This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/Ga3UDOpYfgNzEoEP6SCJ3qpT1GI.roa File: Ga3UDOpYfgNzEoEP6SCJ3qpT1GI.roa (raw, json) Hash identifier: l0pSXZWDcOE87oqHCiYGC4+D1pIC7qRKEwvtCxYBnHM= Subject key identifier: 19:AD:D4:0C:EA:58:7E:03:73:12:81:0F:E9:20:89:DE:AA:53:D4:62 Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067 Certificate serial: 019C42E384ED5721FE1BE958664606CB71B6 Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/Ga3UDOpYfgNzEoEP6SCJ3qpT1GI.roa Signing time: Mon 09 Feb 2026 14:52:12 +0000 ROA not before: Mon 09 Feb 2026 14:52:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 91.236.118.0/24 maxlen: 24 91.236.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:e3:84:ed:57:21:fe:1b:e9:58:66:46:06:cb:71:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067 Validity Not Before: Feb 9 14:52:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19add40cea587e037312810fe92089deaa53d462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4f:64:13:50:f0:cc:e2:df:be:c4:b2:c7:7b: 65:ee:5f:ab:52:25:33:05:23:ff:b3:b4:84:46:03: 46:38:c5:7d:a6:51:b7:a9:3a:85:82:f3:0a:38:ef: 40:dc:ec:d9:73:3d:0b:47:92:1f:9d:fc:ce:e7:3f: ff:9b:3b:08:f2:c7:c9:93:68:cf:ac:aa:95:ef:87: ea:f3:f8:e6:7b:9e:cb:b2:ef:b7:2d:a6:89:79:af: 8d:63:09:a4:87:2c:20:c6:76:67:e3:68:93:5d:fc: 2e:01:02:31:93:0a:ac:2c:3c:66:52:8e:81:6a:4f: 3f:69:03:cf:10:a3:50:26:8e:a9:b9:3a:d4:26:91: 18:c9:71:ec:be:94:ca:5b:96:4c:0e:44:d3:7e:9c: f3:58:2c:30:c7:50:22:dc:c7:3a:a5:a1:bb:05:4f: 02:68:30:bd:b0:bb:7d:52:f1:93:52:6b:32:52:95: bf:35:a0:09:80:73:91:24:be:cc:72:72:04:67:c7: 9e:59:5a:6d:32:f4:78:14:a4:78:2d:41:c9:25:ec: bc:5a:56:48:4e:c6:9b:d9:8a:5d:fe:02:fc:dc:2c: e1:60:b6:be:5b:7c:07:b6:be:e7:c4:29:96:4f:d9: 69:49:89:17:88:7e:83:b6:d9:4e:b0:ea:d5:9e:7b: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AD:D4:0C:EA:58:7E:03:73:12:81:0F:E9:20:89:DE:AA:53:D4:62 X509v3 Authority Key Identifier: keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/Ga3UDOpYfgNzEoEP6SCJ3qpT1GI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.118.0/23 Signature Algorithm: sha256WithRSAEncryption df:bb:b3:4e:92:2d:53:71:66:10:23:92:ab:37:a3:5c:7f:f0: 87:88:4f:73:3e:ab:f2:e2:1f:0b:ad:d0:a2:e7:9c:6c:4f:f3: 42:e6:9d:c2:f3:34:86:63:fd:6e:da:15:fa:38:26:48:32:22: 6d:be:c0:c1:a9:54:e9:8b:02:e9:f5:e4:66:d6:c6:5c:49:f2: 6e:45:8d:57:59:8e:64:bf:5b:a1:8e:20:3a:b0:ab:22:37:56: 5c:a0:2a:47:f8:83:a2:5b:7f:10:65:64:e2:05:63:07:7f:0e: d8:38:9d:d6:c5:f4:96:14:73:12:0e:86:7d:6c:ba:41:ff:f0: 9d:07:f8:60:86:96:24:f3:31:92:68:a5:f1:76:a6:1d:85:a6: 6b:20:90:a7:c8:26:ba:3b:63:b1:28:5a:f2:0a:4e:45:96:4c: c8:82:1f:84:bc:c9:73:d2:46:5d:dd:9f:1b:99:f1:90:0c:8d: 3e:08:4d:29:a2:10:b7:e7:34:fa:b2:80:a0:dd:3f:8a:27:32: d1:ff:11:e9:f8:1b:36:19:13:e9:7b:2a:94:22:a9:83:6b:12: 09:d5:3e:48:c3:6b:94:ad:58:9c:f0:c1:e1:9b:40:85:82:d7: 7f:bd:7f:af:53:6c:50:bb:34:e6:89:27:e6:b9:b2:78:1b:9e: be:b5:0a:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxC44TtVyH+G+lYZkYGy3G2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YTgwMDY4YmQ3MzI4ZWY0MTEyMGY0Nzg4YzI4ZDNhOTIw NDcwNjcwHhcNMjYwMjA5MTQ1MjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWFkZDQwY2VhNTg3ZTAzNzMxMjgxMGZlOTIwODlkZWFhNTNkNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk9kE1DwzOLfvsSyx3tl7l+rUiUz BSP/s7SERgNGOMV9plG3qTqFgvMKOO9A3OzZcz0LR5IfnfzO5z//mzsI8sfJk2jP rKqV74fq8/jme57Lsu+3LaaJea+NYwmkhywgxnZn42iTXfwuAQIxkwqsLDxmUo6B ak8/aQPPEKNQJo6puTrUJpEYyXHsvpTKW5ZMDkTTfpzzWCwwx1Ai3Mc6paG7BU8C aDC9sLt9UvGTUmsyUpW/NaAJgHORJL7McnIEZ8eeWVptMvR4FKR4LUHJJey8WlZI Tsab2Ypd/gL83CzhYLa+W3wHtr7nxCmWT9lpSYkXiH6DttlOsOrVnnvswwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBmt1AzqWH4DcxKBD+kgid6qU9RiMB8GA1UdIwQY MBaAFNeoAGi9cyjvQRIPR4jCjTqSBHBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYt ZWYzMzJhMDI1NmQ2LzEvR2EzVURPcFlmZ056RW9FUDZTQ0ozcXBUMUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hNDVkMWMtZTNiNi00ZjIzLWE4YzYtZWYzMzJhMDI1NmQ2 LzEvMTZnQWFMMXpLTzlCRWc5SGlNS05PcElFY0djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+x2MA0G CSqGSIb3DQEBCwUAA4IBAQDfu7NOki1TcWYQI5KrN6Ncf/CHiE9zPqvy4h8LrdCi 55xsT/NC5p3C8zSGY/1u2hX6OCZIMiJtvsDBqVTpiwLp9eRm1sZcSfJuRY1XWY5k v1uhjiA6sKsiN1ZcoCpH+IOiW38QZWTiBWMHfw7YOJ3WxfSWFHMSDoZ9bLpB//Cd B/hghpYk8zGSaKXxdqYdhaZrIJCnyCa6O2OxKFryCk5FlkzIgh+EvMlz0kZd3Z8b mfGQDI0+CE0pohC35zT6soCg3T+KJzLR/xHp+Bs2GRPpeyqUIqmDaxIJ1T5Iw2uU rVic8MHhm0CFgtd/vX+vU2xQuzTmiSfmubJ4G56+tQoL -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:11 2026 by rpki-client