This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/GAKRFHm3BIkbt_KHdO-HYTyWCS0.roa File: GAKRFHm3BIkbt_KHdO-HYTyWCS0.roa (raw, json) Hash identifier: 0Jfzcvn5KxpE+uRT7hhET5tdaNQSgWGkWhSb4S4MAyk= Subject key identifier: 18:02:91:14:79:B7:04:89:1B:B7:F2:87:74:EF:87:61:3C:96:09:2D Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc Certificate serial: 019B7E392C6A1D980D06331876BB98622D03 Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/GAKRFHm3BIkbt_KHdO-HYTyWCS0.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59668 IP address blocks: 31.40.24.0/22 maxlen: 22 45.91.220.0/22 maxlen: 22 82.215.96.0/20 maxlen: 20 91.212.124.0/24 maxlen: 24 93.157.58.0/24 maxlen: 24 118.88.16.0/21 maxlen: 21 119.12.104.0/21 maxlen: 21 178.218.200.0/21 maxlen: 21 202.79.184.0/21 maxlen: 21 2a0e:17c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2c:6a:1d:98:0d:06:33:18:76:bb:98:62:2d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1802911479b704891bb7f28774ef87613c96092d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:65:26:09:15:29:d9:9d:c7:85:db:f2:98: c2:df:2c:97:b1:b2:f1:c2:f7:c0:16:fa:4a:74:d6: a5:10:3d:e4:47:d1:14:b1:1f:49:21:79:08:2c:ab: 46:84:72:e4:33:dd:f1:ac:ba:94:71:63:0e:43:85: 22:d4:e2:ea:e6:5c:06:96:d1:0f:e2:4b:08:ce:0b: 49:d9:7a:5d:fa:71:92:dc:ef:be:6a:06:de:fa:94: 08:e8:49:f6:2a:09:ed:e1:ce:9f:e9:5b:d6:21:f9: 2c:12:0e:25:47:66:d2:d4:9c:d1:2b:92:82:85:85: ef:34:02:37:bb:c4:16:04:58:72:5b:5a:e9:11:90: df:1f:5f:22:f8:53:90:0a:fd:9e:24:5f:cb:cb:ea: a4:f4:76:da:fa:1f:35:2b:15:d0:87:36:e5:78:5a: e2:a5:9d:0f:e1:37:6f:e7:dd:59:9d:5c:97:44:d4: 60:91:b8:ea:c0:7a:e9:d0:bd:d3:ac:0a:f7:9a:a2: 4d:c8:6f:a6:59:37:ef:61:52:a8:53:9a:67:2c:11: 1d:50:c5:ec:f2:2e:27:9c:5b:dc:44:fa:95:e3:71: f8:7f:3b:cb:fe:c1:98:38:3a:bf:4b:3e:b5:68:1d: 0d:53:0c:d6:4f:35:f1:40:19:11:4d:51:4a:0f:30: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:02:91:14:79:B7:04:89:1B:B7:F2:87:74:EF:87:61:3C:96:09:2D X509v3 Authority Key Identifier: keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/GAKRFHm3BIkbt_KHdO-HYTyWCS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.24.0/22 45.91.220.0/22 82.215.96.0/20 91.212.124.0/24 93.157.58.0/24 118.88.16.0/21 119.12.104.0/21 178.218.200.0/21 202.79.184.0/21 IPv6: 2a0e:17c0::/29 Signature Algorithm: sha256WithRSAEncryption ae:e2:bd:0f:cd:43:37:0a:b4:14:b3:fc:12:ae:a6:d4:94:c7: