This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa File: GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa (raw, json) Hash identifier: BJA1H3BJte9PdHpAhJG8NebAV+K9kBOQF7cMdvjOdG4= Subject key identifier: 18:FC:83:6D:04:87:35:1D:FD:28:E5:3F:C6:2E:FE:21:DF:4A:01:04 Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576 Certificate serial: 019B7F14EB324F3B1056025EB391A89B3C4E Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa Signing time: Fri 02 Jan 2026 14:20:35 +0000 ROA not before: Fri 02 Jan 2026 14:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43928 IP address blocks: 79.171.136.0/21 maxlen: 21 193.84.130.0/23 maxlen: 23 193.84.140.0/23 maxlen: 23 2a00:c3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:eb:32:4f:3b:10:56:02:5e:b3:91:a8:9b:3c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576 Validity Not Before: Jan 2 14:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18fc836d0487351dfd28e53fc62efe21df4a0104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a1:a8:ff:0a:05:00:72:1f:7e:2a:a4:fc:42: db:8f:31:67:98:46:59:d1:9d:2b:b3:e6:7a:88:31: 54:e5:b8:25:38:94:ea:23:dc:9d:78:c2:d7:71:17: f4:00:98:e5:32:ff:72:9e:ab:50:c2:8c:06:34:c2: 74:68:8b:b0:f5:c1:1a:b3:4e:ae:56:36:76:10:5a: 94:5a:0c:e6:c6:83:68:a7:bd:cc:7b:0f:f3:36:5f: 4e:e1:79:89:4b:8c:c6:89:3d:f7:31:7a:01:7c:2c: 5d:d1:a8:00:6d:de:35:e7:70:fa:f7:98:45:f3:bb: a6:4d:2b:37:7a:71:21:32:2d:bf:5c:14:ff:76:77: ce:45:9e:89:bf:22:94:3c:20:c2:6d:7f:a5:46:bd: 9e:0f:bb:5a:85:39:11:81:61:d8:13:63:44:8a:ed: ea:4f:11:ad:48:a3:5a:32:9b:3e:bb:55:c4:b6:8f: 9f:3e:a8:89:56:37:99:f9:32:5e:81:73:24:df:22: 5d:f1:22:81:55:af:1c:8e:d5:71:1c:57:58:79:db: 2c:bb:f3:43:7c:0d:56:2a:11:da:8b:62:6a:b3:5e: 3f:da:21:e4:0f:e0:d6:c0:d0:e3:8c:90:3a:9a:49: 33:05:dd:1a:e8:e6:ae:19:0c:e1:90:79:30:9d:6c: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FC:83:6D:04:87:35:1D:FD:28:E5:3F:C6:2E:FE:21:DF:4A:01:04 X509v3 Authority Key Identifier: keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.136.0/21 193.84.130.0/23 193.84.140.0/23 IPv6: 2a00:c3c0::/32 Signature Algorithm: sha256WithRSAEncryption ba:15:ed:d2:20:ae:1f:66:19:d8:2d:38:38:fb:21:4c:90:cf: fd:0e:7f:16:39:05:2a:ef:2d:80:e8:95:19:ff:37:07:19:ca: 75:28:a2:bd:fc:ff:12:01:df:77:fe:14:14:43:4a:a2:c6:b6: a3:67:3f:ad:90:54:ff:39:81:c9:75:f7:30:5c:98:1d:ce:68: d5:50:7d:54:27:d9:79:02:da:9f:fb:b0:cd:07:8a:57:bf:d4: d5:39:e0:cc:eb:e4:04:78:59:1f:b3:2a:92:77:c6:71:07:65: 14:f7:21:73:2a:0d:cd:7b:5d:b8:90:90:d2:05:1e:01:3a:fb: 4e:5b:80:c7:2b:06:c9:58:6f:c0:e4:9d:44:33:5d:e0:2e:af: f6:16:62:f4:cb:e8:35:19:05:04:97:60:97:61:32:49:9c:4e: 39:14:12:24:29:9f:91:45:49:4b:08:f3:91:de:e4:7c:93:7e: a1:60:99:86:8a:e2:04:64:0a:6a:c4:eb:57:22:17:fb:ff:23: ab:fa:08:a8:14:96:d8:bb:c1:56:c8:b5:e7:15:16:e8:2b:9d: 17:05:b8:8d:28:fd:c9:e6:34:43:17:01:f6:38:85:83:d5:4e: 46:67:76:e6:29:77:9a:b8:70:f4:a3:cc:5a:73:55:f2:7c:ea: aa:78:1b:9d -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FOsyTzsQVgJes5GomzxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTU0NjM5MzE2ZjVjZDUyODdmODQxZDdmOGNmZjE2NTIx ZDA1NzYwHhcNMjYwMTAyMTQyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGZjODM2ZDA0ODczNTFkZmQyOGU1M2ZjNjJlZmUyMWRmNGEwMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaGo/woFAHIffiqk/ELbjzFnmEZZ 0Z0rs+Z6iDFU5bglOJTqI9ydeMLXcRf0AJjlMv9ynqtQwowGNMJ0aIuw9cEas06u VjZ2EFqUWgzmxoNop73Mew/zNl9O4XmJS4zGiT33MXoBfCxd0agAbd4153D695hF 87umTSs3enEhMi2/XBT/dnfORZ6JvyKUPCDCbX+lRr2eD7tahTkRgWHYE2NEiu3q TxGtSKNaMps+u1XEto+fPqiJVjeZ+TJegXMk3yJd8SKBVa8cjtVxHFdYedssu/ND fA1WKhHai2Jqs14/2iHkD+DWwNDjjJA6mkkzBd0a6OauGQzhkHkwnWwTCwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBj8g20EhzUd/SjlP8Yu/iHfSgEEMB8GA1UdIwQY MBaAFA6lRjkxb1zVKH+EHX+M/xZSHQV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1Yjgt NDE3ZjUzZjFhNGEwLzEvR1B5RGJRU0hOUjM5S09VX3hpNy1JZDlLQVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1YjgtNDE3ZjUzZjFhNGEw LzEvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDT6uIAwQB wVSCAwQBwVSMMA0EAgACMAcDBQAqAMPAMA0GCSqGSIb3DQEBCwUAA4IBAQC6Fe3S IK4fZhnYLTg4+yFMkM/9Dn8WOQUq7y2A6JUZ/zcHGcp1KKK9/P8SAd93/hQUQ0qi xrajZz+tkFT/OYHJdfcwXJgdzmjVUH1UJ9l5Atqf+7DNB4pXv9TVOeDM6+QEeFkf syqSd8ZxB2UU9yFzKg3Ne124kJDSBR4BOvtOW4DHKwbJWG/A5J1EM13gLq/2FmL0 y+g1GQUEl2CXYTJJnE45FBIkKZ+RRUlLCPOR3uR8k36hYJmGiuIEZApqxOtXIhf7 /yOr+gioFJbYu8FWyLXnFRboK50XBbiNKP3J5jRDFwH2OIWD1U5GZ3bmKXeauHD0 o8xac1XyfOqqeBud -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:32 2026 by rpki-client