This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GxrUhHUvxgB0GiAZ0wFN3Q-w6EU.roa File: GxrUhHUvxgB0GiAZ0wFN3Q-w6EU.roa (raw, json) Hash identifier: DAgo4WMqo3pLDUsoNChESltTlxv9QRhL0wN0wC0e+gs= Subject key identifier: 1B:1A:D4:84:75:2F:C6:00:74:1A:20:19:D3:01:4D:DD:0F:B0:E8:45 Certificate issuer: /CN=191b1a99358daa58e72625c4ce9d829e918efc86 Certificate serial: 019B7C8038288FC6798A96FA0FA98FA9E22E Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GxrUhHUvxgB0GiAZ0wFN3Q-w6EU.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211235 IP address blocks: 45.89.20.0/24 maxlen: 24 185.133.226.0/24 maxlen: 24 185.217.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:38:28:8f:c6:79:8a:96:fa:0f:a9:8f:a9:e2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b1ad484752fc600741a2019d3014ddd0fb0e845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0c:d3:07:74:7e:de:9a:04:9e:9a:1e:62:f3: 1e:ba:1c:77:35:fb:9e:62:1c:c9:5b:be:16:05:93: 84:04:14:61:0f:06:46:5e:33:14:c7:ea:8a:88:29: 0e:21:5d:4f:2d:a3:93:b9:45:27:26:a9:98:5c:81: 7d:de:1f:90:80:43:4a:86:92:89:fc:2f:19:ee:f6: f3:59:24:14:f0:ed:72:8a:13:a5:8d:36:05:97:14: a5:be:60:61:63:7a:68:e8:e4:64:97:ee:b0:b2:6e: 89:2c:ee:a1:90:ba:da:b1:a3:e5:fb:4d:31:ff:21: 0e:c5:6b:ad:0a:68:db:af:78:87:e6:ae:67:2f:5a: c2:41:de:4d:40:da:50:cd:1d:30:96:f2:4f:30:7d: 44:5a:ef:2b:8f:29:5a:bb:50:e5:ec:bc:c4:fe:03: 1a:4c:87:66:bf:0f:b9:62:cf:90:84:ca:28:f7:ee: be:be:d0:c7:1e:c1:79:ee:97:6b:3a:c0:4b:91:81: 57:e5:6b:84:33:13:05:ca:0b:81:e1:5d:fe:c2:fc: 71:24:28:1c:91:01:bc:ff:41:dd:af:9f:04:b0:7e: f6:7b:14:49:e4:4f:2c:8b:bf:32:1b:2e:d1:65:28: 3f:93:52:de:d3:85:98:50:4d:d0:8f:59:c1:ec:99: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1A:D4:84:75:2F:C6:00:74:1A:20:19:D3:01:4D:DD:0F:B0:E8:45 X509v3 Authority Key Identifier: keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GxrUhHUvxgB0GiAZ0wFN3Q-w6EU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.20.0/24 185.133.226.0/24 185.217.61.0/24 Signature Algorithm: sha256WithRSAEncryption 24:d4:c2:84:71:1b:15:8e:97:06:4c:ef:89:a6:81:a5:53:3c: 3f:56:6b:0c:40:54:a4:3b:a3:96:9d:b0:d4:07:42:3d:3d:7d: 3f:88:36:73:02:58:95:60:e1:cd:6c:23:96:c0:61:ce:c9:21: 44:cd:6e:2f:e1:8c:51:61:7c:ec:2d:db:23:10:cd:4a:4c:48: 9f:c5:b3:7d:5f:bb:a5:ec:6d:16:b3:9e:e0:8e:4d:c4:21:b9: 49:4b:1f:55:4a:6c:6d:d1:6b:08:d7:ed:3d:24:9b:a2:b0:7d: 7e:e9:af:a8:a5:c6:84:71:a9:e5:60:5c:83:f5:cd:fb:16:08: a9:41:51:b2:7a:c8:31:12:6b:5c:5f:26:fb:35:6b:9c:67:39: 93:6e:dc:a6:d9:e9:29:8f:21:4f:cb:0e:5b:89:df:cd:fa:b1: f4:f5:1c:ef:50:73:b6:3c:61:c4:c3:3d:b8:4b:55:71:a7:48: da:db:f3:b7:64:85:f7:df:af:07:7d:4b:58:83:14:8e:8c:f7: d3:e4:92:36:0a:cf:75:cd:b9:5d:a5:89:6b:99:e2:5d:bd:fa: 7b:65:96:aa:b5:d8:db:6b:7a:24:d6:7d:27:7a:06:a5:31:20: 7b:65:4a:5c:20:91:02:37:8f:84:f1:ba:fe:9e:ad:10:92:bd: df:1e:8e:0e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDgoj8Z5ipb6D6mPqeIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWIxYTk5MzU4ZGFhNThlNzI2MjVjNGNlOWQ4MjllOTE4 ZWZjODYwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjFhZDQ4NDc1MmZjNjAwNzQxYTIwMTlkMzAxNGRkZDBmYjBlODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQzTB3R+3poEnpoeYvMeuhx3Nfue YhzJW74WBZOEBBRhDwZGXjMUx+qKiCkOIV1PLaOTuUUnJqmYXIF93h+QgENKhpKJ /C8Z7vbzWSQU8O1yihOljTYFlxSlvmBhY3po6ORkl+6wsm6JLO6hkLrasaPl+00x /yEOxWutCmjbr3iH5q5nL1rCQd5NQNpQzR0wlvJPMH1EWu8rjylau1Dl7LzE/gMa TIdmvw+5Ys+QhMoo9+6+vtDHHsF57pdrOsBLkYFX5WuEMxMFyguB4V3+wvxxJCgc kQG8/0Hdr58EsH72exRJ5E8si78yGy7RZSg/k1Le04WYUE3Qj1nB7JmOUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBsa1IR1L8YAdBogGdMBTd0PsOhFMB8GA1UdIwQY MBaAFBkbGpk1japY5yYlxM6dgp6RjvyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0Yjgt OWU0ZDBjZjk1NTQ0LzEvR3hyVWhIVXZ4Z0IwR2lBWjB3Rk4zUS13NkVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82MTk3YzEtNzJmNC00ZTRmLWE0YjgtOWU0ZDBjZjk1NTQ0 LzEvR1JzYW1UV05xbGpuSmlYRXpwMkNucEdPX0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVkUAwQA uYXiAwQAudk9MA0GCSqGSIb3DQEBCwUAA4IBAQAk1MKEcRsVjpcGTO+JpoGlUzw/ VmsMQFSkO6OWnbDUB0I9PX0/iDZzAliVYOHNbCOWwGHOySFEzW4v4YxRYXzsLdsj EM1KTEifxbN9X7ul7G0Ws57gjk3EIblJSx9VSmxt0WsI1+09JJuisH1+6a+opcaE canlYFyD9c37FgipQVGyesgxEmtcXyb7NWucZzmTbtym2ekpjyFPyw5bid/N+rH0 9RzvUHO2PGHEwz24S1Vxp0ja2/O3ZIX3368HfUtYgxSOjPfT5JI2Cs91zbldpYlr meJdvfp7ZZaqtdjba3ok1n0negalMSB7ZUpcIJECN4+E8br+nq0Qkr3fHo4O -----END CERTIFICATE-----Generated at Mon Feb 9 23:47:18 2026 by rpki-client