This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/GAUUFbrMaCi8twL5FhYDaZpEPLs.roa File: GAUUFbrMaCi8twL5FhYDaZpEPLs.roa (raw, json) Hash identifier: +xCgImVqcUMnpmtGGiJK28GMNwusbZ27Pk5kQ0ngYBY= Subject key identifier: 18:05:14:15:BA:CC:68:28:BC:B7:02:F9:16:16:03:69:9A:44:3C:BB Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Certificate serial: 019B7834BE388D796C0D557593C20FE37B22 Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/GAUUFbrMaCi8twL5FhYDaZpEPLs.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41549 IP address blocks: 194.0.212.0/24 maxlen: 24 2001:678:8ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:be:38:8d:79:6c:0d:55:75:93:c2:0f:e3:7b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18051415bacc6828bcb702f9161603699a443cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:7b:33:0e:96:50:99:18:39:eb:d3:17:d8: 50:9a:ad:7e:60:92:21:21:f9:2f:68:8b:39:7a:34: 52:e8:62:ab:6e:56:f2:df:48:4d:bf:d4:e7:33:2d: 03:76:b1:e9:f7:61:80:12:8a:5c:40:ec:af:72:40: 9d:7e:3a:f8:82:4a:33:09:17:f8:ef:ec:c6:14:a8: ca:16:0b:ef:1b:1e:3d:85:66:4e:d7:98:78:f0:36: e1:89:a0:61:47:1d:3f:cb:cf:0f:e3:65:c1:94:25: 67:4f:57:9a:81:07:75:ba:28:45:af:57:17:f8:fa: 9d:30:cd:68:52:ec:a8:58:2d:1f:4d:eb:2c:ed:05: ec:f0:70:0d:42:f9:3a:c1:0e:06:86:01:4d:6a:4f: f6:40:59:1f:c1:5a:28:23:c2:92:5f:aa:5f:3a:e8: 1a:cc:c8:9b:54:90:43:6c:0b:50:66:91:c3:17:74: 65:7f:25:df:3d:92:e4:f2:58:f6:8d:1a:9a:f1:5b: e9:3f:aa:97:1d:75:52:da:83:fa:4f:7e:1b:20:d9: f2:4e:b1:ad:2b:99:c8:87:74:ed:2c:50:99:4f:0d: 37:c9:19:ef:a6:33:72:91:e3:48:c6:77:31:17:4b: da:ad:cd:9a:43:66:a1:08:35:33:ac:98:4c:9b:47: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:05:14:15:BA:CC:68:28:BC:B7:02:F9:16:16:03:69:9A:44:3C:BB X509v3 Authority Key Identifier: keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/GAUUFbrMaCi8twL5FhYDaZpEPLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.212.0/24 IPv6: 2001:678:8ec::/48 Signature Algorithm: sha256WithRSAEncryption 84:56:f3:9f:82:1b:6c:6c:9b:06:a5:e0:cc:06:61:4e:4a:58: 7c:2f:d5:a2:ee:b9:5b:d5:9b:c1:39:1a:10:6a:93:ee:eb:bf: a4:e4:8d:2d:59:c8:b9:da:75:f3:23:30:22:7e:e4:8c:97:10: 6e:5f:71:e0:9f:a5:31:a8:ff:a4:81:a5:7e:49:ef:47:4f:24: e5:95:69:1c:6f:c1:da:0b:0c:be:73:8f:b6:29:98:26:cb:df: 28:e0:76:3b:eb:3a:75:3a:62:4d:c0:a4:00:11:e4:d4:ee:70: 9a:cd:aa:e4:41:6c:1c:82:43:1a:44:c4:ea:48:87:00:49:f6: 05:0a:b5:cf:f3:34:9e:3d:04:28:0f:50:4a:5a:0c:69:f0:fb: 25:26:e5:4e:c1:71:3b:5a:fb:c8:e4:42:67:b1:a0:38:09:18: c1:21:11:18:bd:a5:b1:aa:8a:3f:ba:8c:37:ad:74:6d:b8:ac: 65:cb:c0:36:26:8f:7b:e3:99:2b:98:83:28:35:9a:54:27:0f: 3e:be:da:3a:2f:17:96:21:33:6f:06:ef:5d:51:54:ea:9c:d7: a5:19:cf:5a:d4:b8:b8:8f:8e:a7:4f:e7:7c:93:30:78:d5:e0: 8b:15:4f:70:46:8e:d1:5c:07:29:b5:8b:82:67:c4:af:bb:a4: 31:14:46:bd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NL44jXlsDVV1k8IP43siMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYWJjNWMxMzMwYTNmMGIwMzE5YmIxNmM0NDM0OGNkMWI4 MTllNDQwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODA1MTQxNWJhY2M2ODI4YmNiNzAyZjkxNjE2MDM2OTlhNDQzY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvp7Mw6WUJkYOevTF9hQmq1+YJIh IfkvaIs5ejRS6GKrblby30hNv9TnMy0DdrHp92GAEopcQOyvckCdfjr4gkozCRf4 7+zGFKjKFgvvGx49hWZO15h48DbhiaBhRx0/y88P42XBlCVnT1eagQd1uihFr1cX +PqdMM1oUuyoWC0fTess7QXs8HANQvk6wQ4GhgFNak/2QFkfwVooI8KSX6pfOuga zMibVJBDbAtQZpHDF3RlfyXfPZLk8lj2jRqa8VvpP6qXHXVS2oP6T34bINnyTrGt K5nIh3TtLFCZTw03yRnvpjNykeNIxncxF0varc2aQ2ahCDUzrJhMm0dPuwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBgFFBW6zGgovLcC+RYWA2maRDy7MB8GA1UdIwQY MBaAFO+rxcEzCj8LAxm7FsRDSM0bgZ5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEt ZGUxZGNhMzc5NzM0LzEvR0FVVUZick1hQ2k4dHdMNUZoWURhWnBFUExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9iZTM4ZGMtZGExNS00MDQ4LTg4NTEtZGUxZGNhMzc5NzM0 LzEvNzZ2RndUTUtQd3NER2JzV3hFTkl6UnVCbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgDUMA8E AgACMAkDBwAgAQZ4COwwDQYJKoZIhvcNAQELBQADggEBAIRW85+CG2xsmwal4MwG YU5KWHwv1aLuuVvVm8E5GhBqk+7rv6TkjS1ZyLnadfMjMCJ+5IyXEG5fceCfpTGo /6SBpX5J70dPJOWVaRxvwdoLDL5zj7YpmCbL3yjgdjvrOnU6Yk3ApAAR5NTucJrN quRBbByCQxpExOpIhwBJ9gUKtc/zNJ49BCgPUEpaDGnw+yUm5U7BcTta+8jkQmex oDgJGMEhERi9pbGqij+6jDetdG24rGXLwDYmj3vjmSuYgyg1mlQnDz6+2jovF5Yh M28G711RVOqc16UZz1rUuLiPjqdP53yTMHjV4IsVT3BGjtFcBym1i4JnxK+7pDEU Rr0= -----END CERTIFICATE-----Generated at Tue Jan 27 10:18:51 2026 by rpki-client