This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/gQRcEiSOK1BvYtVOwMak5cgqArQ.roa File: gQRcEiSOK1BvYtVOwMak5cgqArQ.roa (raw, json) Hash identifier: epUHVlTyTlnB2yqzWN4cM7frnCSziUUq2Htq1QzVhaU= Subject key identifier: 81:04:5C:12:24:8E:2B:50:6F:62:D5:4E:C0:C6:A4:E5:C8:2A:02:B4 Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c Certificate serial: 019B76EB2C497490D9126D688B2315B1E89E Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/gQRcEiSOK1BvYtVOwMak5cgqArQ.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201958 IP address blocks: 185.42.188.0/23 maxlen: 23 185.42.188.0/24 maxlen: 24 185.42.189.0/24 maxlen: 24 185.42.190.0/23 maxlen: 23 185.42.190.0/24 maxlen: 24 185.42.191.0/24 maxlen: 24 2a04:9140:3003::/48 maxlen: 48 2a04:9140:3043::/48 maxlen: 48 2a04:9140:3044::/48 maxlen: 48 2a04:9140:3104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2c:49:74:90:d9:12:6d:68:8b:23:15:b1:e8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81045c12248e2b506f62d54ec0c6a4e5c82a02b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:e3:eb:9b:46:b3:82:d4:f1:fe:96:b3:b8: 1e:17:5a:6c:37:0d:f2:c2:8d:63:39:6c:e3:4a:c0: f9:c6:85:ad:cc:69:bd:e7:17:bc:b1:18:b7:61:a8: 16:d5:d7:b2:91:a6:08:67:12:bc:3c:c3:7a:2d:08: 06:73:2a:85:9b:c2:d0:d2:87:02:0b:13:ac:56:b3: 9a:79:bb:a0:4d:17:e8:44:67:60:05:f5:08:0e:e1: be:0c:76:9e:a8:65:30:c7:3b:a3:5c:dc:e3:78:09: 7f:c0:79:b7:27:13:e8:9c:b2:20:f2:32:82:cc:70: d5:99:e7:1e:66:c7:9c:b6:0d:af:46:ab:4a:a8:21: c0:13:3c:2b:5c:7b:1c:72:77:6d:1b:5d:28:a6:6a: 0c:1a:02:2a:2f:23:1e:6e:33:c4:78:50:81:20:2f: 77:77:8c:81:27:fe:69:57:f2:43:a6:53:a8:c6:de: f1:ff:ee:df:1d:1f:ad:cd:ff:49:e2:1e:db:17:de: ba:6e:fa:5b:1d:e8:55:42:4f:26:e6:89:5f:a8:9b: 8c:38:60:d2:22:6a:74:41:18:86:89:28:08:eb:d0: a0:96:70:ca:2c:16:ea:bd:d4:db:d7:5c:e1:a3:b4: ad:a0:71:c6:be:85:cd:c7:f3:32:5d:68:ee:f4:b6: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:04:5C:12:24:8E:2B:50:6F:62:D5:4E:C0:C6:A4:E5:C8:2A:02:B4 X509v3 Authority Key Identifier: keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/gQRcEiSOK1BvYtVOwMak5cgqArQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.188.0/22 IPv6: 2a04:9140:3003::/48 2a04:9140:3043::-2a04:9140:3044:ffff:ffff:ffff:ffff:ffff 2a04:9140:3104::/48 Signature Algorithm: sha256WithRSAEncryption 79:38:b9:6a:a8:d2:5f:18:ec:bd:77:a1:1f:0c:88:4e:ba:fb: 6b:83:02:f4:4b:4d:9f:d6:7a:aa:26:8b:48:75:0f:a6:cb:02: d4:89:df:27:6a:d1:22:f1:91:75:42:21:92:0f:a0:9c:f4:26: c0:d6:89:bc:b3:20:2e:c3:d1:17:30:59:eb:6d:8f:5a:56:8d: ae:91:24:be:f9:50:a2:78:06:1f:97:a3:c3:f0:84:bf:f3:5e: 59:6d:a2:06:b4:d0:78:e1:7a:d3:2a:74:a3:36:1d:44:82:8e: 88:98:fd:6a:85:1f:02:7b:55:4f:ab:24:bf:15:bd:63:1d:4d: 07:b4:41:b8:59:20:88:cf:4e:00:7c:be:eb:a9:a6:5d:4d:bd: 06:31:a3:58:44:67:ef:56:54:f4:19:23:5d:60:a2:ba:60:12: e9:d5:4f:ab:dc:dc:fc:d1:4a:ce:74:06:1c:a0:e7:45:8d:d1: 7c:97:63:5a:ae:dc:62:87:fe:06:72:4b:25:18:59:e1:0e:0a: 08:ae:4a:0f:c3:bb:ec:4a:cc:d9:93:79:45:0c:b4:24:e0:40: ff:77:db:b3:28:4a:6a:e6:96:a6:2f:37:b3:23:58:8f:89:ce: 96:47:e2:2d:0c:95:b6:68:08:0e:3d:cd:8a:d4:39:46:60:61: 66:30:b5:34 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt26yxJdJDZEm1oiyMVseieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWIzOGUzNGJiZTE3ZTE1NzcyNzA2YzdhOTYxYTg1ZTVk MThiNWMwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA0NWMxMjI0OGUyYjUwNmY2MmQ1NGVjMGM2YTRlNWM4MmEwMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidTj65tGs4LU8f6Ws7geF1psNw3y wo1jOWzjSsD5xoWtzGm95xe8sRi3YagW1deykaYIZxK8PMN6LQgGcyqFm8LQ0ocC CxOsVrOaebugTRfoRGdgBfUIDuG+DHaeqGUwxzujXNzjeAl/wHm3JxPonLIg8jKC zHDVmeceZsectg2vRqtKqCHAEzwrXHsccndtG10opmoMGgIqLyMebjPEeFCBIC93 d4yBJ/5pV/JDplOoxt7x/+7fHR+tzf9J4h7bF966bvpbHehVQk8m5olfqJuMOGDS Imp0QRiGiSgI69CglnDKLBbqvdTb11zho7StoHHGvoXNx/MyXWju9Lb9YQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFIEEXBIkjitQb2LVTsDGpOXIKgK0MB8GA1UdIwQY MBaAFAvrOONLvhfhV3JwbHqWGoXl0YtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2Mt OWI3OTk3NDgxZjcyLzEvZ1FSY0VpU09LMUJ2WXRWT3dNYWs1Y2dxQXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2MtOWI3OTk3NDgxZjcy LzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAMBAIAATAGAwQCuSq8MCwE AgACMCYDBwAqBJFAMAMwEgMHACoEkUAwQwMHACoEkUAwRAMHACoEkUAxBDANBgkq hkiG9w0BAQsFAAOCAQEAeTi5aqjSXxjsvXehHwyITrr7a4MC9EtNn9Z6qiaLSHUP pssC1InfJ2rRIvGRdUIhkg+gnPQmwNaJvLMgLsPRFzBZ622PWlaNrpEkvvlQongG H5ejw/CEv/NeWW2iBrTQeOF60yp0ozYdRIKOiJj9aoUfAntVT6skvxW9Yx1NB7RB uFkgiM9OAHy+66mmXU29BjGjWERn71ZU9BkjXWCiumAS6dVPq9zc/NFKznQGHKDn RY3RfJdjWq7cYof+BnJLJRhZ4Q4KCK5KD8O77ErM2ZN5RQy0JOBA/3fbsyhKauaW pi83syNYj4nOlkfiLQyVtmgIDj3NitQ5RmBhZjC1NA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:10 2026 by rpki-client