This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/Gc2XvyP01-fby2wIcpCQAXK9NNI.roa File: Gc2XvyP01-fby2wIcpCQAXK9NNI.roa (raw, json) Hash identifier: TqTwmJ2kXyM/+f6YO1uN50U7uVnjd7tFzIbHZN9RIuA= Subject key identifier: 19:CD:97:BF:23:F4:D7:E7:DB:CB:6C:08:72:90:90:01:72:BD:34:D2 Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1 Certificate serial: 019B7EA70BCCC639EAF4520489F2DE85F26A Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/Gc2XvyP01-fby2wIcpCQAXK9NNI.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206999 IP address blocks: 185.28.88.0/24 maxlen: 24 185.28.89.0/24 maxlen: 24 185.28.90.0/24 maxlen: 24 185.28.91.0/24 maxlen: 24 185.73.64.0/24 maxlen: 24 185.73.65.0/24 maxlen: 24 185.73.66.0/24 maxlen: 24 185.73.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0b:cc:c6:39:ea:f4:52:04:89:f2:de:85:f2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19cd97bf23f4d7e7dbcb6c087290900172bd34d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:c4:a8:1c:cc:83:d3:96:51:1d:83:fe:2a: 62:99:e8:7f:1c:54:ab:02:13:14:0b:fc:0f:f9:87: 12:96:7e:c6:29:65:eb:92:29:0e:b0:e5:b5:ee:c3: ac:30:c1:9e:84:ab:ef:87:d1:be:06:58:26:4f:16: 5e:97:93:e2:40:8f:f4:13:cf:6f:cb:ae:e9:74:7c: 16:fb:d9:e7:01:aa:09:4e:81:0d:55:70:43:27:bc: c9:62:9d:72:1e:48:46:8d:de:29:4b:d1:d8:f3:1b: 34:b1:56:58:61:a5:2e:9e:c3:18:74:e4:ef:ea:71: 19:50:ff:1c:c3:26:bb:01:e6:52:ef:97:64:6b:d8: 23:96:65:86:d1:fe:8c:55:10:02:a8:d8:1c:18:f9: 69:c9:1e:92:e7:4b:fe:02:72:02:65:32:96:cd:27: 28:ec:19:2d:33:f5:06:22:91:45:10:ae:bc:7b:b1: d1:71:4d:e1:83:c9:94:22:4f:94:e5:76:f0:70:84: 67:8d:08:e5:d9:a0:e7:f6:98:6b:72:46:c7:a3:bb: 32:c1:4f:74:a4:6d:d6:7e:18:09:f8:1a:69:82:c1: 38:a7:f4:b4:9a:65:7f:09:d7:2a:51:31:4f:3d:cf: fc:0d:64:9a:6d:82:b0:38:a5:02:e0:e2:6c:f5:67: 25:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CD:97:BF:23:F4:D7:E7:DB:CB:6C:08:72:90:90:01:72:BD:34:D2 X509v3 Authority Key Identifier: keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/Gc2XvyP01-fby2wIcpCQAXK9NNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.88.0/22 185.73.64.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:c4:96:fc:6b:53:98:be:3e:24:b1:21:70:e2:74:86:91:a0: 07:1b:a6:f9:42:68:a7:23:2e:01:36:63:d2:6e:9d:14:5d:bf: d0:86:66:dc:50:b9:9e:17:21:92:9f:f8:da:bf:bf:a6:6a:c3: af:94:5f:40:b6:36:66:e1:8b:f2:70:aa:fb:b7:ec:4a:36:07: fb:64:6f:16:be:01:1d:a2:9d:54:72:9a:79:3b:8f:e4:0a:32: f3:bb:bd:60:29:e6:58:e7:b5:e6:04:6d:bc:d6:19:b5:18:02: 23:d2:ad:54:75:94:4c:00:05:63:eb:10:46:cd:06:cc:19:22: 14:54:e8:c2:c3:da:df:2d:91:d4:e6:83:72:5b:67:bb:28:32: 77:b1:3a:9e:93:49:45:83:79:9c:54:f9:61:10:73:3c:a7:12: e0:f9:b5:ac:4b:ab:9d:14:2d:5e:a3:c6:50:3f:2d:e8:52:44: 1a:20:94:69:3a:5a:f0:25:98:a4:f7:cf:91:7e:f5:01:7f:62: 9d:b0:38:da:12:c3:e4:f2:c9:77:1d:88:47:c5:65:28:f9:9f: 23:89:2e:c7:a6:8f:5a:0a:76:83:74:e4:9b:29:f1:6a:05:f1: 43:a0:0f:65:a6:45:8e:1f:c1:61:26:12:49:99:5e:3f:74:22: 8e:bb:f7:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pwvMxjnq9FIEifLehfJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YzBhNWJhNWJjODJlMjBlMDQ2ZmJiNTRjMDY1ODA2ZjRj N2I2YTEwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWNkOTdiZjIzZjRkN2U3ZGJjYjZjMDg3MjkwOTAwMTcyYmQzNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjDEqBzMg9OWUR2D/ipimeh/HFSr AhMUC/wP+YcSln7GKWXrkikOsOW17sOsMMGehKvvh9G+BlgmTxZel5PiQI/0E89v y67pdHwW+9nnAaoJToENVXBDJ7zJYp1yHkhGjd4pS9HY8xs0sVZYYaUunsMYdOTv 6nEZUP8cwya7AeZS75dka9gjlmWG0f6MVRACqNgcGPlpyR6S50v+AnICZTKWzSco 7BktM/UGIpFFEK68e7HRcU3hg8mUIk+U5XbwcIRnjQjl2aDn9phrckbHo7sywU90 pG3WfhgJ+BppgsE4p/S0mmV/CdcqUTFPPc/8DWSabYKwOKUC4OJs9WclzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBnNl78j9Nfn28tsCHKQkAFyvTTSMB8GA1UdIwQY MBaAFDXApbpbyC4g4Eb7tUwGWAb0x7ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83MDczZjEtM2EwOC00ZTRhLWJlZGYt NThjY2Y5NWQyODJiLzEvR2MyWHZ5UDAxLWZieTJ3SWNwQ1FBWEs5Tk5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83MDczZjEtM2EwOC00ZTRhLWJlZGYtNThjY2Y5NWQyODJi LzEvTmNDbHVsdklMaURnUnZ1MVRBWllCdlRIdHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRxYAwQC uUlAMA0GCSqGSIb3DQEBCwUAA4IBAQArxJb8a1OYvj4ksSFw4nSGkaAHG6b5Qmin Iy4BNmPSbp0UXb/QhmbcULmeFyGSn/jav7+masOvlF9AtjZm4YvycKr7t+xKNgf7 ZG8WvgEdop1Ucpp5O4/kCjLzu71gKeZY57XmBG281hm1GAIj0q1UdZRMAAVj6xBG zQbMGSIUVOjCw9rfLZHU5oNyW2e7KDJ3sTqek0lFg3mcVPlhEHM8pxLg+bWsS6ud FC1eo8ZQPy3oUkQaIJRpOlrwJZik98+RfvUBf2KdsDjaEsPk8sl3HYhHxWUo+Z8j iS7Hpo9aCnaDdOSbKfFqBfFDoA9lpkWOH8FhJhJJmV4/dCKOu/ek -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:00 2026 by rpki-client