This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/gQCK6BeO-j5lVpUt90LH641D-Do.roa File: gQCK6BeO-j5lVpUt90LH641D-Do.roa (raw, json) Hash identifier: IdvQ6sUh6mIJW4ddDEmtmONm3UtG6O5w53GtVLTmX/w= Subject key identifier: 81:00:8A:E8:17:8E:FA:3E:65:56:95:2D:F7:42:C7:EB:8D:43:F8:3A Certificate issuer: /CN=0d41d0a6e6df2e18c256732368d6e76828931310 Certificate serial: 019B7AC950BACBC8594977BB932DF0AAD764 Authority key identifier: 0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/gQCK6BeO-j5lVpUt90LH641D-Do.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51546 IP address blocks: 88.218.20.0/22 maxlen: 22 88.218.23.0/24 maxlen: 24 185.127.228.0/22 maxlen: 22 185.176.96.0/22 maxlen: 22 185.181.44.0/22 maxlen: 22 2a03:9920::/32 maxlen: 32 2a09:9680::/29 maxlen: 29 2a0a:f80::/29 maxlen: 29 2a0a:c080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.mft rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:50:ba:cb:c8:59:49:77:bb:93:2d:f0:aa:d7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d41d0a6e6df2e18c256732368d6e76828931310 Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81008ae8178efa3e6556952df742c7eb8d43f83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:f9:9a:b8:28:2e:50:bf:1b:fc:e9:ad:ee: 09:7a:7f:3f:87:10:86:f8:ce:d9:9e:8b:3f:9f:ac: 58:5e:65:ba:02:07:31:04:44:dc:dd:cf:65:33:4e: 53:42:00:de:93:81:37:f8:c3:e3:f5:3c:69:a5:3a: 6d:11:4c:6a:e1:3d:1e:a5:ac:cf:29:eb:cf:f3:21: 86:6b:95:c7:9d:57:ae:04:63:7d:db:fc:b5:d4:10: ee:87:eb:9b:d2:13:b0:0e:37:2e:8b:37:b9:b3:66: 5b:a5:82:60:4d:f0:42:1e:bd:f8:f1:cf:31:bb:d1: 68:8c:49:a6:15:00:8e:44:2b:dc:4a:8d:c5:6b:16: 19:9f:56:67:d2:12:33:f0:ab:0b:ce:9a:db:e7:ad: bb:c9:f5:fd:e5:3c:ad:33:5f:e0:94:e0:fc:b4:a1: c4:ef:53:49:28:b2:7c:0e:40:1f:5b:f9:10:54:65: e4:a3:17:0e:f3:10:b8:86:b1:bc:48:4c:cf:dd:d8: 85:c7:cc:1c:a9:a3:c0:44:00:80:1b:74:9e:a7:55: b5:27:10:fa:e2:cc:92:64:13:22:bf:67:1e:81:c7: ef:00:f4:ba:03:0f:77:17:9d:83:ac:ce:52:e9:95: ac:48:bf:47:69:a1:09:72:f0:85:16:85:46:ee:b6: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:00:8A:E8:17:8E:FA:3E:65:56:95:2D:F7:42:C7:EB:8D:43:F8:3A X509v3 Authority Key Identifier: keyid:0D:41:D0:A6:E6:DF:2E:18:C2:56:73:23:68:D6:E7:68:28:93:13:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUHQpubfLhjCVnMjaNbnaCiTExA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/gQCK6BeO-j5lVpUt90LH641D-Do.