This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/GfOWGiLPv2wccjOXnStMVeJn2AM.roa File: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (raw, json) Hash identifier: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI= Subject key identifier: 19:F3:96:1A:22:CF:BF:6C:1C:72:33:97:9D:2B:4C:55:E2:67:D8:03 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B7ADD3C767C90A14CE4C868F2EDCA2082 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/GfOWGiLPv2wccjOXnStMVeJn2AM.roa Signing time: Thu 01 Jan 2026 18:41:17 +0000 ROA not before: Thu 01 Jan 2026 18:41:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401075 IP address blocks: 94.241.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:dd:3c:76:7c:90:a1:4c:e4:c8:68:f2:ed:ca:20:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 18:41:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19f3961a22cfbf6c1c7233979d2b4c55e267d803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ff:d1:8d:fd:09:38:01:32:37:7c:35:13:07: cb:eb:c9:5b:35:93:1b:bc:ab:0c:85:4d:15:c8:79: cb:cd:6d:74:bd:a8:fa:ca:f4:67:ea:ad:c1:c6:25: 35:6f:c1:1e:46:15:bf:10:f9:e5:e9:66:ee:f0:e6: bd:46:94:80:37:15:94:e5:6d:88:0c:34:f3:3b:86: 62:79:18:9e:17:02:82:97:78:1c:ed:dd:86:71:66: 9f:3d:19:36:83:b8:ec:97:9d:c9:d9:ea:e9:06:3c: ef:3c:54:ab:f0:fb:46:ad:27:aa:0e:36:04:9c:cc: 37:54:fb:d8:1a:fe:55:34:2f:4d:00:78:7e:4d:16: 05:3b:98:f9:48:6e:cb:4a:eb:88:ec:b6:cc:2d:ca: 18:d8:82:c1:e5:3f:e1:03:5b:a1:54:b4:c1:70:e2: 2e:f3:c4:34:af:9f:70:14:2e:3f:01:85:0f:cc:9e: 2a:63:c3:ae:00:f6:d6:93:83:3f:16:4d:3e:23:9b: 57:7b:0e:0f:c2:5b:42:9e:99:bf:cb:ef:d8:f2:fe: 53:e0:3e:2d:b6:1c:94:f9:5a:ee:02:9c:18:59:b6: f0:64:c8:0a:15:5a:3e:e9:70:15:5d:e9:d8:49:e7: e2:5e:18:58:d4:7f:d3:87:14:c7:6a:e1:1d:f9:04: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:96:1A:22:CF:BF:6C:1C:72:33:97:9D:2B:4C:55:E2:67:D8:03 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/GfOWGiLPv2wccjOXnStMVeJn2AM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.241.160.0/23 Signature Algorithm: sha256WithRSAEncryption a2:88:af:77:1d:66:1b:c1:2b:fe:4b:f6:1d:3e:d8:ec:bf:26: f5:9f:49:10:cc:24:26:64:1e:ef:68:30:9b:aa:74:42:83:43: 7b:67:53:39:2d:7b:63:52:b3:d6:f5:73:c6:e7:b0:1d:6d:06: ad:66:f8:17:92:29:ce:ad:66:36:ce:b1:1d:6c:7c:85:4d:e3: fa:c8:77:b8:8d:81:ad:7c:ae:bd:a6:73:f8:47:b9:6c:c7:3c: 4f:c3:7d:12:92:7d:d0:c9:c2:2f:42:66:53:2e:c6:a1:4e:89: 3c:17:99:47:d1:53:10:8c:f3:c5:a1:b5:24:ae:8e:70:85:6e: 90:62:ba:f1:e6:6c:67:d7:8e:27:8b:71:81:b7:6f:79:61:96: da:98:41:f3:37:f6:91:2a:4a:a7:39:71:74:99:e3:bb:78:d7: b4:da:53:5a:3a:b7:84:6a:45:49:ac:fd:6b:ff:d5:92:0f:ae: e8:4f:d4:44:e5:09:0c:9d:08:b6:ec:84:66:fa:2c:26:27:88: eb:26:f4:d3:4a:53:c7:ac:d7:c5:ad:ff:d7:22:f7:fc:b7:57: 82:f0:ff:95:87:a3:e2:42:96:49:9f:ec:67:ef:97:30:1d:d1: 8d:0a:f9:dc:4a:68:65:f3:9f:2b:cd:e2:7d:7a:14:4f:80:69: 6c:e1:a6:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt63Tx2fJChTOTIaPLtyiCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMTg0MTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWYzOTYxYTIyY2ZiZjZjMWM3MjMzOTc5ZDJiNGM1NWUyNjdkODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi//Rjf0JOAEyN3w1EwfL68lbNZMb vKsMhU0VyHnLzW10vaj6yvRn6q3BxiU1b8EeRhW/EPnl6Wbu8Oa9RpSANxWU5W2I DDTzO4ZieRieFwKCl3gc7d2GcWafPRk2g7jsl53J2erpBjzvPFSr8PtGrSeqDjYE nMw3VPvYGv5VNC9NAHh+TRYFO5j5SG7LSuuI7LbMLcoY2ILB5T/hA1uhVLTBcOIu 88Q0r59wFC4/AYUPzJ4qY8OuAPbWk4M/Fk0+I5tXew4PwltCnpm/y+/Y8v5T4D4t thyU+VruApwYWbbwZMgKFVo+6XAVXenYSefiXhhY1H/ThxTHauEd+QRaGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBnzlhoiz79sHHIzl50rTFXiZ9gDMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvR2ZPV0dpTFB2MndjY2pPWG5TdE1WZUpuMkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXvGgMA0G CSqGSIb3DQEBCwUAA4IBAQCiiK93HWYbwSv+S/YdPtjsvyb1n0kQzCQmZB7vaDCb qnRCg0N7Z1M5LXtjUrPW9XPG57AdbQatZvgXkinOrWY2zrEdbHyFTeP6yHe4jYGt fK69pnP4R7lsxzxPw30Skn3QycIvQmZTLsahTok8F5lH0VMQjPPFobUkro5whW6Q Yrrx5mxn144ni3GBt295YZbamEHzN/aRKkqnOXF0meO7eNe02lNaOreEakVJrP1r /9WSD67oT9RE5QkMnQi27IRm+iwmJ4jrJvTTSlPHrNfFrf/XIvf8t1eC8P+Vh6Pi QpZJn+xn75cwHdGNCvncSmhl858rzeJ9ehRPgGls4aaM -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:35 2026 by rpki-client