This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/1-GG8B-VDO40CVaafxmqAljIc04E.roa File: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (raw, json) Hash identifier: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM= Subject key identifier: F8:61:BC:07:E5:43:3B:8D:02:55:A6:9F:C6:6A:80:96:32:1C:D3:81 Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1 Certificate serial: 019B78A23BF4DA2A46AAA13E50998D92B30C Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/1-GG8B-VDO40CVaafxmqAljIc04E.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57732 IP address blocks: 185.6.183.0/24 maxlen: 24 195.60.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3b:f4:da:2a:46:aa:a1:3e:50:99:8d:92:b3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f861bc07e5433b8d0255a69fc66a8096321cd381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:eb:33:11:d3:76:42:3b:8b:a5:1a:48:1f: 8e:f1:04:25:f3:a0:86:f0:99:37:1c:ad:f8:74:2a: b9:28:0b:fd:c5:fb:2c:25:a6:63:71:62:04:9b:9d: f2:f6:29:3a:10:9f:e4:fc:4f:ab:65:fb:99:47:4c: 99:d6:e1:17:a4:f9:02:da:4a:cc:05:ab:04:3b:33: 76:df:cf:33:2d:95:11:a0:7c:2c:43:3d:d5:7c:4b: d9:02:be:7a:15:fb:07:d8:c2:5a:2b:cd:b1:85:bc: e6:92:5c:f2:dd:54:24:72:b4:f7:b1:0c:58:77:19: 74:09:cd:d2:c6:43:ff:10:ae:f7:f6:1e:77:2c:0d: c2:a2:a3:70:0c:12:31:42:0d:2f:78:a0:38:41:59: 20:58:55:e1:ce:fb:28:de:c8:4f:5a:56:f7:49:6d: e8:89:a6:32:2c:54:9f:7a:9f:7c:10:59:de:95:bd: 95:70:f0:25:47:50:13:46:fc:ee:f2:b9:cb:9b:5f: 32:81:3d:fd:cf:6e:93:e7:13:14:39:78:88:d3:de: 89:0b:43:ed:79:d7:65:08:48:6b:76:cf:a9:0b:a0: 75:93:7d:9b:49:69:2f:2f:ea:07:7d:4f:df:cc:54: 83:6f:42:e7:1f:e1:34:80:5e:43:f0:59:2f:94:50: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:61:BC:07:E5:43:3B:8D:02:55:A6:9F:C6:6A:80:96:32:1C:D3:81 X509v3 Authority Key Identifier: keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/1-GG8B-VDO40CVaafxmqAljIc04E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.183.0/24 195.60.204.0/22 Signature Algorithm: sha256WithRSAEncryption c0:40:fa:4c:7a:54:2f:69:6c:ce:d6:aa:b6:45:34:dc:08:cc: 93:2a:98:97:ae:06:c1:f9:2c:eb:2c:bb:fe:a1:64:2a:0a:f7: ff:12:ee:89:3b:83:5c:de:af:cc:ff:fb:47:7a:5c:81:84:d5: 21:06:8d:f6:af:90:a7:50:06:c3:82:35:8b:52:3c:cb:80:08: 79:31:16:43:dd:d9:69:c9:d6:c3:ac:04:1f:7d:cc:d2:03:01: 0d:ac:90:83:81:23:0f:2a:e5:02:1f:e0:ce:41:ef:1e:55:75: fe:80:31:23:c9:64:12:e0:b4:9c:e0:e1:18:21:f1:8c:44:68: b8:fd:c9:d9:ea:9c:27:9f:d1:f8:cf:ff:99:53:dc:97:76:4d: 80:8a:f0:a6:ef:38:34:d9:83:b6:77:4b:3c:5d:28:21:7d:be: 6b:a8:86:40:4c:4b:6e:1c:24:4c:ff:4b:48:34:5e:b4:dc:d0: 9d:4b:ac:33:bc:45:57:41:28:fa:0f:86:bf:e7:de:07:5a:2b: 9c:28:aa:5e:49:29:18:89:c0:37:c4:d0:85:d2:59:3f:20:8c: b7:cc:1c:59:21:3d:c3:69:13:d0:aa:c9:d5:61:7a:6e:7a:20: 30:ba:91:0d:7e:82:6f:33:6e:b1:61:01:67:55:96:fa:f8:99: b7:67:06:ee -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt4ojv02ipGqqE+UJmNkrMMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDExMTY1MTNjMjNkODdhYWNiZjViMWJiZWUzOTk4MWM3 NjMxYzEwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODYxYmMwN2U1NDMzYjhkMDI1NWE2OWZjNjZhODA5NjMyMWNkMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0frMxHTdkI7i6UaSB+O8QQl86CG 8Jk3HK34dCq5KAv9xfssJaZjcWIEm53y9ik6EJ/k/E+rZfuZR0yZ1uEXpPkC2krM BasEOzN2388zLZURoHwsQz3VfEvZAr56FfsH2MJaK82xhbzmklzy3VQkcrT3sQxY dxl0Cc3SxkP/EK739h53LA3CoqNwDBIxQg0veKA4QVkgWFXhzvso3shPWlb3SW3o iaYyLFSfep98EFnelb2VcPAlR1ATRvzu8rnLm18ygT39z26T5xMUOXiI096JC0Pt eddlCEhrds+pC6B1k32bSWkvL+oHfU/fzFSDb0LnH+E0gF5D8FkvlFDtAwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPhhvAflQzuNAlWmn8ZqgJYyHNOBMB8GA1UdIwQY MBaAFFrREWUTwj2Hqsv1sbvuOZgcdjHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAt MjNhYzk3OWQ0MWFkLzEvMS1HRzhCLVZETzQwQ1ZhYWZ4bXFBbGpJYzA0RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmYvYjFjYzhkLTg4MDgtNGMxZS04MWYwLTIzYWM5NzlkNDFh ZC8xL1d0RVJaUlBDUFllcXlfV3h1LTQ1bUJ4Mk1jRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALkGtwME AsM8zDANBgkqhkiG9w0BAQsFAAOCAQEAwED6THpUL2lsztaqtkU03AjMkyqYl64G wfks6yy7/qFkKgr3/xLuiTuDXN6vzP/7R3pcgYTVIQaN9q+Qp1AGw4I1i1I8y4AI eTEWQ93ZacnWw6wEH33M0gMBDayQg4EjDyrlAh/gzkHvHlV1/oAxI8lkEuC0nODh GCHxjERouP3J2eqcJ5/R+M//mVPcl3ZNgIrwpu84NNmDtndLPF0oIX2+a6iGQExL bhwkTP9LSDRetNzQnUusM7xFV0Eo+g+Gv+feB1ornCiqXkkpGInAN8TQhdJZPyCM t8wcWSE9w2kT0KrJ1WF6bnogMLqRDX6CbzNusWEBZ1WW+viZt2cG7g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:12 2026 by rpki-client