This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/GkQO5rcPfgn2w75NaD9qydi-Rgw.roa File: GkQO5rcPfgn2w75NaD9qydi-Rgw.roa (raw, json) Hash identifier: p26ROjD8Y6lyqnpvxzkXIxQnFLDkFbszO+JOYh9DarQ= Subject key identifier: 1A:44:0E:E6:B7:0F:7E:09:F6:C3:BE:4D:68:3F:6A:C9:D8:BE:46:0C Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9 Certificate serial: 019B7C7FF26FC277F74505A193431898383F Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/GkQO5rcPfgn2w75NaD9qydi-Rgw.roa Signing time: Fri 02 Jan 2026 02:18:38 +0000 ROA not before: Fri 02 Jan 2026 02:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201274 IP address blocks: 185.79.12.0/24 maxlen: 24 185.79.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f2:6f:c2:77:f7:45:05:a1:93:43:18:98:38:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9 Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a440ee6b70f7e09f6c3be4d683f6ac9d8be460c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:23:e4:16:04:67:54:d8:81:fe:7e:c8:95: 18:f0:1d:2a:fd:88:a2:7c:b3:c6:a8:2c:ee:f3:f7: 8e:69:cd:f5:6a:44:d6:8f:38:b3:52:c7:97:74:a8: fb:da:92:c6:15:46:2a:88:9a:a8:10:d4:f5:7f:95: 54:d5:98:87:f5:9d:50:53:6e:a0:93:80:6a:b7:21: 49:fd:ad:e7:55:0f:ea:15:5b:70:5c:db:37:ba:aa: c9:21:6a:5d:d7:b4:34:c8:be:f6:4a:0b:41:ac:f7: 50:c4:85:21:68:30:c0:9d:f7:0b:91:2c:08:55:8c: 58:23:0e:c0:0c:20:2a:cf:3a:6f:0a:69:e9:8d:90: a8:15:28:aa:4f:b7:40:f5:b1:2b:b7:70:a1:42:76: ce:c6:5d:36:86:8e:d6:78:ac:62:c4:3a:bf:96:23: 6c:07:d8:4f:2f:75:9c:f7:3d:8d:2a:81:96:74:6b: ee:e7:46:2d:ad:b8:58:a2:0b:b8:4e:50:9b:f2:1b: 8b:46:f1:6d:94:6e:5c:64:c3:0f:95:af:eb:d4:31: ec:65:ee:ea:f3:b1:25:ff:5f:f0:a2:51:3e:7d:3b: 52:c1:cd:5a:cf:50:b6:e1:14:0a:2c:56:94:84:0b: 8f:ea:74:ca:e4:2b:40:cc:b3:28:d2:c3:ff:ff:b8: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:0E:E6:B7:0F:7E:09:F6:C3:BE:4D:68:3F:6A:C9:D8:BE:46:0C X509v3 Authority Key Identifier: keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/GkQO5rcPfgn2w75NaD9qydi-Rgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.12.0/23 Signature Algorithm: sha256WithRSAEncryption 53:c6:63:e1:84:83:46:b8:4f:35:3a:b4:4b:91:f7:1e:38:ce: ba:66:9e:93:7d:7c:4f:65:ce:54:31:91:76:58:32:25:bd:20: eb:b4:0b:89:ce:7b:63:4d:06:6a:77:46:93:f1:3e:6a:77:77: 1c:1c:7a:08:69:cd:f4:ea:26:20:b7:2e:10:cc:62:9f:1d:24: 7d:d6:4a:6f:39:5f:17:73:2f:10:90:62:06:57:e0:a4:f7:64: 6a:d1:3d:17:b9:03:a3:e8:79:12:7f:73:46:8b:90:1b:da:46: 69:75:1f:75:d5:03:c0:15:91:55:7a:ee:7f:25:29:74:a9:03: 42:13:f7:05:d3:b3:19:86:27:f6:55:7d:00:1a:fc:11:5f:22: d0:03:d9:63:48:47:3a:ff:61:3d:09:df:35:71:7f:b2:65:6c: 5d:5a:3e:47:2d:ba:ab:da:49:c0:b3:20:41:94:7a:f5:f8:6f: 03:47:97:32:20:f8:68:84:ac:17:98:7a:e7:c5:de:fb:4a:76: 6c:0a:3b:64:c9:1c:46:bd:eb:70:50:6f:4e:9d:92:37:8a:79: eb:b9:8d:de:18:5b:bc:5c:d8:da:13:d2:3e:b4:7e:e2:1b:65: 14:97:0d:e4:39:87:5e:4c:06:f7:31:10:4c:1a:e6:a5:8f:12: 5f:ab:7a:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f/Jvwnf3RQWhk0MYmDg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGMzMjAyNzQ2NWEyOWZiODRmMmRkMDVmM2YwYmU4MDQy N2IwYzkwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTQ0MGVlNmI3MGY3ZTA5ZjZjM2JlNGQ2ODNmNmFjOWQ4YmU0NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHgj5BYEZ1TYgf5+yJUY8B0q/Yii fLPGqCzu8/eOac31akTWjzizUseXdKj72pLGFUYqiJqoENT1f5VU1ZiH9Z1QU26g k4BqtyFJ/a3nVQ/qFVtwXNs3uqrJIWpd17Q0yL72SgtBrPdQxIUhaDDAnfcLkSwI VYxYIw7ADCAqzzpvCmnpjZCoFSiqT7dA9bErt3ChQnbOxl02ho7WeKxixDq/liNs B9hPL3Wc9z2NKoGWdGvu50YtrbhYogu4TlCb8huLRvFtlG5cZMMPla/r1DHsZe7q 87El/1/wolE+fTtSwc1az1C24RQKLFaUhAuP6nTK5CtAzLMo0sP//7js5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpEDua3D34J9sO+TWg/asnYvkYMMB8GA1UdIwQY MBaAFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMt OWE4MDNmNzM2YzRhLzEvR2tRTzVyY1BmZ24ydzc1TmFEOXF5ZGktUmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iYzJjZDQtZmQzNy00YzQxLWI1ZGMtOWE4MDNmNzM2YzRh LzEvV0l3eUFuUmxvcC00VHkzUVh6OEw2QVFuc01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU8MMA0G CSqGSIb3DQEBCwUAA4IBAQBTxmPhhINGuE81OrRLkfceOM66Zp6TfXxPZc5UMZF2 WDIlvSDrtAuJzntjTQZqd0aT8T5qd3ccHHoIac306iYgty4QzGKfHSR91kpvOV8X cy8QkGIGV+Ck92Rq0T0XuQOj6HkSf3NGi5Ab2kZpdR911QPAFZFVeu5/JSl0qQNC E/cF07MZhif2VX0AGvwRXyLQA9ljSEc6/2E9Cd81cX+yZWxdWj5HLbqr2knAsyBB lHr1+G8DR5cyIPhohKwXmHrnxd77SnZsCjtkyRxGvetwUG9OnZI3innruY3eGFu8 XNjaE9I+tH7iG2UUlw3kOYdeTAb3MRBMGualjxJfq3oP -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:06 2026 by rpki-client