This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/gBNRmzSrEizMbcJUH5GuHVirsuc.roa File: gBNRmzSrEizMbcJUH5GuHVirsuc.roa (raw, json) Hash identifier: CTTPqsoELtrrnKPCDm5NIDhaVqO6sNQ6f6XzK5l53dY= Subject key identifier: 80:13:51:9B:34:AB:12:2C:CC:6D:C2:54:1F:91:AE:1D:58:AB:B2:E7 Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Certificate serial: 019B79EBFEFE7FAB0CA2EB60B0CAB1EDA660 Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/gBNRmzSrEizMbcJUH5GuHVirsuc.roa Signing time: Thu 01 Jan 2026 14:17:47 +0000 ROA not before: Thu 01 Jan 2026 14:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57724 IP address blocks: 185.223.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:fe:fe:7f:ab:0c:a2:eb:60:b0:ca:b1:ed:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692 Validity Not Before: Jan 1 14:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8013519b34ab122ccc6dc2541f91ae1d58abb2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:08:64:bd:60:26:f9:be:0b:2a:e2:d0:96: af:34:62:b2:c2:94:a5:79:08:0f:6d:9a:20:26:f6: a4:96:d1:8d:28:14:79:cb:91:71:b1:c9:34:f7:51: 14:0d:eb:3d:d1:d3:2f:1a:68:e4:50:61:08:b8:ab: 33:96:de:fb:58:24:aa:6c:1e:66:1c:47:3d:49:9b: 19:1c:80:81:ea:f0:f1:67:97:c6:48:96:2d:17:65: 81:9a:6a:2a:dd:d4:36:9c:ab:09:30:c8:b2:f3:39: 69:f7:79:6c:ee:37:fe:8a:19:a6:29:81:98:61:01: 75:ce:fb:0d:b2:0f:0c:b0:1a:33:d2:3a:f9:1a:bd: 92:63:45:ca:45:c2:b9:d7:d3:fb:fa:cf:61:e8:ca: d3:ca:18:9f:e7:70:58:9d:3f:0c:dc:17:f5:35:37: 06:10:e2:0c:40:96:0f:b4:d7:67:f7:46:ae:4e:da: 5c:a0:2b:6e:66:b3:5d:d4:36:56:94:61:d9:71:ee: bf:ae:0b:c6:b2:89:af:e3:f9:a3:f2:cd:da:6e:f3: 34:a0:66:aa:3a:4f:90:65:b2:e9:7c:b6:75:1d:c7: bc:26:47:75:93:7a:7c:e8:e0:dc:21:fa:84:62:b1: 74:6a:68:ec:4b:11:aa:51:1f:c4:13:4a:df:05:9f: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:51:9B:34:AB:12:2C:CC:6D:C2:54:1F:91:AE:1D:58:AB:B2:E7 X509v3 Authority Key Identifier: keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/gBNRmzSrEizMbcJUH5GuHVirsuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.92.0/24 Signature Algorithm: sha256WithRSAEncryption 37:4a:b2:81:f7:69:3f:b2:27:0b:3d:52:ae:2a:64:bd:61:d1: d0:03:ac:8e:83:fb:8c:eb:ef:08:5b:11:86:d1:4f:1a:9f:0a: 6d:42:56:ba:38:62:02:3b:8f:e3:f6:1a:bf:7b:0a:37:59:ba: 8f:05:e5:7f:d1:cc:12:5d:a1:b9:d7:79:41:76:95:c2:1e:29: 92:e0:36:9d:71:d7:ad:d7:87:6d:2c:5c:48:16:c1:f5:6e:e7: 99:7e:ac:4d:4d:c5:31:a8:6c:76:6c:a0:37:35:c5:11:45:a7: 1f:99:e7:24:6b:46:33:1f:86:76:51:07:35:c4:48:94:53:6c: 22:f0:11:2e:2a:c1:9d:60:33:51:99:fa:c3:e6:2b:88:4d:ca: 33:30:41:52:e7:97:c3:38:dc:67:0d:1c:f1:d6:c5:5b:15:b7: cf:99:34:a3:76:cb:cb:22:1a:00:23:58:9c:35:4b:7e:0a:63: ce:84:5c:93:ba:93:20:46:1e:81:df:27:8f:48:d3:cb:4c:a6: c5:bc:48:1d:4f:3b:9a:8d:55:4e:12:b1:c0:09:84:69:24:b1: 67:68:3e:3e:5b:05:e3:d9:17:f4:33:82:12:55:f8:28:e2:08: 83:2b:08:67:8e:38:44:ad:20:40:89:1e:bf:f5:7a:dd:46:6d: 49:d5:c2:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56/7+f6sMoutgsMqx7aZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMzFkY2E4ODdkOGJlNjA2MDE5ZDBhMTU5M2ExNmZmZDM5 ZmQ2OTIwHhcNMjYwMTAxMTQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDEzNTE5YjM0YWIxMjJjY2M2ZGMyNTQxZjkxYWUxZDU4YWJiMmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvkIZL1gJvm+Cyri0JavNGKywpSl eQgPbZogJvakltGNKBR5y5Fxsck091EUDes90dMvGmjkUGEIuKszlt77WCSqbB5m HEc9SZsZHICB6vDxZ5fGSJYtF2WBmmoq3dQ2nKsJMMiy8zlp93ls7jf+ihmmKYGY YQF1zvsNsg8MsBoz0jr5Gr2SY0XKRcK519P7+s9h6MrTyhif53BYnT8M3Bf1NTcG EOIMQJYPtNdn90auTtpcoCtuZrNd1DZWlGHZce6/rgvGsomv4/mj8s3abvM0oGaq Ok+QZbLpfLZ1Hce8Jkd1k3p86ODcIfqEYrF0amjsSxGqUR/EE0rfBZ/ceQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIATUZs0qxIszG3CVB+Rrh1Yq7LnMB8GA1UdIwQY MBaAFBox3KiH2L5gYBnQoVk6Fv/Tn9aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEt OTBjOTk5ZDM1ZWQ4LzEvZ0JOUm16U3JFaXpNYmNKVUg1R3VIVmlyc3VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNzgwY2UtNGYyNi00YjY0LWI3ZjEtOTBjOTk5ZDM1ZWQ4 LzEvR2pIY3FJZll2bUJnR2RDaFdUb1dfOU9mMXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9cMA0G CSqGSIb3DQEBCwUAA4IBAQA3SrKB92k/sicLPVKuKmS9YdHQA6yOg/uM6+8IWxGG 0U8anwptQla6OGICO4/j9hq/ewo3WbqPBeV/0cwSXaG513lBdpXCHimS4Dadcdet 14dtLFxIFsH1bueZfqxNTcUxqGx2bKA3NcURRacfmecka0YzH4Z2UQc1xEiUU2wi 8BEuKsGdYDNRmfrD5iuITcozMEFS55fDONxnDRzx1sVbFbfPmTSjdsvLIhoAI1ic NUt+CmPOhFyTupMgRh6B3yePSNPLTKbFvEgdTzuajVVOErHACYRpJLFnaD4+WwXj 2Rf0M4ISVfgo4giDKwhnjjhErSBAiR6/9XrdRm1J1cLz -----END CERTIFICATE-----Generated at Wed Feb 4 20:16:09 2026 by rpki-client