This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gbtpd1q4FbX60Xs24_XZjDIAu6c.roa File: gbtpd1q4FbX60Xs24_XZjDIAu6c.roa (raw, json) Hash identifier: v3eub9BKsRGPrJdMdSSt6AHUESHUkQxBcty96Jqrwb4= Subject key identifier: 81:BB:69:77:5A:B8:15:B5:FA:D1:7B:36:E3:F5:D9:8C:32:00:BB:A7 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CDB91C4332E8A082DD0B7DBF79F5 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gbtpd1q4FbX60Xs24_XZjDIAu6c.roa Signing time: Fri 02 Jan 2026 16:20:37 +0000 ROA not before: Fri 02 Jan 2026 16:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207252 IP address blocks: 85.202.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cd:b9:1c:43:32:e8:a0:82:dd:0b:7d:bf:79:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81bb69775ab815b5fad17b36e3f5d98c3200bba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:6c:0f:1b:6d:0f:49:27:5c:e7:32:46:33: a7:bb:f9:86:d8:26:f0:fe:6a:9a:28:67:d8:2d:1b: a2:60:ef:87:f9:61:ed:3c:e1:7e:88:53:33:6f:3e: 80:4f:5c:32:3b:9f:b6:b9:5a:ab:48:92:f3:a9:8e: 71:34:f2:c1:25:ec:30:c3:d1:4b:92:3e:45:e5:54: 14:a2:17:5b:de:48:84:1b:2e:b4:99:c6:17:87:32: 20:6f:fc:bc:2d:4a:04:b5:06:4c:a4:e8:b0:1e:4f: 20:36:e0:45:9a:00:24:66:a7:8b:1c:26:46:c5:c4: bd:9f:07:fb:c2:13:33:7b:a0:93:47:39:fb:0f:cf: 67:f3:fb:f7:49:84:f8:76:aa:0a:d1:a3:5c:71:48: 5b:aa:b1:f7:7a:a9:9d:b9:3a:d5:07:c4:c0:2d:4c: 3e:65:6e:b1:5f:e6:c4:34:ac:9e:56:1c:08:75:fe: c2:52:2a:b7:b0:e8:45:60:eb:6c:ea:48:1b:39:b8: f1:69:3c:b7:3e:d2:94:05:98:34:cf:c7:fd:e4:45: 70:48:ec:42:49:4d:7f:c4:5c:3a:d7:83:d8:d0:27: 77:5c:0f:ad:0d:35:bd:0f:16:8f:6a:e3:16:ac:a7: 9f:a3:16:87:10:22:2c:79:08:de:11:1b:79:2c:29: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BB:69:77:5A:B8:15:B5:FA:D1:7B:36:E3:F5:D9:8C:32:00:BB:A7 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gbtpd1q4FbX60Xs24_XZjDIAu6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.163.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:0f:51:4b:de:39:2a:f8:39:82:e2:75:89:92:1b:66:ad:49: 7c:c2:eb:fe:49:d5:8f:ec:ff:a0:e2:a7:80:23:26:4c:fe:0e: cc:6f:29:14:99:d4:2f:a1:d7:bc:43:78:cd:56:d0:a7:17:ce: ee:64:47:b2:5a:59:49:ca:6b:df:f0:d2:81:e8:4a:a8:da:90: b4:b0:ea:fb:ea:55:4b:a1:3e:0a:4d:df:72:05:02:78:0b:14: 82:20:67:28:f6:0b:25:62:a7:2d:c7:dc:96:02:33:40:3a:0c: 5b:96:c5:ac:ef:b6:2a:43:1f:dd:cd:a0:2a:fd:9b:32:18:07: b7:f6:ed:3a:e7:20:c5:7f:0f:cc:b8:40:e3:bc:28:66:cc:2c: fc:d4:f5:d6:49:59:65:3c:92:7d:0c:2d:63:9e:da:c9:ab:fd: eb:4b:69:9a:12:36:ab:0f:2a:68:9b:d6:1e:a3:8d:e8:05:84: 5a:46:a8:9c:61:b2:00:83:d2:b4:a5:c8:c7:a8:12:2a:2f:13: d5:4d:1a:67:98:0e:d2:b2:7a:4f:33:ef:38:9b:05:2b:10:26: a8:92:ec:95:c4:28:e1:43:84:22:d5:be:1c:c2:e5:da:24:3b: f5:4a:5e:57:92:4f:b7:ad:73:66:6d:c5:24:e9:0b:40:59:a6: d3:ee:ae:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gs25HEMy6KCC3Qt9v3n1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWJiNjk3NzVhYjgxNWI1ZmFkMTdiMzZlM2Y1ZDk4YzMyMDBiYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeVsDxttD0knXOcyRjOnu/mG2Cbw /mqaKGfYLRuiYO+H+WHtPOF+iFMzbz6AT1wyO5+2uVqrSJLzqY5xNPLBJewww9FL kj5F5VQUohdb3kiEGy60mcYXhzIgb/y8LUoEtQZMpOiwHk8gNuBFmgAkZqeLHCZG xcS9nwf7whMze6CTRzn7D89n8/v3SYT4dqoK0aNccUhbqrH3eqmduTrVB8TALUw+ ZW6xX+bENKyeVhwIdf7CUiq3sOhFYOts6kgbObjxaTy3PtKUBZg0z8f95EVwSOxC SU1/xFw614PY0Cd3XA+tDTW9DxaPauMWrKefoxaHECIseQjeERt5LCljWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIG7aXdauBW1+tF7NuP12YwyALunMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZ2J0cGQxcTRGYlg2MFhzMjRfWFpqRElBdTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcqjMA0G CSqGSIb3DQEBCwUAA4IBAQBPD1FL3jkq+DmC4nWJkhtmrUl8wuv+SdWP7P+g4qeA IyZM/g7MbykUmdQvode8Q3jNVtCnF87uZEeyWllJymvf8NKB6Eqo2pC0sOr76lVL oT4KTd9yBQJ4CxSCIGco9gslYqctx9yWAjNAOgxblsWs77YqQx/dzaAq/ZsyGAe3 9u065yDFfw/MuEDjvChmzCz81PXWSVllPJJ9DC1jntrJq/3rS2maEjarDypom9Ye o43oBYRaRqicYbIAg9K0pcjHqBIqLxPVTRpnmA7SsnpPM+84mwUrECaokuyVxCjh Q4Qi1b4cwuXaJDv1Sl5Xkk+3rXNmbcUk6QtAWabT7q7V -----END CERTIFICATE-----Generated at Tue Jan 20 00:57:37 2026 by rpki-client