This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/gOqd7rN6RgPdoi7qiSxbZnHEaVQ.roa File: gOqd7rN6RgPdoi7qiSxbZnHEaVQ.roa (raw, json) Hash identifier: VBG1qW1V9HrpcCPfAbR67cE3N+E+YVk++0KjIj45T9Y= Subject key identifier: 80:EA:9D:EE:B3:7A:46:03:DD:A2:2E:EA:89:2C:5B:66:71:C4:69:54 Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468 Certificate serial: 019B77C703DDA4B52A9CAD6B486303E44470 Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/gOqd7rN6RgPdoi7qiSxbZnHEaVQ.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35266 IP address blocks: 46.30.8.0/21 maxlen: 24 185.69.13.0/24 maxlen: 24 185.69.14.0/23 maxlen: 24 185.81.188.0/22 maxlen: 24 2a01:b000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:03:dd:a4:b5:2a:9c:ad:6b:48:63:03:e4:44:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80ea9deeb37a4603dda22eea892c5b6671c46954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:2e:80:f9:74:8e:7c:86:7a:89:9a:38:78: 97:51:bb:66:5c:5c:6f:cc:c2:46:dc:a1:30:db:fd: 35:6b:1f:af:d3:2c:02:33:a9:ae:f3:99:97:4a:3b: 03:57:99:5b:03:3f:9d:ae:72:14:63:cf:df:87:be: 5d:33:5e:f5:4c:4e:4a:5d:1c:6b:28:3c:d6:94:8c: 03:49:fd:0b:fa:2a:63:21:e4:81:03:4a:50:42:2d: 3d:09:aa:53:bc:ab:eb:86:26:b6:f6:b1:fc:09:5a: a0:bc:62:66:75:06:cd:52:bc:b2:0f:b6:cc:26:97: 9e:0c:e3:6f:26:47:8f:a8:5b:ff:81:fe:fe:48:1a: b3:a6:1f:eb:85:4c:27:63:55:36:b8:e7:40:c9:19: e8:91:c3:22:10:11:23:48:c4:e6:82:f3:3a:3d:85: 92:94:69:6a:91:3f:7f:2a:f3:9d:ab:7e:07:98:f0: 09:ad:a8:1e:6a:da:75:a9:34:4e:bf:30:0f:5a:0f: cf:ae:b9:35:db:41:8f:90:86:c5:7d:f8:a7:4a:0e: 83:f7:8c:73:6e:0b:19:e2:d5:a4:6a:18:53:89:63: 6f:02:b8:93:62:e6:51:8c:18:ca:21:ac:d4:b0:bc: b8:22:03:77:ec:16:60:42:02:bd:50:9c:6d:16:ab: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EA:9D:EE:B3:7A:46:03:DD:A2:2E:EA:89:2C:5B:66:71:C4:69:54 X509v3 Authority Key Identifier: keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/gOqd7rN6RgPdoi7qiSxbZnHEaVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.8.0/21 185.69.13.0-185.69.15.255 185.81.188.0/22 IPv6: 2a01:b000::/32 Signature Algorithm: sha256WithRSAEncryption 06:49:85:05:af:45:41:0b:3d:20:7e:1b:cb:86:ef:1f:df:08: 2b:5d:e1:40:64:8f:bf:5d:62:90:e1:1e:83:ee:3d:e2:75:70: e3:65:37:94:8e:c3:d0:72:c5:7b:8e:bd:49:a1:bf:b1:de:cc: 46:76:ef:4b:93:96:62:23:75:92:4f:bb:4c:c8:5f:3d:9f:76: f7:de:be:15:48:e3:f8:09:03:34:80:b4:cb:dd:b9:a2:ab:f4: c2:9f:a7:ef:29:b8:a0:94:e8:24:c4:5d:ad:db:21:d2:a2:3d: bb:53:3d:53:42:68:dc:a2:ba:b7:30:e1:76:aa:d6:a0:73:a6: da:6a:49:e4:8a:7b:6a:37:ee:88:8b:cd:11:fb:44:f9:1b:91: b7:3b:6b:8f:b6:d7:32:f9:6f:9d:a8:6b:0c:2f:39:9c:9c:43: 61:cd:5f:dd:a2:57:45:56:9c:df:2b:96:51:08:bd:43:4e:9b: e3:b3:ba:84:30:41:37:63:07:3c:76:7e:72:98:3c:bf:26:03: 11:e6:ad:dd:63:e7:06:ec:17:b2:3f:4e:66:ff:94:2d:fc:be: c4:d2:ca:a3:47:65:c3:ed:18:9e:94:8a:03:ca:04:22:18:1e: c3:9b:c0:8e:17:85:36:2f:d5:28:f0:b8:74:5a:73:71:8a:12: d8:8a:38:82 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt3xwPdpLUqnK1rSGMD5ERwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMGE3NDlhZTI1YzFjYmI2NTg3MWQ0MTZhNzlhYjRhODg0 YWM0NjgwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGVhOWRlZWIzN2E0NjAzZGRhMjJlZWE4OTJjNWI2NjcxYzQ2OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg0ugPl0jnyGeomaOHiXUbtmXFxv zMJG3KEw2/01ax+v0ywCM6mu85mXSjsDV5lbAz+drnIUY8/fh75dM171TE5KXRxr KDzWlIwDSf0L+ipjIeSBA0pQQi09CapTvKvrhia29rH8CVqgvGJmdQbNUryyD7bM JpeeDONvJkePqFv/gf7+SBqzph/rhUwnY1U2uOdAyRnokcMiEBEjSMTmgvM6PYWS lGlqkT9/KvOdq34HmPAJrageatp1qTROvzAPWg/Prrk120GPkIbFffinSg6D94xz bgsZ4tWkahhTiWNvAriTYuZRjBjKIazUsLy4IgN37BZgQgK9UJxtFqtXYwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFIDqne6zekYD3aIu6oksW2ZxxGlUMB8GA1UdIwQY MBaAFJ0KdJriXBy7ZYcdQWp5q0qISsRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYt MWE2ZDNjOTlkYzQ4LzEvZ09xZDdyTjZSZ1Bkb2k3cWlTeGJabkhFYVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYtMWE2ZDNjOTlkYzQ4 LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQDLh4IMAwD BAC5RQ0DBAS5RQADBAK5UbwwDQQCAAIwBwMFACoBsAAwDQYJKoZIhvcNAQELBQAD ggEBAAZJhQWvRUELPSB+G8uG7x/fCCtd4UBkj79dYpDhHoPuPeJ1cONlN5SOw9By xXuOvUmhv7HezEZ270uTlmIjdZJPu0zIXz2fdvfevhVI4/gJAzSAtMvduaKr9MKf p+8puKCU6CTEXa3bIdKiPbtTPVNCaNyiurcw4Xaq1qBzptpqSeSKe2o37oiLzRH7 RPkbkbc7a4+21zL5b52oawwvOZycQ2HNX92iV0VWnN8rllEIvUNOm+OzuoQwQTdj Bzx2fnKYPL8mAxHmrd1j5wbsF7I/Tmb/lC38vsTSyqNHZcPtGJ6UigPKBCIYHsOb wI4XhTYv1SjwuHRac3GKEtiKOII= -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:28 2026 by rpki-client