This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GPCpdP1KQrB8NlWbwauvHY_6HY4.roa File: GPCpdP1KQrB8NlWbwauvHY_6HY4.roa (raw, json) Hash identifier: CVcB0FjnGnRYS01r3botwcZoA4v3r9QXxjOIx9KzeWQ= Subject key identifier: 18:F0:A9:74:FD:4A:42:B0:7C:36:55:9B:C1:AB:AF:1D:8F:FA:1D:8E Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132AECF77F42C2BEED4FFBF41A1EFD Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GPCpdP1KQrB8NlWbwauvHY_6HY4.roa Signing time: Fri 02 Jan 2026 00:19:49 +0000 ROA not before: Fri 02 Jan 2026 00:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202147 IP address blocks: 185.229.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2a:ec:f7:7f:42:c2:be:ed:4f:fb:f4:1a:1e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18f0a974fd4a42b07c36559bc1abaf1d8ffa1d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:53:58:fc:2f:c1:26:81:53:3b:e3:85:88: e5:b0:0a:dc:21:a1:4e:31:4e:f3:fb:77:5e:ea:0f: a3:7f:5e:48:dd:16:da:43:86:14:6a:18:a6:b6:c6: ac:72:84:13:fb:e5:80:e0:57:c5:2e:11:a1:f7:e2: 55:87:ad:da:89:6b:d3:cc:0a:9f:0a:be:45:5b:2c: 2f:ad:06:3c:71:01:dd:f8:95:58:89:00:2e:cb:84: df:b8:34:e6:52:70:86:fb:3e:5e:16:09:7c:f3:89: 4b:65:09:31:6d:a5:6e:b6:2f:a2:14:e4:58:b5:15: cf:df:25:36:05:a8:16:30:05:d7:b8:4d:ed:09:b0: c6:2e:1d:55:a5:e0:34:b2:99:af:9d:99:03:d0:a6: e7:cc:bd:e7:7c:81:fa:b5:e4:4a:6a:d3:ff:26:ba: bd:54:51:98:14:46:2d:96:24:e9:93:08:cc:8c:a9: 73:17:52:5b:cd:55:44:9d:02:d7:31:1d:70:43:b9: e3:be:64:ac:bd:da:d1:d1:5b:24:64:57:ba:74:a3: 2a:8a:1b:49:99:dd:23:9a:2b:4a:90:c8:9a:1e:8c: 94:8d:32:84:8a:f8:39:f5:af:ce:b1:3f:b3:38:1c: 0b:92:62:7d:37:fa:c8:fe:29:bc:be:0d:13:8c:9b: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F0:A9:74:FD:4A:42:B0:7C:36:55:9B:C1:AB:AF:1D:8F:FA:1D:8E X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GPCpdP1KQrB8NlWbwauvHY_6HY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.216.0/22 Signature Algorithm: sha256WithRSAEncryption c5:ec:59:4a:c8:d4:ef:34:34:1a:2a:0a:3e:35:c7:08:db:ec: cc:ac:fb:63:8a:a6:22:78:0c:32:13:82:31:65:58:e9:ad:1a: 9f:c1:fe:3e:c7:d6:f1:72:b7:11:b8:25:16:d9:c6:0d:12:29: ae:b1:a2:5c:fc:c5:b5:01:f6:ae:17:11:64:1e:ea:8f:e9:1e: 8d:9d:29:e5:23:6c:86:1f:84:81:4b:93:ed:87:5e:ac:96:1b: 51:f1:63:14:c1:d6:1a:4b:87:aa:3d:30:8c:c4:bc:46:fd:15: 46:ba:48:63:61:3d:5a:be:75:00:c3:a5:66:91:4d:82:59:08: 9e:d4:0a:c7:af:e3:fe:f2:39:fa:6f:d3:44:15:b7:c6:91:f7: bb:d4:35:ef:67:c6:88:04:8c:c4:ac:4b:33:26:ac:b4:dd:a9: 4b:61:0c:75:4e:2a:55:7b:6d:16:1c:97:34:4e:ce:26:f6:0a: 2e:65:a4:65:c8:6d:b0:1d:92:f9:cc:71:3d:38:16:e8:57:35: 97:37:e3:08:f3:19:b8:0b:14:25:0b:e9:5d:1c:da:75:16:4c: 31:85:45:bb:ae:6a:2b:8f:32:51:18:8c:77:33:85:e8:15:2c: a4:f1:c3:dc:b1:58:d7:d4:f8:03:7e:b5:be:ee:ca:b6:1c:11: 2c:bf:5e:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eyrs939Cwr7tT/v0Gh79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGYwYTk3NGZkNGE0MmIwN2MzNjU1OWJjMWFiYWYxZDhmZmExZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMNTWPwvwSaBUzvjhYjlsArcIaFO MU7z+3de6g+jf15I3RbaQ4YUahimtsascoQT++WA4FfFLhGh9+JVh63aiWvTzAqf Cr5FWywvrQY8cQHd+JVYiQAuy4TfuDTmUnCG+z5eFgl884lLZQkxbaVuti+iFORY tRXP3yU2BagWMAXXuE3tCbDGLh1VpeA0spmvnZkD0KbnzL3nfIH6teRKatP/Jrq9 VFGYFEYtliTpkwjMjKlzF1JbzVVEnQLXMR1wQ7njvmSsvdrR0VskZFe6dKMqihtJ md0jmitKkMiaHoyUjTKEivg59a/OsT+zOBwLkmJ9N/rI/im8vg0TjJtZFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBjwqXT9SkKwfDZVm8Grrx2P+h2OMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvR1BDcGRQMUtRckI4TmxXYndhdXZIWV82SFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueXYMA0G CSqGSIb3DQEBCwUAA4IBAQDF7FlKyNTvNDQaKgo+NccI2+zMrPtjiqYieAwyE4Ix ZVjprRqfwf4+x9bxcrcRuCUW2cYNEimusaJc/MW1AfauFxFkHuqP6R6NnSnlI2yG H4SBS5Pth16slhtR8WMUwdYaS4eqPTCMxLxG/RVGukhjYT1avnUAw6VmkU2CWQie 1ArHr+P+8jn6b9NEFbfGkfe71DXvZ8aIBIzErEszJqy03alLYQx1TipVe20WHJc0 Ts4m9gouZaRlyG2wHZL5zHE9OBboVzWXN+MI8xm4CxQlC+ldHNp1FkwxhUW7rmor jzJRGIx3M4XoFSyk8cPcsVjX1PgDfrW+7sq2HBEsv17u -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:18 2026 by rpki-client