This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/GS6BipD7_5hxSt-mcUK4xhC7nfs.roa File: GS6BipD7_5hxSt-mcUK4xhC7nfs.roa (raw, json) Hash identifier: Y3m/+3LhYTq0/m4Jg5RxI1jwLpyN0uS9/rt7VXKQ5Uw= Subject key identifier: 19:2E:81:8A:90:FB:FF:98:71:4A:DF:A6:71:42:B8:C6:10:BB:9D:FB Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2 Certificate serial: 019B7D5C01ABFDF0F7FADE44B69B3EB4D520 Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/GS6BipD7_5hxSt-mcUK4xhC7nfs.roa Signing time: Fri 02 Jan 2026 06:19:00 +0000 ROA not before: Fri 02 Jan 2026 06:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39172 IP address blocks: 185.53.60.0/24 maxlen: 24 185.53.61.0/24 maxlen: 24 185.53.62.0/24 maxlen: 24 185.53.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:01:ab:fd:f0:f7:fa:de:44:b6:9b:3e:b4:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2 Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=192e818a90fbff98714adfa67142b8c610bb9dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f0:0c:ad:a8:56:54:53:ba:00:69:5b:60:e1: 68:59:6d:b9:6a:2d:fb:a3:77:4f:f9:06:fa:4d:dd: 09:79:5b:94:86:d1:b9:39:d6:4e:7e:d6:08:b9:f3: 97:2c:a3:5d:f2:19:57:da:6d:46:59:97:8b:8f:de: 14:0d:57:ec:74:c6:ca:6b:d3:6e:bb:9b:c7:ad:e7: cd:d8:e5:65:f4:fe:ce:f3:9f:a4:92:bc:21:23:8a: 15:79:49:37:d9:7e:e7:a5:43:c0:08:88:fe:47:c1: be:e4:09:2a:9f:9f:aa:b9:0d:e2:c0:bb:06:2b:ae: fa:4e:1b:0a:ba:ab:2b:9e:ee:a6:14:cf:e3:bd:d9: 0e:6e:64:aa:1f:d9:8c:ca:3c:4f:07:34:4c:b1:37: f6:1c:92:2c:87:c5:b0:04:ea:93:0f:9b:1b:d4:36: b4:1b:62:73:92:12:9e:78:4b:14:45:38:8f:68:e3: b2:11:20:cb:7f:08:c1:52:69:52:8b:84:0c:6d:0b: d1:a9:ac:eb:a9:2d:f4:b9:9e:30:ff:69:28:9a:ad: da:56:b7:71:85:b6:24:16:17:b8:99:42:42:0f:0a: b7:88:23:00:f0:49:87:dd:1f:ed:97:e7:10:97:ba: c1:ab:0c:7b:05:48:99:c2:55:72:b7:3a:ca:58:50: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:81:8A:90:FB:FF:98:71:4A:DF:A6:71:42:B8:C6:10:BB:9D:FB X509v3 Authority Key Identifier: keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/GS6BipD7_5hxSt-mcUK4xhC7nfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.60.0/22 Signature Algorithm: sha256WithRSAEncryption bd:80:86:b4:20:71:cb:8e:d4:54:36:be:0f:c7:67:b0:f6:44: 6b:57:31:94:24:9d:22:dd:a4:27:1b:f6:22:85:bc:4c:86:78: ed:c7:d1:fa:8d:60:a7:f9:fd:26:82:bf:59:a0:ba:68:94:26: 1a:4c:cf:56:9c:d2:43:3d:c6:3d:ae:f7:be:17:bf:9d:99:2c: d3:a6:a6:65:51:bc:54:76:35:6e:bc:3d:50:e2:d7:c3:58:1f: b1:d3:3c:8f:41:cd:4c:c9:ea:a6:d8:01:55:68:17:03:0b:47: 13:d3:f4:63:b1:cd:41:30:40:c3:a1:3f:2c:9d:e1:8f:f3:fe: c1:73:cb:f8:8d:0a:0e:37:b6:6b:cc:b9:c1:2a:d5:41:31:f2: 07:85:b4:3f:7a:46:48:ba:f9:a1:b3:0d:67:80:d4:59:48:2b: 03:ae:2c:56:0b:bd:ca:36:9d:87:46:43:90:d3:55:1b:1f:da: 21:0e:e0:8d:e2:6e:7c:0b:f6:5b:d5:21:3a:d5:b4:10:9d:56: 55:89:27:29:e1:0a:dd:03:2d:55:4e:51:ae:61:86:c2:39:7f: 9f:cb:12:3f:c5:4a:9b:5c:ac:a8:32:2f:20:af:65:60:65:a3: b3:b5:81:69:04:d1:9c:86:58:e5:41:24:c9:de:c9:f8:f3:1b: 61:c4:d4:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAGr/fD3+t5Etps+tNUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMWFiNWY4OGIxY2Q3NzI4ZjE3N2NjODZlMzNiY2ViOWUy MjE0YjIwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTJlODE4YTkwZmJmZjk4NzE0YWRmYTY3MTQyYjhjNjEwYmI5ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PAMrahWVFO6AGlbYOFoWW25ai37 o3dP+Qb6Td0JeVuUhtG5OdZOftYIufOXLKNd8hlX2m1GWZeLj94UDVfsdMbKa9Nu u5vHrefN2OVl9P7O85+kkrwhI4oVeUk32X7npUPACIj+R8G+5Akqn5+quQ3iwLsG K676ThsKuqsrnu6mFM/jvdkObmSqH9mMyjxPBzRMsTf2HJIsh8WwBOqTD5sb1Da0 G2JzkhKeeEsURTiPaOOyESDLfwjBUmlSi4QMbQvRqazrqS30uZ4w/2komq3aVrdx hbYkFhe4mUJCDwq3iCMA8EmH3R/tl+cQl7rBqwx7BUiZwlVytzrKWFAk7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBkugYqQ+/+YcUrfpnFCuMYQu537MB8GA1UdIwQY MBaAFD4atfiLHNdyjxd8yG4zvOueIhSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWIt ZmQ5OGZkNzBmMzRmLzEvR1M2QmlwRDdfNWh4U3QtbWNVSzR4aEM3bmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWItZmQ5OGZkNzBmMzRm LzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTU8MA0G CSqGSIb3DQEBCwUAA4IBAQC9gIa0IHHLjtRUNr4Px2ew9kRrVzGUJJ0i3aQnG/Yi hbxMhnjtx9H6jWCn+f0mgr9ZoLpolCYaTM9WnNJDPcY9rve+F7+dmSzTpqZlUbxU djVuvD1Q4tfDWB+x0zyPQc1Myeqm2AFVaBcDC0cT0/Rjsc1BMEDDoT8sneGP8/7B c8v4jQoON7ZrzLnBKtVBMfIHhbQ/ekZIuvmhsw1ngNRZSCsDrixWC73KNp2HRkOQ 01UbH9ohDuCN4m58C/Zb1SE61bQQnVZViScp4QrdAy1VTlGuYYbCOX+fyxI/xUqb XKyoMi8gr2VgZaOztYFpBNGchljlQSTJ3sn48xthxNRn -----END CERTIFICATE-----Generated at Wed Jan 21 19:34:20 2026 by rpki-client