This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa File: Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa (raw, json) Hash identifier: pGrQx5S2KxHTpkTBouQo/IMtimjqQRdhpHgfquKymNk= Subject key identifier: 1A:77:77:32:C6:1E:DA:BB:9F:3D:A3:07:F6:D3:FC:B6:5D:BE:5C:93 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105BF0EB5B42599833F3ACFA19CFFB Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 188.191.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5b:f0:eb:5b:42:59:98:33:f3:ac:fa:19:cf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a777732c61edabb9f3da307f6d3fcb65dbe5c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:d1:58:87:ac:2d:4e:44:d6:44:73:77:13: ff:c4:87:81:2c:b2:d4:b0:7b:dd:bc:7a:af:fc:0a: df:af:ba:18:ec:d8:f6:ac:ad:cf:dd:c1:7c:90:90: b9:9c:8e:0b:88:90:45:a3:58:6f:2c:ad:f4:0c:f7: be:a5:df:59:ff:d9:51:ce:c7:58:a2:da:a8:79:80: a1:ac:44:07:c4:c2:6e:88:48:76:fa:5f:02:38:a9: 4b:17:a1:b2:ae:fd:45:06:2b:a0:13:81:33:6e:7a: e5:9c:81:4e:46:e6:58:71:6e:69:45:3f:14:3e:2a: c0:3b:28:c2:6f:e4:29:20:49:d6:f3:b4:bf:e6:f9: e8:3a:f2:a6:44:fc:69:85:4b:9b:e3:06:4e:76:41: cf:50:ae:aa:4c:60:48:bc:4f:5e:ce:92:61:4b:fb: ee:d8:ee:b4:5e:92:16:79:44:f5:6f:70:a2:c7:0a: de:c4:e7:ad:d0:2c:0c:ef:34:b2:f8:9d:60:37:9c: b1:2e:52:44:3e:99:80:0b:9a:98:07:90:e4:68:c8: fb:5f:78:60:41:c4:51:40:7d:7c:61:27:33:64:ec: 28:b7:65:91:83:b1:44:53:18:3a:c7:5e:1d:38:c6: 5c:ce:cb:ce:ed:86:0a:8d:64:5a:76:93:d2:79:f0: 24:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:77:32:C6:1E:DA:BB:9F:3D:A3:07:F6:D3:FC:B6:5D:BE:5C:93 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Gnd3MsYe2rufPaMH9tP8tl2-XJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.105.0/24 Signature Algorithm: sha256WithRSAEncryption 14:d9:60:59:57:1c:79:aa:ef:54:d3:9a:b4:8c:a7:64:e5:16: 42:43:4a:eb:e6:5a:35:11:34:e8:06:20:1b:30:44:9c:4b:a1: f0:f9:a5:52:89:1d:7d:b8:fb:af:39:ec:c2:5e:83:0e:c4:29: 43:81:43:8b:92:46:b9:e9:44:ee:95:24:6d:ac:7d:19:72:d8: 05:f7:aa:15:2d:97:90:04:07:52:66:19:a1:c9:30:d2:5f:80: 68:6c:2a:c4:69:90:37:dd:e8:03:3c:6d:0c:74:be:58:97:ae: 37:07:18:9c:be:f9:e9:12:08:15:87:0b:fd:13:4f:7f:a8:ba: fc:98:b6:6f:ba:f0:2d:81:44:ff:ad:12:81:da:79:f1:00:7f: 11:35:60:b7:bb:53:a3:78:09:a5:d1:2c:d5:03:2e:8b:98:24: f3:b4:98:56:fd:0a:6a:48:44:79:2d:48:57:4c:e8:8a:0a:f4: cc:45:00:49:90:8d:ae:87:e2:ef:7a:69:6a:c7:c3:78:d2:34: ce:4d:39:82:ea:f8:60:88:83:8a:54:12:f8:88:47:c7:46:01: 22:7c:84:db:1c:6d:12:9f:a7:35:0e:2b:77:89:09:50:33:8f: 51:aa:b8:4d:48:f7:77:f7:8b:f8:60:14:91:bb:22:cd:78:ae: e3:c3:66:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFvw61tCWZgz86z6Gc/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTc3NzczMmM2MWVkYWJiOWYzZGEzMDdmNmQzZmNiNjVkYmU1YzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ7RWIesLU5E1kRzdxP/xIeBLLLU sHvdvHqv/Arfr7oY7Nj2rK3P3cF8kJC5nI4LiJBFo1hvLK30DPe+pd9Z/9lRzsdY otqoeYChrEQHxMJuiEh2+l8COKlLF6Gyrv1FBiugE4EzbnrlnIFORuZYcW5pRT8U PirAOyjCb+QpIEnW87S/5vnoOvKmRPxphUub4wZOdkHPUK6qTGBIvE9ezpJhS/vu 2O60XpIWeUT1b3CixwrexOet0CwM7zSy+J1gN5yxLlJEPpmAC5qYB5DkaMj7X3hg QcRRQH18YSczZOwot2WRg7FEUxg6x14dOMZczsvO7YYKjWRadpPSefAkLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBp3dzLGHtq7nz2jB/bT/LZdvlyTMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvR25kM01zWWUycnVmUGFNSDl0UDh0bDItWEpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9pMA0G CSqGSIb3DQEBCwUAA4IBAQAU2WBZVxx5qu9U05q0jKdk5RZCQ0rr5lo1ETToBiAb MEScS6Hw+aVSiR19uPuvOezCXoMOxClDgUOLkka56UTulSRtrH0ZctgF96oVLZeQ BAdSZhmhyTDSX4BobCrEaZA33egDPG0MdL5Yl643BxicvvnpEggVhwv9E09/qLr8 mLZvuvAtgUT/rRKB2nnxAH8RNWC3u1OjeAml0SzVAy6LmCTztJhW/QpqSER5LUhX TOiKCvTMRQBJkI2uh+Lvemlqx8N40jTOTTmC6vhgiIOKVBL4iEfHRgEifITbHG0S n6c1Dit3iQlQM49RqrhNSPd394v4YBSRuyLNeK7jw2bT -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:27 2026 by rpki-client