This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/gWhUL6ibUysYd9E4Q_6eWhdXios.roa File: gWhUL6ibUysYd9E4Q_6eWhdXios.roa (raw, json) Hash identifier: RG5wLo/gwn0SKNg7OiIDUePYOsjccyHEnk7BUGbBHac= Subject key identifier: 81:68:54:2F:A8:9B:53:2B:18:77:D1:38:43:FE:9E:5A:17:57:8A:8B Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019BCEB13886426A816CF07DEF4CC2782A6E Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/gWhUL6ibUysYd9E4Q_6eWhdXios.roa Signing time: Sun 18 Jan 2026 01:21:19 +0000 ROA not before: Sun 18 Jan 2026 01:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 91.109.40.0/24 maxlen: 24 91.109.41.0/24 maxlen: 24 91.109.42.0/24 maxlen: 24 147.185.197.0/24 maxlen: 24 193.168.200.0/24 maxlen: 24 193.168.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:b1:38:86:42:6a:81:6c:f0:7d:ef:4c:c2:78:2a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 18 01:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8168542fa89b532b1877d13843fe9e5a17578a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:95:be:e9:a6:fa:a4:88:0a:76:11:08:20:98: 73:25:07:1b:be:a7:0b:7f:d1:68:8b:1a:48:7d:91: da:64:d4:61:fc:0c:61:c8:8a:a0:4c:54:18:f2:d4: 98:96:fe:a7:bf:68:80:b0:ab:dd:9c:c6:e3:91:ff: 0a:f1:f8:96:bf:e5:74:a2:9b:80:bd:4c:9c:9f:58: af:5b:2f:4f:9d:96:71:0d:4d:c9:6a:35:24:69:78: aa:75:c8:9f:a7:7e:66:2c:60:18:51:ce:a2:3e:04: 6f:c0:06:08:1e:3f:20:89:b6:aa:02:d2:37:26:db: 3f:6e:fb:49:23:4a:75:a7:0e:2d:35:e9:4b:45:26: 40:d6:27:20:4a:b9:b6:da:45:ec:24:ed:46:43:7e: 6e:e1:d7:7e:a7:af:24:d6:ff:44:e8:f3:46:1c:84: ab:f0:22:0f:cb:7b:df:5e:f6:ae:d7:5c:be:b1:d6: 20:8f:54:90:c9:72:db:1f:31:01:8c:c5:6d:cc:dd: 65:3e:da:c2:1d:54:3e:91:a0:33:9d:20:c5:4c:3b: 40:4a:bc:c7:87:31:a6:16:74:36:16:ca:7f:90:90: 98:47:82:87:83:0b:83:93:90:b9:80:d7:a6:12:b7: bc:89:48:c5:f7:09:57:42:25:be:7d:cd:3e:b1:8e: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:68:54:2F:A8:9B:53:2B:18:77:D1:38:43:FE:9E:5A:17:57:8A:8B X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/gWhUL6ibUysYd9E4Q_6eWhdXios.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.109.40.0-91.109.42.255 147.185.197.0/24 193.168.200.0/24 193.168.203.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:42:7f:e9:f2:d1:dc:0d:82:a0:86:dc:c4:f4:b5:35:47:f3: 36:7e:2b:91:46:45:dd:fd:7f:e0:26:6a:4e:9a:ae:f4:b5:30: 2c:d6:87:db:61:6e:2a:2d:dd:2b:df:50:c0:88:95:48:30:6e: ae:90:a8:06:6d:f0:23:6b:9d:63:c7:03:04:e8:62:a1:17:a3: 4f:29:30:52:0f:54:49:21:5f:7b:b9:a8:e3:68:ae:77:1e:85: 55:a8:55:f4:82:ca:72:75:31:f0:fd:26:f0:52:dc:fa:75:63: 47:79:d6:dc:0e:8c:5a:ee:ee:9a:f5:c6:df:0f:6b:4e:f4:fb: ea:e1:55:a3:52:e2:ab:53:5a:09:b6:3b:a7:06:9e:40:cc:04: 83:eb:a2:3f:08:04:20:5d:85:5b:1b:29:81:d4:58:ea:a1:37: be:db:04:e4:42:66:54:df:06:49:8a:62:ac:e1:db:68:a8:bc: 86:de:e4:2d:76:e1:85:03:d6:29:4a:45:69:06:9c:07:eb:61: 5a:01:b3:06:cd:55:b6:02:ce:f7:99:0a:ad:9a:02:09:5f:c4: 11:83:25:6f:3d:91:d7:34:28:12:a0:3d:9a:18:77:b3:17:2c: 35:62:8d:94:0c:0a:90:c7:21:ec:5a:1c:b8:55:99:08:e2:a4: fe:b1:08:dc -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZvOsTiGQmqBbPB970zCeCpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTE4MDEyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTY4NTQyZmE4OWI1MzJiMTg3N2QxMzg0M2ZlOWU1YTE3NTc4YThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZW+6ab6pIgKdhEIIJhzJQcbvqcL f9FoixpIfZHaZNRh/AxhyIqgTFQY8tSYlv6nv2iAsKvdnMbjkf8K8fiWv+V0opuA vUycn1ivWy9PnZZxDU3JajUkaXiqdcifp35mLGAYUc6iPgRvwAYIHj8gibaqAtI3 Jts/bvtJI0p1pw4tNelLRSZA1icgSrm22kXsJO1GQ35u4dd+p68k1v9E6PNGHISr 8CIPy3vfXvau11y+sdYgj1SQyXLbHzEBjMVtzN1lPtrCHVQ+kaAznSDFTDtASrzH hzGmFnQ2Fsp/kJCYR4KHgwuDk5C5gNemEre8iUjF9wlXQiW+fc0+sY4pzwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIFoVC+om1MrGHfROEP+nloXV4qLMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvZ1doVUw2aWJVeXNZZDlFNFFfNmVXaGRYaW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBANbbSgD BABbbSoDBACTucUDBADBqMgDBADBqMswDQYJKoZIhvcNAQELBQADggEBAEtCf+ny 0dwNgqCG3MT0tTVH8zZ+K5FGRd39f+Amak6arvS1MCzWh9thbiot3SvfUMCIlUgw bq6QqAZt8CNrnWPHAwToYqEXo08pMFIPVEkhX3u5qONorncehVWoVfSCynJ1MfD9 JvBS3Pp1Y0d51twOjFru7pr1xt8Pa070++rhVaNS4qtTWgm2O6cGnkDMBIProj8I BCBdhVsbKYHUWOqhN77bBORCZlTfBkmKYqzh22iovIbe5C124YUD1ilKRWkGnAfr YVoBswbNVbYCzveZCq2aAglfxBGDJW89kdc0KBKgPZoYd7MXLDVijZQMCpDHIexa HLhVmQjipP6xCNw= -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:47 2026 by rpki-client