This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/GFIibP3fcCQAXue-pLs_MEmE4aM.roa File: GFIibP3fcCQAXue-pLs_MEmE4aM.roa (raw, json) Hash identifier: vZPkadzf5zT9TuSZwyNbMA/XV23iCETvdmYU8OniDec= Subject key identifier: 18:52:22:6C:FD:DF:70:24:00:5E:E7:BE:A4:BB:3F:30:49:84:E1:A3 Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1 Certificate serial: 019B7F83E3B10E50AFF236BED66C96ADAA4E Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/GFIibP3fcCQAXue-pLs_MEmE4aM.roa Signing time: Fri 02 Jan 2026 16:21:48 +0000 ROA not before: Fri 02 Jan 2026 16:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62440 IP address blocks: 185.35.128.0/22 maxlen: 22 185.35.128.0/24 maxlen: 24 185.35.129.0/24 maxlen: 24 185.35.130.0/24 maxlen: 24 185.35.131.0/24 maxlen: 24 212.94.16.0/20 maxlen: 20 212.94.16.0/24 maxlen: 24 212.94.17.0/24 maxlen: 24 212.94.18.0/24 maxlen: 24 212.94.19.0/24 maxlen: 24 212.94.20.0/24 maxlen: 24 212.94.21.0/24 maxlen: 24 212.94.22.0/24 maxlen: 24 212.94.23.0/24 maxlen: 24 212.94.24.0/24 maxlen: 24 212.94.25.0/24 maxlen: 24 212.94.26.0/24 maxlen: 24 212.94.27.0/24 maxlen: 24 212.94.28.0/24 maxlen: 24 212.94.29.0/24 maxlen: 24 212.94.30.0/24 maxlen: 24 212.94.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e3:b1:0e:50:af:f2:36:be:d6:6c:96:ad:aa:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1 Validity Not Before: Jan 2 16:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1852226cfddf7024005ee7bea4bb3f304984e1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:49:e5:0a:66:88:cf:00:1d:40:10:82:3b:4e: d5:81:45:4d:de:65:12:c0:8b:5c:13:09:22:cf:92: 4f:0c:2b:38:a7:0e:c3:39:01:97:5c:99:e9:26:c3: 6d:55:7a:f1:d4:aa:90:18:3b:cb:7f:91:39:ec:68: 8d:63:7d:df:81:1a:a2:a7:b2:14:c3:d6:5a:40:c0: 92:db:55:68:47:35:7e:90:5f:63:9d:cf:d8:bb:33: 0f:58:19:e8:04:56:92:53:88:69:4b:5a:44:97:1a: 0a:8d:de:08:68:b9:ce:19:58:be:2c:67:31:37:bc: a8:7b:f1:9e:1f:a8:17:1c:3e:fb:ae:d1:11:23:24: b2:11:c5:67:09:ca:24:c8:8a:79:ce:2e:a2:b1:08: 8b:3a:29:f5:7b:7d:e4:90:59:51:c3:bd:0b:4a:64: 91:71:5a:0a:63:58:8d:5f:ea:fa:c4:08:fe:6d:34: bc:9e:15:c9:e6:a9:ee:a3:ed:be:81:37:59:61:32: 9f:53:01:6c:dc:f3:9e:b7:92:7f:45:bb:af:00:3c: 74:ab:a5:1e:ce:d4:5d:f0:ff:d7:f9:3c:22:b1:fa: ff:c5:e6:5e:04:4c:c1:4f:ba:a1:45:a6:8c:e6:2f: 04:a2:93:9d:c4:4a:01:2b:e8:77:4b:64:92:63:43: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:22:6C:FD:DF:70:24:00:5E:E7:BE:A4:BB:3F:30:49:84:E1:A3 X509v3 Authority Key Identifier: keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/GFIibP3fcCQAXue-pLs_MEmE4aM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.35.128.0/22 212.94.16.