This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa File: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (raw, json) Hash identifier: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc= Subject key identifier: 80:D3:BA:EC:62:B5:A8:85:DC:2A:05:90:B6:BD:50:96:C7:E3:DC:45 Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Certificate serial: 019B7FF14DBB975F311B339009CF0884A930 Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa Signing time: Fri 02 Jan 2026 18:21:18 +0000 ROA not before: Fri 02 Jan 2026 18:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57348 IP address blocks: 185.67.148.0/24 maxlen: 24 185.67.149.0/24 maxlen: 24 185.67.150.0/24 maxlen: 24 185.67.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:4d:bb:97:5f:31:1b:33:90:09:cf:08:84:a9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Validity Not Before: Jan 2 18:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80d3baec62b5a885dc2a0590b6bd5096c7e3dc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:d6:7d:e5:05:53:d9:ce:2c:d0:71:a9:64: 42:3b:1e:a0:ea:84:3d:7d:56:c4:e6:d6:dd:5b:68: 23:cd:e5:a4:40:17:8e:6a:69:a5:71:53:ab:61:ee: 46:e3:e1:50:ff:4a:a2:8b:e5:47:4c:93:2c:87:99: 24:f8:56:5b:b7:df:77:b9:81:32:e8:e8:9f:c8:47: 67:57:43:0d:95:5a:b4:37:00:75:52:1c:b3:70:ab: 3e:aa:85:32:e3:da:dc:f5:8b:dc:ef:64:77:f7:8c: e0:d6:be:ac:1b:b5:15:8d:f5:f5:0a:16:70:36:0a: f3:08:2f:48:70:92:91:43:e3:d8:61:55:a3:0e:4f: f0:b2:e6:02:54:9d:f5:bc:8a:70:bb:5e:68:64:84: 0d:0c:95:41:31:2a:d0:ca:3f:54:05:cc:ee:51:9e: eb:51:b2:b6:05:c1:29:96:8c:44:6e:1d:5c:f6:18: 41:18:b1:5d:8e:9c:61:a8:44:a4:06:a7:06:76:a9: cd:51:62:80:bc:75:60:51:3c:c2:e9:dd:e3:66:21: 0e:9f:82:22:2a:b4:b4:f9:d5:d9:9e:6e:37:59:a7: d6:8f:28:66:52:4a:13:d3:e1:09:27:71:74:b1:c5: 0d:1d:e1:11:30:03:6f:f9:64:a3:df:4e:5a:4c:8d: a9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D3:BA:EC:62:B5:A8:85:DC:2A:05:90:B6:BD:50:96:C7:E3:DC:45 X509v3 Authority Key Identifier: keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.148.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:c1:92:e3:28:71:c4:e7:fb:9a:39:b6:78:41:c5:1c:07:45: a3:2f:fd:76:cb:4e:3e:f0:ce:a6:5a:26:48:57:2b:2f:3e:dd: e5:fd:a9:2e:3a:d7:ab:73:9e:92:10:e5:2e:f9:65:e9:c2:8c: bc:b2:13:0e:c3:93:98:4f:68:e9:0a:29:8e:b0:01:90:87:32: 8b:42:a9:f8:61:36:e1:7c:ef:88:f0:5e:23:70:05:46:0b:54: a8:a5:d8:24:03:0a:f6:96:45:06:e4:88:20:33:f3:92:7c:46: 7a:61:1a:b9:17:fe:e2:65:7e:35:c6:08:c5:a0:ec:fc:b7:4e: eb:04:e4:4a:77:7e:cd:24:40:59:7a:a3:4d:dc:27:6a:c1:68: 8f:72:fd:c3:de:ba:90:7a:4d:3d:73:28:6c:15:85:13:33:b3: 51:1f:71:f7:8b:38:d4:63:cb:ee:1d:1c:93:68:6e:1f:2d:05: 40:d9:b2:a7:c4:9a:f7:d9:7f:aa:f3:e4:92:ae:4a:17:6f:ef: 4f:95:87:07:f0:09:83:9a:32:41:f8:0e:f2:4a:64:d3:6f:ac: 08:68:dc:4a:1f:e8:b1:f0:d7:bd:93:26:dc:bf:7e:88:54:e7: e6:f0:ad:f3:d5:ae:03:44:53:23:77:4a:0f:3a:dd:97:b1:0e: 2c:c6:19:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8U27l18xGzOQCc8IhKkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5 YTI2OTQwHhcNMjYwMTAyMTgyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQzYmFlYzYyYjVhODg1ZGMyYTA1OTBiNmJkNTA5NmM3ZTNkYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDPWfeUFU9nOLNBxqWRCOx6g6oQ9 fVbE5tbdW2gjzeWkQBeOammlcVOrYe5G4+FQ/0qii+VHTJMsh5kk+FZbt993uYEy 6OifyEdnV0MNlVq0NwB1UhyzcKs+qoUy49rc9Yvc72R394zg1r6sG7UVjfX1ChZw NgrzCC9IcJKRQ+PYYVWjDk/wsuYCVJ31vIpwu15oZIQNDJVBMSrQyj9UBczuUZ7r UbK2BcEploxEbh1c9hhBGLFdjpxhqESkBqcGdqnNUWKAvHVgUTzC6d3jZiEOn4Ii KrS0+dXZnm43WafWjyhmUkoT0+EJJ3F0scUNHeERMANv+WSj305aTI2pJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDTuuxitaiF3CoFkLa9UJbH49xFMB8GA1UdIwQY MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt ODM4ZWJmNDEyYTYxLzEvZ05PNjdHSzFxSVhjS2dXUXRyMVFsc2ZqM0VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUOUMA0G CSqGSIb3DQEBCwUAA4IBAQBqwZLjKHHE5/uaObZ4QcUcB0WjL/12y04+8M6mWiZI VysvPt3l/akuOterc56SEOUu+WXpwoy8shMOw5OYT2jpCimOsAGQhzKLQqn4YTbh fO+I8F4jcAVGC1SopdgkAwr2lkUG5IggM/OSfEZ6YRq5F/7iZX41xgjFoOz8t07r BORKd37NJEBZeqNN3CdqwWiPcv3D3rqQek09cyhsFYUTM7NRH3H3izjUY8vuHRyT aG4fLQVA2bKnxJr32X+q8+SSrkoXb+9PlYcH8AmDmjJB+A7ySmTTb6wIaNxKH+ix 8Ne9kybcv36IVOfm8K3z1a4DRFMjd0oPOt2XsQ4sxhlx -----END CERTIFICATE-----Generated at Thu Jan 29 20:05:26 2026 by rpki-client