This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/GnEvIAlaB-UByoYHOt2F_BVdPQE.roa File: GnEvIAlaB-UByoYHOt2F_BVdPQE.roa (raw, json) Hash identifier: fX8z3h8g/jt3tVZ0Hy99MVng9ZbtXgnxN+T6t3Ums8A= Subject key identifier: 1A:71:2F:20:09:5A:07:E5:01:CA:86:07:3A:DD:85:FC:15:5D:3D:01 Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3 Certificate serial: 019B7BA4E59DF5A79D08010279C65AD92706 Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/GnEvIAlaB-UByoYHOt2F_BVdPQE.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204025 IP address blocks: 185.71.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e5:9d:f5:a7:9d:08:01:02:79:c6:5a:d9:27:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3 Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a712f20095a07e501ca86073add85fc155d3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:59:87:a3:1e:e2:5a:a5:e9:35:8e:28:4e: fb:52:4c:d3:ea:23:a7:87:7a:e5:15:91:cf:2a:a7: 95:c6:20:75:2c:0a:51:10:b1:d7:e5:24:05:9e:30: 7d:60:dc:c4:14:1e:87:80:b4:8b:bc:38:aa:11:b2: 0f:c8:5c:75:a8:0c:25:4f:51:f3:15:7f:0c:3a:76: 2d:da:33:14:8c:a5:92:d9:5a:fa:3b:67:39:28:6c: 07:25:54:fb:78:fd:8d:ab:04:bc:b0:bf:2a:1a:00: ea:12:9d:47:ef:18:fc:98:0c:db:63:c9:8c:a6:cb: 8a:2a:9e:38:ff:bb:9b:fe:f4:19:e0:ef:07:bc:5a: de:83:34:85:a7:9f:56:b5:09:2a:8d:c3:95:14:00: 53:7a:d7:d7:d3:0f:69:52:95:0f:f3:57:0a:1a:29: 27:62:5a:81:78:d4:45:eb:2a:8e:a0:cf:78:8d:5d: 89:df:e8:6a:83:dd:04:e9:4d:38:cc:8b:3e:91:26: 3d:98:19:63:2e:d9:04:27:76:ce:c4:6c:fe:e9:36: 79:1f:4d:91:fa:2a:08:5c:b2:6e:cf:4d:aa:21:44: 31:1a:b0:ad:a7:e6:f7:7b:3a:91:db:69:9e:af:3d: 5c:5f:0c:8c:7a:53:3d:74:53:0f:32:82:d7:51:8d: 06:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:71:2F:20:09:5A:07:E5:01:CA:86:07:3A:DD:85:FC:15:5D:3D:01 X509v3 Authority Key Identifier: keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/GnEvIAlaB-UByoYHOt2F_BVdPQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.56.0/22 Signature Algorithm: sha256WithRSAEncryption 99:b6:2d:41:17:1b:65:36:32:b0:d2:8a:ea:5a:f7:bc:85:11: 86:a2:82:54:e0:04:82:57:4e:25:67:05:03:f4:0d:76:33:a6: 4f:7b:6b:c6:15:90:9f:b6:6d:1b:94:71:84:43:f6:f2:b9:1c: 7a:c8:30:7e:34:7c:42:a3:25:78:e2:5d:e6:8a:67:32:19:33: 5c:7c:42:bf:48:61:1a:d9:44:e9:13:0d:c4:74:72:0b:e0:00: 4a:83:90:1c:89:c3:33:ba:06:97:29:98:fc:10:07:9d:46:25: 69:5b:8b:19:c2:b6:46:fb:15:b0:77:78:04:fa:f0:b2:42:55: dd:e9:93:4a:01:b6:c4:e3:46:10:da:b0:f5:2f:07:93:2c:02: 55:c7:36:b2:ca:7d:60:fb:f7:a9:2c:eb:8b:42:8a:8f:0e:88: 70:eb:cb:4b:ed:0d:77:0b:a9:c3:11:e6:d9:1e:0f:fa:5c:fd: 48:fa:36:6d:29:53:7e:ca:30:a9:d9:0c:64:ad:94:e2:14:70: c5:1b:86:c5:55:b9:8b:39:84:f5:31:65:5b:1c:fa:e8:2d:b0: d5:5a:d5:3b:5a:d7:ff:23:5a:f6:d5:c7:98:c8:e3:8f:e7:1a: 97:48:6e:b6:7f:52:12:10:5e:08:7a:a3:88:7c:b9:3c:db:67: 12:ae:12:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOWd9aedCAECecZa2ScGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNmNhMDVjNGNiNjFkOWUyMzI5Mjk4ZDM1NGMyYTc2OWJk ZDA1ZDMwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTcxMmYyMDA5NWEwN2U1MDFjYTg2MDczYWRkODVmYzE1NWQzZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cFZh6Me4lql6TWOKE77UkzT6iOn h3rlFZHPKqeVxiB1LApRELHX5SQFnjB9YNzEFB6HgLSLvDiqEbIPyFx1qAwlT1Hz FX8MOnYt2jMUjKWS2Vr6O2c5KGwHJVT7eP2NqwS8sL8qGgDqEp1H7xj8mAzbY8mM psuKKp44/7ub/vQZ4O8HvFregzSFp59WtQkqjcOVFABTetfX0w9pUpUP81cKGikn YlqBeNRF6yqOoM94jV2J3+hqg90E6U04zIs+kSY9mBljLtkEJ3bOxGz+6TZ5H02R +ioIXLJuz02qIUQxGrCtp+b3ezqR22merz1cXwyMelM9dFMPMoLXUY0G8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpxLyAJWgflAcqGBzrdhfwVXT0BMB8GA1UdIwQY MBaAFMxsoFxMth2eIykpjTVMKnab3QXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQt YWZjNjAyNzE0ZTEzLzEvR25FdklBbGFCLVVCeW9ZSE90MkZfQlZkUFFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQtYWZjNjAyNzE0ZTEz LzEvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUc4MA0G CSqGSIb3DQEBCwUAA4IBAQCZti1BFxtlNjKw0orqWve8hRGGooJU4ASCV04lZwUD 9A12M6ZPe2vGFZCftm0blHGEQ/byuRx6yDB+NHxCoyV44l3mimcyGTNcfEK/SGEa 2UTpEw3EdHIL4ABKg5AcicMzugaXKZj8EAedRiVpW4sZwrZG+xWwd3gE+vCyQlXd 6ZNKAbbE40YQ2rD1LweTLAJVxzayyn1g+/epLOuLQoqPDohw68tL7Q13C6nDEebZ Hg/6XP1I+jZtKVN+yjCp2QxkrZTiFHDFG4bFVbmLOYT1MWVbHProLbDVWtU7Wtf/ I1r21ceYyOOP5xqXSG62f1ISEF4IeqOIfLk822cSrhKs -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:09 2026 by rpki-client