This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/GqrZEvlo33nyVf_PDBtE7AeUUzI.roa File: GqrZEvlo33nyVf_PDBtE7AeUUzI.roa (raw, json) Hash identifier: dqfH4LwZQ+uTC2zKC2ae7pYBvxTPIqp2ykJUzdzH0/I= Subject key identifier: 1A:AA:D9:12:F9:68:DF:79:F2:55:FF:CF:0C:1B:44:EC:07:94:53:32 Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3 Certificate serial: 019B78A2385A6E9AEB3A13650A057E30E3AD Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/GqrZEvlo33nyVf_PDBtE7AeUUzI.roa Signing time: Thu 01 Jan 2026 08:17:35 +0000 ROA not before: Thu 01 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15768 IP address blocks: 195.35.90.0/23 maxlen: 24 195.35.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:38:5a:6e:9a:eb:3a:13:65:0a:05:7e:30:e3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3 Validity Not Before: Jan 1 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aaad912f968df79f255ffcf0c1b44ec07945332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:5e:27:5d:73:ef:51:9a:4d:ff:0b:f8:11: 5c:3d:3e:88:8a:2a:c8:86:1e:fb:4a:7e:1f:64:95: 9f:1f:39:30:6a:1a:ec:9b:43:52:40:03:96:9d:d0: e1:ca:62:ef:42:c0:53:41:52:1e:db:a0:c6:13:c5: 97:42:e4:e7:42:67:2d:32:42:ba:96:70:30:71:12: 80:7c:df:df:87:2c:50:86:7f:f5:ad:5b:34:5c:03: 58:c8:5b:77:c0:81:de:ab:38:64:05:4b:6f:6d:97: d4:0d:13:d1:87:4f:bb:8b:7c:9f:59:54:9d:e2:e5: 1a:e4:02:08:96:ca:3c:2c:6b:bd:d4:b2:c2:4c:bf: 39:a8:32:0a:03:a2:98:3c:50:6b:d8:b0:8c:f9:48: 1e:fe:65:d6:05:d6:01:4e:99:28:9c:de:1c:c2:1a: d1:40:3c:df:34:d5:f8:94:71:f7:43:ca:26:e5:96: 65:a9:e8:3f:40:6a:89:24:d5:c6:cd:94:21:8c:6e: 6b:5b:5e:9c:8a:31:a3:53:26:1f:db:88:49:22:57: 07:73:6f:bc:79:71:9b:a9:15:e2:3a:65:d0:c0:7a: d7:47:ed:dd:ac:ec:90:f5:10:a4:a2:46:13:64:17: c0:63:ea:3a:51:d1:74:bb:40:93:c5:08:67:5e:4b: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:D9:12:F9:68:DF:79:F2:55:FF:CF:0C:1B:44:EC:07:94:53:32 X509v3 Authority Key Identifier: keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/GqrZEvlo33nyVf_PDBtE7AeUUzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.35.90.0/23 Signature Algorithm: sha256WithRSAEncryption 22:93:37:23:4c:b6:e1:c4:b8:d8:2a:10:ff:81:26:0b:e3:65: 9b:95:2c:65:b3:2e:55:70:63:06:9b:c9:01:bf:79:bc:de:30: a6:7b:71:17:4b:38:f9:e1:67:3e:90:ce:d8:e6:1b:d3:67:d4: f3:01:db:4d:05:f8:26:cc:aa:fa:4c:ac:89:be:ef:e5:4e:48: 07:03:f8:e3:62:1e:4a:3c:36:ff:0c:6a:57:49:fa:81:26:44: 5c:96:a4:c3:51:9f:f4:4d:2a:9a:97:51:8f:16:17:8c:a9:b2: f7:b7:69:b4:4e:f7:5f:cb:57:12:fd:50:27:17:ce:6b:97:da: 10:83:84:34:b4:8f:8d:11:04:95:cb:a9:c8:91:32:c8:40:fe: f4:8a:5c:d7:99:2d:4c:f2:13:8e:fc:1f:25:03:fb:93:bd:c0: 34:d2:fd:7e:b8:bb:a4:a1:68:ea:da:98:37:54:b7:80:92:a6: 38:ed:42:5f:6b:5d:fc:ba:ba:75:e2:4a:d7:c6:22:8b:85:3d: 43:a4:80:9f:eb:2b:a3:72:1d:0d:90:24:fc:d7:5d:dc:56:60: 90:4e:be:7d:f5:0d:a0:a0:e0:0b:e4:e8:2e:58:c1:b9:2d:ed: e6:e3:82:52:53:2a:dd:bc:13:5f:30:b4:b6:8b:48:cd:1f:c1: cc:73:e1:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ojhabprrOhNlCgV+MOOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGIyMmQyNDliNjY2M2Y5ZmEzNGIxNzYyZDI1ZmZkOWZi M2ZlZDMwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWFhZDkxMmY5NjhkZjc5ZjI1NWZmY2YwYzFiNDRlYzA3OTQ1MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF1eJ11z71GaTf8L+BFcPT6IiirI hh77Sn4fZJWfHzkwahrsm0NSQAOWndDhymLvQsBTQVIe26DGE8WXQuTnQmctMkK6 lnAwcRKAfN/fhyxQhn/1rVs0XANYyFt3wIHeqzhkBUtvbZfUDRPRh0+7i3yfWVSd 4uUa5AIIlso8LGu91LLCTL85qDIKA6KYPFBr2LCM+Uge/mXWBdYBTpkonN4cwhrR QDzfNNX4lHH3Q8om5ZZlqeg/QGqJJNXGzZQhjG5rW16cijGjUyYf24hJIlcHc2+8 eXGbqRXiOmXQwHrXR+3drOyQ9RCkokYTZBfAY+o6UdF0u0CTxQhnXkvLqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqq2RL5aN958lX/zwwbROwHlFMyMB8GA1UdIwQY MBaAFARLItJJtmY/n6NLF2LSX/2fs/7TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEt NjM3M2QzNmNlZWY2LzEvR3FyWkV2bG8zM255VmZfUERCdEU3QWVVVXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yZDBlOWItNTAyMC00OWE2LWEzOTEtNjM3M2QzNmNlZWY2 LzEvQkVzaTBrbTJaai1mbzBzWFl0SmZfWi16X3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyNaMA0G CSqGSIb3DQEBCwUAA4IBAQAikzcjTLbhxLjYKhD/gSYL42WblSxlsy5VcGMGm8kB v3m83jCme3EXSzj54Wc+kM7Y5hvTZ9TzAdtNBfgmzKr6TKyJvu/lTkgHA/jjYh5K PDb/DGpXSfqBJkRclqTDUZ/0TSqal1GPFheMqbL3t2m0Tvdfy1cS/VAnF85rl9oQ g4Q0tI+NEQSVy6nIkTLIQP70ilzXmS1M8hOO/B8lA/uTvcA00v1+uLukoWjq2pg3 VLeAkqY47UJfa138urp14krXxiKLhT1DpICf6yujch0NkCT8113cVmCQTr599Q2g oOAL5OguWMG5Le3m44JSUyrdvBNfMLS2i0jNH8HMc+Fm -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:24 2026 by rpki-client