This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/gfabm9UWQoAATxByyOzldR-OoLw.roa File: gfabm9UWQoAATxByyOzldR-OoLw.roa (raw, json) Hash identifier: WKaBZla4LRLfqgI3uwqubZPPQ3HBh8rqcOXnhfR6oF8= Subject key identifier: 81:F6:9B:9B:D5:16:42:80:00:4F:10:72:C8:EC:E5:75:1F:8E:A0:BC Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c Certificate serial: 019B79106A22B071F529D8BEF428EC9C0324 Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/gfabm9UWQoAATxByyOzldR-OoLw.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.176.124.0/24 maxlen: 24 185.201.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6a:22:b0:71:f5:29:d8:be:f4:28:ec:9c:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81f69b9bd5164280004f1072c8ece5751f8ea0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:8d:e1:80:a2:92:7e:74:22:1e:a0:06:fa: 3f:57:75:21:59:88:65:60:57:bf:a2:58:35:fc:31: 8c:06:d8:8a:16:ed:74:e0:c4:f0:ef:ee:11:82:99: cc:d8:ff:7b:65:fc:93:36:3d:d1:1c:4d:be:d0:40: 0e:c7:4e:be:72:22:dd:28:dd:9b:9a:52:99:c1:f1: 63:45:bb:90:e0:3e:b1:1b:7a:58:f6:5e:df:c3:5f: 0d:a7:64:ca:93:c6:2f:99:ec:3f:bc:ed:36:ab:50: 17:10:d0:a5:40:4f:c9:d1:80:8a:8a:7f:bc:70:84: e2:2f:06:91:fe:b6:5b:b7:b1:da:1a:23:38:21:8d: bf:60:8b:ac:66:c8:75:c8:cb:ea:bf:47:ea:5f:3e: 10:bc:1d:9c:fc:59:2a:e2:81:b2:b5:98:38:44:a7: ec:f8:c3:3f:fc:d2:a9:aa:2f:23:a5:8b:e3:65:2a: 83:05:a7:95:f1:5d:62:02:df:13:a7:52:9e:fb:38: 38:2c:3d:49:9d:b6:e3:b6:47:f1:df:3f:83:2d:99: 89:10:dc:a6:c8:dd:48:14:67:4b:77:0c:ee:1b:b1: 56:5e:8d:d7:a1:ce:e6:50:be:37:2a:43:aa:02:db: 5c:e2:12:70:28:27:47:78:95:21:d6:38:a1:bf:5f: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F6:9B:9B:D5:16:42:80:00:4F:10:72:C8:EC:E5:75:1F:8E:A0:BC X509v3 Authority Key Identifier: keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/gfabm9UWQoAATxByyOzldR-OoLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.124.0/24 185.201.166.0/24 Signature Algorithm: sha256WithRSAEncryption 70:a4:11:5d:83:45:cc:57:e2:37:a6:9c:9e:26:8b:9e:6e:bb: bd:b5:ef:05:3a:ac:a7:d1:95:74:06:20:c6:5c:39:dd:71:3d: b9:71:db:1d:da:34:3a:43:5c:03:83:5e:05:a2:f6:8e:00:c8: 3a:01:22:ed:c3:62:47:e7:a4:99:c8:ee:6c:c9:0d:06:cc:0d: f2:26:0f:ed:77:ef:f1:1b:e3:4c:50:95:32:65:77:0a:55:16: ef:0c:3f:cc:ed:39:be:b1:c6:ca:eb:72:f4:6c:47:1d:ba:dd: fd:8e:d6:97:e7:67:57:40:bc:be:8e:c1:b5:eb:e9:33:ef:d3: a8:db:da:fb:88:2d:69:48:5d:9a:d2:cb:36:88:ca:31:c6:fa: 4c:9c:fb:4b:27:6f:9a:9a:39:01:2c:3d:aa:6f:c9:cf:84:ce: 13:62:4a:26:60:03:a9:07:2f:d4:69:05:3d:51:1d:6f:4d:f5: 70:2b:a9:d8:c3:44:14:46:db:24:6a:ce:6e:d7:05:7b:bf:9c: 8b:30:4a:3e:76:03:df:43:c6:ec:86:bb:3c:b9:16:23:9d:ec: e2:f8:ce:9d:97:37:69:bb:de:3f:b7:0b:6e:30:69:fd:c9:05: 72:39:23:76:55:79:30:9c:45:82:78:9c:06:5d:45:85:f7:77: ef:4a:de:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EGoisHH1Kdi+9CjsnAMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZTVlZmJmNjU4OTcxNjBkNTVhNTJkYzNhMjJjMDE3ODc2 Y2QwNmMwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWY2OWI5YmQ1MTY0MjgwMDA0ZjEwNzJjOGVjZTU3NTFmOGVhMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLGN4YCikn50Ih6gBvo/V3UhWYhl YFe/olg1/DGMBtiKFu104MTw7+4RgpnM2P97ZfyTNj3RHE2+0EAOx06+ciLdKN2b mlKZwfFjRbuQ4D6xG3pY9l7fw18Np2TKk8Yvmew/vO02q1AXENClQE/J0YCKin+8 cITiLwaR/rZbt7HaGiM4IY2/YIusZsh1yMvqv0fqXz4QvB2c/Fkq4oGytZg4RKfs +MM//NKpqi8jpYvjZSqDBaeV8V1iAt8Tp1Ke+zg4LD1Jnbbjtkfx3z+DLZmJENym yN1IFGdLdwzuG7FWXo3Xoc7mUL43KkOqAttc4hJwKCdHeJUh1jihv1+sFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIH2m5vVFkKAAE8Qcsjs5XUfjqC8MB8GA1UdIwQY MBaAFB7l779liXFg1VpS3DoiwBeHbNBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUt N2MwZGI3YmFlMTM1LzEvZ2ZhYm05VVdRb0FBVHhCeXlPemxkUi1Pb0x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMzI0NzctYzgzYy00ZjgwLWIxYmUtN2MwZGI3YmFlMTM1 LzEvSHVYdnYyV0pjV0RWV2xMY09pTEFGNGRzMEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubB8AwQA ucmmMA0GCSqGSIb3DQEBCwUAA4IBAQBwpBFdg0XMV+I3ppyeJouebru9te8FOqyn 0ZV0BiDGXDndcT25cdsd2jQ6Q1wDg14FovaOAMg6ASLtw2JH56SZyO5syQ0GzA3y Jg/td+/xG+NMUJUyZXcKVRbvDD/M7Tm+scbK63L0bEcdut39jtaX52dXQLy+jsG1 6+kz79Oo29r7iC1pSF2a0ss2iMoxxvpMnPtLJ2+amjkBLD2qb8nPhM4TYkomYAOp By/UaQU9UR1vTfVwK6nYw0QURtskas5u1wV7v5yLMEo+dgPfQ8bshrs8uRYjnezi +M6dlzdpu94/twtuMGn9yQVyOSN2VXkwnEWCeJwGXUWF93fvSt4X -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:26 2026 by rpki-client