This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/GIu2ENBKArBoUM1sfnu8XliPsBk.roa File: GIu2ENBKArBoUM1sfnu8XliPsBk.roa (raw, json) Hash identifier: h2kQp7Ea96pFeOOV+S4zc//9DSonXne4sXDGXPNxK5w= Subject key identifier: 18:8B:B6:10:D0:4A:02:B0:68:50:CD:6C:7E:7B:BC:5E:58:8F:B0:19 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019B7E3908DAA629A41E53B7A887AC84E49C Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/GIu2ENBKArBoUM1sfnu8XliPsBk.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 176.65.139.0/24 maxlen: 24 176.65.140.0/24 maxlen: 24 176.65.141.0/24 maxlen: 24 176.65.142.0/24 maxlen: 24 176.65.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:08:da:a6:29:a4:1e:53:b7:a8:87:ac:84:e4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=188bb610d04a02b06850cd6c7e7bbc5e588fb019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:11:96:c7:21:5e:8d:92:9d:96:e6:1c:5c: 2b:55:11:0e:41:7d:2a:ed:df:d7:1d:41:f7:17:68: e7:88:e3:81:1f:8d:9a:b2:37:2d:6f:94:d7:18:6e: be:67:a1:27:b6:16:e7:86:e4:d2:e2:83:3a:58:ee: 57:36:c0:63:ce:60:9a:aa:d7:6c:0e:72:bd:09:2c: 94:41:c5:ee:6a:ce:d7:7b:48:f8:95:e9:e6:c5:8f: c5:43:20:f2:14:59:5d:78:8b:ec:6c:b4:58:b5:ff: 98:23:dc:5c:8f:e1:b8:68:5a:b2:02:ef:cf:ae:d1: 5a:65:40:c9:6e:f7:a5:ea:61:ae:b1:06:43:03:da: 10:2f:02:d2:34:8b:b7:19:5f:dd:2e:33:43:b4:ba: 8f:8b:a9:ed:8e:89:e1:f1:9e:8f:c5:ee:5f:3c:54: bc:61:2d:3f:b4:82:70:e5:17:f4:1d:2f:52:6e:ef: 2d:40:f0:f8:73:3c:b4:80:71:07:db:24:64:b6:8e: ef:bd:b0:74:9c:1d:8e:f7:58:81:14:77:94:24:f5: 8c:50:99:63:07:a3:b4:c5:c5:39:bf:12:f0:c8:d0: 3e:d7:9f:13:4a:71:0c:bf:ac:9e:2c:76:7d:fe:0e: 5c:3c:c2:8b:26:0d:2b:12:43:2a:15:e0:6e:07:83: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:B6:10:D0:4A:02:B0:68:50:CD:6C:7E:7B:BC:5E:58:8F:B0:19 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/GIu2ENBKArBoUM1sfnu8XliPsBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.139.0-176.65.143.255 Signature Algorithm: sha256WithRSAEncryption 68:04:16:4e:a2:2b:fa:95:4b:c4:76:83:70:9a:08:00:8c:06: 2c:96:61:6d:56:67:19:59:d0:f0:90:6e:c5:36:ce:c5:6c:0f: f5:be:87:0e:91:a6:2c:54:d8:e7:9f:cd:ac:5b:be:b4:8a:2b: db:d0:8f:98:79:5e:03:f9:7e:41:5b:bd:83:a9:a2:39:cb:9f: 14:de:26:5b:f9:c8:44:96:a5:c5:4d:68:80:fd:26:09:93:03: 65:eb:53:92:fc:79:ee:6d:99:f7:f0:89:15:ef:e1:f6:e4:b7: a9:7a:80:1c:32:fb:3a:0f:85:8b:e1:a2:c8:df:e3:4a:c9:0f: 6c:1e:4b:76:ef:81:5f:32:c7:24:b5:e2:b6:96:07:f8:e1:a2: 6d:1c:63:2c:6b:52:ec:c3:09:c1:b9:5a:cf:9c:94:70:26:1f: 3e:98:f9:97:d2:0f:39:88:a7:85:cb:06:48:25:56:41:4b:12: 2e:94:6a:8f:c0:52:8e:14:35:18:83:50:f8:9c:cd:a0:6a:67: 9c:b7:03:7f:c8:f1:e1:41:2a:02:8a:4c:4e:43:cc:f4:9d:fb: 60:de:2d:3b:30:e5:c3:5c:d6:97:33:3b:d9:4f:4b:4b:df:b5: 94:6c:a3:fd:05:46:ea:02:fe:44:63:75:e2:53:f6:31:81:4e: 27:48:82:de -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OQjapimkHlO3qIeshOScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODhiYjYxMGQwNGEwMmIwNjg1MGNkNmM3ZTdiYmM1ZTU4OGZiMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ8RlschXo2SnZbmHFwrVREOQX0q 7d/XHUH3F2jniOOBH42asjctb5TXGG6+Z6EnthbnhuTS4oM6WO5XNsBjzmCaqtds DnK9CSyUQcXuas7Xe0j4lenmxY/FQyDyFFldeIvsbLRYtf+YI9xcj+G4aFqyAu/P rtFaZUDJbvel6mGusQZDA9oQLwLSNIu3GV/dLjNDtLqPi6ntjonh8Z6Pxe5fPFS8 YS0/tIJw5Rf0HS9Sbu8tQPD4czy0gHEH2yRkto7vvbB0nB2O91iBFHeUJPWMUJlj B6O0xcU5vxLwyNA+158TSnEMv6yeLHZ9/g5cPMKLJg0rEkMqFeBuB4PMEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBiLthDQSgKwaFDNbH57vF5Yj7AZMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvR0l1MkVOQktBckJvVU0xc2ZudThYbGlQc0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACwQYsD BASwQYAwDQYJKoZIhvcNAQELBQADggEBAGgEFk6iK/qVS8R2g3CaCACMBiyWYW1W ZxlZ0PCQbsU2zsVsD/W+hw6RpixU2OefzaxbvrSKK9vQj5h5XgP5fkFbvYOpojnL nxTeJlv5yESWpcVNaID9JgmTA2XrU5L8ee5tmffwiRXv4fbkt6l6gBwy+zoPhYvh osjf40rJD2weS3bvgV8yxyS14raWB/jhom0cYyxrUuzDCcG5Ws+clHAmHz6Y+ZfS DzmIp4XLBkglVkFLEi6Uao/AUo4UNRiDUPiczaBqZ5y3A3/I8eFBKgKKTE5DzPSd +2DeLTsw5cNc1pczO9lPS0vftZRso/0FRuoC/kRjdeJT9jGBTidIgt4= -----END CERTIFICATE-----Generated at Mon Jan 19 17:52:12 2026 by rpki-client