This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa File: G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa (raw, json) Hash identifier: Rd+BM6THTi6+A/aDOIt4oFEHGR29dEm5uWS1GE/mueU= Subject key identifier: 1B:EC:9C:82:6E:D8:39:1F:AC:65:AD:1C:0D:3D:04:CB:41:CA:A5:14 Certificate issuer: /CN=1b6df0bc093f298b043522ebd4ede19793081a29 Certificate serial: 019B7FF2B8724057510EC45473E3675802D4 Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa Signing time: Fri 02 Jan 2026 18:22:51 +0000 ROA not before: Fri 02 Jan 2026 18:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42221 IP address blocks: 185.87.0.0/24 maxlen: 24 185.87.1.0/24 maxlen: 24 185.87.2.0/24 maxlen: 24 185.87.3.0/24 maxlen: 24 2a05:bd02::/31 maxlen: 31 2a05:bd04::/31 maxlen: 31 2a05:bd06::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b8:72:40:57:51:0e:c4:54:73:e3:67:58:02:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29 Validity Not Before: Jan 2 18:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bec9c826ed8391fac65ad1c0d3d04cb41caa514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:48:a7:88:be:96:9f:74:fe:bb:34:b9:55: 3c:bd:ed:37:e1:54:04:84:f1:0c:21:f4:11:2a:7f: 35:2c:50:1b:2c:6e:7f:d4:77:2b:e8:39:d3:32:c6: 4e:a9:bb:bd:03:c9:7a:b3:be:e7:8b:a5:2f:4a:ee: c8:2f:3e:15:1e:b8:0b:42:0e:c3:9d:4e:30:3f:be: 9f:29:4b:8d:cb:d5:92:58:9c:c8:4f:4b:b2:3e:18: 64:8c:10:55:f4:62:5d:81:0a:f6:5f:9c:6c:6f:5d: 34:34:57:bc:51:1f:62:d1:28:3e:54:f6:da:85:5c: bc:07:33:24:ec:3b:a8:e9:79:c8:86:88:87:88:27: 97:7c:b2:cc:ee:4f:60:ae:98:d7:56:43:d5:9e:31: 96:b4:08:9d:0c:6d:6b:90:7b:c3:ab:69:ab:11:78: 62:a2:d2:87:32:bf:14:bd:07:a0:7e:19:fb:01:cb: 35:d8:ac:c5:34:e0:6b:54:89:35:36:62:10:d0:7b: 5a:82:d2:1c:a4:4f:63:52:de:15:43:f1:3f:e6:62: c4:60:b9:8b:57:d8:1b:97:10:4d:31:2c:b0:e3:62: 17:85:ab:7d:4a:c2:3c:47:7a:2a:c3:53:aa:e6:c6: 32:46:b0:64:b8:6b:51:0c:db:1e:91:e7:7b:b1:2a: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EC:9C:82:6E:D8:39:1F:AC:65:AD:1C:0D:3D:04:CB:41:CA:A5:14 X509v3 Authority Key Identifier: keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G-ycgm7YOR-sZa0cDT0Ey0HKpRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.0.0/22 IPv6: 2a05:bd02::-2a05:bd07:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 27:69:c6:a1:d3:cb:92:e9:5c:ec:28:ba:95:f3:88:06:60:64: 92:07:1f:1a:8f:b6:e8:42:a5:a6:cf:34:42:02:09:1d:6e:87: ea:27:75:93:ec:21:55:fc:96:c1:19:28:f1:e0:fb:80:ff:87: 35:d9:cf:ee:31:c7:d1:42:f4:83:c7:fe:53:79:85:17:b1:41: 52:0f:d7:17:06:f0:2d:ff:2f:a3:b1:6a:ea:07:dd:d6:e2:c3: 63:83:1d:e3:e0:55:73:ba:81:d8:ce:14:c8:a4:62:b4:68:f7: 98:8e:1d:bf:21:d1:84:1c:5b:6f:12:99:84:9c:82:7c:2e:19: cc:8e:91:92:18:76:06:0f:74:b5:83:b6:02:9c:bf:76:af:53: cd:90:35:5c:27:93:15:26:96:1b:65:59:e9:d4:a4:af:d6:08: 92:65:86:87:fa:11:f0:cc:40:ef:b3:1c:f5:73:b8:90:fa:57: 4f:0d:ad:9d:e1:48:2e:79:df:f4:01:d9:dd:af:52:f2:57:cb: 25:1d:18:ac:3a:83:17:b7:c1:20:89:8d:74:71:56:d6:44:b7: 84:68:6f:dd:75:f2:0b:90:88:90:09:67:a3:ae:b1:65:8d:12: 98:dc:f4:33:79:9d:de:aa:23:42:d2:41:56:0a:45:7b:e6:54: 13:2f:2d:ad -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/8rhyQFdRDsRUc+NnWALUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmRmMGJjMDkzZjI5OGIwNDM1MjJlYmQ0ZWRlMTk3OTMw ODFhMjkwHhcNMjYwMTAyMTgyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmVjOWM4MjZlZDgzOTFmYWM2NWFkMWMwZDNkMDRjYjQxY2FhNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLRIp4i+lp90/rs0uVU8ve034VQE hPEMIfQRKn81LFAbLG5/1Hcr6DnTMsZOqbu9A8l6s77ni6UvSu7ILz4VHrgLQg7D nU4wP76fKUuNy9WSWJzIT0uyPhhkjBBV9GJdgQr2X5xsb100NFe8UR9i0Sg+VPba hVy8BzMk7Duo6XnIhoiHiCeXfLLM7k9grpjXVkPVnjGWtAidDG1rkHvDq2mrEXhi otKHMr8UvQegfhn7Acs12KzFNOBrVIk1NmIQ0HtagtIcpE9jUt4VQ/E/5mLEYLmL V9gblxBNMSyw42IXhat9SsI8R3oqw1Oq5sYyRrBkuGtRDNseked7sSoF6QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBvsnIJu2DkfrGWtHA09BMtByqUUMB8GA1UdIwQY MBaAFBtt8LwJPymLBDUi69Tt4ZeTCBopMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYt NWFjNmZkZmRjMGNjLzEvRy15Y2dtN1lPUi1zWmEwY0RUMEV5MEhLcFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84M2NmMDEtNmNjYS00OGQxLTljYmYtNWFjNmZkZmRjMGNj LzEvRzIzd3ZBa19LWXNFTlNMcjFPM2hsNU1JR2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuVcAMBYE AgACMBAwDgMFASoFvQIDBQMqBb0AMA0GCSqGSIb3DQEBCwUAA4IBAQAnacah08uS 6VzsKLqV84gGYGSSBx8aj7boQqWmzzRCAgkdbofqJ3WT7CFV/JbBGSjx4PuA/4c1 2c/uMcfRQvSDx/5TeYUXsUFSD9cXBvAt/y+jsWrqB93W4sNjgx3j4FVzuoHYzhTI pGK0aPeYjh2/IdGEHFtvEpmEnIJ8LhnMjpGSGHYGD3S1g7YCnL92r1PNkDVcJ5MV JpYbZVnp1KSv1giSZYaH+hHwzEDvsxz1c7iQ+ldPDa2d4Ugued/0Adndr1LyV8sl HRisOoMXt8EgiY10cVbWRLeEaG/ddfILkIiQCWejrrFljRKY3PQzeZ3eqiNC0kFW CkV75lQTLy2t -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:04 2026 by rpki-client