This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa File: gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa (raw, json) Hash identifier: K81jA4IV1mFJAtA8ax5fpPdJJ+koFS4vN7Zd8+4wcqc= Subject key identifier: 81:BE:1E:A2:8C:EF:0A:5E:19:55:52:64:BF:04:45:28:25:E5:11:0E Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931 Certificate serial: 019B7BA38634F8729D7DF04522CB2CB3F9FB Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa Signing time: Thu 01 Jan 2026 22:17:52 +0000 ROA not before: Thu 01 Jan 2026 22:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9042 IP address blocks: 146.109.0.0/16 maxlen: 24 193.5.66.0/24 maxlen: 24 193.5.76.0/22 maxlen: 22 193.247.180.0/24 maxlen: 24 2a01:4640:100::/40 maxlen: 40 2a01:4640:200::/40 maxlen: 40 2a01:4640:c800::/40 maxlen: 40 2a01:4642:100::/40 maxlen: 40 2a01:4642:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:86:34:f8:72:9d:7d:f0:45:22:cb:2c:b3:f9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931 Validity Not Before: Jan 1 22:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81be1ea28cef0a5e19555264bf04452825e5110e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:8e:08:1e:2a:9a:80:47:c5:d3:4f:1b:c6: 34:c4:9e:9e:9a:6c:a9:e0:eb:c0:32:76:7a:58:c9: d4:40:de:c6:e8:77:6a:73:c8:b5:85:e0:8f:fd:6d: 31:f9:4e:18:9b:28:2a:14:27:eb:5f:6d:b1:09:99: dd:7a:60:ae:e7:51:7d:09:91:08:85:31:b1:12:30: 9e:6d:0e:8e:b0:d1:ca:21:b2:6e:10:14:19:a8:91: 18:6b:d0:4c:0b:9c:35:b3:32:eb:34:ba:37:cf:e1: ec:1e:95:81:07:45:25:fa:aa:33:ad:31:8e:6c:31: 2e:a1:d8:aa:d8:74:0c:ef:dc:da:ca:1a:f2:c5:90: 7f:13:f5:d2:0c:46:a4:7d:bc:f6:49:b2:35:7d:c0: 11:34:d5:1d:69:1c:d1:51:c2:05:f1:87:61:19:8d: d3:c7:f2:7e:bb:64:52:ab:73:59:a0:17:99:af:0c: 62:2c:82:81:68:9f:06:c2:14:95:7a:78:57:6c:30: 3a:d4:69:58:6f:73:d9:b7:c9:1b:ef:66:3d:2f:f9: 3e:f4:a5:36:fd:89:1a:74:dd:80:03:39:f7:ac:ce: 17:9e:ce:ea:d5:cf:13:d7:cf:0b:76:12:d1:3f:26: e9:e1:07:88:f7:d5:9b:40:0a:cd:96:3b:e6:03:28: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BE:1E:A2:8C:EF:0A:5E:19:55:52:64:BF:04:45:28:25:E5:11:0E X509v3 Authority Key Identifier: keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/gb4eoozvCl4ZVVJkvwRFKCXlEQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.109.0.0/16 193.5.66.0/24 193.5.76.0/22 193.247.180.0/24 IPv6: 2a01:4640:100::-2a01:4640:2ff:ffff:ffff:ffff:ffff:ffff 2a01:4640:c800::/40 2a01:4642:100::-2a01:4642:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6c:b7:59:9f:70:68:ab:14:d6:a8:2a:2f:de:af:22:af:3d:28: 