This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/GXtyBoKwJa_8udE5jlYgWB7VYaI.roa File: GXtyBoKwJa_8udE5jlYgWB7VYaI.roa (raw, json) Hash identifier: 5g97zlCVWlo32hpHqRVgpaG704TgHvygtVvbPhPxh4A= Subject key identifier: 19:7B:72:06:82:B0:25:AF:FC:B9:D1:39:8E:56:20:58:1E:D5:61:A2 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019B79EC4CFFFB17BA6F6FC9328B83368874 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/GXtyBoKwJa_8udE5jlYgWB7VYaI.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 91.235.158.0/24 maxlen: 24 194.187.100.0/24 maxlen: 24 194.187.101.0/24 maxlen: 24 195.95.216.0/24 maxlen: 24 195.95.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4c:ff:fb:17:ba:6f:6f:c9:32:8b:83:36:88:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=197b720682b025affcb9d1398e5620581ed561a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:ed:af:32:a9:bc:77:b9:3d:2f:2b:18:9d: d3:f8:ae:47:8d:ec:2f:5e:01:60:14:3e:99:fc:e8: 90:ee:61:78:39:20:cf:b9:4f:b0:61:b5:e5:9e:34: 15:97:09:e3:13:b0:4a:8b:59:92:a4:f7:fe:a5:39: 0b:9c:37:ff:d6:e1:e7:4d:58:d5:a9:09:93:85:5b: 43:fe:45:b9:a1:43:e8:17:37:94:12:66:e2:77:5d: 2f:f5:2d:b0:cd:14:78:96:e1:5a:02:33:1a:d8:e5: c6:85:de:1d:54:2e:c8:42:7d:e1:74:41:08:40:2b: 59:a1:9d:b2:0d:62:b8:93:d8:6e:ff:4c:7a:83:bb: 04:23:25:b0:c1:14:49:b0:1e:4f:00:f6:55:41:a3: 97:e0:a7:9f:5e:95:c4:a7:9e:ab:e2:e0:20:36:6c: 2c:73:3e:cd:93:02:85:32:47:c9:0c:38:a8:c7:9a: 64:40:e0:90:93:f8:6e:c0:38:9d:c5:38:b1:c5:89: 0b:63:31:a5:10:86:ee:98:54:43:fa:ab:ab:76:86: cd:28:63:85:f5:25:59:b3:4f:9f:c3:a7:b1:2f:68: f4:31:fd:ff:e2:bd:74:f9:65:d5:a4:12:aa:69:3e: d2:61:27:2f:f5:1a:af:a1:dc:dc:04:dd:68:bd:ff: 94:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:72:06:82:B0:25:AF:FC:B9:D1:39:8E:56:20:58:1E:D5:61:A2 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/GXtyBoKwJa_8udE5jlYgWB7VYaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.158.0/24 194.187.100.0/23 195.95.216.0/23 Signature Algorithm: sha256WithRSAEncryption 08:c7:46:13:04:65:80:b7:f5:5e:a0:73:a9:58:2e:d6:a9:38: 24:70:e0:e2:24:c2:19:f1:f6:1f:63:88:32:2c:9a:51:df:24: 20:3b:05:36:c1:dc:8a:d8:ac:d7:3e:77:cc:26:5d:f5:db:92: b2:08:da:27:14:cd:97:b8:45:cf:a5:7a:d9:dc:02:e2:f7:40: 94:76:38:4d:70:ef:b3:db:43:42:05:51:3e:9b:5c:cc:29:13: 88:bf:54:1e:ff:d9:5b:12:73:a4:e4:da:c7:d7:91:28:6d:57: 17:cc:ee:9c:d9:60:2a:df:f1:c8:13:8e:d1:0f:4f:d3:23:5d: b7:df:e5:18:a7:28:5c:2e:3d:10:37:77:db:8c:a0:26:1a:d8: 68:36:24:d5:04:a1:c7:de:0d:2d:ed:14:22:44:40:88:b2:d8: 2a:d2:02:cc:9b:29:61:0d:68:e0:76:3c:14:ed:75:0a:75:04: 9f:8b:bc:29:6f:a5:2b:3c:c4:6a:c7:60:9b:0a:d6:b2:39:1f: b3:8f:93:70:94:fb:be:89:3e:7d:5c:d8:4b:79:2b:81:15:dd: 2b:e9:99:ba:dd:31:59:d0:2c:9b:37:d0:a0:9c:0b:e5:02:fd: de:87:b9:65:a1:57:c9:47:ac:69:7d:fd:c3:41:13:72:dc:f7: 39:8f:3f:1c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57Ez/+xe6b2/JMouDNoh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTdiNzIwNjgyYjAyNWFmZmNiOWQxMzk4ZTU2MjA1ODFlZDU2MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5LtrzKpvHe5PS8rGJ3T+K5Hjewv XgFgFD6Z/OiQ7mF4OSDPuU+wYbXlnjQVlwnjE7BKi1mSpPf+pTkLnDf/1uHnTVjV qQmThVtD/kW5oUPoFzeUEmbid10v9S2wzRR4luFaAjMa2OXGhd4dVC7IQn3hdEEI QCtZoZ2yDWK4k9hu/0x6g7sEIyWwwRRJsB5PAPZVQaOX4KefXpXEp56r4uAgNmws cz7NkwKFMkfJDDiox5pkQOCQk/huwDidxTixxYkLYzGlEIbumFRD+qurdobNKGOF 9SVZs0+fw6exL2j0Mf3/4r10+WXVpBKqaT7SYScv9RqvodzcBN1ovf+UXQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBl7cgaCsCWv/LnROY5WIFge1WGiMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvR1h0eUJvS3dKYV84dWRFNWpsWWdXQjdWWWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+ueAwQB wrtkAwQBw1/YMA0GCSqGSIb3DQEBCwUAA4IBAQAIx0YTBGWAt/VeoHOpWC7WqTgk cODiJMIZ8fYfY4gyLJpR3yQgOwU2wdyK2KzXPnfMJl3125KyCNonFM2XuEXPpXrZ 3ALi90CUdjhNcO+z20NCBVE+m1zMKROIv1Qe/9lbEnOk5NrH15EobVcXzO6c2WAq 3/HIE47RD0/TI1233+UYpyhcLj0QN3fbjKAmGthoNiTVBKHH3g0t7RQiRECIstgq 0gLMmylhDWjgdjwU7XUKdQSfi7wpb6UrPMRqx2CbCtayOR+zj5NwlPu+iT59XNhL eSuBFd0r6Zm63TFZ0CybN9CgnAvlAv3eh7lloVfJR6xpff3DQRNy3Pc5jz8c -----END CERTIFICATE-----Generated at Thu Jan 22 21:36:57 2026 by rpki-client