This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/GfTuX0KwSdkfHKGDeWKZFDGssWg.roa File: GfTuX0KwSdkfHKGDeWKZFDGssWg.roa (raw, json) Hash identifier: EwufZny6b9Jopwvn2m9ePJKhZ4mgvDv4zGEryHxcyLs= Subject key identifier: 19:F4:EE:5F:42:B0:49:D9:1F:1C:A1:83:79:62:99:14:31:AC:B1:68 Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a Certificate serial: 019B7835148D0D191AA8E8F8377974B49506 Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/GfTuX0KwSdkfHKGDeWKZFDGssWg.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199993 IP address blocks: 185.39.208.0/24 maxlen: 24 185.39.209.0/24 maxlen: 24 185.39.210.0/24 maxlen: 24 2a04:6d80::/32 maxlen: 32 2a04:6d81::/32 maxlen: 32 2a04:6d82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:14:8d:0d:19:1a:a8:e8:f8:37:79:74:b4:95:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19f4ee5f42b049d91f1ca1837962991431acb168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:0b:71:66:de:c7:10:d2:60:dd:99:7c:e2: 7b:37:22:46:26:7d:64:38:2b:1f:bc:63:5f:90:ee: c6:76:8c:b6:d8:ea:e4:0e:2f:5b:54:ac:1a:61:62: 37:ae:20:27:02:26:3b:c8:7a:84:ab:e8:85:bd:7c: d8:8b:b6:87:27:eb:3d:24:29:48:03:75:07:4d:c2: 70:c6:2d:5e:ce:8a:bf:7d:ce:61:5f:d5:47:48:d7: 8f:25:12:36:de:26:5b:90:0c:a5:8d:d9:c6:42:bb: e1:f0:a3:83:e2:50:01:cd:0c:7c:f9:b3:b0:77:1f: 6b:3a:ee:12:1f:e6:df:4d:1d:50:f5:09:cb:3d:94: bf:4c:7b:3c:34:a9:66:7f:88:6a:6d:e1:f7:82:0a: ef:26:85:72:88:2d:4d:89:f7:b0:c4:70:0d:56:43: 2f:8a:8e:ba:0a:7a:56:f2:c0:81:91:46:d5:84:6d: a0:f7:18:bd:fe:e2:76:2a:28:7b:4f:c3:c5:f6:27: 87:b6:aa:7e:12:89:7c:02:b6:72:41:e7:e5:70:a0: 6a:b7:12:a4:e9:8a:80:ea:9e:ac:69:f9:f1:e3:b6: fb:06:ff:85:6e:8d:9a:9b:60:d5:e8:00:bd:a2:f6: 1e:eb:04:42:c1:4f:63:21:f4:fc:e1:52:57:01:68: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F4:EE:5F:42:B0:49:D9:1F:1C:A1:83:79:62:99:14:31:AC:B1:68 X509v3 Authority Key Identifier: keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/GfTuX0KwSdkfHKGDeWKZFDGssWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.208.0-185.39.210.255 IPv6: 2a04:6d80::-2a04:6d82:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 36:ac:fa:9c:56:68:c7:a9:52:b0:30:d0:bc:73:51:23:85:6d: ce:dc:07:22:cf:28:31:f2:c0:07:a0:44:9e:38:14:d9:d6:c6: 77:41:ea:34:e8:6f:4c:3c:ab:4b:61:53:da:f5:bc:cd:4e:1f: f2:c4:28:c2:c0:16:83:d3:28:96:b9:0a:77:21:75:8d:05:72: 87:52:c4:4b:45:ce:67:d1:9c:e5:f5:17:28:42:a7:0b:54:71: cc:9a:8b:9c:ae:cc:63:6e:3d:11:91:bd:c1:2e:07:4b:be:73: 0a:a8:61:40:01:5a:df:5a:59:60:6d:b0:ae:c0:0f:5a:9a:87: 67:08:24:80:81:11:4f:65:1a:f1:e9:ce:50:72:ed:9a:bf:ac: 8e:23:f8:28:ac:e0:71:6a:77:59:13:33:a1:db:9e:9e:a7:e2: 93:80:01:e4:49:b9:ee:73:6e:91:4b:66:8c:5c:c5:31:a6:51: c4:04:16:4d:05:eb:50:fa:1a:1c:26:66:cb:59:ce:92:27:69: 47:8c:d4:f3:e7:2f:00:31:0f:bb:ec:8d:e6:04:fb:a2:43:a4: dd:84:ad:96:e9:17:f2:9b:51:d3:47:a3:b9:81:c9:4f:c9:9f: 4c:6f:01:d6:9d:88:75:cd:45:e8:e0:58:be:99:16:33:86:d9: c0:23:97:32 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4NRSNDRkaqOj4N3l0tJUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw ODJlOGEwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWY0ZWU1ZjQyYjA0OWQ5MWYxY2ExODM3OTYyOTkxNDMxYWNiMTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw4LcWbexxDSYN2ZfOJ7NyJGJn1k OCsfvGNfkO7Gdoy22OrkDi9bVKwaYWI3riAnAiY7yHqEq+iFvXzYi7aHJ+s9JClI A3UHTcJwxi1ezoq/fc5hX9VHSNePJRI23iZbkAyljdnGQrvh8KOD4lABzQx8+bOw dx9rOu4SH+bfTR1Q9QnLPZS/THs8NKlmf4hqbeH3ggrvJoVyiC1NifewxHANVkMv io66CnpW8sCBkUbVhG2g9xi9/uJ2Kih7T8PF9ieHtqp+Eol8ArZyQeflcKBqtxKk 6YqA6p6safnx47b7Bv+Fbo2am2DV6AC9ovYe6wRCwU9jIfT84VJXAWhxDwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBn07l9CsEnZHxyhg3limRQxrLFoMB8GA1UdIwQY MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt NDA0ZGZkYjQ2NDc3LzEvR2ZUdVgwS3dTZGtmSEtHRGVXS1pGREdzc1dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3 LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAUBAIAATAOMAwDBAS5J9AD BAC5J9IwFgQCAAIwEDAOAwUHKgRtgAMFACoEbYIwDQYJKoZIhvcNAQELBQADggEB ADas+pxWaMepUrAw0LxzUSOFbc7cByLPKDHywAegRJ44FNnWxndB6jTob0w8q0th U9r1vM1OH/LEKMLAFoPTKJa5CnchdY0FcodSxEtFzmfRnOX1FyhCpwtUccyai5yu zGNuPRGRvcEuB0u+cwqoYUABWt9aWWBtsK7AD1qah2cIJICBEU9lGvHpzlBy7Zq/ rI4j+Cis4HFqd1kTM6Hbnp6n4pOAAeRJue5zbpFLZoxcxTGmUcQEFk0F61D6Ghwm ZstZzpInaUeM1PPnLwAxD7vsjeYE+6JDpN2ErZbpF/KbUdNHo7mByU/Jn0xvAdad iHXNRejgWL6ZFjOG2cAjlzI= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:39 2026 by rpki-client