This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/IBjrT12h9uh658TR8nuTuZxNjP8.roa File: IBjrT12h9uh658TR8nuTuZxNjP8.roa (raw, json) Hash identifier: nGshKyZqegXSaSxuCpupfiIxPjDON3MIXoFDuxe9ZpA= Subject key identifier: 20:18:EB:4F:5D:A1:F6:E8:7A:E7:C4:D1:F2:7B:93:B9:9C:4D:8C:FF Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8 Certificate serial: 019B7E3746708C0B3D12ACBFAB0E324C2E9D Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/IBjrT12h9uh658TR8nuTuZxNjP8.roa Signing time: Fri 02 Jan 2026 10:18:30 +0000 ROA not before: Fri 02 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 192.166.224.0/24 maxlen: 24 192.166.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:46:70:8c:0b:3d:12:ac:bf:ab:0e:32:4c:2e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8 Validity Not Before: Jan 2 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2018eb4f5da1f6e87ae7c4d1f27b93b99c4d8cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:be:7f:93:c6:3b:3b:d2:78:28:e5:c3:e3: 3f:69:95:46:9f:0f:64:f0:cf:fe:4b:8e:7d:05:01: 2c:21:3f:c3:ad:67:f2:c1:83:b2:73:76:77:e9:0d: 4c:0c:e9:8e:29:f6:b4:6d:4c:30:8c:f1:09:da:ae: 88:20:66:e5:1e:38:a7:eb:de:ca:a3:f7:1e:10:f9: b6:d3:a2:c1:ff:b2:f8:83:0c:e3:92:c0:aa:f1:2a: 7d:45:38:3d:e6:1d:7e:6d:22:76:87:fb:50:81:00: 40:59:88:5b:50:45:84:9f:85:de:73:f3:b3:e4:ae: 86:2b:56:84:e3:49:af:15:2e:68:37:dc:e5:4d:cc: b9:1d:0e:ec:d0:70:03:12:3f:99:45:c6:64:bf:9f: 7f:c9:6d:35:d5:b8:b6:87:83:0d:84:f6:34:eb:ff: a9:d0:7b:d7:8d:95:7c:a6:f3:2e:57:28:36:2e:d7: a9:7f:56:f4:fa:3f:23:ea:6f:ad:16:1c:ba:88:df: 5f:00:96:51:7d:95:2d:2b:b3:4b:8e:a3:5f:76:38: 46:df:4e:4f:d2:33:ae:04:3f:e2:f8:95:d2:e6:7e: 39:55:02:47:24:80:69:61:20:f4:29:ba:33:4c:86: c3:f6:e1:b3:51:44:7a:f6:1c:2a:1c:ff:85:17:31: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:EB:4F:5D:A1:F6:E8:7A:E7:C4:D1:F2:7B:93:B9:9C:4D:8C:FF X509v3 Authority Key Identifier: keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/IBjrT12h9uh658TR8nuTuZxNjP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.224.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:2c:d6:fa:e6:94:6a:c5:1a:34:24:f7:92:72:99:5e:e6:8b: 50:1a:03:8d:48:68:1d:42:7e:43:ca:bc:00:ed:07:66:0f:e3: 3e:d4:19:71:19:24:a4:16:b6:28:fa:0b:c7:78:12:f2:8c:e3: 0d:c8:f5:70:a4:92:5e:6e:0c:15:72:7e:98:82:72:92:c0:6a: 00:0a:ae:70:45:c1:d0:66:fd:dd:78:f2:51:b7:4d:1e:07:19: c5:70:32:2d:85:5e:fd:a9:e4:f4:f9:73:c1:3e:15:a8:fb:2c: 79:d0:74:bf:a1:57:42:35:4d:04:56:83:18:0f:63:74:7a:d1: 06:19:a5:b3:98:2a:fe:15:32:2b:c1:41:19:4c:5e:ed:a4:b1: e1:56:f8:57:96:2b:93:29:b5:75:d5:81:2e:46:9d:2f:d3:03: ef:45:f7:ba:a0:3e:b8:10:a0:af:ba:0b:30:70:58:2f:aa:1a: c1:08:0c:60:08:55:8b:6d:90:ff:a8:0b:06:e4:56:57:7a:0c: 6a:f6:c2:fa:74:94:68:33:52:00:9a:b3:d0:50:0c:1c:cc:fa: e9:6c:ca:f2:61:67:5b:0c:c0:0a:de:0f:ec:41:16:da:49:c2: 67:5e:27:80:7d:5f:e4:39:a9:10:58:45:72:f1:ef:e1:e4:58: cf:56:38:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N0ZwjAs9Eqy/qw4yTC6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNmJlMWZiNzFhZjQ4ZDZiMzE4NTEwYWE4YmRmOWE4MTVm MzNkYjgwHhcNMjYwMTAyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDE4ZWI0ZjVkYTFmNmU4N2FlN2M0ZDFmMjdiOTNiOTljNGQ4Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo2+f5PGOzvSeCjlw+M/aZVGnw9k 8M/+S459BQEsIT/DrWfywYOyc3Z36Q1MDOmOKfa0bUwwjPEJ2q6IIGblHjin697K o/ceEPm206LB/7L4gwzjksCq8Sp9RTg95h1+bSJ2h/tQgQBAWYhbUEWEn4Xec/Oz 5K6GK1aE40mvFS5oN9zlTcy5HQ7s0HADEj+ZRcZkv59/yW011bi2h4MNhPY06/+p 0HvXjZV8pvMuVyg2Ltepf1b0+j8j6m+tFhy6iN9fAJZRfZUtK7NLjqNfdjhG305P 0jOuBD/i+JXS5n45VQJHJIBpYSD0KbozTIbD9uGzUUR69hwqHP+FFzFrEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAY609dofboeufE0fJ7k7mcTYz/MB8GA1UdIwQY MBaAFIJr4ftxr0jWsxhRCqi9+agV8z24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ212aC0zR3ZTTmF6R0ZFS3FMMzVxQlh6UGJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hYzY4OWItMGUzNi00OWZkLThmOWMt ZGVkNzIwMTQyNzQ0LzEvSUJqclQxMmg5dWg2NThUUjhudVR1WnhOalA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hYzY4OWItMGUzNi00OWZkLThmOWMtZGVkNzIwMTQyNzQ0 LzEvZ212aC0zR3ZTTmF6R0ZFS3FMMzVxQlh6UGJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKbgMA0G CSqGSIb3DQEBCwUAA4IBAQCaLNb65pRqxRo0JPeScple5otQGgONSGgdQn5DyrwA 7QdmD+M+1BlxGSSkFrYo+gvHeBLyjOMNyPVwpJJebgwVcn6YgnKSwGoACq5wRcHQ Zv3dePJRt00eBxnFcDIthV79qeT0+XPBPhWo+yx50HS/oVdCNU0EVoMYD2N0etEG GaWzmCr+FTIrwUEZTF7tpLHhVvhXliuTKbV11YEuRp0v0wPvRfe6oD64EKCvugsw cFgvqhrBCAxgCFWLbZD/qAsG5FZXegxq9sL6dJRoM1IAmrPQUAwczPrpbMryYWdb DMAK3g/sQRbaScJnXieAfV/kOakQWEVy8e/h5FjPVjhS -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:51 2026 by rpki-client