This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/GJLrnN9jbFArqwGuqjb_171b46A.roa File: GJLrnN9jbFArqwGuqjb_171b46A.roa (raw, json) Hash identifier: d5vjSxzfWWDDhURSXFjGweH1v9cRHkRxXTKq0QW8dR4= Subject key identifier: 18:92:EB:9C:DF:63:6C:50:2B:AB:01:AE:AA:36:FF:D7:BD:5B:E3:A0 Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Certificate serial: 019B7EA4CD63043B7C7E21B2A9FFEFCC28A2 Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/GJLrnN9jbFArqwGuqjb_171b46A.roa Signing time: Fri 02 Jan 2026 12:18:08 +0000 ROA not before: Fri 02 Jan 2026 12:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210966 IP address blocks: 185.25.106.0/24 maxlen: 24 2a11:540::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:cd:63:04:3b:7c:7e:21:b2:a9:ff:ef:cc:28:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Validity Not Before: Jan 2 12:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1892eb9cdf636c502bab01aeaa36ffd7bd5be3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:d8:3c:a6:df:7e:29:68:05:35:f4:63:14: 52:9d:5d:e2:d1:00:76:b2:b5:50:7a:45:2e:a8:eb: e8:ca:19:d0:ed:8f:ba:f3:a4:1e:a9:6c:b6:63:e3: e7:0c:a3:12:bb:56:89:97:39:df:46:fc:ce:2f:52: eb:4f:30:4e:ec:7d:1c:78:31:30:ff:42:c9:42:b2: 65:3f:bb:e6:b9:25:aa:03:81:6a:4d:63:3f:ac:9e: 28:8d:37:47:a3:45:e9:03:5c:8f:bf:6c:d8:51:de: 2e:62:a4:04:cd:97:ac:b5:fd:73:e1:4d:95:cb:a5: 8d:d3:ec:ac:36:3f:d5:5b:cc:60:4c:3c:f9:51:3d: 9f:af:6b:37:f8:31:2c:f1:82:3e:c4:75:6a:98:cb: b4:49:88:5d:3d:1c:66:bf:1d:cb:d4:4e:8d:a6:3f: 78:b4:aa:9e:cf:4f:85:c6:6d:fd:d0:4d:07:59:c6: 59:f1:f4:a7:68:4a:43:64:41:07:d4:a9:b7:e6:2a: d7:1d:40:27:f5:96:28:70:3e:c6:07:4f:23:33:fc: 39:19:ad:4b:ad:20:f1:3f:b2:44:78:0d:db:e8:9e: ec:8b:c5:92:6f:6f:8a:cd:09:9a:a9:6f:df:1e:bf: 35:b3:c4:af:1c:13:8b:9e:5a:8b:41:96:2b:fa:8b: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:92:EB:9C:DF:63:6C:50:2B:AB:01:AE:AA:36:FF:D7:BD:5B:E3:A0 X509v3 Authority Key Identifier: keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/GJLrnN9jbFArqwGuqjb_171b46A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.106.0/24 IPv6: 2a11:540::/30 Signature Algorithm: sha256WithRSAEncryption 4e:5d:ad:42:50:3c:fa:2d:19:89:a3:04:38:9c:b0:7f:b1:9c: e4:e4:95:ad:1a:e8:81:92:b7:7a:e2:e8:67:1d:65:2e:81:37: f7:ea:00:81:8f:96:7d:5d:5b:89:98:d0:70:77:d2:b2:8a:7d: 66:a8:7a:e0:d2:7e:e0:3f:3f:ad:ac:d1:30:c9:33:64:f6:ce: c5:f1:d0:0d:db:a2:36:6b:78:48:8d:eb:8f:0f:8d:1c:88:5e: e3:dc:8f:90:8d:24:45:69:48:e6:9b:63:1b:35:dd:53:d5:f7: 5e:46:50:38:33:45:aa:cc:b1:97:1c:a6:78:8a:9a:e0:39:7c: 6f:4c:29:7c:58:79:54:90:27:64:96:21:ad:bc:f0:c3:c0:d3: 09:34:ee:67:62:4c:c3:0d:f7:50:78:3f:25:07:ce:31:ba:4f: 9c:12:25:09:95:df:68:fe:6a:73:65:45:6e:cd:83:96:d4:62: ad:bd:80:21:10:89:4c:7d:1f:28:cd:df:a2:c8:c8:73:fb:8c: 12:ee:ac:19:62:44:c9:e6:ff:b3:c6:e7:ea:9d:6f:b4:92:38: a3:3a:83:81:a6:81:bb:fd:fc:51:b0:83:25:21:83:c0:ad:23: fc:de:07:6c:a0:00:db:a4:c8:a7:d8:8d:57:25:39:08:e4:c4: b5:08:45:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pM1jBDt8fiGyqf/vzCiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy OTJmZDkwHhcNMjYwMTAyMTIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODkyZWI5Y2RmNjM2YzUwMmJhYjAxYWVhYTM2ZmZkN2JkNWJlM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQXYPKbffiloBTX0YxRSnV3i0QB2 srVQekUuqOvoyhnQ7Y+686QeqWy2Y+PnDKMSu1aJlznfRvzOL1LrTzBO7H0ceDEw /0LJQrJlP7vmuSWqA4FqTWM/rJ4ojTdHo0XpA1yPv2zYUd4uYqQEzZestf1z4U2V y6WN0+ysNj/VW8xgTDz5UT2fr2s3+DEs8YI+xHVqmMu0SYhdPRxmvx3L1E6Npj94 tKqez0+Fxm390E0HWcZZ8fSnaEpDZEEH1Km35irXHUAn9ZYocD7GB08jM/w5Ga1L rSDxP7JEeA3b6J7si8WSb2+KzQmaqW/fHr81s8SvHBOLnlqLQZYr+otzVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBiS65zfY2xQK6sBrqo2/9e9W+OgMB8GA1UdIwQY MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt ZmM3YTBlYTZiMGUyLzEvR0pMcm5OOWpiRkFycXdHdXFqYl8xNzFiNDZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRlqMA0E AgACMAcDBQIqEQVAMA0GCSqGSIb3DQEBCwUAA4IBAQBOXa1CUDz6LRmJowQ4nLB/ sZzk5JWtGuiBkrd64uhnHWUugTf36gCBj5Z9XVuJmNBwd9Kyin1mqHrg0n7gPz+t rNEwyTNk9s7F8dAN26I2a3hIjeuPD40ciF7j3I+QjSRFaUjmm2MbNd1T1fdeRlA4 M0WqzLGXHKZ4iprgOXxvTCl8WHlUkCdkliGtvPDDwNMJNO5nYkzDDfdQeD8lB84x uk+cEiUJld9o/mpzZUVuzYOW1GKtvYAhEIlMfR8ozd+iyMhz+4wS7qwZYkTJ5v+z xufqnW+0kjijOoOBpoG7/fxRsIMlIYPArSP83gdsoADbpMin2I1XJTkI5MS1CEXE -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:19 2026 by rpki-client