This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/gQ9G1wyw8P68T-YoeRrNExRIJ54.roa File: gQ9G1wyw8P68T-YoeRrNExRIJ54.roa (raw, json) Hash identifier: U225Ret2JuGydyVsYjJv8x78fpJD2cYEwUxTjEVRMGY= Subject key identifier: 81:0F:46:D7:0C:B0:F0:FE:BC:4F:E6:28:79:1A:CD:13:14:48:27:9E Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Certificate serial: 019B7AC7EB2C65F2807BB472138B7FA5BD16 Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/gQ9G1wyw8P68T-YoeRrNExRIJ54.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206701 IP address blocks: 194.0.139.0/24 maxlen: 24 194.0.141.0/24 maxlen: 24 194.0.159.0/24 maxlen: 24 194.0.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:eb:2c:65:f2:80:7b:b4:72:13:8b:7f:a5:bd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00 Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=810f46d70cb0f0febc4fe628791acd131448279e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4e:e0:6e:df:42:e6:a9:6f:d8:6d:e1:86:bb: 36:84:7b:48:46:f2:12:cf:40:81:f6:3d:4f:10:1c: 5c:77:aa:28:87:b0:93:23:22:68:95:b4:33:74:a3: d9:3f:ed:42:f5:04:4b:0b:51:6f:b3:0e:c7:41:01: 02:47:23:3a:e8:08:50:b1:f0:d0:a0:1f:c6:0e:3d: c7:0e:80:d3:81:4b:7a:16:23:95:3e:af:05:4b:9b: f7:ae:fd:e4:39:17:d3:50:97:c5:1e:4d:dc:bb:1f: ad:dd:0a:02:a3:f5:b2:2f:cc:55:2d:e7:75:3d:81: d3:65:d5:a2:06:59:47:fb:14:06:7a:b9:a9:ab:70: be:e5:86:5f:43:2f:dd:be:25:14:68:8b:f6:97:b9: d7:58:92:3c:0f:6c:51:f7:db:d3:c9:5d:eb:14:fb: e0:cc:7e:34:85:36:67:20:bd:eb:0f:6a:03:2f:2b: b7:eb:5e:61:4e:d1:74:5b:91:ce:66:0d:9f:99:9e: 1c:24:ef:b7:ac:7f:78:ed:c2:ce:7e:6e:d1:82:bd: 69:e3:e1:ba:fb:9b:bc:a2:b1:a9:9f:17:64:c4:d7: a2:35:ec:2d:4e:6a:99:41:7a:95:bc:f6:f1:22:ba: 48:4e:b8:5b:f0:51:f3:83:d7:a7:6f:5c:82:57:74: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0F:46:D7:0C:B0:F0:FE:BC:4F:E6:28:79:1A:CD:13:14:48:27:9E X509v3 Authority Key Identifier: keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/gQ9G1wyw8P68T-YoeRrNExRIJ54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.139.0/24 194.0.141.0/24 194.0.159.0/24 194.0.168.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:93:af:68:66:9b:8a:2d:a4:6c:f8:f7:47:0d:1b:0b:bf:e6: ae:de:8a:6a:30:02:ec:7e:05:9c:15:22:14:9f:99:53:0d:83: 1f:0b:16:e3:fb:b3:6a:2f:a3:26:fa:61:31:78:64:f8:53:28: e9:9d:6e:f6:0d:54:16:9a:9e:37:70:2b:c0:03:90:18:d9:84: ca:3a:ef:e0:5e:32:d8:b2:bb:b4:7c:e3:ec:48:30:5b:d7:64: 6a:f2:5f:cc:6c:d5:cd:22:c2:04:e1:71:ec:63:fd:0d:67:3b: e1:5a:7e:64:52:89:df:e3:e3:e3:5c:7d:31:ca:9b:46:c8:10: 3c:b6:5e:35:fd:ed:90:e0:be:88:07:57:ee:74:9f:8a:6d:9c: 3e:5e:24:f3:a7:82:f5:23:e4:07:9f:bf:ad:52:6d:e0:17:6e: 80:c6:fc:c4:a3:ce:57:6f:1e:ea:bd:b6:90:de:e1:53:92:18: 60:5b:46:5c:08:07:41:f0:22:10:da:98:d7:11:cf:c1:02:bc: b7:5c:40:73:1a:c1:59:3d:4f:5d:40:4a:fb:4e:23:59:0a:39: 31:82:2d:d9:fd:e7:88:11:28:ce:6c:c8:a6:4d:2e:a6:68:68: 0a:15:d3:99:2b:bb:e2:7f:01:d7:f4:ab:12:60:99:1e:e4:0e: f5:d2:6d:b9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x+ssZfKAe7RyE4t/pb0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTRiOTAwZWZmNjEwYTQxODdmNmZiZDQ1ZTNiODU3ZDA4 OTZhMDAwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTBmNDZkNzBjYjBmMGZlYmM0ZmU2Mjg3OTFhY2QxMzE0NDgyNzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U7gbt9C5qlv2G3hhrs2hHtIRvIS z0CB9j1PEBxcd6ooh7CTIyJolbQzdKPZP+1C9QRLC1Fvsw7HQQECRyM66AhQsfDQ oB/GDj3HDoDTgUt6FiOVPq8FS5v3rv3kORfTUJfFHk3cux+t3QoCo/WyL8xVLed1 PYHTZdWiBllH+xQGermpq3C+5YZfQy/dviUUaIv2l7nXWJI8D2xR99vTyV3rFPvg zH40hTZnIL3rD2oDLyu3615hTtF0W5HOZg2fmZ4cJO+3rH947cLOfm7Rgr1p4+G6 +5u8orGpnxdkxNeiNewtTmqZQXqVvPbxIrpITrhb8FHzg9enb1yCV3QXDwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIEPRtcMsPD+vE/mKHkazRMUSCeeMB8GA1UdIwQY MBaAFG8UuQDv9hCkGH9vvUXjuFfQiWoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUt NTE4MWEyZjBkMTk3LzEvZ1E5RzF3eXc4UDY4VC1Zb2VSck5FeFJJSjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS83YjE4MjYtYTZhZi00NzA0LThmODUtNTE4MWEyZjBkMTk3 LzEvYnhTNUFPXzJFS1FZZjItOVJlTzRWOUNKYWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwgCLAwQA wgCNAwQAwgCfAwQAwgCoMA0GCSqGSIb3DQEBCwUAA4IBAQA6k69oZpuKLaRs+PdH DRsLv+au3opqMALsfgWcFSIUn5lTDYMfCxbj+7NqL6Mm+mExeGT4UyjpnW72DVQW mp43cCvAA5AY2YTKOu/gXjLYsru0fOPsSDBb12Rq8l/MbNXNIsIE4XHsY/0NZzvh Wn5kUonf4+PjXH0xyptGyBA8tl41/e2Q4L6IB1fudJ+KbZw+XiTzp4L1I+QHn7+t Um3gF26AxvzEo85Xbx7qvbaQ3uFTkhhgW0ZcCAdB8CIQ2pjXEc/BAry3XEBzGsFZ PU9dQEr7TiNZCjkxgi3Z/eeIESjObMimTS6maGgKFdOZK7vifwHX9KsSYJke5A71 0m25 -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:55 2026 by rpki-client