This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/Gws5btNNtPdjaSz9VbluBPmvlcM.roa File: Gws5btNNtPdjaSz9VbluBPmvlcM.roa (raw, json) Hash identifier: d+e95WhTHyM+HX2sAVv1c3YdJyjnOdJdLOShrMr5pvY= Subject key identifier: 1B:0B:39:6E:D3:4D:B4:F7:63:69:2C:FD:55:B9:6E:04:F9:AF:95:C3 Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154 Certificate serial: 019B7AC8AEE664D50B9715B44258B43786D1 Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/Gws5btNNtPdjaSz9VbluBPmvlcM.roa Signing time: Thu 01 Jan 2026 18:18:50 +0000 ROA not before: Thu 01 Jan 2026 18:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204657 IP address blocks: 185.132.232.0/24 maxlen: 24 185.132.233.0/24 maxlen: 24 185.132.234.0/24 maxlen: 24 185.132.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ae:e6:64:d5:0b:97:15:b4:42:58:b4:37:86:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154 Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b0b396ed34db4f763692cfd55b96e04f9af95c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:9b:b1:1e:f9:96:8e:32:ad:7b:cc:c4:bb: 9c:d1:dc:26:ac:aa:c9:c8:d7:56:5d:e7:4f:73:6f: fb:8a:77:95:61:8c:e6:f1:c9:12:16:fb:f2:ad:14: a5:73:33:5c:6a:4e:5c:bc:54:b1:fa:e4:7e:ea:a1: ee:c3:b8:76:3e:e1:3f:6f:4e:d2:88:70:02:98:52: ba:dd:7b:73:59:2e:f8:60:f9:73:44:a1:b2:bb:42: 57:f5:fb:df:3d:19:3b:9e:bd:15:e0:bc:69:aa:2a: 74:9c:8d:07:e0:df:09:71:b2:8f:54:5d:f1:ab:50: 21:bd:bf:a1:28:ac:4a:f3:64:c4:e2:e3:41:ee:34: f1:cd:9b:e6:c8:f2:7d:36:a1:80:fd:c2:1c:9b:3d: 06:aa:3d:e9:23:2d:9b:b1:1b:2d:4d:67:88:74:a6: 8e:f7:b0:3c:93:88:5f:3c:ad:72:3d:4f:c4:e4:dc: 06:95:e3:54:35:bd:2c:2c:2c:cb:55:3a:c1:4f:1c: aa:ff:1e:60:4b:d3:be:d4:9e:ee:e6:cd:ce:11:e0: 35:86:25:78:04:1a:98:e7:3d:a9:28:ec:02:d1:6a: 21:96:e9:b0:13:fe:da:3f:74:5a:fb:c0:99:5e:63: 59:7b:23:52:4b:9c:69:8a:cf:66:1f:8c:ed:fb:e2: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0B:39:6E:D3:4D:B4:F7:63:69:2C:FD:55:B9:6E:04:F9:AF:95:C3 X509v3 Authority Key Identifier: keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/Gws5btNNtPdjaSz9VbluBPmvlcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.232.0/22 Signature Algorithm: sha256WithRSAEncryption 77:94:be:13:c5:4b:18:5b:f8:16:b2:70:cf:df:ef:44:a5:7e: cd:d9:56:eb:a3:05:09:92:77:48:de:73:e7:8f:81:bb:60:a5: 42:aa:30:a6:2a:a7:35:1a:f3:ee:0b:24:43:dc:b7:e4:ee:9f: 18:23:df:32:e4:c7:cc:8f:60:a6:cc:0f:15:07:21:84:f7:50: 13:a0:b3:e7:1e:e5:f9:83:fc:80:b0:38:27:c6:63:24:59:bd: d9:a0:fb:66:e8:29:2f:c6:cf:ec:68:70:e8:1d:1d:e8:d4:30: 92:5f:4f:32:34:9e:e3:08:7e:4b:a2:e0:a3:d1:bf:60:c2:d2: 2c:0a:64:99:a1:cc:88:2f:49:2c:94:1c:0c:65:95:46:97:8d: ea:97:f1:ec:f9:77:88:fb:03:8e:34:ef:63:99:a0:00:45:bb: 6c:08:a7:69:12:a6:83:b1:50:c4:9a:83:b2:8d:1d:12:3a:bb: 5c:8e:7c:13:cf:9a:fc:5f:46:89:b0:bd:3e:79:ab:0d:57:6d: f4:c1:32:56:26:c4:8a:d2:dc:13:3a:76:55:f1:82:78:6c:69: d1:9f:97:06:52:65:22:34:37:80:4d:a7:23:20:1d:a0:ac:3f: 63:03:7d:c7:44:d9:e2:f3:ea:ed:f5:34:4b:83:c2:a9:01:42: f6:16:d3:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yK7mZNULlxW0Qli0N4bRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiY2FiZTY0OTBmYThiZDU3MjQ0MGZkNjYxNmE4NDMwZWU2 NmQxNTQwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjBiMzk2ZWQzNGRiNGY3NjM2OTJjZmQ1NWI5NmUwNGY5YWY5NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt62bsR75lo4yrXvMxLuc0dwmrKrJ yNdWXedPc2/7ineVYYzm8ckSFvvyrRSlczNcak5cvFSx+uR+6qHuw7h2PuE/b07S iHACmFK63XtzWS74YPlzRKGyu0JX9fvfPRk7nr0V4Lxpqip0nI0H4N8JcbKPVF3x q1Ahvb+hKKxK82TE4uNB7jTxzZvmyPJ9NqGA/cIcmz0Gqj3pIy2bsRstTWeIdKaO 97A8k4hfPK1yPU/E5NwGleNUNb0sLCzLVTrBTxyq/x5gS9O+1J7u5s3OEeA1hiV4 BBqY5z2pKOwC0WohlumwE/7aP3Ra+8CZXmNZeyNSS5xpis9mH4zt++IlKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsLOW7TTbT3Y2ks/VW5bgT5r5XDMB8GA1UdIwQY MBaAFHvKvmSQ+ovVckQP1mFqhDDuZtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzkt MWZlY2UwNTkyZTliLzEvR3dzNWJ0Tk50UGRqYVN6OVZibHVCUG12bGNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzktMWZlY2UwNTkyZTli LzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYToMA0G CSqGSIb3DQEBCwUAA4IBAQB3lL4TxUsYW/gWsnDP3+9EpX7N2VbrowUJkndI3nPn j4G7YKVCqjCmKqc1GvPuCyRD3Lfk7p8YI98y5MfMj2CmzA8VByGE91AToLPnHuX5 g/yAsDgnxmMkWb3ZoPtm6Ckvxs/saHDoHR3o1DCSX08yNJ7jCH5LouCj0b9gwtIs CmSZocyIL0kslBwMZZVGl43ql/Hs+XeI+wOONO9jmaAARbtsCKdpEqaDsVDEmoOy jR0SOrtcjnwTz5r8X0aJsL0+easNV230wTJWJsSK0twTOnZV8YJ4bGnRn5cGUmUi NDeATacjIB2grD9jA33HRNni8+rt9TRLg8KpAUL2FtNe -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:40 2026 by rpki-client