This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa File: gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa (raw, json) Hash identifier: Y4dcQaDXyPAK+Bl2p4bGnOEjKSjqyIaeaExs7HHzXGs= Subject key identifier: 80:A0:14:1F:73:61:05:E8:31:9C:9A:19:DB:A1:47:4D:FF:8E:BA:FE Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f Certificate serial: 019B79ED531F2DE87C6AA646D3DA98F66F3A Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215679 IP address blocks: 164.138.206.0/24 maxlen: 24 185.219.112.0/22 maxlen: 24 2a14:7780::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:53:1f:2d:e8:7c:6a:a6:46:d3:da:98:f6:6f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07077969a8b6a55c461adde106c006486a26359f Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80a0141f736105e8319c9a19dba1474dff8ebafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:2e:43:9e:7c:7c:4b:b9:85:34:e7:c6:c2: 85:d8:65:14:b3:fc:03:2b:08:3a:c1:7e:a9:bc:68: 25:3e:31:01:6c:c0:9d:43:b7:72:92:21:cf:f6:1e: 6c:b1:82:a1:68:0e:94:fe:f3:a2:39:c1:19:e9:b7: a6:41:3a:d9:30:a6:74:a1:f0:12:a4:44:b3:da:33: 41:f7:6e:8f:c9:c8:37:0e:a7:8c:b9:5d:64:24:12: 5d:f2:9b:10:e5:23:44:3a:75:5a:29:88:3a:34:c3: 25:71:c5:aa:da:e2:d8:80:eb:5b:61:55:c3:b4:64: fd:d2:2f:3d:c7:c9:54:c4:82:47:7e:50:c9:46:23: d0:20:8e:6c:f2:4d:e3:b0:23:ac:89:4a:1c:6a:6d: 69:de:c5:df:e8:cf:7b:50:27:75:2c:8a:7a:a2:2c: 8d:be:16:c0:61:66:d2:1b:07:2f:c0:db:3e:92:77: 5b:e6:d7:80:c0:70:e1:7e:27:5f:c0:26:68:86:27: 8d:aa:30:dc:9f:4f:3e:c6:73:87:80:d3:b7:b8:b0: 54:26:c1:96:4f:4c:a5:cb:17:97:e4:29:3d:66:43: 65:62:8d:7c:99:77:89:c6:a5:70:95:ff:4f:1e:1a: 30:19:ac:19:06:7f:33:ab:0e:79:ce:6d:31:38:c5: 6f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A0:14:1F:73:61:05:E8:31:9C:9A:19:DB:A1:47:4D:FF:8E:BA:FE X509v3 Authority Key Identifier: keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/gKAUH3NhBegxnJoZ26FHTf-Ouv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.206.0/24 185.219.112.0/22 IPv6: 2a14:7780::/29 Signature Algorithm: sha256WithRSAEncryption 62:8f:5c:e4:2e:28:f7:a8:6d:6f:8d:f9:3d:d6:0a:81:65:b8: e2:fd:c2:9f:ea:87:65:28:5f:d3:e6:d1:f9:a7:1c:fb:3f:22: 61:a5:03:c4:4a:08:73:b6:83:5e:b1:44:ef:38:13:a6:b0:e5: 10:0e:cd:97:3e:45:0c:37:f4:51:7c:15:cb:f3:cb:56:d5:a5: 01:49:4f:8f:7a:1a:13:ec:96:ef:5d:02:21:f9:d8:2d:90:7b: 5f:09:b4:5d:20:72:e5:19:45:62:85:b9:eb:3c:00:0b:93:31: c4:db:9b:75:2a:46:a2:ce:93:6f:19:29:86:46:df:95:ef:2e: 81:21:e2:61:05:82:d6:2f:d1:63:e8:e3:0a:9c:6c:e8:ca:98: 65:8d:cb:13:00:5c:48:e9:c5:88:a5:a5:e6:47:a7:d7:41:e5: a1:d2:12:e3:86:0c:af:ca:1e:de:97:61:f8:91:ba:d0:76:0f: 00:ac:74:eb:d8:9f:f6:76:77:ea:4b:e3:98:c0:6e:c6:3e:6b: 98:28:6c:3f:b9:8b:aa:03:de:52:48:2c:e6:75:cf:d6:ed:4e: df:4e:64:7a:9f:16:1e:25:1c:18:e7:c5:bf:47:dc:f6:f2:f6: f1:da:6c:a8:30:75:4b:07:7f:7b:dc:c5:ce:35:46:23:15:5e: 70:70:d8:54 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57VMfLeh8aqZG09qY9m86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDc3OTY5YThiNmE1NWM0NjFhZGRlMTA2YzAwNjQ4NmEy NjM1OWYwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGEwMTQxZjczNjEwNWU4MzE5YzlhMTlkYmExNDc0ZGZmOGViYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDsuQ558fEu5hTTnxsKF2GUUs/wD Kwg6wX6pvGglPjEBbMCdQ7dykiHP9h5ssYKhaA6U/vOiOcEZ6bemQTrZMKZ0ofAS pESz2jNB926Pycg3DqeMuV1kJBJd8psQ5SNEOnVaKYg6NMMlccWq2uLYgOtbYVXD tGT90i89x8lUxIJHflDJRiPQII5s8k3jsCOsiUocam1p3sXf6M97UCd1LIp6oiyN vhbAYWbSGwcvwNs+kndb5teAwHDhfidfwCZohieNqjDcn08+xnOHgNO3uLBUJsGW T0ylyxeX5Ck9ZkNlYo18mXeJxqVwlf9PHhowGawZBn8zqw55zm0xOMVvCwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFICgFB9zYQXoMZyaGduhR03/jrr+MB8GA1UdIwQY MBaAFAcHeWmotqVcRhrd4QbABkhqJjWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUt YzNmZWM0NWVkMDU2LzEvZ0tBVUgzTmhCZWd4bkpvWjI2RkhUZi1PdXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yMzIwNDctYjJlOC00ZmJhLWJkZDUtYzNmZWM0NWVkMDU2 LzEvQndkNWFhaTJwVnhHR3QzaEJzQUdTR29tTlo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQApIrOAwQC udtwMA0EAgACMAcDBQMqFHeAMA0GCSqGSIb3DQEBCwUAA4IBAQBij1zkLij3qG1v jfk91gqBZbji/cKf6odlKF/T5tH5pxz7PyJhpQPESghztoNesUTvOBOmsOUQDs2X PkUMN/RRfBXL88tW1aUBSU+PehoT7JbvXQIh+dgtkHtfCbRdIHLlGUVihbnrPAAL kzHE25t1KkaizpNvGSmGRt+V7y6BIeJhBYLWL9Fj6OMKnGzoyphljcsTAFxI6cWI paXmR6fXQeWh0hLjhgyvyh7el2H4kbrQdg8ArHTr2J/2dnfqS+OYwG7GPmuYKGw/ uYuqA95SSCzmdc/W7U7fTmR6nxYeJRwY58W/R9z28vbx2myoMHVLB3973MXONUYj FV5wcNhU -----END CERTIFICATE-----Generated at Tue Jan 27 07:09:59 2026 by rpki-client