This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/GqkdZzknH_deLDzuqM_YgIM73Bc.roa File: GqkdZzknH_deLDzuqM_YgIM73Bc.roa (raw, json) Hash identifier: kHUSuuY5KdlMDH9BRt+SuFZ/pUXNnonz/oEhFFhfI2I= Subject key identifier: 1A:A9:1D:67:39:27:1F:F7:5E:2C:3C:EE:A8:CF:D8:80:83:3B:DC:17 Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Certificate serial: 019B7CED3E7B112FC9D3A8194D8907151A66 Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/GqkdZzknH_deLDzuqM_YgIM73Bc.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216176 IP address blocks: 195.246.195.0/24 maxlen: 24 2a14::/32 maxlen: 32 2a14:1::/48 maxlen: 48 2a14:7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3e:7b:11:2f:c9:d3:a8:19:4d:89:07:15:1a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa91d6739271ff75e2c3ceea8cfd880833bdc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:06:51:93:a2:ac:bd:88:bb:18:5a:c8:9e: a8:a3:61:d8:cc:36:4e:47:27:ac:db:f4:47:fc:b9: 93:d8:1e:e5:97:c8:9d:09:0f:ba:50:fe:c5:ca:a7: 6a:b9:78:5f:66:00:26:0b:d3:5b:90:48:ac:ac:87: c9:07:39:74:ff:89:66:96:59:e8:a6:96:81:92:c3: 2c:d8:f4:19:3e:70:11:5d:43:07:f3:3d:8b:47:44: 91:6c:72:e9:af:58:97:50:a7:0c:4e:c3:81:31:91: 5c:59:43:c4:04:83:0e:aa:1b:47:50:bd:db:23:bc: b6:f9:f4:78:64:cc:e3:96:c1:26:29:95:2c:ce:f9: 5e:cc:09:ba:0c:be:32:b9:91:e4:25:3a:6c:9c:b3: 82:88:ff:72:00:25:1d:ec:74:35:73:f0:79:b2:b5: 8a:bb:ff:02:fe:99:54:44:76:5c:45:0f:3b:9e:bc: d2:e8:7c:d5:a5:c4:23:f0:eb:73:8f:eb:98:18:04: f5:7c:ce:8c:20:41:6a:f9:87:aa:2a:8c:14:0b:e8: 48:7d:c7:71:2a:25:9b:d5:dc:7b:31:69:d1:85:32: d0:c7:70:ae:37:e9:f0:1b:59:76:ce:4a:70:b8:bd: c3:1c:fe:5a:49:93:e5:85:7f:68:99:33:1f:9b:dd: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:1D:67:39:27:1F:F7:5E:2C:3C:EE:A8:CF:D8:80:83:3B:DC:17 X509v3 Authority Key Identifier: keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/GqkdZzknH_deLDzuqM_YgIM73Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.195.0/24 IPv6: 2a14::-2a14:1:0:ffff:ffff:ffff:ffff:ffff 2a14:7::/32 Signature Algorithm: sha256WithRSAEncryption 99:3c:da:0e:0b:84:96:d2:a4:63:a2:76:5f:b5:d4:20:15:ab: 42:d8:47:72:4d:e9:29:86:eb:b9:90:d2:f8:cc:e9:30:f2:04: 2d:8b:97:e2:7b:cd:67:e7:65:e9:64:b0:d6:df:59:de:7c:e5: 1c:3a:47:8b:7d:7f:bd:bb:2e:14:28:67:c1:ef:ea:99:0d:99: 6f:d6:33:5e:3d:55:bd:f3:de:7b:e6:af:43:43:cc:23:3c:aa: de:ae:44:ba:70:49:5f:d4:7b:4d:9a:28:dd:be:21:1a:d2:ae: ee:a4:b0:45:7f:86:9a:62:46:52:8a:fc:11:b9:01:3b:8b:75: d2:54:84:77:54:39:83:66:c3:f6:1a:68:6b:79:22:51:43:29: 0d:c6:ba:b5:a2:5d:11:0b:6d:3b:5f:b1:49:c5:c7:a4:18:6f: 0d:f7:30:7d:46:7f:ae:c2:a3:ee:c2:cf:cc:b6:c0:e6:00:f6: f3:2e:a2:5c:73:3a:c0:f3:6a:b5:43:fd:30:5e:89:22:c8:7f: ef:ab:38:36:e5:0b:57:4f:e0:dc:7d:90:12:12:01:4b:2b:91: 60:6b:8e:6e:07:f9:e1:a3:99:74:bd:69:43:fb:46:10:29:6e: 66:bd:e9:19:4a:fa:35:a8:50:c8:4a:2c:16:4b:c6:72:cf:72: 78:c6:ec:0e -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt87T57ES/J06gZTYkHFRpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy YzI2YmEwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWE5MWQ2NzM5MjcxZmY3NWUyYzNjZWVhOGNmZDg4MDgzM2JkYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaIGUZOirL2IuxhayJ6oo2HYzDZO Ryes2/RH/LmT2B7ll8idCQ+6UP7FyqdquXhfZgAmC9NbkEisrIfJBzl0/4lmllno ppaBksMs2PQZPnARXUMH8z2LR0SRbHLpr1iXUKcMTsOBMZFcWUPEBIMOqhtHUL3b I7y2+fR4ZMzjlsEmKZUszvlezAm6DL4yuZHkJTpsnLOCiP9yACUd7HQ1c/B5srWK u/8C/plURHZcRQ87nrzS6HzVpcQj8Otzj+uYGAT1fM6MIEFq+YeqKowUC+hIfcdx KiWb1dx7MWnRhTLQx3CuN+nwG1l2zkpwuL3DHP5aSZPlhX9omTMfm91c9QIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFBqpHWc5Jx/3Xiw87qjP2ICDO9wXMB8GA1UdIwQY MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt MjIwMGIzY2M1N2U2LzEvR3FrZFp6a25IX2RlTER6dXFNX1lnSU03M0JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2 LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAMBAIAATAGAwQAw/bDMB0E AgACMBcwDgMDAioUAwcAKhQAAQAAAwUAKhQABzANBgkqhkiG9w0BAQsFAAOCAQEA mTzaDguEltKkY6J2X7XUIBWrQthHck3pKYbruZDS+MzpMPIELYuX4nvNZ+dl6WSw 1t9Z3nzlHDpHi31/vbsuFChnwe/qmQ2Zb9YzXj1VvfPee+avQ0PMIzyq3q5EunBJ X9R7TZoo3b4hGtKu7qSwRX+GmmJGUor8EbkBO4t10lSEd1Q5g2bD9hpoa3kiUUMp Dca6taJdEQttO1+xScXHpBhvDfcwfUZ/rsKj7sLPzLbA5gD28y6iXHM6wPNqtUP9 MF6JIsh/76s4NuULV0/g3H2QEhIBSyuRYGuObgf54aOZdL1pQ/tGECluZr3pGUr6 NahQyEosFkvGcs9yeMbsDg== -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:03 2026 by rpki-client