This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/Gez5PpAamR2Dld4nToIpywC4n04.roa File: Gez5PpAamR2Dld4nToIpywC4n04.roa (raw, json) Hash identifier: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo= Subject key identifier: 19:EC:F9:3E:90:1A:99:1D:83:95:DE:27:4E:82:29:CB:00:B8:9F:4E Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0 Certificate serial: 019B7E38E63398B5CB698805760DF125088E Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/Gez5PpAamR2Dld4nToIpywC4n04.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58316 IP address blocks: 185.17.104.0/23 maxlen: 23 185.198.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e6:33:98:b5:cb:69:88:05:76:0d:f1:25:08:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19ecf93e901a991d8395de274e8229cb00b89f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:e6:0e:77:61:f2:b2:62:f9:04:cf:14:07: 16:38:7a:a7:be:b8:a3:69:77:4f:6d:19:4d:d0:b8: 6b:8d:ed:e7:dd:1a:de:19:38:25:91:8f:bf:d4:1c: 8c:2b:f9:e8:9d:7b:9d:bd:fe:36:f4:2e:8d:88:d2: 8b:2c:f6:bd:87:b8:73:1d:1c:cb:7d:a9:5b:62:5c: 9e:8a:20:f2:5d:4f:e1:ea:6c:5f:83:5d:26:ae:29: c7:05:13:23:8d:79:73:53:29:d6:ab:e2:ef:0b:bd: 4a:2e:f4:d6:29:97:5e:56:84:a3:7f:e3:be:ed:86: 88:1d:a7:44:b6:6a:3e:92:5e:dc:83:17:93:39:c2: f2:39:ae:a2:9e:ba:74:f4:90:6a:cc:d1:da:80:13: f5:42:80:c2:14:fe:cf:7d:4a:3b:7e:bd:9e:0c:22: 05:d8:8a:3f:05:53:13:28:a1:bb:cd:ff:f2:b7:77: ef:fd:61:ba:4d:dd:b2:14:30:42:31:2e:a2:bc:90: c4:1d:00:8d:ce:9c:aa:e8:9d:06:0a:74:ed:de:df: 4d:d3:32:41:ff:eb:3f:4a:80:f4:5a:b3:34:41:fe: 0e:50:0a:27:6d:c7:f1:36:73:6a:50:e0:d5:6f:f4: 40:f1:08:88:40:3b:dc:21:f6:13:8c:1f:c1:98:61: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:F9:3E:90:1A:99:1D:83:95:DE:27:4E:82:29:CB:00:B8:9F:4E X509v3 Authority Key Identifier: keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/Gez5PpAamR2Dld4nToIpywC4n04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.104.0/23 185.198.120.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:a5:dc:5c:f4:d5:37:5a:d2:dd:d4:d7:e1:cd:66:be:f1:3b: 1d:f0:20:e8:71:01:59:32:96:8a:2a:5f:72:d0:5e:d6:50:53: 6e:58:f4:1a:e6:af:99:c2:25:50:b5:8b:01:9b:94:98:7e:49: 8f:3e:7a:3c:c7:77:12:0d:c6:d3:df:8b:84:84:ec:5f:01:37: 76:2f:33:50:9a:56:5d:72:4b:38:90:75:46:ac:30:75:9e:34: a6:f5:bb:73:9e:35:42:8b:1e:a7:bf:92:41:31:cf:6d:3f:2c: 9b:c7:2e:f4:69:2c:02:4c:68:11:40:69:ec:3f:b9:2d:02:a3: f3:50:b9:4c:9a:24:ed:fd:97:cd:b2:bd:30:eb:ff:7b:0b:9d: 52:87:ea:dd:78:fa:9d:21:e5:ba:64:5b:62:d4:e3:13:2c:ce: fa:3e:8b:95:32:fe:1c:16:fd:7f:64:ef:8e:cf:0e:b5:fd:59: 05:61:af:34:c8:b6:04:0a:c0:d4:1d:01:8e:3c:c1:4a:4b:f9: c4:cb:00:6b:9e:d5:07:14:66:c3:38:b0:76:29:0c:14:6e:0e: f0:f4:f4:31:d7:8d:05:a6:3c:72:5b:57:64:ae:c7:85:1b:ae: 62:67:23:71:ee:f0:35:13:70:dd:79:ca:fb:d6:4d:48:21:5b: 01:c1:dd:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OOYzmLXLaYgFdg3xJQiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTI3NDJiOTFkNzcwZmU4ZWZiYzliNWRjZjhkYzM4OTg0 ZGQwZjAwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWVjZjkzZTkwMWE5OTFkODM5NWRlMjc0ZTgyMjljYjAwYjg5ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GTmDndh8rJi+QTPFAcWOHqnvrij aXdPbRlN0Lhrje3n3RreGTglkY+/1ByMK/nonXudvf429C6NiNKLLPa9h7hzHRzL falbYlyeiiDyXU/h6mxfg10mrinHBRMjjXlzUynWq+LvC71KLvTWKZdeVoSjf+O+ 7YaIHadEtmo+kl7cgxeTOcLyOa6inrp09JBqzNHagBP1QoDCFP7PfUo7fr2eDCIF 2Io/BVMTKKG7zf/yt3fv/WG6Td2yFDBCMS6ivJDEHQCNzpyq6J0GCnTt3t9N0zJB /+s/SoD0WrM0Qf4OUAonbcfxNnNqUODVb/RA8QiIQDvcIfYTjB/BmGFU5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBns+T6QGpkdg5XeJ06CKcsAuJ9OMB8GA1UdIwQY MBaAFNYSdCuR13D+jvvJtdz43DiYTdDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2Et OWQ1NmUzYWRjYTkwLzEvR2V6NVBwQWFtUjJEbGQ0blRvSXB5d0M0bjA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2EtOWQ1NmUzYWRjYTkw LzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuRFoAwQC ucZ4MA0GCSqGSIb3DQEBCwUAA4IBAQA8pdxc9NU3WtLd1NfhzWa+8Tsd8CDocQFZ MpaKKl9y0F7WUFNuWPQa5q+ZwiVQtYsBm5SYfkmPPno8x3cSDcbT34uEhOxfATd2 LzNQmlZdcks4kHVGrDB1njSm9btznjVCix6nv5JBMc9tPyybxy70aSwCTGgRQGns P7ktAqPzULlMmiTt/ZfNsr0w6/97C51Sh+rdePqdIeW6ZFti1OMTLM76PouVMv4c Fv1/ZO+Ozw61/VkFYa80yLYECsDUHQGOPMFKS/nEywBrntUHFGbDOLB2KQwUbg7w 9PQx140FpjxyW1dkrseFG65iZyNx7vA1E3Ddecr71k1IIVsBwd3p -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client