This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GcvIrDlgE0PUouL66OyfYBDiNGM.roa File: GcvIrDlgE0PUouL66OyfYBDiNGM.roa (raw, json) Hash identifier: V2mtdP1crUqxhb6K33WwyASLUSj8PR0JrRx0ea+nlbw= Subject key identifier: 19:CB:C8:AC:39:60:13:43:D4:A2:E2:FA:E8:EC:9F:60:10:E2:34:63 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1451C6230F14AFBFE6037078396BFF Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GcvIrDlgE0PUouL66OyfYBDiNGM.roa Signing time: Fri 02 Jan 2026 14:19:56 +0000 ROA not before: Fri 02 Jan 2026 14:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61121 IP address blocks: 193.233.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:51:c6:23:0f:14:af:bf:e6:03:70:78:39:6b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19cbc8ac39601343d4a2e2fae8ec9f6010e23463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:6c:63:88:58:71:75:d9:73:51:fa:45:3e: 89:22:98:d8:1f:4a:4e:be:6e:16:af:76:1d:3b:bc: 14:b3:87:36:4d:6f:f8:17:e4:8d:9a:7d:7f:b7:6a: 36:41:2a:9a:60:d8:ef:19:02:54:5a:32:c9:06:f4: de:e0:b8:b4:a0:73:27:3c:03:71:50:b6:74:99:ec: a0:4a:dc:72:20:ef:ef:ac:20:f2:aa:d4:e6:ab:4a: b0:74:6d:23:57:fc:26:f4:ae:b2:2b:93:1c:99:76: e5:08:12:41:6a:fc:43:09:26:32:26:09:41:a1:21: 5d:72:09:04:af:16:ee:4c:b4:a5:b6:2e:30:08:2e: 6c:5d:3a:6e:f1:17:40:0a:7b:c2:c7:21:ce:d6:d3: 75:10:dd:be:bf:51:34:4f:9a:1a:9e:a8:e5:5b:e3: ba:0e:51:0c:68:3e:9e:65:86:d1:72:57:ad:d4:8c: fc:10:b6:1a:bd:76:cb:28:24:0d:a1:f3:d5:c9:61: 0e:64:4c:86:2d:ff:db:92:4c:44:0b:77:76:5d:16: 95:e0:61:2f:a9:f4:04:52:89:de:3d:f1:fa:df:9f: 4f:ae:0a:0b:87:a4:29:2f:18:3d:c9:e3:2c:52:a7: aa:8c:10:49:69:33:57:55:0b:58:d6:48:e5:7a:20: ab:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CB:C8:AC:39:60:13:43:D4:A2:E2:FA:E8:EC:9F:60:10:E2:34:63 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GcvIrDlgE0PUouL66OyfYBDiNGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:5b:cc:e4:50:6d:3c:9f:8e:51:90:1f:04:02:87:a8:c1:de: f0:07:e3:dc:23:0b:66:fe:a5:68:2b:b8:41:23:62:ef:b3:9e: d5:86:77:16:99:65:6d:85:ed:39:39:a4:33:c3:89:79:b0:12: 16:8b:75:0b:dc:1c:c8:9b:7d:08:d6:c5:b2:44:4a:c7:bb:03: a5:eb:97:38:5d:49:52:61:c8:08:86:1a:8e:17:8d:6c:6c:75: 0e:dd:b0:25:ab:37:00:e9:c8:29:c1:e0:64:8f:73:bf:ad:d1: a8:cf:b5:cf:1c:54:86:42:b6:eb:b7:00:01:b1:e9:a0:cb:7b: ca:7c:6b:7e:d1:dd:b2:c2:90:ff:a2:2a:fc:35:20:77:d6:23: 7d:5c:56:b2:42:3b:cb:f8:74:c5:23:ba:f5:b2:4b:7a:52:2c: 90:b5:03:a0:32:86:50:9b:cc:92:d3:6f:03:9a:35:19:e9:15: 6f:86:27:b4:ba:18:9c:0c:89:a8:ab:80:5b:c0:10:e7:da:02: 09:f2:1f:c0:ea:e4:d1:31:73:70:c3:78:90:0d:4c:0e:15:71: 8e:1e:04:9b:f9:7b:36:e8:96:3d:fa:9a:ce:99:34:47:b7:3b: 4a:90:5c:7c:de:68:9f:f4:72:4c:30:6b:81:e1:09:af:da:54: 7e:42:a5:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFHGIw8Ur7/mA3B4OWv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWNiYzhhYzM5NjAxMzQzZDRhMmUyZmFlOGVjOWY2MDEwZTIzNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv65sY4hYcXXZc1H6RT6JIpjYH0pO vm4Wr3YdO7wUs4c2TW/4F+SNmn1/t2o2QSqaYNjvGQJUWjLJBvTe4Li0oHMnPANx ULZ0meygStxyIO/vrCDyqtTmq0qwdG0jV/wm9K6yK5McmXblCBJBavxDCSYyJglB oSFdcgkErxbuTLSlti4wCC5sXTpu8RdACnvCxyHO1tN1EN2+v1E0T5oanqjlW+O6 DlEMaD6eZYbRclet1Iz8ELYavXbLKCQNofPVyWEOZEyGLf/bkkxEC3d2XRaV4GEv qfQEUonePfH6359PrgoLh6QpLxg9yeMsUqeqjBBJaTNXVQtY1kjleiCrFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBnLyKw5YBND1KLi+ujsn2AQ4jRjMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvR2N2SXJEbGdFMFBVb3VMNjZPeWZZQkRpTkdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwenuMA0G CSqGSIb3DQEBCwUAA4IBAQA8W8zkUG08n45RkB8EAoeowd7wB+PcIwtm/qVoK7hB I2Lvs57VhncWmWVthe05OaQzw4l5sBIWi3UL3BzIm30I1sWyRErHuwOl65c4XUlS YcgIhhqOF41sbHUO3bAlqzcA6cgpweBkj3O/rdGoz7XPHFSGQrbrtwABsemgy3vK fGt+0d2ywpD/oir8NSB31iN9XFayQjvL+HTFI7r1skt6UiyQtQOgMoZQm8yS028D mjUZ6RVvhie0uhicDImoq4BbwBDn2gIJ8h/A6uTRMXNww3iQDUwOFXGOHgSb+Xs2 6JY9+prOmTRHtztKkFx83mif9HJMMGuB4Qmv2lR+QqWm -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:42 2026 by rpki-client