This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/gbXhR2uRK-RKCAkCyIxBQwTU87w.roa File: gbXhR2uRK-RKCAkCyIxBQwTU87w.roa (raw, json) Hash identifier: XhuCXdBrzSTullx7dBLgYNOs79sf2A0V1FhHe7MzJH8= Subject key identifier: 81:B5:E1:47:6B:91:2B:E4:4A:08:09:02:C8:8C:41:43:04:D4:F3:BC Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019B78A2A0E44B9858386A5318FE5A477800 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/gbXhR2uRK-RKCAkCyIxBQwTU87w.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57844 IP address blocks: 80.254.232.0/21 maxlen: 24 185.204.16.0/22 maxlen: 24 185.220.28.0/22 maxlen: 22 193.16.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a0:e4:4b:98:58:38:6a:53:18:fe:5a:47:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81b5e1476b912be44a080902c88c414304d4f3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:e5:a6:00:be:cf:83:89:09:fb:ae:a7:87: ad:a2:61:df:8c:63:3e:3b:e8:7f:a8:8b:96:07:8e: cf:47:49:9a:c8:f9:58:03:5c:cd:ef:0e:eb:29:f7: 87:c7:59:63:09:81:75:f8:91:39:db:90:c3:be:a0: 3a:41:48:13:6a:1c:6c:06:ff:fd:c4:b4:83:6d:d7: 60:be:25:27:90:3e:36:01:eb:28:c0:c1:18:ee:fa: 2b:58:d4:89:b2:6d:8e:a9:2e:63:a5:20:de:1d:b6: 5c:cc:87:4f:dc:31:38:32:42:ce:7e:52:6a:3f:e6: f0:7b:12:ff:31:5e:5e:70:b2:91:82:c2:c5:f8:f3: 3b:ef:86:80:5a:4b:86:c6:c0:da:4b:c3:13:64:75: c5:5f:d8:ad:7a:f8:03:4f:4d:f8:bc:b0:bd:c9:62: d6:45:c7:e1:e2:be:c7:9b:40:36:c7:6e:5a:fd:ba: 2f:83:00:e1:7f:d8:69:78:3e:74:e9:f5:55:28:f9: c5:24:8d:51:17:b0:77:f9:7a:18:41:c9:2c:92:29: d4:44:35:3f:dd:2b:74:1f:a9:c9:1e:23:72:66:3c: 1c:68:af:60:40:21:ff:3a:f3:5a:58:33:2e:8e:1d: 1a:69:8e:b8:85:8c:3a:b1:29:37:7c:f9:88:11:74: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B5:E1:47:6B:91:2B:E4:4A:08:09:02:C8:8C:41:43:04:D4:F3:BC X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/gbXhR2uRK-RKCAkCyIxBQwTU87w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.254.232.0/21 185.204.16.0/22 185.220.28.0/22 193.16.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:e6:a8:a8:af:ee:c0:ab:09:a3:f3:ec:e8:85:9a:fa:67:ce: 7c:a7:7c:13:36:97:0c:bb:f1:7a:07:f3:da:f0:7b:a3:c3:ee: d2:2f:07:70:5b:7f:b8:15:83:da:48:61:d5:02:bb:59:42:42: 15:1c:0d:0b:84:b6:33:52:7b:7f:75:02:e7:9f:f8:63:52:c4: bb:c4:89:51:51:62:12:54:18:87:ac:93:75:f1:82:32:80:06: ca:9d:8f:b3:ea:48:a2:e1:1c:1d:fb:57:17:7b:2f:0a:46:fe: da:15:11:47:15:b8:9d:e8:01:36:c4:bb:ca:6c:1c:46:eb:72: 52:3b:d6:8b:21:91:9b:38:09:b0:35:1f:08:3d:fd:68:1d:b4: 36:5f:87:d8:97:27:61:0f:a7:65:3c:45:38:c3:de:ce:a9:29: 13:a3:3a:3a:78:54:c9:b1:c0:46:23:72:91:74:76:f0:1b:11: 67:fc:6f:5d:ea:a0:9d:c4:0d:5e:65:79:5f:ce:10:1d:22:9b: b3:8b:0c:22:15:ce:25:e7:d3:7f:7c:c3:2a:0b:95:3c:7d:b6: 94:88:8f:c0:aa:44:6a:c2:29:ce:fe:80:53:4a:73:6d:01:23: ca:0f:df:b1:0b:68:0d:4f:99:cb:45:f8:e5:24:8e:35:11:38: c6:83:2b:b3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4oqDkS5hYOGpTGP5aR3gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWI1ZTE0NzZiOTEyYmU0NGEwODA5MDJjODhjNDE0MzA0ZDRmM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg3lpgC+z4OJCfuup4etomHfjGM+ O+h/qIuWB47PR0mayPlYA1zN7w7rKfeHx1ljCYF1+JE525DDvqA6QUgTahxsBv/9 xLSDbddgviUnkD42AesowMEY7vorWNSJsm2OqS5jpSDeHbZczIdP3DE4MkLOflJq P+bwexL/MV5ecLKRgsLF+PM774aAWkuGxsDaS8MTZHXFX9itevgDT034vLC9yWLW Rcfh4r7Hm0A2x25a/bovgwDhf9hpeD506fVVKPnFJI1RF7B3+XoYQckskinURDU/ 3St0H6nJHiNyZjwcaK9gQCH/OvNaWDMujh0aaY64hYw6sSk3fPmIEXRDKwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIG14UdrkSvkSggJAsiMQUME1PO8MB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvZ2JYaFIydVJLLVJLQ0FrQ3lJeEJRd1RVODd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDUP7oAwQC ucwQAwQCudwcAwQCwRAMMA0GCSqGSIb3DQEBCwUAA4IBAQCM5qior+7Aqwmj8+zo hZr6Z858p3wTNpcMu/F6B/Pa8Hujw+7SLwdwW3+4FYPaSGHVArtZQkIVHA0LhLYz Unt/dQLnn/hjUsS7xIlRUWISVBiHrJN18YIygAbKnY+z6kii4Rwd+1cXey8KRv7a FRFHFbid6AE2xLvKbBxG63JSO9aLIZGbOAmwNR8IPf1oHbQ2X4fYlydhD6dlPEU4 w97OqSkTozo6eFTJscBGI3KRdHbwGxFn/G9d6qCdxA1eZXlfzhAdIpuziwwiFc4l 59N/fMMqC5U8fbaUiI/AqkRqwinO/oBTSnNtASPKD9+xC2gNT5nLRfjlJI41ETjG gyuz -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:25 2026 by rpki-client