This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/gnUBlLxOjDH4Z1f5fn-4AChySoE.roa File: gnUBlLxOjDH4Z1f5fn-4AChySoE.roa (raw, json) Hash identifier: sfLmAWTXK6E2qypaAtchDrq6czQBGZESEbOVmGAo4Qo= Subject key identifier: 82:75:01:94:BC:4E:8C:31:F8:67:57:F9:7E:7F:B8:00:28:72:4A:81 Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f Certificate serial: 019B7A5B97C317FAFAC1D13C7ED67AE3FD69 Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/gnUBlLxOjDH4Z1f5fn-4AChySoE.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60481 IP address blocks: 185.78.40.0/22 maxlen: 22 2001:67c:173c::/48 maxlen: 48 2a03:57e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:c3:17:fa:fa:c1:d1:3c:7e:d6:7a:e3:fd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82750194bc4e8c31f86757f97e7fb80028724a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e6:81:b7:ca:71:2f:e2:48:f6:36:47:bf:fb: ee:38:12:a5:1f:eb:b0:87:00:53:93:e5:ed:5c:65: b4:8a:86:03:68:b7:42:a5:9a:34:00:09:8d:a8:69: a7:c8:1f:62:e1:ac:ad:f0:65:33:3d:96:c2:4e:db: 45:10:c0:c5:60:c6:44:c6:0c:2b:75:84:eb:e6:ae: 6f:52:1b:67:cd:2f:d8:bd:6e:fe:13:31:e7:1d:7b: 7c:f2:3f:98:50:eb:f2:86:18:3f:0f:f8:fa:ec:e1: 9a:6a:cf:68:e3:9e:fc:88:62:68:8e:59:70:76:76: 46:1c:b9:8f:4a:7e:06:3f:f7:64:c0:2c:b0:20:24: 87:dc:2a:91:88:e0:20:bd:4a:e5:30:44:e6:43:44: 76:6d:59:aa:33:47:ee:1d:7b:08:d2:7d:9f:f6:dc: c2:d6:06:1c:e5:2f:17:62:93:71:98:eb:46:d8:19: 73:46:ce:86:9b:fe:a4:13:94:b1:b4:74:b0:4f:a0: 92:b3:73:24:1d:97:31:14:e4:61:a1:6f:20:47:8a: 1e:50:51:d3:42:ce:be:94:d6:e6:53:77:1e:1d:02: 21:59:d6:22:d6:7b:a9:10:99:23:76:4f:b8:63:25: aa:f3:6f:3b:79:c7:13:ff:69:f5:32:15:4c:97:13: 54:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:75:01:94:BC:4E:8C:31:F8:67:57:F9:7E:7F:B8:00:28:72:4A:81 X509v3 Authority Key Identifier: keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/gnUBlLxOjDH4Z1f5fn-4AChySoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.40.0/22 IPv6: 2001:67c:173c::/48 2a03:57e0::/32 Signature Algorithm: sha256WithRSAEncryption 56:2a:5e:30:9c:0d:89:4f:b4:3e:50:3a:6f:38:ea:fe:27:b7: a2:a6:c9:60:a2:5f:2e:7f:bb:ea:aa:63:81:7f:a4:f9:fe:cd: 72:f5:2b:43:2f:bb:62:81:f3:00:18:1e:89:e6:ee:e1:d8:9d: 51:fd:0f:38:39:eb:bb:00:c4:41:28:fe:da:ff:90:47:99:29: 5a:19:a4:09:07:5a:34:1f:46:bc:b8:93:64:b3:7f:b1:51:87: 7f:4a:6b:90:e8:80:cc:ca:5c:0a:a2:c3:46:40:42:90:fe:37: 60:32:34:49:f4:0e:d3:f8:e4:82:dc:f3:3a:b2:5b:75:4d:25: 2d:ea:b1:33:f8:49:68:17:a0:df:76:fc:da:2f:50:ce:b9:66: 49:7c:e6:2d:1e:af:ce:6c:2a:f3:20:e3:36:f7:3e:5e:86:67: 1e:7d:c5:bf:0b:33:7f:a5:b6:03:32:8c:93:6e:38:e0:60:12: 80:1b:a9:ee:3f:5f:55:66:8e:4d:14:de:ad:2f:65:2e:96:a2: fd:e7:31:df:ec:74:05:ba:48:71:de:e2:e6:29:29:34:ec:f2: e6:b7:56:d4:1b:4e:29:e0:53:f4:2b:c7:a0:42:99:5f:2a:aa: 72:70:5d:47:1d:df:18:66:1f:00:74:13:79:52:2c:c7:7e:70: c7:0a:da:85 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6W5fDF/r6wdE8ftZ64/1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDE0MjI3NDczZTRiNzVjODc3Mjc0Y2Y2YzA1MGYyNWM1 NzcyMWYwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mjc1MDE5NGJjNGU4YzMxZjg2NzU3Zjk3ZTdmYjgwMDI4NzI0YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uaBt8pxL+JI9jZHv/vuOBKlH+uw hwBTk+XtXGW0ioYDaLdCpZo0AAmNqGmnyB9i4ayt8GUzPZbCTttFEMDFYMZExgwr dYTr5q5vUhtnzS/YvW7+EzHnHXt88j+YUOvyhhg/D/j67OGaas9o4578iGJojllw dnZGHLmPSn4GP/dkwCywICSH3CqRiOAgvUrlMETmQ0R2bVmqM0fuHXsI0n2f9tzC 1gYc5S8XYpNxmOtG2BlzRs6Gm/6kE5SxtHSwT6CSs3MkHZcxFORhoW8gR4oeUFHT Qs6+lNbmU3ceHQIhWdYi1nupEJkjdk+4YyWq8287eccT/2n1MhVMlxNUlQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIJ1AZS8Towx+GdX+X5/uAAockqBMB8GA1UdIwQY MBaAFLjRQidHPkt1yHcnTPbAUPJcV3IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNzRiODAtNDBlYS00ZTM0LWI1MGQt MTE0ZmFjZTFhNTcxLzEvZ25VQmxMeE9qREg0WjFmNWZuLTRBQ2h5U29FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNzRiODAtNDBlYS00ZTM0LWI1MGQtMTE0ZmFjZTFhNTcx LzEvdU5GQ0owYy1TM1hJZHlkTTlzQlE4bHhYY2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuU4oMBYE AgACMBADBwAgAQZ8FzwDBQAqA1fgMA0GCSqGSIb3DQEBCwUAA4IBAQBWKl4wnA2J T7Q+UDpvOOr+J7eipslgol8uf7vqqmOBf6T5/s1y9StDL7tigfMAGB6J5u7h2J1R /Q84Oeu7AMRBKP7a/5BHmSlaGaQJB1o0H0a8uJNks3+xUYd/SmuQ6IDMylwKosNG QEKQ/jdgMjRJ9A7T+OSC3PM6slt1TSUt6rEz+EloF6DfdvzaL1DOuWZJfOYtHq/O bCrzIOM29z5ehmcefcW/CzN/pbYDMoyTbjjgYBKAG6nuP19VZo5NFN6tL2UulqL9 5zHf7HQFukhx3uLmKSk07PLmt1bUG04p4FP0K8egQplfKqpycF1HHd8YZh8AdBN5 UizHfnDHCtqF -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:49 2026 by rpki-client