This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/GzdfLu-BksDJwE9pfcgaIEcBTJs.roa File: GzdfLu-BksDJwE9pfcgaIEcBTJs.roa (raw, json) Hash identifier: 0uOTjDCwE9CC6NlLuvwra/kx1v02mWMFwmjFQbmGkMM= Subject key identifier: 1B:37:5F:2E:EF:81:92:C0:C9:C0:4F:69:7D:C8:1A:20:47:01:4C:9B Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a Certificate serial: 019B7AC940EFB68B6919DB946357FF23F18E Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/GzdfLu-BksDJwE9pfcgaIEcBTJs.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8676 IP address blocks: 194.11.244.0/23 maxlen: 24 194.13.108.0/23 maxlen: 24 194.13.140.0/23 maxlen: 24 194.13.236.0/23 maxlen: 24 2a06:2100::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:40:ef:b6:8b:69:19:db:94:63:57:ff:23:f1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b375f2eef8192c0c9c04f697dc81a2047014c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:65:bc:4c:48:8b:98:fc:51:04:85:1b:fd: 12:2c:78:9e:79:66:4b:c4:a8:54:79:24:b2:a8:29: 4d:ec:3e:de:20:32:19:4a:47:26:91:c0:3a:20:ac: f2:58:06:a0:23:78:ec:eb:22:99:cc:9c:20:a5:34: b2:da:99:1b:5f:10:0c:f2:86:88:3a:22:48:db:07: 86:2d:79:87:25:91:22:7e:21:e1:08:3b:10:56:19: b5:75:da:8e:09:ff:ae:4a:55:8f:c4:f3:b6:c4:bd: 96:92:ec:21:1d:d8:94:69:98:83:c3:19:46:24:ac: e2:bc:92:84:d8:d2:2a:5c:8a:e5:52:15:6b:ab:c3: c6:ba:0e:cc:ee:2a:18:ca:4d:46:28:32:d6:b1:c8: d6:16:c3:2a:7b:84:e7:59:c4:2d:35:fd:f9:e3:7f: 39:9f:87:3e:10:ff:59:14:4f:3f:73:06:71:99:13: d1:fa:b3:b3:af:22:48:e1:35:e0:aa:6a:5c:7d:16: cf:8b:37:a5:dd:45:e8:7f:17:2f:42:44:e6:7d:3d: e5:7a:ab:b4:c0:8e:48:0d:bf:46:f8:da:e2:93:b3: 1e:65:62:46:b0:81:6f:ae:7f:78:47:4f:c1:07:ce: 0f:14:37:e2:c5:d3:23:d7:0b:1a:ce:06:34:58:02: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:5F:2E:EF:81:92:C0:C9:C0:4F:69:7D:C8:1A:20:47:01:4C:9B X509v3 Authority Key Identifier: keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/GzdfLu-BksDJwE9pfcgaIEcBTJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.244.0/23 194.13.108.0/23 194.13.140.0/23 194.13.236.0/23 IPv6: 2a06:2100::/30 Signature Algorithm: sha256WithRSAEncryption 81:ce:f7:31:aa:f9:de:a1:5f:e1:36:5d:3f:c8:9d:90:b6:42: 9b:e8:f5:ad:76:44:ed:76:18:bf:17:f1:92:e5:f4:20:7f:52: 0f:0d:8b:ca:41:b8:57:aa:46:71:c6:3d:b5:84:fb:eb:24:23: 76:54:13:8f:04:66:46:bd:ac:6f:cc:3c:6d:c9:af:86:70:8f: 36:b9:57:31:bf:15:50:cd:20:8c:75:79:9a:7c:46:a9:7e:f7: ff:d6:4e:c4:cf:4f:9a:64:ae:d8:54:0c:67:a9:df:1e:28:0d: aa:94:78:f1:96:43:a0:d7:aa:f2:6a:4e:bc:13:ae:fe:a3:e2: a7:db:0d:92:15:60:80:cc:a6:3d:b5:78:1d:ff:5a:5a:7a:12: d6:9a:16:23:12:24:77:93:89:b4:d3:46:4f:8c:5b:b8:da:4d: 50:47:be:57:de:a6:79:18:8c:1b:bd:3d:41:5e:7c:6c:1c:c9: f2:c1:80:b1:2b:17:cd:5c:2e:52:f6:c6:54:ad:73:fe:99:53: 7f:74:f1:ba:2c:40:c5:61:44:e2:cd:57:8f:9a:8e:cf:61:10: 0d:85:d4:fa:b8:4e:5c:e7:75:53:7f:9c:47:7b:33:5d:df:65: df:04:6f:b6:5d:db:fb:13:86:29:cf:b6:a2:c3:92:ac:74:61: f2:1a:7a:f7 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6yUDvtotpGduUY1f/I/GOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMzM5ZDMwNDQ5OWQwNjlhZWNkOGJkMGU4ZmJhMDJlNTIy ZjU3NmEwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjM3NWYyZWVmODE5MmMwYzljMDRmNjk3ZGM4MWEyMDQ3MDE0YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx1lvExIi5j8UQSFG/0SLHieeWZL xKhUeSSyqClN7D7eIDIZSkcmkcA6IKzyWAagI3js6yKZzJwgpTSy2pkbXxAM8oaI OiJI2weGLXmHJZEifiHhCDsQVhm1ddqOCf+uSlWPxPO2xL2WkuwhHdiUaZiDwxlG JKzivJKE2NIqXIrlUhVrq8PGug7M7ioYyk1GKDLWscjWFsMqe4TnWcQtNf354385 n4c+EP9ZFE8/cwZxmRPR+rOzryJI4TXgqmpcfRbPizel3UXofxcvQkTmfT3lequ0 wI5IDb9G+Nrik7MeZWJGsIFvrn94R0/BB84PFDfixdMj1wsazgY0WAIfFQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBs3Xy7vgZLAycBPaX3IGiBHAUybMB8GA1UdIwQY MBaAFEAznTBEmdBprs2L0Oj7oC5SL1dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgt MDMxZTU4OTA1OTIzLzEvR3pkZkx1LUJrc0RKd0U5cGZjZ2FJRWNCVEpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgtMDMxZTU4OTA1OTIz LzEvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBwgv0AwQB wg1sAwQBwg2MAwQBwg3sMA0EAgACMAcDBQIqBiEAMA0GCSqGSIb3DQEBCwUAA4IB AQCBzvcxqvneoV/hNl0/yJ2QtkKb6PWtdkTtdhi/F/GS5fQgf1IPDYvKQbhXqkZx xj21hPvrJCN2VBOPBGZGvaxvzDxtya+GcI82uVcxvxVQzSCMdXmafEapfvf/1k7E z0+aZK7YVAxnqd8eKA2qlHjxlkOg16ryak68E67+o+Kn2w2SFWCAzKY9tXgd/1pa ehLWmhYjEiR3k4m000ZPjFu42k1QR75X3qZ5GIwbvT1BXnxsHMnywYCxKxfNXC5S 9sZUrXP+mVN/dPG6LEDFYUTizVePmo7PYRANhdT6uE5c53VTf5xHezNd32XfBG+2 Xdv7E4Ypz7aiw5KsdGHyGnr3 -----END CERTIFICATE-----Generated at Mon Feb 2 14:22:52 2026 by rpki-client