12:c5:8a:d2:2e:d3:27:c6:fd:2a:64:e6:36:9a:ec:d1:58:73: fe:10:e5:ea:3a:fc:14:d4:b2:7a:c9:9c:d5:90:e0:5f:8e:35: 32:44:d6:b4:dc:68:82:e5:79:20:a4:83:13:31:0f:70:69:be: 29:34:ea:aa:27:05:ce:61:ff:c9:00:9d:5c:68:f6:c2:2b:e0: 57:23:3f:ce:64:88:14:97:e3:fe:cb:f1:41:7b:02:63:d3:43: 3b:c1:9c:58:20:2b:1f:a1:de:5d:35:5d:d7:dd:54:cd:a8:e8: db:3d:e0:51:0f:43:74:61:f7:71:f8:52:ec:8f:79:08:97:2a: 4e:16:bb:73:14:7f:57:0f:c0:b5:7b:57:a9:77:59:b8:d4:e5: 2a:a3:9b:8e:37:63:a8:91:78:2a:e3:54:42:e5:ea:b4:51:b6: 87:f3:0b:ef:db:c9:43:e1:b3:3d:fd:a7:5b:0c:9a:77:01:ea: a0:84:57:b3:70:1a:9c:27:cf:53:86:f9:75:ee:e2:fc:a9:c5: 1f:fe:8a:dd:fb:c9:83:4f:41:45:0d:de:7f:ce:66:50:de:07: f3:7f:0e:d6:d5:5a:d5:14:53:15:5c:b8:18:bd:5c:26:c4:fb: ba:25:f2:03 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt7o4Y0+HKdffBFIssss/n7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZjQyNzc2YmU1MzJiZDA1NzUzMzI4NTVkOGM0MmM0OTUy ZWQ5MzEwHhcNMjYwMTAxMjIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWJlMWVhMjhjZWYwYTVlMTk1NTUyNjRiZjA0NDUyODI1ZTUxMTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5KOCB4qmoBHxdNPG8Y0xJ6emmyp 4OvAMnZ6WMnUQN7G6Hdqc8i1heCP/W0x+U4YmygqFCfrX22xCZndemCu51F9CZEI hTGxEjCebQ6OsNHKIbJuEBQZqJEYa9BMC5w1szLrNLo3z+HsHpWBB0Ul+qozrTGO bDEuodiq2HQM79zayhryxZB/E/XSDEakfbz2SbI1fcARNNUdaRzRUcIF8YdhGY3T x/J+u2RSq3NZoBeZrwxiLIKBaJ8GwhSVenhXbDA61GlYb3PZt8kb72Y9L/k+9KU2 /YkadN2AAzn3rM4Xns7q1c8T188LdhLRPybp4QeI99WbQArNljvmAyhBqwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFIG+HqKM7wpeGVVSZL8ERSgl5REOMB8GA1UdIwQY MBaAFOz0J3a+UyvQV1MyhV2MQsSVLtkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgt NWU1M2MyM2I1NWIwLzEvZ2I0ZW9venZDbDRaVlZKa3Z3UkZLQ1hsRVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9lYmQ0OWYtZjU2OS00MTUyLWIwYjgtNWU1M2MyM2I1NWIw LzEvN1BRbmRyNVRLOUJYVXpLRlhZeEN4SlV1MlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzAdBAIAATAXAwMAkm0DBADB BUIDBALBBUwDBADB97QwMgQCAAIwLDAQAwYAKgFGQAEDBgAqAUZAAgMGACoBRkDI MBADBgAqAUZCAQMGACoBRkICMA0GCSqGSIb3DQEBCwUAA4IBAQBst1mfcGirFNao Ki/eryKvPSgSxYrSLtMnxv0qZOY2muzRWHP+EOXqOvwU1LJ6yZzVkOBfjjUyRNa0 3GiC5XkgpIMTMQ9wab4pNOqqJwXOYf/JAJ1caPbCK+BXIz/OZIgUl+P+y/FBewJj 00M7wZxYICsfod5dNV3X3VTNqOjbPeBRD0N0Yfdx+FLsj3kIlypOFrtzFH9XD8C1 e1epd1m41OUqo5uON2OokXgq41RC5eq0UbaH8wvv28lD4bM9/adbDJp3AeqghFez cBqcJ89Thvl17uL8qcUf/ord+8mDT0FFDd5/zmZQ3gfzfw7W1VrVFFMVXLgYvVwm xPu6JfID -----END CERTIFICATE-----Generated at Tue Jan 20 07:48:40 2026 by rpki-client