This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GCVDRAaWUX76VZx9Ti2gepFvUZo.roa File: GCVDRAaWUX76VZx9Ti2gepFvUZo.roa (raw, json) Hash identifier: 78l1nykSPx/D12f8YCnNOb8vspn1WlCzjFKeq1fKinw= Subject key identifier: 18:25:43:44:06:96:51:7E:FA:55:9C:7D:4E:2D:A0:7A:91:6F:51:9A Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A5192F6D89076BFB6C97B8263897 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GCVDRAaWUX76VZx9Ti2gepFvUZo.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51388 IP address blocks: 84.32.144.0/22 maxlen: 22 88.216.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a5:19:2f:6d:89:07:6b:fb:6c:97:b8:26:38:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=182543440696517efa559c7d4e2da07a916f519a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:05:60:af:fc:45:24:7c:54:32:73:4f:3b: a7:cd:dc:da:e3:24:4b:d7:79:65:e3:5a:1d:9d:05: d5:11:40:87:c5:06:a7:20:0c:60:2f:de:ae:bc:b0: 1d:1a:00:03:f6:cf:3a:ec:56:b4:e9:c9:d2:f1:62: 77:e3:97:1c:93:89:36:60:8c:6e:20:7b:08:9d:6b: 2f:80:e6:4c:52:c4:02:d1:af:c2:76:85:9b:22:9d: c6:e4:5f:9f:a5:e2:7c:c1:04:5f:56:0a:15:92:bd: f0:a0:e7:3d:9e:bb:0a:a8:06:36:7c:a1:ae:e5:6a: 35:8c:19:c0:6f:fd:5a:fb:50:39:29:6f:91:93:9f: a1:9c:59:a0:23:e5:9f:55:cc:16:83:eb:db:4d:db: 5e:79:a4:3e:48:9a:38:19:96:17:84:ef:a4:e3:68: 6b:5c:74:c6:04:5a:b5:20:84:8a:91:f1:22:fd:08: 46:ba:50:48:ca:f6:7e:de:75:4c:dd:ae:c2:c0:d8: cf:99:69:e8:71:23:5d:a4:e4:35:94:2c:4a:e5:28: 5e:09:16:1b:83:25:96:e4:8f:49:3e:97:b3:5a:1c: 08:be:9b:11:50:bc:34:fb:79:f0:a4:ff:0a:9f:a9: 72:0f:17:b5:9c:8d:cc:bb:a0:d6:27:df:e7:58:78: cd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:25:43:44:06:96:51:7E:FA:55:9C:7D:4E:2D:A0:7A:91:6F:51:9A X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/GCVDRAaWUX76VZx9Ti2gepFvUZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.144.0/22 88.216.48.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:a5:5b:48:61:4d:6d:69:b1:c5:eb:d3:9f:82:46:f8:fe:6a: 28:4e:cf:6f:20:fe:82:b3:16:75:52:60:da:68:3c:89:a0:d5: 2b:dd:6d:74:ee:2b:db:98:c7:16:a3:28:ff:2d:ad:0d:d5:e7: 87:e0:c5:58:7d:b2:44:4e:5a:f1:88:b2:37:04:03:ce:a8:c9: 00:bc:cf:82:d2:72:1f:93:0c:8c:f7:68:b6:27:0f:c9:6a:1f: f1:96:b0:5f:e1:97:22:40:45:89:aa:ba:5d:65:27:73:83:1c: 14:45:17:aa:97:83:6f:28:eb:4d:7a:83:86:c5:83:35:44:f5: cc:e1:29:8b:42:fc:b2:6d:26:6b:ff:99:66:27:0e:f1:74:84: e5:86:a9:db:de:af:17:c0:cd:2f:65:95:3f:fb:6d:e3:dc:c4: c9:61:1a:00:16:7e:5f:67:0a:f6:bc:07:7b:a3:c2:ba:a3:d7: 1b:23:c2:b7:8a:ee:f9:d3:0a:63:86:89:b7:2f:b4:7d:47:0a: e1:df:36:39:01:94:f6:57:98:bb:71:b6:0f:f9:55:d0:cf:70: 55:c7:6f:33:c7:31:22:3a:99:aa:40:cd:8d:98:7c:1e:d7:95: 55:78:de:e2:e7:b2:0f:41:e4:75:94:d8:bd:14:40:60:7f:7e: ac:a7:83:7a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKUZL22JB2v7bJe4JjiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODI1NDM0NDA2OTY1MTdlZmE1NTljN2Q0ZTJkYTA3YTkxNmY1MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxAFYK/8RSR8VDJzTzunzdza4yRL 13ll41odnQXVEUCHxQanIAxgL96uvLAdGgAD9s867Fa06cnS8WJ345cck4k2YIxu IHsInWsvgOZMUsQC0a/CdoWbIp3G5F+fpeJ8wQRfVgoVkr3woOc9nrsKqAY2fKGu 5Wo1jBnAb/1a+1A5KW+Rk5+hnFmgI+WfVcwWg+vbTdteeaQ+SJo4GZYXhO+k42hr XHTGBFq1IISKkfEi/QhGulBIyvZ+3nVM3a7CwNjPmWnocSNdpOQ1lCxK5SheCRYb gyWW5I9JPpezWhwIvpsRULw0+3nwpP8Kn6lyDxe1nI3Mu6DWJ9/nWHjNFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBglQ0QGllF++lWcfU4toHqRb1GaMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvR0NWRFJBYVdVWDc2Vlp4OVRpMmdlcEZ2VVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVCCQAwQD WNgwMA0GCSqGSIb3DQEBCwUAA4IBAQA7pVtIYU1tabHF69Ofgkb4/mooTs9vIP6C sxZ1UmDaaDyJoNUr3W107ivbmMcWoyj/La0N1eeH4MVYfbJETlrxiLI3BAPOqMkA vM+C0nIfkwyM92i2Jw/Jah/xlrBf4ZciQEWJqrpdZSdzgxwURReql4NvKOtNeoOG xYM1RPXM4SmLQvyybSZr/5lmJw7xdITlhqnb3q8XwM0vZZU/+23j3MTJYRoAFn5f Zwr2vAd7o8K6o9cbI8K3iu750wpjhom3L7R9Rwrh3zY5AZT2V5i7cbYP+VXQz3BV x28zxzEiOpmqQM2NmHwe15VVeN7i57IPQeR1lNi9FEBgf36sp4N6 -----END CERTIFICATE-----Generated at Mon Jan 19 13:52:53 2026 by rpki-client