This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/Gir9LgWhSsgb94bpGNkPB7r934A.roa File: Gir9LgWhSsgb94bpGNkPB7r934A.roa (raw, json) Hash identifier: zl0DQvpHmGpSWRKUmaqnyadARVbCFs8/XgE/RWzBDNE= Subject key identifier: 1A:2A:FD:2E:05:A1:4A:C8:1B:F7:86:E9:18:D9:0F:07:BA:FD:DF:80 Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5 Certificate serial: 019B76EB36421971E1A8C55531BAF744B9AD Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/Gir9LgWhSsgb94bpGNkPB7r934A.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 176.119.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:36:42:19:71:e1:a8:c5:55:31:ba:f7:44:b9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a2afd2e05a14ac81bf786e918d90f07bafddf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:64:54:53:6b:61:b7:ac:ed:80:bd:1f:7c: 9a:68:cb:69:14:77:2f:97:2f:52:df:a3:c2:27:97: 36:9a:5b:dc:85:cb:cf:ea:ae:a5:80:7e:53:24:5e: f0:b1:29:0b:23:25:06:29:4b:28:c2:6c:78:f7:9e: 04:ba:5a:5e:19:3f:13:3a:05:e6:1c:53:a7:09:a3: 79:15:07:9b:d0:9d:af:79:98:28:e4:3b:5e:0e:fe: 24:ec:1d:55:c4:97:0d:7e:0e:0d:0f:41:92:c4:0d: 1b:ab:c2:0a:c9:c6:fe:87:67:7f:1f:d3:16:1d:fa: eb:1e:50:ef:a2:41:67:51:3e:77:d6:56:eb:90:39: a9:cd:55:34:60:06:44:af:24:28:0e:c9:37:95:d7: e9:e7:00:79:36:4a:9a:50:44:c2:0e:7c:45:1d:12: 2f:81:f3:3a:be:da:2a:21:99:20:0e:88:8a:9c:10: 94:c9:74:64:9c:4d:8c:dc:36:3f:e6:3d:6a:52:3d: 9f:63:38:b6:a8:b8:45:b8:2d:bc:71:20:fd:ab:ef: 22:14:f1:6a:e8:8a:b4:e2:b9:2f:fb:2e:98:45:92: ad:ce:fe:90:bf:13:d8:e4:21:dd:dd:8a:31:5f:ed: bf:19:34:86:71:4d:b4:88:8a:07:15:30:71:d8:e9: 76:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:FD:2E:05:A1:4A:C8:1B:F7:86:E9:18:D9:0F:07:BA:FD:DF:80 X509v3 Authority Key Identifier: keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/Gir9LgWhSsgb94bpGNkPB7r934A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.194.0/24 Signature Algorithm: sha256WithRSAEncryption 09:16:cf:4c:ae:bb:14:52:48:fe:46:69:53:c3:4d:d4:e0:2b: 82:74:a4:5b:96:38:21:1c:56:d2:2a:78:2d:57:47:2c:ce:06: 69:64:e1:99:f6:97:8e:34:be:ef:16:3c:21:5d:c2:46:cd:3d: 85:2b:58:d2:96:c5:65:62:e7:b9:d9:9a:9d:53:db:62:b4:73: 8f:99:e0:4a:2c:03:8c:94:46:fe:6c:11:00:d8:72:68:10:0c: c5:b1:e1:31:69:a9:3d:cf:21:88:1c:b7:bc:85:45:89:9a:aa: 13:22:a6:8c:57:ac:94:d2:3e:01:f6:18:a4:66:31:1d:6f:2f: dd:ab:6e:cb:f6:16:14:4b:16:83:2a:a4:9d:7d:c7:db:f0:9f: 25:1c:e2:47:24:c6:07:ff:5c:0b:89:8c:15:ef:b1:d3:4c:f2: 1e:48:23:39:05:bf:a3:b8:6e:d2:c5:54:9f:09:b2:36:df:14: e0:41:10:3a:65:dc:0b:18:5e:b0:98:ae:e3:77:79:54:10:e7: 38:a5:ce:27:91:c3:15:03:27:66:5f:b1:61:2d:09:3f:02:d6: 07:9e:6b:4e:6a:c5:ed:99:c9:17:35:e1:17:8d:ab:48:db:9f: c8:fc:48:4e:21:5b:e5:39:0e:38:ae:ba:be:c9:3d:62:17:61: ba:4b:54:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zZCGXHhqMVVMbr3RLmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZjFiYjYxMWYyYjdhMzc4MDBmNDljNmMxMjVjNWVlOThi NzE5YzUwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTJhZmQyZTA1YTE0YWM4MWJmNzg2ZTkxOGQ5MGYwN2JhZmRkZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO5kVFNrYbes7YC9H3yaaMtpFHcv ly9S36PCJ5c2mlvchcvP6q6lgH5TJF7wsSkLIyUGKUsowmx4954EulpeGT8TOgXm HFOnCaN5FQeb0J2veZgo5DteDv4k7B1VxJcNfg4ND0GSxA0bq8IKycb+h2d/H9MW HfrrHlDvokFnUT531lbrkDmpzVU0YAZEryQoDsk3ldfp5wB5NkqaUETCDnxFHRIv gfM6vtoqIZkgDoiKnBCUyXRknE2M3DY/5j1qUj2fYzi2qLhFuC28cSD9q+8iFPFq 6Iq04rkv+y6YRZKtzv6QvxPY5CHd3YoxX+2/GTSGcU20iIoHFTBx2Ol2pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBoq/S4FoUrIG/eG6RjZDwe6/d+AMB8GA1UdIwQY MBaAFBLxu2EfK3o3gA9JxsElxe6YtxnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgt NTJhMzY4Y2FjNDAzLzEvR2lyOUxnV2hTc2diOTRicEdOa1BCN3I5MzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgtNTJhMzY4Y2FjNDAz LzEvRXZHN1lSOHJlamVBRDBuR3dTWEY3cGkzR2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHfCMA0G CSqGSIb3DQEBCwUAA4IBAQAJFs9MrrsUUkj+RmlTw03U4CuCdKRbljghHFbSKngt V0cszgZpZOGZ9peONL7vFjwhXcJGzT2FK1jSlsVlYue52ZqdU9titHOPmeBKLAOM lEb+bBEA2HJoEAzFseExaak9zyGIHLe8hUWJmqoTIqaMV6yU0j4B9hikZjEdby/d q27L9hYUSxaDKqSdfcfb8J8lHOJHJMYH/1wLiYwV77HTTPIeSCM5Bb+juG7SxVSf CbI23xTgQRA6ZdwLGF6wmK7jd3lUEOc4pc4nkcMVAydmX7FhLQk/AtYHnmtOasXt mckXNeEXjatI25/I/EhOIVvlOQ44rrq+yT1iF2G6S1Q4 -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:56 2026 by rpki-client