This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Gcgb4fKcIntpFBriNxDOmx88O0w.roa File: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (raw, json) Hash identifier: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA= Subject key identifier: 19:C8:1B:E1:F2:9C:22:7B:69:14:1A:E2:37:10:CE:9B:1F:3C:3B:4C Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837 Certificate serial: 019B7E38F7BCF41FCADC36DF10FB91C36E60 Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Gcgb4fKcIntpFBriNxDOmx88O0w.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49028 IP address blocks: 2.59.188.0/22 maxlen: 22 45.151.8.0/22 maxlen: 22 185.153.136.0/22 maxlen: 22 185.170.20.0/22 maxlen: 22 185.252.236.0/22 maxlen: 22 193.203.52.0/22 maxlen: 22 2a09:f7c0::/29 maxlen: 29 2a0a:300::/29 maxlen: 29 2a0a:6d80::/29 maxlen: 29 2a0c:2dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:bc:f4:1f:ca:dc:36:df:10:fb:91:c3:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145ceb292089e0df75719db3e96c509754f94837 Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19c81be1f29c227b69141ae23710ce9b1f3c3b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:b9:2f:a1:a9:ac:a4:5f:1c:7b:6f:83:d7: 3e:92:ac:ce:dc:d6:92:d0:48:a4:86:80:e3:d8:cb: 4b:9d:68:55:ac:17:bb:07:e2:65:31:ad:0b:5a:36: 18:74:a4:00:db:9f:bc:2c:d8:b8:84:b2:16:ef:ac: 8b:dd:39:99:bd:2a:42:12:95:26:83:46:76:e3:f1: fd:2d:e2:16:04:20:e0:9f:2c:cf:b4:90:1f:50:e1: 38:aa:9a:df:a6:ea:16:57:72:33:42:f7:45:83:18: e8:97:7b:fd:da:cd:97:e2:8a:9b:d9:26:b4:50:fe: fd:cb:3c:ba:2f:24:6e:32:e5:d9:d8:32:85:2f:db: 31:a4:af:39:a0:10:62:e1:24:51:b1:0e:1d:46:b1: 29:6a:47:6a:1d:d3:c2:84:e1:8a:4f:86:c5:39:b9: c1:c3:a3:24:5c:d5:a5:c0:bd:15:43:d4:05:f0:a3: f5:22:a4:10:49:a2:16:d2:8c:15:36:1b:a0:fb:60: 37:44:d0:01:34:6c:01:e9:3d:31:cd:16:88:27:14: ea:f6:68:dc:37:2b:9d:e1:19:9d:fc:85:16:80:32: b9:d8:e4:6f:ef:e3:f9:71:02:cd:65:ec:31:47:e5: e8:e1:40:52:9e:36:e7:5b:2b:96:64:82:76:b3:d4: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C8:1B:E1:F2:9C:22:7B:69:14:1A:E2:37:10:CE:9B:1F:3C:3B:4C X509v3 Authority Key Identifier: keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/Gcgb4fKcIntpFBriNxDOmx88O0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.188.0/22 45.151.8.0/22 185.153.136.0/22 185.170.20.0/22 185.252.236.0/22 193.203.52.0/22 IPv6: 2a09:f7c0::/29 2a0a:300::/29 2a0a:6d80::/29 2a0c:2dc0::/29 Signature Algorithm: sha256WithRSAEncryption 88:8d:18:db:ea:7c:21:0a:0e:4b:93:03:36:4c:70:e7:08:9b: a6:0b:54:7e:d1:21:35:36:cc:c1:3a:3e:cc:1a:f7:98:86:63: 2e:2c:54:b2:82:88:31:79:64:34:be:b2:d4:8b:9d:42:44:c3: 65:08:ac:e6:ae:78:ef:ca:91:d2:27:37:38:52:a7:17:1a:0f: da:c6:b1:c6:8b:6c:a5:9f:29:67:7e:c0:41:f9:f7:62:1d:2f: 1d:4f:20:45:f6:14:c7:a3:df:6c:0a:fb:d1:11:f0:31:a4:93: 1f:00:3a:3b:17:55:a7:d6:1e:98:7d:fd:63:2d:ae:37:91:4a: 1d:94:80:51:aa:5f:86:1a:b3:10:79:12:9d:d1:a0:42:e3:3c: e8:bd:7e:a8:13:b1:d6:30:0c:2e:c6:74:73:37:04:cb:a1:29: 08:e9:c8:6e:24:f2:88:5c:c5:77:c4:5a:b8:83:da:ca:41:c0: c6:76:98:a1:ea:1a:41:b9:81:98:2e:1d:7f:7b:e6:91:a4:f6: 3a:9a:69:26:be:61:21:d7:76:43:72:4f:7f:19:c0:54:fe:c5: 91:2e:95:fe:50:b7:1a:5f:9f:33:85:be:f6:65:00:8c:e1:63: d6:fc:ba:8d:0c:87:69:a5:67:10:d4:16:e1:52:d9:6a:9d:9a: 1e:fd:8f:99 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt+OPe89B/K3DbfEPuRw25gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm OTQ4MzcwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWM4MWJlMWYyOWMyMjdiNjkxNDFhZTIzNzEwY2U5YjFmM2MzYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQe5L6GprKRfHHtvg9c+kqzO3NaS 0EikhoDj2MtLnWhVrBe7B+JlMa0LWjYYdKQA25+8LNi4hLIW76yL3TmZvSpCEpUm g0Z24/H9LeIWBCDgnyzPtJAfUOE4qprfpuoWV3IzQvdFgxjol3v92s2X4oqb2Sa0 UP79yzy6LyRuMuXZ2DKFL9sxpK85oBBi4SRRsQ4dRrEpakdqHdPChOGKT4bFObnB w6MkXNWlwL0VQ9QF8KP1IqQQSaIW0owVNhug+2A3RNABNGwB6T0xzRaIJxTq9mjc Nyud4Rmd/IUWgDK52ORv7+P5cQLNZewxR+Xo4UBSnjbnWyuWZIJ2s9RffQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBnIG+HynCJ7aRQa4jcQzpsfPDtMMB8GA1UdIwQY MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt MTI3MTljMjYxY2MwLzEvR2NnYjRmS2NJbnRwRkJyaU54RE9teDg4TzB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAqBAIAATAkAwQCAju8AwQC LZcIAwQCuZmIAwQCuaoUAwQCufzsAwQCwcs0MCIEAgACMBwDBQMqCffAAwUDKgoD AAMFAyoKbYADBQMqDC3AMA0GCSqGSIb3DQEBCwUAA4IBAQCIjRjb6nwhCg5LkwM2 THDnCJumC1R+0SE1NszBOj7MGveYhmMuLFSygogxeWQ0vrLUi51CRMNlCKzmrnjv ypHSJzc4UqcXGg/axrHGi2ylnylnfsBB+fdiHS8dTyBF9hTHo99sCvvREfAxpJMf ADo7F1Wn1h6Yff1jLa43kUodlIBRql+GGrMQeRKd0aBC4zzovX6oE7HWMAwuxnRz NwTLoSkI6chuJPKIXMV3xFq4g9rKQcDGdpih6hpBuYGYLh1/e+aRpPY6mmkmvmEh 13ZDck9/GcBU/sWRLpX+ULcaX58zhb72ZQCM4WPW/LqNDIdppWcQ1BbhUtlqnZoe /Y+Z -----END CERTIFICATE-----Generated at Sun Jan 11 16:30:36 2026 by rpki-client