This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/gv1GGCci0GYDu_oCzbbduhxzrWw.roa File: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (raw, json) Hash identifier: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo= Subject key identifier: 82:FD:46:18:27:22:D0:66:03:BB:FA:02:CD:B6:DD:BA:1C:73:AD:6C Certificate issuer: /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2 Certificate serial: 019B7D5C91B1EC2F13565B61B8232C4D28D0 Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/gv1GGCci0GYDu_oCzbbduhxzrWw.roa Signing time: Fri 02 Jan 2026 06:19:37 +0000 ROA not before: Fri 02 Jan 2026 06:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35709 IP address blocks: 95.214.16.0/24 maxlen: 24 95.214.17.0/24 maxlen: 24 95.214.18.0/24 maxlen: 24 95.214.19.0/24 maxlen: 24 2a09:d380::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:91:b1:ec:2f:13:56:5b:61:b8:23:2c:4d:28:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2 Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82fd46182722d06603bbfa02cdb6ddba1c73ad6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:19:14:5a:53:27:70:a7:47:ef:7f:83:0e: a4:a8:4b:d3:9a:33:87:46:24:38:cc:da:fe:59:d5: e6:3d:52:0a:ce:6e:1c:41:22:b9:1c:64:d1:7b:19: ab:d8:d3:6e:30:a8:a8:b6:fb:c6:f0:24:ab:b8:f7: 2c:8c:22:48:4d:de:fd:05:5f:85:41:79:91:c8:a2: c0:e2:81:81:df:18:d5:40:85:62:a8:2b:bc:6f:93: 6e:23:d4:05:26:75:f1:d3:76:62:a2:26:7c:53:3a: 39:91:e5:9d:aa:f6:93:ec:b8:ee:c4:5d:8f:44:93: 8f:67:e8:95:3c:4e:a2:30:dd:e1:49:a4:8f:ee:f3: 7f:4c:c2:03:08:1e:85:a8:8e:af:97:59:10:b7:91: 18:be:f6:08:25:21:2f:bb:41:12:23:dd:d2:88:3a: 85:7a:c2:f2:78:10:3e:62:3f:be:02:e7:28:5a:49: bb:91:f7:59:c2:62:dd:91:b1:c0:51:10:3e:d6:56: 26:b6:da:ad:d0:7c:cd:b9:ef:54:86:e4:62:a6:4f: d3:84:21:00:28:24:bd:a8:e2:eb:99:bd:6e:19:5c: b0:8b:63:d1:4a:24:90:52:9c:30:a3:be:15:f5:bc: 47:91:58:22:29:61:b7:b1:fc:d3:a4:4a:c7:5b:36: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:46:18:27:22:D0:66:03:BB:FA:02:CD:B6:DD:BA:1C:73:AD:6C X509v3 Authority Key Identifier: keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/gv1GGCci0GYDu_oCzbbduhxzrWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.16.0/22 IPv6: 2a09:d380::/30 Signature Algorithm: sha256WithRSAEncryption 1f:c9:d9:a5:25:64:65:c3:67:75:17:1c:0b:9c:31:b4:ca:ca: 76:7e:d5:c8:e2:d3:2a:a3:f0:a6:06:d7:5e:c4:76:61:c5:3e: bc:a3:5b:95:5f:0a:19:8e:cd:be:9d:15:cd:e9:91:70:e6:a8: f0:bd:72:13:e6:aa:b0:3d:a9:3e:7f:88:10:f0:fd:1f:78:56: 67:54:5a:ac:40:20:d8:83:9b:cd:6d:d4:96:90:99:17:14:11: 71:b6:73:0d:c0:d9:0b:e5:70:c3:3b:6f:12:47:41:ec:17:ff: c2:f9:35:fc:7b:cb:eb:55:96:7e:23:be:da:e5:b1:02:f4:2a: 55:49:ee:8b:46:a9:f2:9b:02:19:e2:ca:40:27:65:99:29:88: 49:52:3d:3a:c2:52:29:db:27:6e:c4:32:09:13:13:35:2b:03: ba:88:16:2e:e8:e5:c2:34:15:02:4e:e5:e0:25:6f:53:93:a8: 90:1a:05:d2:35:a8:e1:92:b8:26:b1:83:8c:72:08:d0:80:43: 04:dd:89:ec:92:8e:e3:f9:d4:10:17:11:e2:34:ca:32:00:26: 59:1f:23:f2:01:b3:29:bf:8c:28:42:20:f9:2f:1c:ec:63:24: 42:ac:0c:a8:33:c5:98:73:0c:e8:80:81:03:45:8e:de:6b:01: 2c:24:a3:97 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XJGx7C8TVlthuCMsTSjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwN2U5NmY5NDQ5ZGVmYzQ3MGJjYzVhOTFmOTIxN2M2Mjgx YWMxYjIwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmZkNDYxODI3MjJkMDY2MDNiYmZhMDJjZGI2ZGRiYTFjNzNhZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMcZFFpTJ3CnR+9/gw6kqEvTmjOH RiQ4zNr+WdXmPVIKzm4cQSK5HGTRexmr2NNuMKiotvvG8CSruPcsjCJITd79BV+F QXmRyKLA4oGB3xjVQIViqCu8b5NuI9QFJnXx03ZioiZ8Uzo5keWdqvaT7LjuxF2P RJOPZ+iVPE6iMN3hSaSP7vN/TMIDCB6FqI6vl1kQt5EYvvYIJSEvu0ESI93SiDqF esLyeBA+Yj++AucoWkm7kfdZwmLdkbHAURA+1lYmttqt0HzNue9UhuRipk/ThCEA KCS9qOLrmb1uGVywi2PRSiSQUpwwo74V9bxHkVgiKWG3sfzTpErHWzYjowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIL9RhgnItBmA7v6As223bocc61sMB8GA1UdIwQY MBaAFBB+lvlEne/EcLzFqR+SF8YoGsGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYt NjZhNzE1YWQzNzgzLzEvZ3YxR0dDY2kwR1lEdV9vQ3piYmR1aHh6cld3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jZjE0ODQtZjk2MS00MDM3LWJkYmYtNjZhNzE1YWQzNzgz LzEvRUg2Vy1VU2Q3OFJ3dk1XcEg1SVh4aWdhd2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCX9YQMA0E AgACMAcDBQIqCdOAMA0GCSqGSIb3DQEBCwUAA4IBAQAfydmlJWRlw2d1FxwLnDG0 ysp2ftXI4tMqo/CmBtdexHZhxT68o1uVXwoZjs2+nRXN6ZFw5qjwvXIT5qqwPak+ f4gQ8P0feFZnVFqsQCDYg5vNbdSWkJkXFBFxtnMNwNkL5XDDO28SR0HsF//C+TX8 e8vrVZZ+I77a5bEC9CpVSe6LRqnymwIZ4spAJ2WZKYhJUj06wlIp2yduxDIJExM1 KwO6iBYu6OXCNBUCTuXgJW9Tk6iQGgXSNajhkrgmsYOMcgjQgEME3Ynsko7j+dQQ FxHiNMoyACZZHyPyAbMpv4woQiD5LxzsYyRCrAyoM8WYcwzogIEDRY7eawEsJKOX -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:06 2026 by rpki-client