This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/GVceVduBArktwOU6Mf55EriDNYs.roa File: GVceVduBArktwOU6Mf55EriDNYs.roa (raw, json) Hash identifier: z3ZJmc8CfjiYd8eml2YwxfFrpvhkb3YDOmwe9VvElx0= Subject key identifier: 19:57:1E:55:DB:81:02:B9:2D:C0:E5:3A:31:FE:79:12:B8:83:35:8B Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019B7C111A3F3B8B93718D4F0A523C5ACAD4 Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/GVceVduBArktwOU6Mf55EriDNYs.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201942 IP address blocks: 185.159.40.0/22 maxlen: 22 217.67.164.0/22 maxlen: 22 217.67.168.0/21 maxlen: 21 217.67.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1a:3f:3b:8b:93:71:8d:4f:0a:52:3c:5a:ca:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19571e55db8102b92dc0e53a31fe7912b883358b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:37:12:2d:c6:b1:fe:ec:9d:2b:d7:a2:10:46: fb:83:1c:d2:ab:d8:b5:26:a0:1b:03:41:2e:ec:f8: 6f:aa:94:5b:46:3d:91:1f:f1:11:ae:dc:38:96:0c: d2:39:07:80:49:11:07:62:22:fd:2b:9c:72:2e:c8: 18:59:f3:da:ce:0b:df:26:41:8b:29:19:cf:87:15: f0:92:a3:6f:c8:2d:b5:93:57:07:f1:d1:c9:28:5f: f9:2e:a0:45:d3:92:78:9a:46:fe:15:3c:d0:e9:a9: c4:e9:05:37:6c:b3:9f:7f:b9:95:b8:b0:68:e7:22: 65:48:ba:bc:bb:62:50:ad:e8:bc:ca:f8:f0:e6:75: 53:1a:0e:31:3a:9f:18:89:15:99:10:53:9e:5c:ec: a0:0d:64:a7:a7:83:c1:bd:46:54:58:33:04:b5:9e: d1:fb:50:61:9a:d1:83:65:58:5b:0c:c3:f1:92:7e: 24:02:cb:3a:99:89:22:b7:49:46:8a:fe:cd:c2:7b: 5e:d0:f5:0b:1d:27:4b:cc:f1:f3:bf:e8:a8:98:f5: de:b6:82:bd:d3:cb:78:46:e5:34:65:1e:12:a0:8b: c3:17:81:ec:5e:b2:b5:f4:87:eb:5e:02:f1:15:fa: 28:c2:e7:4a:6e:14:90:6d:78:87:b3:99:8c:89:6d: 35:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:57:1E:55:DB:81:02:B9:2D:C0:E5:3A:31:FE:79:12:B8:83:35:8B X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/GVceVduBArktwOU6Mf55EriDNYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.40.0/22 217.67.164.0-217.67.175.255 Signature Algorithm: sha256WithRSAEncryption 3e:5c:c5:f7:d5:f1:a9:f5:9d:a6:d6:55:10:e7:7a:c6:76:78: aa:6e:30:c3:21:23:21:53:6f:74:bc:6f:fa:59:b6:13:e3:97: ed:a3:74:01:44:be:dc:19:90:04:4e:59:44:4f:0d:c2:16:8f: 8b:be:00:ba:0b:b1:ae:d3:56:1f:11:5a:7d:be:fc:c0:b0:f6: 6d:c0:35:2e:c3:08:c7:35:78:ca:0f:d7:68:71:e5:88:65:17: 43:08:48:70:af:d3:b8:f6:34:0d:4d:33:b9:1d:18:6d:a3:9b: 62:0f:46:9d:da:e7:a5:0c:67:6b:92:bb:01:42:20:4a:ec:a9: b4:e3:e5:c6:7f:60:79:f6:77:87:fe:8f:3a:d4:4a:f4:e0:61: 35:5b:7a:68:49:ce:f1:10:37:55:1e:bc:93:b2:50:62:94:15: 20:d5:4d:aa:fa:10:02:87:d7:76:55:31:d5:b7:14:07:33:77: 0f:8e:00:0b:33:97:07:c5:9d:80:98:35:08:9f:f6:3f:22:5c: 40:90:90:23:e6:74:80:11:fd:49:74:f7:c0:c2:4d:6d:0a:45: 2d:c0:02:8e:57:48:06:5d:54:d1:26:ce:cb:e2:f2:6c:4a:17: 36:88:35:fe:29:23:a4:4e:c7:b6:9e:cd:4c:f6:43:fc:31:dc: 5c:dd:dc:c5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8ERo/O4uTcY1PClI8WsrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTU3MWU1NWRiODEwMmI5MmRjMGU1M2EzMWZlNzkxMmI4ODMzNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljcSLcax/uydK9eiEEb7gxzSq9i1 JqAbA0Eu7PhvqpRbRj2RH/ERrtw4lgzSOQeASREHYiL9K5xyLsgYWfPazgvfJkGL KRnPhxXwkqNvyC21k1cH8dHJKF/5LqBF05J4mkb+FTzQ6anE6QU3bLOff7mVuLBo 5yJlSLq8u2JQrei8yvjw5nVTGg4xOp8YiRWZEFOeXOygDWSnp4PBvUZUWDMEtZ7R +1BhmtGDZVhbDMPxkn4kAss6mYkit0lGiv7Nwnte0PULHSdLzPHzv+iomPXetoK9 08t4RuU0ZR4SoIvDF4HsXrK19IfrXgLxFfoowudKbhSQbXiHs5mMiW01JwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBlXHlXbgQK5LcDlOjH+eRK4gzWLMB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvR1ZjZVZkdUJBcmt0d09VNk1mNTVFcmlETllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCuZ8oMAwD BALZQ6QDBATZQ6AwDQYJKoZIhvcNAQELBQADggEBAD5cxffV8an1nabWVRDnesZ2 eKpuMMMhIyFTb3S8b/pZthPjl+2jdAFEvtwZkAROWURPDcIWj4u+ALoLsa7TVh8R Wn2+/MCw9m3ANS7DCMc1eMoP12hx5YhlF0MISHCv07j2NA1NM7kdGG2jm2IPRp3a 56UMZ2uSuwFCIErsqbTj5cZ/YHn2d4f+jzrUSvTgYTVbemhJzvEQN1UevJOyUGKU FSDVTar6EAKH13ZVMdW3FAczdw+OAAszlwfFnYCYNQif9j8iXECQkCPmdIAR/Ul0 98DCTW0KRS3AAo5XSAZdVNEmzsvi8mxKFzaINf4pI6ROx7aezUz2Q/wx3Fzd3MU= -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:10 2026 by rpki-client