This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/gJdGEOm66NFVTNBH0oAB9H2an10.roa File: gJdGEOm66NFVTNBH0oAB9H2an10.roa (raw, json) Hash identifier: jpFzkrgSWLBJPoSMspVLyUPGM0QAIkxfsEyy3UC+Dkw= Subject key identifier: 80:97:46:10:E9:BA:E8:D1:55:4C:D0:47:D2:80:01:F4:7D:9A:9F:5D Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503 Certificate serial: 019B7C80CE86753CC8594DBFA91796DB6A58 Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/gJdGEOm66NFVTNBH0oAB9H2an10.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204546 IP address blocks: 185.213.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ce:86:75:3c:c8:59:4d:bf:a9:17:96:db:6a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80974610e9bae8d1554cd047d28001f47d9a9f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:21:da:ab:da:b1:2d:d2:c2:ed:db:4a:c2: 38:4a:ea:c5:de:da:50:c5:ac:1e:4a:b7:77:a3:e9: 62:31:1c:b4:bd:22:ba:f0:c0:c1:7f:f2:8f:34:95: f2:4c:14:49:6f:6b:09:f2:20:52:1b:cb:d1:d1:5c: 22:b8:71:24:3f:79:0f:a6:80:0e:2f:1e:6a:b3:4d: 64:f2:76:0d:9a:35:51:0e:24:57:14:52:f9:9e:37: e8:a3:0e:33:6a:d3:31:b4:2c:95:8a:2e:1a:7a:23: 51:07:ab:ee:10:24:90:c7:f7:1e:c6:e8:a6:6e:39: d5:46:f4:41:66:2c:35:e4:1d:b7:51:aa:ab:fe:15: f6:e9:9b:d8:8f:b9:da:be:04:c4:dc:07:7a:ee:5c: 4b:12:8c:04:7b:7d:a3:ab:d5:ae:27:36:d0:43:bb: 3a:6e:90:53:69:16:09:e3:e5:8c:fb:6a:6f:9e:8f: 06:1e:73:97:28:67:e6:61:da:54:4b:41:ee:6c:07: d8:50:e4:1b:cb:fa:20:80:97:f7:15:b9:3d:78:1c: ae:5e:62:ee:94:de:4e:63:f9:f6:65:97:f8:aa:aa: c7:ca:80:b2:82:98:11:5e:e8:bc:0b:a7:3a:5b:ff: 6d:1a:56:07:48:21:bf:66:23:24:29:72:05:af:a9: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:97:46:10:E9:BA:E8:D1:55:4C:D0:47:D2:80:01:F4:7D:9A:9F:5D X509v3 Authority Key Identifier: keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/gJdGEOm66NFVTNBH0oAB9H2an10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.115.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:8f:3b:c0:37:db:fe:2c:d2:64:29:5e:20:84:a0:26:7c:dc: 4d:d4:87:06:1a:62:13:60:84:41:d6:0c:6f:97:99:ca:4f:e3: fd:bd:7c:cb:a1:25:45:d5:18:87:f5:33:72:88:25:e9:aa:8a: bf:fb:1e:2a:fe:13:e5:f9:61:cf:a2:8a:36:21:e0:c6:10:c2: d0:c9:4a:23:c3:aa:f6:7b:f8:0c:cd:a2:48:c8:f3:7b:0f:40: 12:4b:37:36:b1:3b:55:76:4b:a0:60:7b:42:b7:1b:f0:8d:f1: 42:1a:c3:ca:f6:a1:a8:e8:ca:98:ec:d8:19:85:36:a0:3e:1f: 49:eb:8d:2b:b8:bc:94:36:10:38:8e:da:ec:00:c8:dd:3b:12: 9a:b7:71:84:63:3f:f4:09:13:56:b0:b9:fc:4f:dd:50:f3:79: 6c:73:31:97:b2:93:3a:e2:14:af:84:1c:83:e0:3b:f7:9c:0d: e5:42:50:62:37:25:f6:bb:60:32:cf:c9:7e:7f:14:9b:97:50: 80:a1:05:8b:b9:7e:a0:b5:d9:b0:6e:65:74:7c:de:ed:59:c9: 65:c4:a6:c8:b6:11:c4:d0:29:2f:79:ea:c4:c2:e0:a5:81:38: 88:19:7e:d3:06:37:66:ad:e2:4f:52:44:fe:e6:38:e5:fa:dd: 69:2f:aa:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gM6GdTzIWU2/qReW22pYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji Njk1MDMwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDk3NDYxMGU5YmFlOGQxNTU0Y2QwNDdkMjgwMDFmNDdkOWE5ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycYh2qvasS3Swu3bSsI4SurF3tpQ xaweSrd3o+liMRy0vSK68MDBf/KPNJXyTBRJb2sJ8iBSG8vR0VwiuHEkP3kPpoAO Lx5qs01k8nYNmjVRDiRXFFL5njfoow4zatMxtCyVii4aeiNRB6vuECSQx/cexuim bjnVRvRBZiw15B23Uaqr/hX26ZvYj7navgTE3Ad67lxLEowEe32jq9WuJzbQQ7s6 bpBTaRYJ4+WM+2pvno8GHnOXKGfmYdpUS0HubAfYUOQby/oggJf3Fbk9eByuXmLu lN5OY/n2ZZf4qqrHyoCygpgRXui8C6c6W/9tGlYHSCG/ZiMkKXIFr6lO9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICXRhDpuujRVUzQR9KAAfR9mp9dMB8GA1UdIwQY MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt NTczY2E1YTYwOWMwLzEvZ0pkR0VPbTY2TkZWVE5CSDBvQUI5SDJhbjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudVzMA0G CSqGSIb3DQEBCwUAA4IBAQAujzvAN9v+LNJkKV4ghKAmfNxN1IcGGmITYIRB1gxv l5nKT+P9vXzLoSVF1RiH9TNyiCXpqoq/+x4q/hPl+WHPooo2IeDGEMLQyUojw6r2 e/gMzaJIyPN7D0ASSzc2sTtVdkugYHtCtxvwjfFCGsPK9qGo6MqY7NgZhTagPh9J 640ruLyUNhA4jtrsAMjdOxKat3GEYz/0CRNWsLn8T91Q83lsczGXspM64hSvhByD 4Dv3nA3lQlBiNyX2u2Ayz8l+fxSbl1CAoQWLuX6gtdmwbmV0fN7tWcllxKbIthHE 0CkveerEwuClgTiIGX7TBjdmreJPUkT+5jjl+t1pL6qe -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:46 2026 by rpki-client