This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/gKtJxrK81I9Dyc2P943nU7n_NFg.roa File: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (raw, json) Hash identifier: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg= Subject key identifier: 80:AB:49:C6:B2:BC:D4:8F:43:C9:CD:8F:F7:8D:E7:53:B9:FF:34:58 Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Certificate serial: 019B7C7F6B798552BDDA64102416F336ACC2 Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/gKtJxrK81I9Dyc2P943nU7n_NFg.roa Signing time: Fri 02 Jan 2026 02:18:03 +0000 ROA not before: Fri 02 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.60.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6b:79:85:52:bd:da:64:10:24:16:f3:36:ac:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a Validity Not Before: Jan 2 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80ab49c6b2bcd48f43c9cd8ff78de753b9ff3458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:cd:17:5b:76:6a:78:06:b4:b3:06:a8:96: 3c:60:02:ad:cd:a5:7e:d6:c9:5e:14:ab:ce:c7:98: 71:49:f5:60:da:6b:7a:1a:67:d1:3b:ab:10:61:b5: dc:11:92:0b:7d:fe:ec:fb:5b:a1:7b:50:13:98:d9: fd:c3:04:97:9e:c2:39:d5:4b:c6:63:46:5f:5b:bf: 24:3d:ea:d0:48:1b:ea:c8:79:e5:55:12:08:e9:d5: 1c:f3:2f:a3:7b:53:37:44:5a:70:c3:a2:c8:01:6d: 75:a0:39:78:e4:be:dc:e6:70:e5:7e:c3:62:1f:ca: 4f:4b:df:c1:e6:4b:f6:5f:86:1d:09:d5:bc:31:f1: 1b:2f:3c:19:de:5c:8b:b1:69:f2:8f:87:7c:bf:bf: 39:86:10:5a:c7:2f:36:f9:79:b5:a8:91:04:62:dc: 2a:0f:56:ab:67:91:df:cc:4f:f0:fa:5d:d7:b4:45: 34:b3:17:46:fb:39:93:80:a7:94:61:66:3a:a8:c7: 22:49:a9:96:b8:32:87:d4:a4:3b:cc:5b:79:86:69: 5d:5d:30:d9:7f:ed:22:33:28:31:58:c7:bf:10:11: 71:88:c3:dc:6a:24:6e:1c:01:a6:0e:c5:34:f1:b9: 6f:5a:a3:10:ba:17:d1:f1:ca:8c:d0:a3:19:85:f4: 0c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AB:49:C6:B2:BC:D4:8F:43:C9:CD:8F:F7:8D:E7:53:B9:FF:34:58 X509v3 Authority Key Identifier: keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/gKtJxrK81I9Dyc2P943nU7n_NFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.251.0/24 Signature Algorithm: sha256WithRSAEncryption de:be:15:c3:60:7f:6b:9a:48:2c:5e:f3:00:73:eb:c0:b9:54: db:ab:c1:16:42:c4:57:2b:f4:7d:2c:a3:fa:c8:fb:e5:50:ba: be:db:85:1a:1c:bb:88:73:9c:bf:b6:24:f5:f2:fa:29:a7:0f: d2:fa:9b:09:71:b3:aa:4f:0a:08:fe:5a:26:13:b4:62:8e:e4: 66:68:4a:7c:99:33:29:3e:97:46:55:69:67:9a:ec:89:74:93: 94:c1:ee:f5:68:32:6f:e8:bc:63:f1:0e:82:94:8e:ff:65:b9: fc:c8:93:4b:ae:31:5d:f1:ec:0a:1e:c3:07:e7:07:dd:fd:3d: 8e:95:01:e4:67:94:d0:14:cc:76:dc:e5:f7:f7:52:21:b2:60: 3d:d8:9d:0a:01:da:85:9d:05:ec:33:ef:dc:07:66:22:2c:cb: c8:5b:dc:c2:a9:d9:39:8b:0b:6a:f9:b1:90:f3:e4:5b:29:9c: 11:80:cd:46:ea:55:74:c5:bf:01:26:89:af:74:f4:ed:ac:b9: fe:40:1d:ba:09:99:6b:2c:10:b8:18:9c:bb:46:76:08:13:e7: 06:01:46:72:90:9e:9f:b6:7f:e5:99:cd:a5:4b:2e:70:e6:26: 78:e9:85:e3:54:6b:db:2b:09:b1:e9:05:38:e4:b8:a1:56:ca: 72:67:6a:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2t5hVK92mQQJBbzNqzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk OWI0NWEwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGFiNDljNmIyYmNkNDhmNDNjOWNkOGZmNzhkZTc1M2I5ZmYzNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4/NF1t2angGtLMGqJY8YAKtzaV+ 1sleFKvOx5hxSfVg2mt6GmfRO6sQYbXcEZILff7s+1uhe1ATmNn9wwSXnsI51UvG Y0ZfW78kPerQSBvqyHnlVRII6dUc8y+je1M3RFpww6LIAW11oDl45L7c5nDlfsNi H8pPS9/B5kv2X4YdCdW8MfEbLzwZ3lyLsWnyj4d8v785hhBaxy82+Xm1qJEEYtwq D1arZ5HfzE/w+l3XtEU0sxdG+zmTgKeUYWY6qMciSamWuDKH1KQ7zFt5hmldXTDZ f+0iMygxWMe/EBFxiMPcaiRuHAGmDsU08blvWqMQuhfR8cqM0KMZhfQMtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICrScayvNSPQ8nNj/eN51O5/zRYMB8GA1UdIwQY MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut YTBiY2M5MTJkNzM1LzEvZ0t0SnhySzgxSTlEeWMyUDk0M25VN25fTkZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1 LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTz7MA0G CSqGSIb3DQEBCwUAA4IBAQDevhXDYH9rmkgsXvMAc+vAuVTbq8EWQsRXK/R9LKP6 yPvlULq+24UaHLuIc5y/tiT18voppw/S+psJcbOqTwoI/lomE7RijuRmaEp8mTMp PpdGVWlnmuyJdJOUwe71aDJv6Lxj8Q6ClI7/Zbn8yJNLrjFd8ewKHsMH5wfd/T2O lQHkZ5TQFMx23OX391IhsmA92J0KAdqFnQXsM+/cB2YiLMvIW9zCqdk5iwtq+bGQ 8+RbKZwRgM1G6lV0xb8BJomvdPTtrLn+QB26CZlrLBC4GJy7RnYIE+cGAUZykJ6f tn/lmc2lSy5w5iZ46YXjVGvbKwmx6QU45LihVspyZ2p/ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:25 2026 by rpki-client