This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/gKSA9C01bh9TzjI8socY0aOqSWo.roa File: gKSA9C01bh9TzjI8socY0aOqSWo.roa (raw, json) Hash identifier: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U= Subject key identifier: 80:A4:80:F4:2D:35:6E:1F:53:CE:32:3C:B2:87:18:D1:A3:AA:49:6A Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d Certificate serial: 019B7CED616475F00EDA8AF39A01F9E6958F Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/gKSA9C01bh9TzjI8socY0aOqSWo.roa Signing time: Fri 02 Jan 2026 04:18:10 +0000 ROA not before: Fri 02 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51809 IP address blocks: 87.192.96.0/21 maxlen: 21 185.138.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:61:64:75:f0:0e:da:8a:f3:9a:01:f9:e6:95:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80a480f42d356e1f53ce323cb28718d1a3aa496a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:7e:9c:85:1e:d5:29:05:67:92:cd:41:50: 4f:97:17:39:7b:ae:13:a3:c6:f6:4e:b8:28:5a:59: ef:a7:23:e5:3e:ca:7e:d3:1d:28:23:ed:48:53:41: 48:b2:31:ff:d8:34:64:90:de:2e:fb:49:39:bb:83: 27:46:33:8c:81:3c:fe:7d:87:63:79:3d:4d:78:be: ee:b4:a9:61:1a:99:72:28:d0:5e:34:8b:61:63:16: 88:16:83:aa:0c:53:cf:f4:2c:e4:ca:4b:a7:55:96: 75:0e:62:7a:f2:a8:58:49:a3:5d:70:82:80:7c:66: eb:f3:19:7d:8f:96:52:e3:cf:b6:b6:03:d5:42:49: 06:f0:ea:47:dd:1f:d9:c0:6b:bf:3f:39:a2:6b:4f: 6f:bd:3b:e6:bb:bd:0d:87:70:5d:8b:79:c7:3f:7e: 52:eb:e0:db:d8:84:80:07:f9:b7:76:15:7d:12:a2: 79:ef:34:9e:2b:1f:25:69:96:5a:87:57:57:6f:48: db:57:9a:1f:94:b7:63:e4:58:c6:bf:1d:12:fc:c5: ec:bd:27:24:44:d5:f3:4d:0a:be:28:19:05:c8:d4: d4:3d:c4:b3:06:3a:56:81:ca:c2:43:01:3b:58:33: c6:01:bf:46:52:ba:79:15:9c:86:b4:ee:1e:bf:1d: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A4:80:F4:2D:35:6E:1F:53:CE:32:3C:B2:87:18:D1:A3:AA:49:6A X509v3 Authority Key Identifier: keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/gKSA9C01bh9TzjI8socY0aOqSWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.192.96.0/21 185.138.196.0/22 Signature Algorithm: sha256WithRSAEncryption a9:f6:7c:65:43:8f:e9:8c:e0:6f:bc:10:1c:c6:3f:76:5d:e1: 7f:8a:56:c8:03:05:c6:25:09:a3:01:c9:ea:08:4f:20:dc:dc: 39:c3:73:0b:c6:b3:04:66:07:73:70:bd:48:2c:66:79:18:70: 0a:d7:66:bd:19:80:04:22:ee:99:15:9a:a1:a2:5b:d8:51:fc: ff:c6:10:61:d5:e9:c7:9e:73:68:7f:d3:e7:47:19:f8:b4:b9: 2c:e2:86:74:5f:88:14:6f:12:be:8a:65:f1:ea:cd:b7:a2:09: 8d:44:53:2c:cc:91:98:f2:a5:40:7d:9c:51:d4:c9:d2:47:40: 83:6c:e0:36:bc:8b:bb:a0:56:a0:b5:5e:dc:57:59:7b:40:6f: 7e:75:3f:76:79:cb:ac:4f:09:04:a4:b9:9b:3b:bb:ce:67:ea: cd:8a:82:11:be:21:c4:66:32:83:8f:c4:eb:16:f7:8f:e2:8d: 9f:26:f4:6c:cb:22:af:94:05:8e:ba:29:87:0c:83:66:92:7b: 1f:5c:d5:68:12:36:be:59:19:2e:43:15:66:1d:e5:95:2b:be: fd:49:1e:95:25:65:11:f1:ce:0e:0c:b6:82:c9:d7:1a:6d:2e: de:8c:85:39:5e:2a:aa:3c:63:73:ea:a5:49:e7:f7:70:11:d6: 56:14:89:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87WFkdfAO2orzmgH55pWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OTljZmZhNmU0OGZhMmM0ZjhkMDk4MDMzOTZiNDU3YTYz MGEzM2QwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGE0ODBmNDJkMzU2ZTFmNTNjZTMyM2NiMjg3MThkMWEzYWE0OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHx+nIUe1SkFZ5LNQVBPlxc5e64T o8b2TrgoWlnvpyPlPsp+0x0oI+1IU0FIsjH/2DRkkN4u+0k5u4MnRjOMgTz+fYdj eT1NeL7utKlhGplyKNBeNIthYxaIFoOqDFPP9CzkykunVZZ1DmJ68qhYSaNdcIKA fGbr8xl9j5ZS48+2tgPVQkkG8OpH3R/ZwGu/Pzmia09vvTvmu70Nh3Bdi3nHP35S 6+Db2ISAB/m3dhV9EqJ57zSeKx8laZZah1dXb0jbV5oflLdj5FjGvx0S/MXsvSck RNXzTQq+KBkFyNTUPcSzBjpWgcrCQwE7WDPGAb9GUrp5FZyGtO4evx0rLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFICkgPQtNW4fU84yPLKHGNGjqklqMB8GA1UdIwQY MBaAFKmZz/puSPosT40JgDOWtFemMKM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUt YjNhNTA5MTBjMmE4LzEvZ0tTQTlDMDFiaDlUempJOHNvY1kwYU9xU1dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUtYjNhNTA5MTBjMmE4 LzEvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV8BgAwQC uYrEMA0GCSqGSIb3DQEBCwUAA4IBAQCp9nxlQ4/pjOBvvBAcxj92XeF/ilbIAwXG JQmjAcnqCE8g3Nw5w3MLxrMEZgdzcL1ILGZ5GHAK12a9GYAEIu6ZFZqholvYUfz/ xhBh1enHnnNof9PnRxn4tLks4oZ0X4gUbxK+imXx6s23ogmNRFMszJGY8qVAfZxR 1MnSR0CDbOA2vIu7oFagtV7cV1l7QG9+dT92ecusTwkEpLmbO7vOZ+rNioIRviHE ZjKDj8TrFveP4o2fJvRsyyKvlAWOuimHDINmknsfXNVoEja+WRkuQxVmHeWVK779 SR6VJWUR8c4ODLaCydcabS7ejIU5XiqqPGNz6qVJ5/dwEdZWFIlh -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:38 2026 by rpki-client