This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa File: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (raw, json) Hash identifier: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs= Subject key identifier: 18:19:29:C4:CC:F1:AE:6C:95:3C:E0:B4:8D:EC:39:5C:9F:1A:5A:16 Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Certificate serial: 019B78A24D20E13313BCB415F3F4308D8B21 Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa Signing time: Thu 01 Jan 2026 08:17:40 +0000 ROA not before: Thu 01 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.198.117.0/24 maxlen: 24 185.109.132.0/24 maxlen: 24 185.109.133.0/24 maxlen: 24 185.109.134.0/24 maxlen: 24 185.109.135.0/24 maxlen: 24 185.146.152.0/24 maxlen: 24 185.146.154.0/24 maxlen: 24 185.146.155.0/24 maxlen: 24 2a07:4f80::/44 maxlen: 44 2a07:4f80::/48 maxlen: 48 2a07:4f80:10::/44 maxlen: 44 2a07:4f80:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4d:20:e1:33:13:bc:b4:15:f3:f4:30:8d:8b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Validity Not Before: Jan 1 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=181929c4ccf1ae6c953ce0b48dec395c9f1a5a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:8f:e6:40:12:07:a8:e8:bf:40:ac:32:b6: a5:53:fc:24:85:c2:8f:0a:f3:f0:20:85:51:ea:17: a7:67:ee:f7:ff:e3:98:be:bf:ee:c8:79:2b:32:2f: b1:25:12:db:e1:ae:a1:b2:d3:c8:92:b3:55:f3:b3: a7:fa:e4:56:33:38:59:09:96:ed:9a:dc:c0:82:34: 5b:43:d1:33:53:75:f7:15:ba:a3:e8:d0:35:66:97: a0:e9:9f:4e:45:d1:ee:80:35:59:19:a0:ae:dd:8a: c3:0d:52:70:51:82:20:82:a5:4a:e2:48:aa:72:94: 8a:92:f5:3f:ad:8e:61:c8:1f:ca:b7:1f:e4:c0:bd: 5a:5d:dd:c6:a3:b6:69:50:19:1d:10:a1:2c:86:55: df:4c:7c:40:25:be:a5:fe:6a:2c:2d:5f:08:5d:43: da:23:46:3a:87:c1:e9:f6:f7:ae:fd:e0:88:33:c0: 30:9a:c3:5d:8e:d6:09:b5:92:f8:9f:37:0b:bd:72: 2b:da:64:7d:71:ef:64:fd:20:6e:12:e8:00:60:3d: 8f:c2:8e:e7:1e:f9:6e:34:49:c3:02:92:57:45:86: dc:b4:4f:93:60:dc:e2:34:0f:e5:91:0d:21:d1:cb: 6f:70:11:c2:00:a3:24:bf:ab:f0:bb:99:8b:26:f7: 79:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:19:29:C4:CC:F1:AE:6C:95:3C:E0:B4:8D:EC:39:5C:9F:1A:5A:16 X509v3 Authority Key Identifier: keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.117.0/24 185.109.132.0/22 185.146.152.0/24 185.146.154.0/23 IPv6: 2a07:4f80::-2a07:4f80:20:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 22:41:b9:b1:1b:93:f7:6c:9b:d5:01:0d:02:79:3e:9f:f1:e8: 77:1b:51:01:a1:f4:8d:fd:35:e2:4a:66:e9:9c:8c:27:1c:ce: 2b:3c:9f:b8:e9:1a:ef:c0:1a:77:36:c0:1c:25:53:8e:4d:b2: 56:ed:eb:cc:b3:f6:a9:87:32:8a:c3:a3:d2:f0:a0:0c:aa:4d: ad:3a:0d:36:77:4f:f0:22:cb:bb:05:df:73:41:c9:79:26:8d: 84:77:28:be:74:ef:60:10:e1:0d:8b:0f:6b:eb:d3:db:df:60: c3:ba:69:21:06:28:ee:22:df:1d:7f:df:d7:c1:35:9c:12:83: 38:0a:e2:78:e8:9f:54:1e:70:95:0e:95:6f:3a:a7:66:49:81: a5:e4:13:05:06:62:a8:d4:9b:dd:31:a6:39:d3:9b:47:47:bb: f7:a7:45:36:57:d0:6b:95:67:c7:f1:cf:96:13:cc:5e:c5:af: d6:5c:ae:6f:c2:f7:5f:29:b7:8f:6f:37:77:5e:99:93:70:9a: ad:f5:28:54:2d:06:99:51:5d:a2:b9:a6:1d:6e:6e:cc:ab:4f: 80:4d:db:46:f3:10:cc:60:e2:b4:6c:f6:97:aa:f2:8f:df:b7: 0d:df:e4:5c:a4:db:60:88:e5:e4:65:c3:5b:6b:52:14:2e:ff: 6b:6d:97:e6 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4ok0g4TMTvLQV8/QwjYshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1 ODM3MWUwHhcNMjYwMTAxMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODE5MjljNGNjZjFhZTZjOTUzY2UwYjQ4ZGVjMzk1YzlmMWE1YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr42P5kASB6jov0CsMralU/wkhcKP CvPwIIVR6henZ+73/+OYvr/uyHkrMi+xJRLb4a6hstPIkrNV87On+uRWMzhZCZbt mtzAgjRbQ9EzU3X3Fbqj6NA1Zpeg6Z9ORdHugDVZGaCu3YrDDVJwUYIggqVK4kiq cpSKkvU/rY5hyB/Ktx/kwL1aXd3Go7ZpUBkdEKEshlXfTHxAJb6l/mosLV8IXUPa I0Y6h8Hp9veu/eCIM8AwmsNdjtYJtZL4nzcLvXIr2mR9ce9k/SBuEugAYD2Pwo7n HvluNEnDApJXRYbctE+TYNziNA/lkQ0h0ctvcBHCAKMkv6vwu5mLJvd5nwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFBgZKcTM8a5slTzgtI3sOVyfGloWMB8GA1UdIwQY MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt MTFiNGFmYmVkZTE5LzEvR0JrcHhNenhybXlWUE9DMGpldzVYSjhhV2hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5 LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQAW8Z1AwQC uW2EAwQAuZKYAwQBuZKaMBgEAgACMBIwEAMFByoHT4ADBwAqB0+AACAwDQYJKoZI hvcNAQELBQADggEBACJBubEbk/dsm9UBDQJ5Pp/x6HcbUQGh9I39NeJKZumcjCcc zis8n7jpGu/AGnc2wBwlU45Nslbt68yz9qmHMorDo9LwoAyqTa06DTZ3T/Aiy7sF 33NByXkmjYR3KL5072AQ4Q2LD2vr09vfYMO6aSEGKO4i3x1/39fBNZwSgzgK4njo n1QecJUOlW86p2ZJgaXkEwUGYqjUm90xpjnTm0dHu/enRTZX0GuVZ8fxz5YTzF7F r9Zcrm/C918pt49vN3demZNwmq31KFQtBplRXaK5ph1ubsyrT4BN20bzEMxg4rRs 9peq8o/ftw3f5Fyk22CI5eRlw1trUhQu/2ttl+Y= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:19 2026 by rpki-client