This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/GO5gsgSjP6atrmJc6eN-oLN1XJE.roa File: GO5gsgSjP6atrmJc6eN-oLN1XJE.roa (raw, json) Hash identifier: T+zIy0ejXj3SXGWGil9zAIh7/YFmPINe0YtkNe4/+uU= Subject key identifier: 18:EE:60:B2:04:A3:3F:A6:AD:AE:62:5C:E9:E3:7E:A0:B3:75:5C:91 Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2 Certificate serial: 019B79ECE7B5D01725939795BE40A1D9F884 Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/GO5gsgSjP6atrmJc6eN-oLN1XJE.roa Signing time: Thu 01 Jan 2026 14:18:47 +0000 ROA not before: Thu 01 Jan 2026 14:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212378 IP address blocks: 193.169.143.0/24 maxlen: 24 2001:678:9e4::/48 maxlen: 48 2001:678:ec0::/48 maxlen: 48 2001:678:ec4::/48 maxlen: 48 2001:67c:11f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e7:b5:d0:17:25:93:97:95:be:40:a1:d9:f8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18ee60b204a33fa6adae625ce9e37ea0b3755c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:72:e3:85:ad:37:0f:0f:b2:cf:6a:96:61: ff:78:d1:9d:77:8b:4e:7a:fe:80:ff:4c:6b:e6:12: 1a:ff:4e:53:97:4b:b3:8e:e3:50:82:69:53:58:7e: 02:5d:4c:d3:d9:6f:50:d5:c7:a7:10:dd:e3:2a:4a: 8a:37:47:2b:88:b5:df:54:e4:7d:7d:16:86:28:22: 31:09:d5:4d:c4:70:a8:d2:47:bf:1e:a8:a1:a7:62: dc:0f:49:8d:53:1a:a6:26:69:39:d4:59:5e:63:cc: f9:15:4c:39:5e:e9:6c:3d:e2:05:cc:6e:1b:7c:db: fc:b1:12:5f:31:bd:a7:63:ce:68:cd:ca:41:0c:3f: 9a:97:7a:61:3c:48:81:00:8d:a3:ca:60:16:78:a9: be:92:07:17:a8:7c:73:57:f1:21:8c:c1:85:be:07: f3:ee:12:9e:81:f4:b5:32:e9:fd:bc:31:c1:25:ca: 1a:78:71:6c:ab:1a:9d:6e:b5:00:83:46:91:3d:12: 60:92:6a:32:31:aa:90:50:4d:af:26:bb:ea:ef:17: 9e:f6:7c:2e:38:35:7b:a4:ae:ce:d3:44:19:cd:d7: 35:cd:66:bb:ec:ff:55:a9:a1:a8:e8:4b:eb:91:ef: 65:45:2f:35:2b:be:55:2e:d0:4e:15:0a:bc:54:a9: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EE:60:B2:04:A3:3F:A6:AD:AE:62:5C:E9:E3:7E:A0:B3:75:5C:91 X509v3 Authority Key Identifier: keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/GO5gsgSjP6atrmJc6eN-oLN1XJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.143.0/24 IPv6: 2001:678:9e4::/48 2001:678:ec0::/48 2001:678:ec4::/48 2001:67c:11f0::/48 Signature Algorithm: sha256WithRSAEncryption 12:c3:97:66:01:26:94:da:12:ab:81:a3:a1:d5:64:5f:3e:e8: ab:67:df:c2:1d:bd:1f:1b:f3:44:f9:ee:f3:29:6d:04:d4:0d: 29:a2:d2:53:f5:1c:35:22:b3:9c:d6:7f:21:cb:20:41:85:f2: 59:ac:86:3e:02:58:a2:41:4d:95:8b:63:4b:75:eb:bd:d9:29: 77:24:a1:7f:6a:c6:23:5f:68:2e:16:b0:f2:a2:0d:fa:a7:29: 4f:f3:20:dc:6d:42:10:56:f2:70:20:7a:a0:94:c6:5e:02:27: fd:ac:e8:e1:51:12:b4:51:7e:4b:56:11:69:28:0f:60:ea:64: e8:f7:fc:f7:20:37:32:f3:63:8f:5f:62:c9:b0:f0:89:33:e2: 44:de:69:7e:af:1f:10:96:69:11:f0:9d:8b:b3:ce:d6:e8:7b: 92:3a:74:ce:e7:a8:e9:15:3a:b5:85:a1:36:70:43:23:41:af: 1b:ac:a7:8e:62:fc:03:54:b2:59:cc:a6:a3:11:51:28:16:4c: 56:9f:4c:3a:17:21:bd:ce:cc:d4:ca:3b:38:70:74:be:c1:6d: 2d:2f:1f:6c:46:65:86:b3:a3:b1:03:fb:e9:13:e1:13:b3:d8: be:98:53:06:99:af:ff:90:6e:70:be:af:62:d2:bc:93:d6:94: 2c:7d:c1:1a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt57Oe10Bclk5eVvkCh2fiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh OGIzZDIwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGVlNjBiMjA0YTMzZmE2YWRhZTYyNWNlOWUzN2VhMGIzNzU1YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI1y44WtNw8Pss9qlmH/eNGdd4tO ev6A/0xr5hIa/05Tl0uzjuNQgmlTWH4CXUzT2W9Q1cenEN3jKkqKN0criLXfVOR9 fRaGKCIxCdVNxHCo0ke/Hqihp2LcD0mNUxqmJmk51FleY8z5FUw5XulsPeIFzG4b fNv8sRJfMb2nY85ozcpBDD+al3phPEiBAI2jymAWeKm+kgcXqHxzV/EhjMGFvgfz 7hKegfS1Mun9vDHBJcoaeHFsqxqdbrUAg0aRPRJgkmoyMaqQUE2vJrvq7xee9nwu ODV7pK7O00QZzdc1zWa77P9VqaGo6Evrke9lRS81K75VLtBOFQq8VKmLkQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFBjuYLIEoz+mra5iXOnjfqCzdVyRMB8GA1UdIwQY MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt MjA1MjBlNmI2MTdhLzEvR081Z3NnU2pQNmF0cm1KYzZlTi1vTE4xWEpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAwamPMCoE AgACMCQDBwAgAQZ4CeQDBwAgAQZ4DsADBwAgAQZ4DsQDBwAgAQZ8EfAwDQYJKoZI hvcNAQELBQADggEBABLDl2YBJpTaEquBo6HVZF8+6Ktn38IdvR8b80T57vMpbQTU DSmi0lP1HDUis5zWfyHLIEGF8lmshj4CWKJBTZWLY0t1673ZKXckoX9qxiNfaC4W sPKiDfqnKU/zINxtQhBW8nAgeqCUxl4CJ/2s6OFRErRRfktWEWkoD2DqZOj3/Pcg NzLzY49fYsmw8Ikz4kTeaX6vHxCWaRHwnYuzztboe5I6dM7nqOkVOrWFoTZwQyNB rxusp45i/ANUslnMpqMRUSgWTFafTDoXIb3OzNTKOzhwdL7BbS0vH2xGZYazo7ED ++kT4ROz2L6YUwaZr/+QbnC+r2LSvJPWlCx9wRo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:22 2026 by rpki-client