This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/gxySuvg8u5BuoAl8tcXCHUIQr6c.roa File: gxySuvg8u5BuoAl8tcXCHUIQr6c.roa (raw, json) Hash identifier: NaDIju3NwOnk+CGyy3F8idBsnH8FhBIsHnDgcS1uXRk= Subject key identifier: 83:1C:92:BA:F8:3C:BB:90:6E:A0:09:7C:B5:C5:C2:1D:42:10:AF:A7 Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5 Certificate serial: 019B79ECE405245ED50D26E5C2C94A8D0D1F Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/gxySuvg8u5BuoAl8tcXCHUIQr6c.roa Signing time: Thu 01 Jan 2026 14:18:46 +0000 ROA not before: Thu 01 Jan 2026 14:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56754 IP address blocks: 185.139.104.0/22 maxlen: 22 185.246.92.0/24 maxlen: 24 185.246.93.0/24 maxlen: 24 185.246.94.0/24 maxlen: 24 2a0d:7280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e4:05:24:5e:d5:0d:26:e5:c2:c9:4a:8d:0d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5 Validity Not Before: Jan 1 14:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=831c92baf83cbb906ea0097cb5c5c21d4210afa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:20:b2:96:ce:83:87:ae:50:a1:7b:c1:71: c1:67:1d:f9:d9:16:c1:39:69:cd:76:c2:50:65:68: e7:b4:17:cd:21:e4:35:c5:b4:0f:4e:a5:14:71:fd: f8:38:c0:c0:ff:b5:38:20:57:bd:6b:ae:aa:db:b2: 46:35:cf:41:82:c9:a4:45:0d:bc:60:0f:b9:56:85: d5:95:09:47:8e:ef:18:bd:94:ab:c8:90:c0:fe:50: e9:3b:03:74:17:8d:f8:25:a6:9f:81:ed:36:47:96: f9:24:c4:53:7c:c3:37:39:01:4b:88:53:bf:4f:cf: e5:1c:34:18:0d:f7:af:c4:06:da:05:e1:6b:9e:e8: 3f:df:8e:0e:f2:8f:c8:dd:b0:70:0a:6d:0c:6d:40: c9:83:16:a3:0e:92:ce:18:b7:0a:93:fd:2a:4d:e8: ff:77:a9:bf:e4:45:74:12:cd:50:88:f5:4f:55:d3: 41:20:f5:fd:cf:76:1b:ec:bb:1f:8f:22:c3:ac:94: a4:18:68:8c:d4:fb:a6:6b:18:33:80:e4:a7:f8:ac: 63:a2:35:44:e3:c7:e2:eb:e9:3d:cb:c3:df:88:44: a0:00:c6:24:21:6e:ae:b7:d4:f0:a0:05:7f:2a:42: 9f:b3:e7:7d:c3:54:46:41:51:50:b1:5d:2c:71:a8: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1C:92:BA:F8:3C:BB:90:6E:A0:09:7C:B5:C5:C2:1D:42:10:AF:A7 X509v3 Authority Key Identifier: keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/gxySuvg8u5BuoAl8tcXCHUIQr6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.104.0/22 185.246.92.0-185.246.94.255 IPv6: 2a0d:7280::/29 Signature Algorithm: sha256WithRSAEncryption 3f:c4:0b:a6:6b:eb:4a:39:95:e4:71:b7:2a:59:70:7b:b5:dc: 03:ba:f9:aa:b6:c7:ac:36:14:f6:10:ea:b5:08:b9:9e:a7:fb: cc:c4:b3:9d:bd:b9:d0:a7:67:04:ab:65:49:53:0a:bc:db:f0: 77:dd:b6:fe:44:d0:1b:1f:18:1b:f7:6d:74:a8:8e:27:ed:a0: 17:90:fe:27:e8:bb:b8:a0:4f:8c:ac:c1:36:36:1d:13:53:44: a2:ce:ad:59:df:05:dc:e8:b3:5b:73:13:61:a9:91:32:f1:b1: 75:8e:92:38:d1:a6:01:7a:25:7f:61:27:5d:8f:eb:1e:c8:76: 5a:04:96:0f:af:a4:27:94:83:e5:0b:1c:48:ea:95:6c:09:f2: 9a:b8:a1:14:7c:9e:81:2b:cd:4a:ff:22:b0:ea:60:93:c4:7e: 57:de:05:91:d8:f6:f5:b3:6a:5d:20:c7:db:60:af:3c:50:26: 44:ad:ec:aa:df:e8:9c:ba:d5:b9:ae:9a:0c:c5:06:d7:7d:1e: a7:d4:0a:bc:d1:87:05:65:96:a1:54:67:e5:34:68:32:87:f3: e5:2a:9e:2b:fe:bb:0d:6c:c5:af:d7:78:15:8a:d9:2e:e6:88: 22:71:93:8b:fc:93:10:2a:cf:c2:1f:30:17:c6:c9:f3:ac:bc: 78:53:6d:3d -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt57OQFJF7VDSblwslKjQ0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYWNkOThkZTc5MTkyMzU3YWRjZjlkZjBhZGJlODMxOTIy MjhiZDUwHhcNMjYwMTAxMTQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzFjOTJiYWY4M2NiYjkwNmVhMDA5N2NiNWM1YzIxZDQyMTBhZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0UgspbOg4euUKF7wXHBZx352RbB OWnNdsJQZWjntBfNIeQ1xbQPTqUUcf34OMDA/7U4IFe9a66q27JGNc9BgsmkRQ28 YA+5VoXVlQlHju8YvZSryJDA/lDpOwN0F434Jaafge02R5b5JMRTfMM3OQFLiFO/ T8/lHDQYDfevxAbaBeFrnug/344O8o/I3bBwCm0MbUDJgxajDpLOGLcKk/0qTej/ d6m/5EV0Es1QiPVPVdNBIPX9z3Yb7LsfjyLDrJSkGGiM1PumaxgzgOSn+KxjojVE 48fi6+k9y8PfiESgAMYkIW6ut9TwoAV/KkKfs+d9w1RGQVFQsV0scai7rwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFIMckrr4PLuQbqAJfLXFwh1CEK+nMB8GA1UdIwQY MBaAFOus2Y3nkZI1etz53wrb6DGSIovVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgt Njk5YzQ1YmE3ZTU4LzEvZ3h5U3V2Zzh1NUJ1b0FsOHRjWENIVUlRcjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgtNjk5YzQ1YmE3ZTU4 LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCuYtoMAwD BAK59lwDBAC59l4wDQQCAAIwBwMFAyoNcoAwDQYJKoZIhvcNAQELBQADggEBAD/E C6Zr60o5leRxtypZcHu13AO6+aq2x6w2FPYQ6rUIuZ6n+8zEs529udCnZwSrZUlT Crzb8Hfdtv5E0BsfGBv3bXSojiftoBeQ/ifou7igT4yswTY2HRNTRKLOrVnfBdzo s1tzE2GpkTLxsXWOkjjRpgF6JX9hJ12P6x7IdloElg+vpCeUg+ULHEjqlWwJ8pq4 oRR8noErzUr/IrDqYJPEflfeBZHY9vWzal0gx9tgrzxQJkSt7Krf6Jy61bmumgzF Btd9HqfUCrzRhwVllqFUZ+U0aDKH8+Uqniv+uw1sxa/XeBWK2S7miCJxk4v8kxAq z8IfMBfGyfOsvHhTbT0= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:30 2026 by rpki-client