ed:51:ba:a0:34:40:e5:00:c6:dd:e0:46:bf:20:1b:32:91:95: 5d:8e:f6:e1:db:36:55:27:09:c2:79:14:26:5c:d9:7a:34:4a: 7b:a1:de:43:27:19:f3:81:a4:ef:d3:d8:ce:41:6e:55:01:59: b8:98:e6:73:8e:6b:e7:5f:43:54:6b:42:c2:01:48:94:a9:39: 73:3a:46:21:10:e9:4d:56:6b:dc:05:45:59:1d:4b:bb:27:82: fe:76:19:10:80:7d:ee:73:97:d3:9c:b6:16:01:be:15:ca:b4: f5:15:08:31:16:a2:ed:9f:0f:5d:f7:b0:ca:e9:c5:ca:6c:69: 9e:a9:35:bd:32:13:ef:9a:fa:bb:61:b5:23:3f:00:9d:37:ce: b6:7a:ac:a9:75:3b:98:6a:bf:17:c3:84:ad:12:af:e9:9f:b7: 4f:ef:b8:30:83:87:8b:6a:f8:50:06:f8:e0:7b:6a:c9:c0:ad: eb:19:b5:31:e1:7b:03:1a:7c:13:75:f8:50:0b:09:6c:eb:a6: 03:cf:dc:69:4f:87:49:0f:f2:f9:a5:95:c2:f1:dd:57:44:9e: c0:7e:35:b7:6e:f9:3f:4c:45:78:b2:18:ce:81:e9:b2:c0:d9: 80:d7:62:2f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt+OSxqHZgNBjMYdruYYi0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTFkMGVhNzMwZmNmY2IyMTQ5OTk1Yzc4Mjg5YmYyZDZk MTg2ZmMwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODAyOTExNDc5YjcwNDg5MWJiN2YyODc3NGVmODc2MTNjOTYwOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApktlJgkVKdmdx4Xb8pjC3yyXsbLx wvfAFvpKdNalED3kR9EUsR9JIXkILKtGhHLkM93xrLqUcWMOQ4Ui1OLq5lwGltEP 4ksIzgtJ2Xpd+nGS3O++agbe+pQI6En2Kgnt4c6f6VvWIfksEg4lR2bS1JzRK5KC hYXvNAI3u8QWBFhyW1rpEZDfH18i+FOQCv2eJF/Ly+qk9Hba+h81KxXQhzbleFri pZ0P4Tdv591ZnVyXRNRgkbjqwHrp0L3TrAr3mqJNyG+mWTfvYVKoU5pnLBEdUMXs 8i4nnFvcRPqV43H4fzvL/sGYODq/Sz61aB0NUwzWTzXxQBkRTVFKDzBcHwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBgCkRR5twSJG7fyh3Tvh2E8lgktMB8GA1UdIwQY MBaAFHmh0OpzD8/LIUmZXHgom/LW0Yb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEt ODBhOTFhZjQyYTY1LzEvR0FLUkZIbTNCSWtidF9LSGRPLUhZVHlXQ1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEtODBhOTFhZjQyYTY1 LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQCHygYAwQC LVvcAwQEUtdgAwQAW9R8AwQAXZ06AwQDdlgQAwQDdwxoAwQDstrIAwQDyk+4MA0E AgACMAcDBQMqDhfAMA0GCSqGSIb3DQEBCwUAA4IBAQCu4r0PzUM3CrQUs/wSrqbU lMftUbqgNEDlAMbd4Ea/IBsykZVdjvbh2zZVJwnCeRQmXNl6NEp7od5DJxnzgaTv 09jOQW5VAVm4mOZzjmvnX0NUa0LCAUiUqTlzOkYhEOlNVmvcBUVZHUu7J4L+dhkQ gH3uc5fTnLYWAb4VyrT1FQgxFqLtnw9d97DK6cXKbGmeqTW9MhPvmvq7YbUjPwCd N862eqypdTuYar8Xw4StEq/pn7dP77gwg4eLavhQBvjge2rJwK3rGbUx4XsDGnwT dfhQCwls66YDz9xpT4dJD/L5pZXC8d1XRJ7AfjW3bvk/TEV4shjOgemywNmA12Iv -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:31 2026 by rpki-client