This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/GxNglowBB-qM4SyLCUpB8DxSym4.roa File: GxNglowBB-qM4SyLCUpB8DxSym4.roa (raw, json) Hash identifier: cXQ7oNvmgTnLy87CiQWasUFcfBCcYezCe1uKaHJSwpY= Subject key identifier: 1B:13:60:96:8C:01:07:EA:8C:E1:2C:8B:09:4A:41:F0:3C:52:CA:6E Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b Certificate serial: 019B797EF41BA38D6D2D5BEBD936F4A41A71 Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/GxNglowBB-qM4SyLCUpB8DxSym4.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205988 IP address blocks: 185.200.52.0/22 maxlen: 24 2a0a:ab40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:1b:a3:8d:6d:2d:5b:eb:d9:36:f4:a4:1a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b1360968c0107ea8ce12c8b094a41f03c52ca6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:e7:84:f1:45:0e:3a:31:63:ad:9f:0b:ae: 1c:ea:ff:05:27:0d:21:82:e1:e8:83:f8:14:e2:ba: 2d:8b:3e:2f:d5:28:bc:c1:74:28:0d:66:65:cb:98: b4:1c:57:8b:97:1d:dc:3b:a0:db:8f:16:d3:4a:3a: 98:1e:db:fd:6c:dd:37:39:fc:e6:9d:97:81:b9:4f: 05:77:cd:fa:ce:36:79:32:95:39:5d:ef:e2:73:5b: 51:53:52:3d:25:82:89:a8:a1:a0:7b:b5:fd:5b:01: b4:fc:5e:0d:94:bf:1f:34:c9:bd:82:b4:1e:03:09: 90:25:4a:23:3f:fa:a4:e8:82:f8:70:e1:9d:fb:24: 50:ab:5e:34:aa:ee:72:8e:80:ef:56:2e:2f:a4:a2: db:f0:b4:45:f0:9d:85:25:ff:72:31:5a:48:0c:8c: 39:e4:79:6b:af:e8:d1:e9:b0:09:4f:3f:fb:2b:bd: e2:0c:82:be:37:eb:5f:d8:ed:87:bd:34:87:6c:97: ab:9f:9e:ef:9a:f5:9a:a6:10:0b:a5:9a:94:af:d9: d9:2a:2a:a9:64:12:18:dd:dd:ea:83:57:d6:14:66: 45:63:1f:f1:1b:6a:d9:67:a9:9c:fb:a5:51:83:06: 12:11:9d:e2:8d:da:f9:da:96:12:a7:6b:23:99:7e: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:60:96:8C:01:07:EA:8C:E1:2C:8B:09:4A:41:F0:3C:52:CA:6E X509v3 Authority Key Identifier: keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/GxNglowBB-qM4SyLCUpB8DxSym4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.52.0/22 IPv6: 2a0a:ab40::/29 Signature Algorithm: sha256WithRSAEncryption 39:9a:de:86:f4:f1:73:3b:da:3f:9e:4a:57:b8:f7:6a:ca:fc: f8:2b:23:dc:1c:ef:10:22:ba:df:28:de:b0:ff:13:88:be:e6: 07:ad:9d:e3:12:4c:79:86:67:3c:1e:43:92:b5:41:4f:f3:7b: 91:85:fa:91:23:14:4e:70:60:ae:db:11:c0:d6:c9:50:24:bd: 0c:dc:73:f0:e1:6a:f7:bc:8f:08:84:02:b0:5f:94:df:be:b2: 8d:45:d3:2c:52:af:27:54:95:37:6a:3e:56:65:a9:a2:81:6c: 35:04:c7:02:ce:9f:e5:aa:c2:8b:ac:2f:fc:01:9b:a6:d6:13: b0:43:51:1a:fd:26:2e:61:35:6f:cf:db:39:05:28:5f:45:0b: d8:bc:2d:a7:d7:9b:d7:18:5b:45:e6:05:d5:15:74:8c:20:39: 1c:d8:9b:29:b2:66:90:b2:8d:23:52:84:58:81:27:3d:61:b6: 17:77:31:02:f2:42:a2:d3:c4:df:f3:82:04:0f:f3:a6:42:7b: b9:56:7f:dc:bd:68:2a:c9:7e:0c:b2:11:36:d1:a8:f3:51:b2: 71:f3:92:a9:1a:34:5b:bf:64:da:0e:a9:5d:40:d3:54:72:52: e7:2c:ae:e0:42:29:5e:b0:7a:3d:e9:3e:8c:a2:a7:2d:31:0b: 15:cb:45:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fvQbo41tLVvr2Tb0pBpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODFkMWYzYWMxNGFmNTBkYzA2NjU3NDRmOTA3NmI3ZmFk YjFmOWIwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjEzNjA5NjhjMDEwN2VhOGNlMTJjOGIwOTRhNDFmMDNjNTJjYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx57nhPFFDjoxY62fC64c6v8FJw0h guHog/gU4rotiz4v1Si8wXQoDWZly5i0HFeLlx3cO6DbjxbTSjqYHtv9bN03Ofzm nZeBuU8Fd836zjZ5MpU5Xe/ic1tRU1I9JYKJqKGge7X9WwG0/F4NlL8fNMm9grQe AwmQJUojP/qk6IL4cOGd+yRQq140qu5yjoDvVi4vpKLb8LRF8J2FJf9yMVpIDIw5 5Hlrr+jR6bAJTz/7K73iDIK+N+tf2O2HvTSHbJern57vmvWaphALpZqUr9nZKiqp ZBIY3d3qg1fWFGZFYx/xG2rZZ6mc+6VRgwYSEZ3ijdr52pYSp2sjmX5e/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBsTYJaMAQfqjOEsiwlKQfA8UspuMB8GA1UdIwQY MBaAFMuB0fOsFK9Q3AZldE+Qdrf62x+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYt YjEwODE3NTBjZTE1LzEvR3hOZ2xvd0JCLXFNNFN5TENVcEI4RHhTeW00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYtYjEwODE3NTBjZTE1 LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucg0MA0E AgACMAcDBQMqCqtAMA0GCSqGSIb3DQEBCwUAA4IBAQA5mt6G9PFzO9o/nkpXuPdq yvz4KyPcHO8QIrrfKN6w/xOIvuYHrZ3jEkx5hmc8HkOStUFP83uRhfqRIxROcGCu 2xHA1slQJL0M3HPw4Wr3vI8IhAKwX5TfvrKNRdMsUq8nVJU3aj5WZamigWw1BMcC zp/lqsKLrC/8AZum1hOwQ1Ea/SYuYTVvz9s5BShfRQvYvC2n15vXGFtF5gXVFXSM IDkc2JspsmaQso0jUoRYgSc9YbYXdzEC8kKi08Tf84IED/OmQnu5Vn/cvWgqyX4M shE20ajzUbJx85KpGjRbv2TaDqldQNNUclLnLK7gQilesHo96T6MoqctMQsVy0WI -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:18 2026 by rpki-client