This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa File: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (raw, json) Hash identifier: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI= Subject key identifier: 18:27:83:80:22:8E:9D:B1:58:DD:4D:28:95:9E:2B:D3:2A:80:5F:B8 Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Certificate serial: 019B7CECF0723FE8C2266CC332007AE84A05 Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa Signing time: Fri 02 Jan 2026 04:17:41 +0000 ROA not before: Fri 02 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.121.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f0:72:3f:e8:c2:26:6c:c3:32:00:7a:e8:4a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Validity Not Before: Jan 2 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18278380228e9db158dd4d28959e2bd32a805fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:fa:eb:ea:20:80:e4:b9:75:d2:7e:de:83: a6:89:03:47:89:9b:99:5e:bf:64:83:ad:26:a3:65: e0:19:33:2f:68:ab:c2:bc:e6:e9:c9:26:5f:b7:db: 76:a6:94:c4:fe:14:90:23:39:7b:b4:0f:1f:44:43: 6a:75:f5:4b:a9:07:ad:c9:80:1e:a2:46:07:dc:45: b8:75:39:48:31:f7:fa:70:9f:73:8a:b5:87:ae:8c: 4b:9f:f4:6a:13:46:53:60:44:40:fa:98:dd:da:00: 51:e6:1a:28:1c:19:1a:ce:b3:5b:73:92:f1:9b:34: a6:13:60:48:37:83:4a:83:4b:08:51:72:43:6d:de: 96:49:60:83:34:45:01:7e:2f:f1:29:f5:56:67:af: 06:91:e7:68:6c:6d:f5:ae:ea:1c:90:1b:e0:50:e0: 2e:41:90:a0:5d:cd:7a:57:44:42:a5:a6:92:1e:38: c2:c5:a2:4d:ba:b1:32:b1:7f:e2:62:22:d4:1e:8b: 87:ad:c4:21:e7:59:12:ce:b6:38:58:bd:17:df:03: 98:c1:e5:54:fc:13:3e:0b:45:fe:d7:b7:23:20:18: 1e:e0:24:0c:f2:d0:24:4b:fb:02:3f:af:53:6d:46: 00:90:fe:d5:b1:e8:a9:14:69:e3:6e:93:78:32:01: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:27:83:80:22:8E:9D:B1:58:DD:4D:28:95:9E:2B:D3:2A:80:5F:B8 X509v3 Authority Key Identifier: keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.142.0/24 Signature Algorithm: sha256WithRSAEncryption a3:ae:9c:d9:1d:dd:58:e5:cb:89:fe:cb:ba:a7:98:d9:19:b8: 3b:a3:fa:0d:69:fb:f8:c3:5b:d3:d0:c3:bd:47:72:46:a7:76: 7e:c2:1e:02:5d:b2:fd:44:48:46:b7:1f:6c:2b:b7:79:80:cd: d7:35:fc:70:88:8e:6e:6a:85:46:d8:ff:c2:70:2b:89:48:dd: d6:45:98:51:5e:fc:ba:bc:09:e0:c1:5b:d9:bf:f4:a8:a4:c2: 27:d3:24:10:3e:e4:16:b8:ee:6b:22:a1:34:ec:ac:f1:05:54: 68:6a:39:16:fc:c0:24:69:82:91:3c:b5:eb:ad:11:b1:fd:f2: 19:a4:fb:ae:fe:14:84:91:78:c3:47:82:42:74:95:b8:81:60: 11:c4:a6:2b:61:85:20:12:b8:77:33:91:41:b8:fa:26:90:f8: 4f:bb:a7:c8:7a:1b:37:14:6b:b8:90:89:8e:e6:47:a1:86:18: 49:1c:2c:38:24:90:33:ce:6a:b9:17:9d:fd:cb:95:6e:86:f2: fd:bc:69:8a:50:49:dd:ea:54:90:da:02:81:f8:f1:37:4a:8d: 77:f2:e1:d3:cb:71:32:7a:8e:83:2a:30:09:81:82:2d:40:87: 29:22:52:84:cd:7f:17:cd:a3:35:5a:84:17:87:ec:e7:11:77: 0f:f5:df:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87PByP+jCJmzDMgB66EoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy N2Y2NzUwHhcNMjYwMTAyMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODI3ODM4MDIyOGU5ZGIxNThkZDRkMjg5NTllMmJkMzJhODA1ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdz66+oggOS5ddJ+3oOmiQNHiZuZ Xr9kg60mo2XgGTMvaKvCvObpySZft9t2ppTE/hSQIzl7tA8fRENqdfVLqQetyYAe okYH3EW4dTlIMff6cJ9zirWHroxLn/RqE0ZTYERA+pjd2gBR5hooHBkazrNbc5Lx mzSmE2BIN4NKg0sIUXJDbd6WSWCDNEUBfi/xKfVWZ68GkedobG31ruockBvgUOAu QZCgXc16V0RCpaaSHjjCxaJNurEysX/iYiLUHouHrcQh51kSzrY4WL0X3wOYweVU /BM+C0X+17cjIBge4CQM8tAkS/sCP69TbUYAkP7VseipFGnjbpN4MgGxeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBgng4Aijp2xWN1NKJWeK9MqgF+4MB8GA1UdIwQY MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt OTRhYzhhZjFiZmNmLzEvR0NlRGdDS09uYkZZM1Uwb2xaNHIweXFBWDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXmOMA0G CSqGSIb3DQEBCwUAA4IBAQCjrpzZHd1Y5cuJ/su6p5jZGbg7o/oNafv4w1vT0MO9 R3JGp3Z+wh4CXbL9REhGtx9sK7d5gM3XNfxwiI5uaoVG2P/CcCuJSN3WRZhRXvy6 vAngwVvZv/SopMIn0yQQPuQWuO5rIqE07KzxBVRoajkW/MAkaYKRPLXrrRGx/fIZ pPuu/hSEkXjDR4JCdJW4gWARxKYrYYUgErh3M5FBuPomkPhPu6fIehs3FGu4kImO 5kehhhhJHCw4JJAzzmq5F539y5VuhvL9vGmKUEnd6lSQ2gKB+PE3So138uHTy3Ey eo6DKjAJgYItQIcpIlKEzX8XzaM1WoQXh+znEXcP9d+0 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:48 2026 by rpki-client