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9837b2-0df0-4f5a-80db-62b640b02e2b/1/DUHQpubfLhjCVnMjaNbnaCiTExA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.20.0/22 185.127.228.0/22 185.176.96.0/22 185.181.44.0/22 IPv6: 2a03:9920::/32 2a09:9680::/29 2a0a:f80::/29 2a0a:c080::/29 Signature Algorithm: sha256WithRSAEncryption 72:4e:da:32:ea:d6:ce:1c:9b:dc:9b:bd:2d:d4:a5:d2:c7:6e: 15:7c:c4:11:b3:4a:47:18:83:18:f9:42:83:6a:94:5b:a1:9e: 80:72:57:69:f8:d3:0b:c6:e3:50:b8:ee:6b:53:ee:ac:54:87: 60:0b:98:c7:13:17:fb:aa:5e:6e:04:74:81:5d:9f:31:9e:1b: 63:63:52:8f:34:29:28:bb:8c:6f:11:a7:d0:9c:0b:10:4a:64: 9b:f9:26:f9:09:2b:ed:10:c9:47:63:4b:fa:5e:69:03:37:07: 25:01:24:58:3f:52:58:cb:f3:0b:9d:ae:9f:a4:d4:66:a6:d0: 16:d0:6f:89:67:ef:0b:41:cb:bb:52:25:40:32:7c:73:d3:7b: 3b:6a:a0:b9:4f:01:d9:b1:ee:9c:e0:6b:92:39:eb:f3:b6:d8: 7a:b7:84:af:56:1d:d8:66:64:dd:4f:40:35:49:33:74:7c:c1: 31:d8:4f:eb:06:58:0b:80:84:33:f8:cd:da:ba:a6:f8:83:e6: a2:96:22:cf:38:11:c8:49:bf:8b:a3:8f:16:92:41:c3:8b:b6: 10:67:c3:01:af:08:0a:e6:dd:10:fe:70:3f:b1:35:94:44:2e: 9b:ac:66:dc:f3:7b:34:a2:36:ad:ed:f7:6c:be:d9:4b:2f:d4: d3:ca:ba:8a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt6yVC6y8hZSXe7ky3wqtdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNDFkMGE2ZTZkZjJlMThjMjU2NzMyMzY4ZDZlNzY4Mjg5 MzEzMTAwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTAwOGFlODE3OGVmYTNlNjU1Njk1MmRmNzQyYzdlYjhkNDNmODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPX5mrgoLlC/G/zpre4Jen8/hxCG +M7Znos/n6xYXmW6AgcxBETc3c9lM05TQgDek4E3+MPj9TxppTptEUxq4T0epazP KevP8yGGa5XHnVeuBGN92/y11BDuh+ub0hOwDjcuize5s2ZbpYJgTfBCHr348c8x u9FojEmmFQCORCvcSo3FaxYZn1Zn0hIz8KsLzprb5627yfX95TytM1/glOD8tKHE 71NJKLJ8DkAfW/kQVGXkoxcO8xC4hrG8SEzP3diFx8wcqaPARACAG3Sep1W1JxD6 4sySZBMiv2cegcfvAPS6Aw93F52DrM5S6ZWsSL9HaaEJcvCFFoVG7rZ8rQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFIEAiugXjvo+ZVaVLfdCx+uNQ/g6MB8GA1UdIwQY MBaAFA1B0Kbm3y4YwlZzI2jW52gokxMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFVIUXB1YmZMaGpDVm5NamFOYm5hQ2lURXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ODM3YjItMGRmMC00ZjVhLTgwZGIt NjJiNjQwYjAyZTJiLzEvZ1FDSzZCZU8tajVsVnBVdDkwTEg2NDFELURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85ODM3YjItMGRmMC00ZjVhLTgwZGItNjJiNjQwYjAyZTJi LzEvRFVIUXB1YmZMaGpDVm5NamFOYm5hQ2lURXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAeBAIAATAYAwQCWNoUAwQC uX/kAwQCubBgAwQCubUsMCIEAgACMBwDBQAqA5kgAwUDKgmWgAMFAyoKD4ADBQMq CsCAMA0GCSqGSIb3DQEBCwUAA4IBAQByTtoy6tbOHJvcm70t1KXSx24VfMQRs0pH GIMY+UKDapRboZ6Acldp+NMLxuNQuO5rU+6sVIdgC5jHExf7ql5uBHSBXZ8xnhtj Y1KPNCkou4xvEafQnAsQSmSb+Sb5CSvtEMlHY0v6XmkDNwclASRYP1JYy/MLna6f pNRmptAW0G+JZ+8LQcu7UiVAMnxz03s7aqC5TwHZse6c4GuSOevztth6t4SvVh3Y ZmTdT0A1STN0fMEx2E/rBlgLgIQz+M3auqb4g+ailiLPOBHISb+Lo48WkkHDi7YQ Z8MBrwgK5t0Q/nA/sTWURC6brGbc83s0ojat7fdsvtlLL9TTyrqK -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:04 2026 by rpki-client