This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GFbvwxHreaHsN26iR53CTvGiaIU.roa File: GFbvwxHreaHsN26iR53CTvGiaIU.roa (raw, json) Hash identifier: ri3kwHvnHm4Ma2XOPIzNZmz4mCbBdBwPzLuqnyqYSKQ= Subject key identifier: 18:56:EF:C3:11:EB:79:A1:EC:37:6E:A2:47:9D:C2:4E:F1:A2:68:85 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF165109D34EE08BCFA85960A20F20B Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GFbvwxHreaHsN26iR53CTvGiaIU.roa Signing time: Fri 02 Jan 2026 18:21:25 +0000 ROA not before: Fri 02 Jan 2026 18:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 194.38.49.0/24 maxlen: 24 194.38.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:65:10:9d:34:ee:08:bc:fa:85:96:0a:20:f2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1856efc311eb79a1ec376ea2479dc24ef1a26885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:c3:15:92:ee:b9:fd:ab:c2:30:4c:c4:f3: 30:5f:88:c8:3d:3d:73:e9:37:7d:15:f1:82:dc:88: 33:3c:b4:2d:3e:10:41:10:7f:d8:65:ed:22:09:75: 4a:54:96:bf:5c:7a:b0:b6:67:54:40:50:29:fb:d3: b7:44:cf:57:68:bf:63:e0:ae:59:5f:0b:cf:0f:59: f2:12:5c:14:d7:e0:05:1c:5d:60:c6:6d:e6:c9:8e: d9:ea:67:d5:cb:2e:de:83:af:2a:84:c6:60:02:22: 8d:1e:6c:92:cc:03:57:b4:07:30:59:dc:75:18:45: 72:6d:5e:b5:4a:f9:ae:b4:94:c5:ae:72:89:ae:d4: 8f:c6:95:f2:1c:0c:c2:ba:8a:1c:49:98:0a:75:46: 37:d5:0d:8e:b0:0c:f4:76:e8:a0:b3:0a:aa:7e:4b: 64:af:91:19:21:09:aa:7e:79:01:47:f0:c9:54:67: af:32:12:48:80:26:f6:ce:05:f2:62:d8:bb:8e:ee: 87:e4:45:d5:e6:e4:bf:d3:48:9f:b1:cf:87:71:6c: c4:76:48:47:a3:45:3a:0b:24:f1:59:66:e6:cd:08: 65:9e:ac:24:a5:28:98:57:1d:bf:c5:2c:9d:31:45: 08:7d:34:e4:46:6a:26:ba:30:82:77:67:d8:72:ac: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:56:EF:C3:11:EB:79:A1:EC:37:6E:A2:47:9D:C2:4E:F1:A2:68:85 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/GFbvwxHreaHsN26iR53CTvGiaIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.49.0/24 194.38.51.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:d5:23:eb:41:dd:aa:e9:cd:f7:3e:01:32:b4:ee:87:4d:27: a4:ed:e1:45:1d:27:69:4c:58:c2:c6:ff:6e:5c:7d:c0:19:1c: fe:92:14:7f:2f:2e:c5:b6:7e:11:74:4f:f3:43:70:bc:63:fb: 0f:fd:07:b8:e4:7c:7b:a1:02:2f:af:9f:03:67:bc:b5:92:2c: ae:61:41:b3:ae:8c:66:e6:8e:61:37:11:d7:ab:ec:7f:f0:d9: bb:d7:77:6e:b9:3a:31:43:cb:7d:0e:25:52:cc:ad:45:c2:4e: e9:38:51:d5:d6:c6:cc:13:b5:47:3a:c5:7c:6f:33:f1:69:31: bd:a9:1b:4b:72:15:fd:d0:87:8a:35:76:62:8b:e4:44:56:94: 2b:f4:ae:1c:6c:25:90:74:f7:1f:47:3c:2b:f5:98:2c:a7:03: 18:86:0b:fb:3e:7f:02:9e:26:f4:b3:3d:04:5b:95:fd:fe:4f: be:e0:26:3c:04:61:fd:69:b5:de:67:62:25:43:9c:53:30:dd: 7c:65:1d:f5:3c:0b:c4:29:1f:56:17:39:0e:36:e8:67:5e:f6: 42:ae:81:93:d9:2a:76:93:b1:40:35:0d:9c:96:f5:21:22:49: 9c:1d:0d:ba:94:8b:d0:07:36:9e:47:3a:b4:1a:fa:ce:c8:0c: 55:ab:69:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8WUQnTTuCLz6hZYKIPILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODU2ZWZjMzExZWI3OWExZWMzNzZlYTI0NzlkYzI0ZWYxYTI2ODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNzDFZLuuf2rwjBMxPMwX4jIPT1z 6Td9FfGC3IgzPLQtPhBBEH/YZe0iCXVKVJa/XHqwtmdUQFAp+9O3RM9XaL9j4K5Z XwvPD1nyElwU1+AFHF1gxm3myY7Z6mfVyy7eg68qhMZgAiKNHmySzANXtAcwWdx1 GEVybV61SvmutJTFrnKJrtSPxpXyHAzCuoocSZgKdUY31Q2OsAz0duigswqqfktk r5EZIQmqfnkBR/DJVGevMhJIgCb2zgXyYti7ju6H5EXV5uS/00ifsc+HcWzEdkhH o0U6CyTxWWbmzQhlnqwkpSiYVx2/xSydMUUIfTTkRmomujCCd2fYcqwUdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBhW78MR63mh7Dduokedwk7xomiFMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvR0Zidnd4SHJlYUhzTjI2aVI1M0NUdkdpYUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiYxAwQA wiYzMA0GCSqGSIb3DQEBCwUAA4IBAQBq1SPrQd2q6c33PgEytO6HTSek7eFFHSdp TFjCxv9uXH3AGRz+khR/Ly7Ftn4RdE/zQ3C8Y/sP/Qe45Hx7oQIvr58DZ7y1kiyu YUGzroxm5o5hNxHXq+x/8Nm713duuToxQ8t9DiVSzK1Fwk7pOFHV1sbME7VHOsV8 bzPxaTG9qRtLchX90IeKNXZii+REVpQr9K4cbCWQdPcfRzwr9ZgspwMYhgv7Pn8C nib0sz0EW5X9/k++4CY8BGH9abXeZ2IlQ5xTMN18ZR31PAvEKR9WFzkONuhnXvZC roGT2Sp2k7FANQ2clvUhIkmcHQ26lIvQBzaeRzq0GvrOyAxVq2l3 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:12 2026 by rpki-client