78 10cp7R+yY+TIGr7pQwe3xg6G8THEfqKG2AVAqCeyFgpk33pjB/dMf4D1k+SJJ5Ep WB0cBCQQ3p0q5c+TekhZe8PmPwCHrASXEFxUfone9xBsLTusVAjiQLcMWfrKWlbZ v7w7crAmaIKznsEsgHsvD5oAhYuBZOgJH9UGNxwPBte+Ac7Llh3Z/LA3kzfTCnA2 Xl4dgxmllcITP3GVhS0qOUIQepoYpOA5hVWNT8MPTtika3pKbbVJTWCaCcbB6uHN kDk7pgUwTmaQvBx8N095oZ3z854i3mJanTHv+fEJgYQor2s= -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:01 2026 by rpki-client