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:38:03:78:90:a1:3e:ea:60:2d:ff:12:a0:12:65:d3:8c:d4: 2a:a2:06:73:69:0e:ce:89:03:00:6a:cb:0e:3a:27:08:f1:31: 37:54:0a:9f:7e:40:0f:58:2e:53:07:82:99:86:64:66:bc:c7: 54:e3:25:c1:48:ec:98:7f:27:cf:ff:56:90:b3:59:94:15:3c: 98:36:d5:df:77:68:a1:bb:83:1d:2f:4c:cf:63:43:0c:8a:f3: d4:b8:29:3d:72:ca:ec:b4:65:a6:3c:b4:49:18:77:c3:8e:fb: 2e:7e:ad:f8:7c:9e:8f:a5:14:40:c4:33:4d:8c:1f:40:4d:a7: 94:96:2e:ee:6b:91:b7:0f:95:40:18:12:05:a5:46:00:7a:e0: 88:ba:a5:52:2f:62:ef:68:6c:b0:42:83:34:47:9b:58:90:8f: f0:ae:42:ce:82:c4:d1:e9:78:37:32:b9:1b:cc:a8:b8:89:17: b4:ec:dd:1a:ef:0a:d4:1a:04:d7:2a:92:be:9f:7a:31:b8:ef: e8:0b:5b:92:b4:fd:f9:71:78:40:e4:1f:f4:4c:6f:ae:b6:b1: a4:2b:8a:cc:7d:0d:f7:4e:a1:79:45:ca:cf:cf:33:ec:d2:ee: 80:72:fe:71:5b:04:e3:67:22:3f:18:02:08:9a:6a:b7:3d:d4: 16:c3:b7:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g+OxDlCv8ja+1myWrapOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj ZjgyZjEwHhcNMjYwMTAyMTYyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODUyMjI2Y2ZkZGY3MDI0MDA1ZWU3YmVhNGJiM2YzMDQ5ODRlMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEnlCmaIzwAdQBCCO07VgUVN3mUS wItcEwkiz5JPDCs4pw7DOQGXXJnpJsNtVXrx1KqQGDvLf5E57GiNY33fgRqip7IU w9ZaQMCS21VoRzV+kF9jnc/YuzMPWBnoBFaSU4hpS1pElxoKjd4IaLnOGVi+LGcx N7yoe/GeH6gXHD77rtERIySyEcVnCcokyIp5zi6isQiLOin1e33kkFlRw70LSmSR cVoKY1iNX+r6xAj+bTS8nhXJ5qnuo+2+gTdZYTKfUwFs3POet5J/RbuvADx0q6Ue ztRd8P/X+Twisfr/xeZeBEzBT7qhRaaM5i8EopOdxEoBK+h3S2SSY0NY/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBhSImz933AkAF7nvqS7PzBJhOGjMB8GA1UdIwQY MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et ZDg3MjFiODBkZDc5LzEvR0ZJaWJQM2ZjQ1FBWHVlLXBMc19NRW1FNGFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5 LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSOAAwQE 1F4QMA0GCSqGSIb3DQEBCwUAA4IBAQBOOAN4kKE+6mAt/xKgEmXTjNQqogZzaQ7O iQMAassOOicI8TE3VAqffkAPWC5TB4KZhmRmvMdU4yXBSOyYfyfP/1aQs1mUFTyY NtXfd2ihu4MdL0zPY0MMivPUuCk9csrstGWmPLRJGHfDjvsufq34fJ6PpRRAxDNN jB9ATaeUli7ua5G3D5VAGBIFpUYAeuCIuqVSL2LvaGywQoM0R5tYkI/wrkLOgsTR 6Xg3MrkbzKi4iRe07N0a7wrUGgTXKpK+n3oxuO/oC1uStP35cXhA5B/0TG+utrGk K4rMfQ33TqF5RcrPzzPs0u6Acv5xWwTjZyI/GAIImmq3PdQWw7c0 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:33 2026 by rpki-client