This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa File: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (raw, json) Hash identifier: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk= Subject key identifier: 18:3E:4D:D5:ED:C4:8B:73:91:9D:DA:D2:1D:8C:30:38:22:75:F9:C9 Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1 Certificate serial: 019B7A5AF1894C09011010ED73A7AAE1936F Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 84.38.48.0/23 maxlen: 23 84.38.50.0/24 maxlen: 24 84.38.52.0/23 maxlen: 23 84.38.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f1:89:4c:09:01:10:10:ed:73:a7:aa:e1:93:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=183e4dd5edc48b73919ddad21d8c30382275f9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0b:49:1b:71:75:c9:a8:df:21:be:47:fc:2f: 6f:b8:5e:20:e0:89:a8:fe:f4:16:21:e2:ee:ca:60: 9f:4a:55:90:57:ac:3b:ff:eb:ef:6e:d4:1d:2c:3f: d4:7e:c2:8d:8e:86:41:7d:f6:a9:4f:38:4d:70:00: e7:21:2d:d0:1c:8b:c5:f5:bb:a9:3f:6f:a1:69:da: 62:89:16:62:16:40:0d:4d:2d:98:7f:ab:ef:c5:20: b0:e8:fa:49:99:4b:c5:79:3e:cf:71:07:4d:4e:4d: 34:cf:62:ef:db:c0:91:d6:7c:77:81:a8:60:a8:fc: 80:ec:79:78:d5:27:9f:64:4d:10:9d:d6:3d:38:a3: 54:22:e4:ff:94:79:c5:34:d8:7a:d5:bf:69:99:6f: b9:c1:ff:76:da:b9:da:67:29:fd:6f:82:85:3c:0a: 0b:9f:0f:98:9f:b4:03:d3:41:a3:be:0e:e8:18:67: 22:80:a4:c2:3e:f9:b0:39:dc:2c:5c:49:ce:5c:bb: 52:9a:49:9d:43:1a:91:73:00:b7:e6:2c:cd:7b:f1: 39:3f:af:54:aa:a7:8c:8a:16:2c:d9:63:a6:5f:83: 48:e1:f2:1e:a6:7b:0a:d2:d9:d2:2e:5c:00:55:0f: c4:45:7b:e8:16:78:1a:fd:25:0e:c8:ad:0b:89:0a: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3E:4D:D5:ED:C4:8B:73:91:9D:DA:D2:1D:8C:30:38:22:75:F9:C9 X509v3 Authority Key Identifier: keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.48.0-84.38.50.255 84.38.52.0/23 84.38.56.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:27:f1:7b:5d:61:5d:24:b5:21:cd:49:e3:df:1b:82:5f:50: 29:1c:c5:83:b2:ef:14:d2:a0:0d:f6:5f:23:40:66:e0:41:93: 58:49:5d:73:d8:4c:48:62:3e:71:6f:11:f6:88:24:4e:9c:23: ad:f6:e1:14:82:19:27:4e:f7:28:7c:39:5e:33:47:46:55:01: 6a:cc:e5:bf:ef:77:0f:25:11:4f:12:2d:b2:4d:5e:13:63:ec: 86:2f:49:ce:51:95:70:eb:80:4d:fb:94:d7:67:69:35:e2:ee: af:63:0c:d1:2f:9c:6b:88:23:f8:43:49:66:b7:c4:49:f9:d5: c6:9d:4a:5d:22:4d:80:ae:bd:9f:34:b7:2a:5f:f7:49:97:a2: 3d:02:28:39:51:1d:ba:c6:89:42:ca:14:a2:9d:9a:02:a3:d8: 9d:16:67:97:64:d6:d0:ed:13:87:b3:d7:38:2b:a8:fa:4d:31: 95:79:4d:b9:14:4f:5c:b4:9f:7b:c7:3a:6d:78:71:ba:45:8a: ef:f1:2b:df:38:ef:4a:83:70:e9:1a:c3:a9:28:88:06:b9:ec: 49:8f:17:a1:a3:8a:e2:a5:ba:91:e4:62:2e:6d:be:ff:5e:fd: 43:fc:db:25:9b:e3:80:8b:c0:2e:45:f6:97:f6:47:96:e1:dc: 74:35:4c:8b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6WvGJTAkBEBDtc6eq4ZNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw NzAyYzEwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODNlNGRkNWVkYzQ4YjczOTE5ZGRhZDIxZDhjMzAzODIyNzVmOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AtJG3F1yajfIb5H/C9vuF4g4Imo /vQWIeLuymCfSlWQV6w7/+vvbtQdLD/UfsKNjoZBffapTzhNcADnIS3QHIvF9bup P2+hadpiiRZiFkANTS2Yf6vvxSCw6PpJmUvFeT7PcQdNTk00z2Lv28CR1nx3gahg qPyA7Hl41SefZE0QndY9OKNUIuT/lHnFNNh61b9pmW+5wf922rnaZyn9b4KFPAoL nw+Yn7QD00Gjvg7oGGcigKTCPvmwOdwsXEnOXLtSmkmdQxqRcwC35izNe/E5P69U qqeMihYs2WOmX4NI4fIepnsK0tnSLlwAVQ/ERXvoFnga/SUOyK0LiQpCOwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBg+TdXtxItzkZ3a0h2MMDgidfnJMB8GA1UdIwQY MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt MTIyNTVlMzYxMmVjLzEvR0Q1TjFlM0VpM09SbmRyU0hZd3dPQ0oxLWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARUJjAD BABUJjIDBAFUJjQDBAFUJjgwDQYJKoZIhvcNAQELBQADggEBAE4n8XtdYV0ktSHN SePfG4JfUCkcxYOy7xTSoA32XyNAZuBBk1hJXXPYTEhiPnFvEfaIJE6cI6324RSC GSdO9yh8OV4zR0ZVAWrM5b/vdw8lEU8SLbJNXhNj7IYvSc5RlXDrgE37lNdnaTXi 7q9jDNEvnGuII/hDSWa3xEn51cadSl0iTYCuvZ80typf90mXoj0CKDlRHbrGiULK FKKdmgKj2J0WZ5dk1tDtE4ez1zgrqPpNMZV5TbkUT1y0n3vHOm14cbpFiu/xK984 70qDcOkaw6koiAa57EmPF6GjiuKlupHkYi5tvv9e/UP82yWb44CLwC5F9pf2R5bh 3HQ1TIs= -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:32 2026 by rpki-client