This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GOanlWDUzk69YG0eCePJEpU9BnM.roa File: GOanlWDUzk69YG0eCePJEpU9BnM.roa (raw, json) Hash identifier: nrCNFfv+/Z1ic8g3j7yWk+DMZXSXMkw06k0jEv6zp3M= Subject key identifier: 18:E6:A7:95:60:D4:CE:4E:BD:60:6D:1E:09:E3:C9:12:95:3D:06:73 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B93C7B1B29C34BACA7FD9616870105212 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GOanlWDUzk69YG0eCePJEpU9BnM.roa Signing time: Tue 06 Jan 2026 14:48:16 +0000 ROA not before: Tue 06 Jan 2026 14:48:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205899 IP address blocks: 185.113.10.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 2a05:9080:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:c7:b1:b2:9c:34:ba:ca:7f:d9:61:68:70:10:52:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 6 14:48:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18e6a79560d4ce4ebd606d1e09e3c912953d0673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:09:2d:4c:98:f1:7f:7c:f2:d8:dd:29:a1: 0d:ad:03:a1:e8:c2:39:1f:0e:41:93:a4:d2:ee:26: 5d:a8:8a:3f:77:7d:5e:5d:86:e0:3c:03:85:a1:2d: c3:b2:a1:9c:26:11:aa:84:48:e4:28:b9:81:a7:bc: 7c:cd:4c:48:bd:a2:dc:20:44:6a:5f:89:bd:24:49: 34:f7:8e:8d:21:aa:a1:6e:66:7c:f0:09:c2:e1:eb: 0f:7a:d8:75:9f:12:b5:00:c9:1c:8c:5b:58:e2:4f: bd:05:05:07:c4:0e:93:8a:be:f5:7a:6f:19:f8:28: 02:98:15:f1:11:5a:2d:b5:1f:58:2f:78:56:42:a6: 45:d7:ca:8f:45:51:5a:ff:06:79:d2:a6:81:1f:df: cf:ae:d8:9c:a9:bb:5f:07:e7:c4:b2:af:1a:47:eb: 11:a5:d8:af:d7:c7:e2:15:7d:78:ba:1a:3a:8b:57: 3c:c2:8a:e5:a9:ac:64:b5:8b:21:45:df:31:27:c6: 50:48:3f:c2:60:d3:08:ef:c3:16:ce:22:e0:ce:2d: a6:4b:cf:24:cf:f4:8a:73:a1:30:72:c5:28:79:b9: b6:43:7a:d7:b0:dc:8a:df:6a:9a:da:e7:dd:68:6a: d8:76:c3:a5:f4:e9:bc:e3:ef:5c:7c:2a:d8:da:54: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E6:A7:95:60:D4:CE:4E:BD:60:6D:1E:09:E3:C9:12:95:3D:06:73 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/GOanlWDUzk69YG0eCePJEpU9BnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.10.0/24 IPv6: 2a05:9080:5::/48 2a05:9080:14::/48 Signature Algorithm: sha256WithRSAEncryption 97:79:96:ed:cc:92:2d:90:40:76:88:4b:8d:c5:6f:ae:fe:d1: 45:62:5f:14:31:f1:97:bd:84:b4:38:df:27:7d:d7:9d:f6:5f: 58:89:04:1c:d3:0c:11:79:5c:c0:2e:fa:65:0e:37:06:aa:39: e1:7d:22:b8:2f:7f:59:bc:82:a8:72:12:9b:c6:a3:2b:a1:9d: 33:a2:1b:70:05:44:72:16:c5:8d:17:e1:03:57:b5:9d:56:27: cc:34:32:ae:57:11:25:8a:49:df:a6:b9:81:d5:21:33:ef:4b: 96:84:b1:8b:25:31:bb:b5:12:a0:3e:ab:13:cf:aa:3f:5d:de: 9b:33:f9:dc:f5:40:c3:c7:4b:46:c5:f7:73:2f:dd:3c:20:21: 22:87:f1:24:e1:b3:e5:03:46:a3:43:53:13:69:61:ee:5d:e7: e0:ab:4a:61:a4:cc:ba:39:d7:ce:01:1d:4a:56:ed:9f:5c:20: 23:8e:01:6c:55:0c:13:2e:87:a3:e9:2a:17:2f:27:b1:1f:df: 45:c6:80:b9:b9:0a:bb:60:6a:67:d1:f2:20:b1:5b:3a:b4:ac: ba:87:0b:21:13:40:d3:60:11:70:5e:c7:d6:aa:28:a9:a0:f6: 4d:b7:06:ed:ae:a9:f3:86:d7:18:ba:2a:c2:0c:24:3a:92:96: be:8b:04:bb -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZuTx7GynDS6yn/ZYWhwEFISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTA2MTQ0ODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGU2YTc5NTYwZDRjZTRlYmQ2MDZkMWUwOWUzYzkxMjk1M2QwNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3kJLUyY8X988tjdKaENrQOh6MI5 Hw5Bk6TS7iZdqIo/d31eXYbgPAOFoS3DsqGcJhGqhEjkKLmBp7x8zUxIvaLcIERq X4m9JEk0946NIaqhbmZ88AnC4esPeth1nxK1AMkcjFtY4k+9BQUHxA6Tir71em8Z +CgCmBXxEVottR9YL3hWQqZF18qPRVFa/wZ50qaBH9/PrticqbtfB+fEsq8aR+sR pdiv18fiFX14uho6i1c8worlqaxktYshRd8xJ8ZQSD/CYNMI78MWziLgzi2mS88k z/SKc6EwcsUoebm2Q3rXsNyK32qa2ufdaGrYdsOl9Om84+9cfCrY2lRzWwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBjmp5Vg1M5OvWBtHgnjyRKVPQZzMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvR09hbmxXRFV6azY5WUcwZUNlUEpFcFU5Qm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuXEKMBgE AgACMBIDBwAqBZCAAAUDBwAqBZCAABQwDQYJKoZIhvcNAQELBQADggEBAJd5lu3M ki2QQHaIS43Fb67+0UViXxQx8Ze9hLQ43yd91532X1iJBBzTDBF5XMAu+mUONwaq OeF9Irgvf1m8gqhyEpvGoyuhnTOiG3AFRHIWxY0X4QNXtZ1WJ8w0Mq5XESWKSd+m uYHVITPvS5aEsYslMbu1EqA+qxPPqj9d3psz+dz1QMPHS0bF93Mv3TwgISKH8STh s+UDRqNDUxNpYe5d5+CrSmGkzLo5184BHUpW7Z9cICOOAWxVDBMuh6PpKhcvJ7Ef 30XGgLm5CrtgamfR8iCxWzq0rLqHCyETQNNgEXBex9aqKKmg9k23Bu2uqfOG1xi6 KsIMJDqSlr6LBLs= -----END CERTIFICATE-----Generated at Fri Jan 9 00:35:21 2026 by rpki-client