This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/GdUUpV1tSpa6dExv6OdPOPN3bMo.roa File: GdUUpV1tSpa6dExv6OdPOPN3bMo.roa (raw, json) Hash identifier: JEBXOLiUs8+kGojQx9pRr2R8TcsHWxkp8T4KQDmx6n8= Subject key identifier: 19:D5:14:A5:5D:6D:4A:96:BA:74:4C:6F:E8:E7:4F:38:F3:77:6C:CA Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Certificate serial: 019B7EA57F40C347882EB3C6A2594F78D4D0 Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/GdUUpV1tSpa6dExv6OdPOPN3bMo.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38948 IP address blocks: 80.251.80.0/20 maxlen: 24 2a0b:8140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7f:40:c3:47:88:2e:b3:c6:a2:59:4f:78:d4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19d514a55d6d4a96ba744c6fe8e74f38f3776cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:e0:99:74:6b:f3:fa:27:5d:41:eb:82:76: 64:03:cf:c3:cf:ef:64:7e:64:8b:e8:d9:66:df:16: 72:5a:04:b1:86:96:e2:3f:4e:9a:ec:67:95:26:13: 83:ee:be:04:9c:a5:ea:8f:68:4e:1f:23:d6:1d:e7: 49:1e:4d:03:8a:17:ff:c1:80:f5:03:5b:0e:0d:b5: 9b:c7:ca:cb:fe:d4:00:18:f1:0b:41:88:ae:18:3b: 1b:d0:9a:e3:ce:43:a1:e9:77:3f:d9:ec:35:c2:d2: fd:55:f7:31:de:2c:6d:6c:9b:e8:1b:74:2d:1b:a7: f7:78:8d:81:b6:99:32:5a:6f:5b:c9:24:39:74:2c: d2:a2:19:b5:8c:93:da:fb:58:cb:0d:4b:73:26:23: ea:b1:ae:26:6f:14:2a:67:46:de:a7:ec:13:71:89: c8:53:bb:55:4b:cb:20:c8:82:89:40:7b:6b:63:e5: 0b:6d:d2:7f:a7:51:4f:8f:d7:c0:0f:a6:e0:f7:55: a4:92:0d:f7:95:be:23:cf:32:d6:f1:30:8c:fe:e9: ad:21:f9:f4:d4:43:28:47:d6:99:74:86:94:72:81: 0b:35:54:16:23:a1:76:56:2a:0a:00:cb:9e:e1:93: 42:b1:43:ef:37:17:c7:4e:c5:a9:a4:73:af:ff:b9: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D5:14:A5:5D:6D:4A:96:BA:74:4C:6F:E8:E7:4F:38:F3:77:6C:CA X509v3 Authority Key Identifier: keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/GdUUpV1tSpa6dExv6OdPOPN3bMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.251.80.0/20 IPv6: 2a0b:8140::/29 Signature Algorithm: sha256WithRSAEncryption 02:1b:95:9a:6f:2e:45:f7:f2:42:fa:33:83:07:71:35:ae:8f: 4d:e6:c0:1e:5d:35:b0:dc:47:3d:8e:16:1b:eb:e8:75:1f:e7: 89:13:90:1c:a1:df:34:a1:04:db:2b:52:92:87:38:c1:04:d1: 94:17:27:59:f6:bf:9e:3f:dc:b9:a9:d0:30:c9:ee:81:7c:a9: ea:15:7f:bc:3d:43:12:a7:c0:3c:85:59:d4:12:11:75:57:9a: c7:81:45:ee:49:8b:29:44:00:ff:59:0a:d0:2c:2d:96:e8:0c: 31:93:f2:f8:ae:64:7d:ef:76:de:d6:ff:fa:95:f5:a8:95:4a: 18:4a:ff:8d:31:90:e8:57:8f:19:d3:ae:c9:6c:94:01:6d:43: 5b:54:9f:8a:02:39:b0:26:b5:5e:85:2a:67:a0:77:f8:5b:02: d8:5b:c6:a4:e9:58:ef:50:e9:ca:2d:d4:2d:69:50:ff:6a:79: da:57:11:8a:1d:d0:72:21:56:53:31:12:ba:e9:c1:c2:cd:c4: e4:3f:73:62:48:3f:55:8a:67:b9:f2:3f:6e:f6:9c:e8:a5:1a: 93:37:e4:30:6b:a4:2c:8d:de:58:d9:7b:a5:8d:81:82:0f:e8: 77:c2:f8:09:48:44:b3:5a:59:e6:08:0a:8b:73:4c:be:0f:d8: b2:cc:20:03 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pX9Aw0eILrPGollPeNTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGEyZjM2NjAyYzc2ZmE3Mjk3YjRlNTlmNThkZGEwZDUw MWVhMGQwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWQ1MTRhNTVkNmQ0YTk2YmE3NDRjNmZlOGU3NGYzOGYzNzc2Y2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnfgmXRr8/onXUHrgnZkA8/Dz+9k fmSL6Nlm3xZyWgSxhpbiP06a7GeVJhOD7r4EnKXqj2hOHyPWHedJHk0Dihf/wYD1 A1sODbWbx8rL/tQAGPELQYiuGDsb0JrjzkOh6Xc/2ew1wtL9Vfcx3ixtbJvoG3Qt G6f3eI2BtpkyWm9bySQ5dCzSohm1jJPa+1jLDUtzJiPqsa4mbxQqZ0bep+wTcYnI U7tVS8sgyIKJQHtrY+ULbdJ/p1FPj9fAD6bg91Wkkg33lb4jzzLW8TCM/umtIfn0 1EMoR9aZdIaUcoELNVQWI6F2VioKAMue4ZNCsUPvNxfHTsWppHOv/7nM9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBnVFKVdbUqWunRMb+jnTzjzd2zKMB8GA1UdIwQY MBaAFHeKLzZgLHb6cpe05Z9Y3aDVAeoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgt NzNiYmQwMmNiZDM3LzEvR2RVVXBWMXRTcGE2ZEV4djZPZFBPUE4zYk1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgtNzNiYmQwMmNiZDM3 LzEvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUPtQMA0E AgACMAcDBQMqC4FAMA0GCSqGSIb3DQEBCwUAA4IBAQACG5Waby5F9/JC+jODB3E1 ro9N5sAeXTWw3Ec9jhYb6+h1H+eJE5Acod80oQTbK1KShzjBBNGUFydZ9r+eP9y5 qdAwye6BfKnqFX+8PUMSp8A8hVnUEhF1V5rHgUXuSYspRAD/WQrQLC2W6Awxk/L4 rmR973be1v/6lfWolUoYSv+NMZDoV48Z067JbJQBbUNbVJ+KAjmwJrVehSpnoHf4 WwLYW8ak6VjvUOnKLdQtaVD/annaVxGKHdByIVZTMRK66cHCzcTkP3NiSD9Vime5 8j9u9pzopRqTN+Qwa6Qsjd5Y2XuljYGCD+h3wvgJSESzWlnmCAqLc0y+D9iyzCAD -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:55 2026 by rpki-client