This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/gAYzl20xItIY_WqWVJ6f2CElDXs.roa File: gAYzl20xItIY_WqWVJ6f2CElDXs.roa (raw, json) Hash identifier: 1hpv0IAqRBDo5f2z8yJyt+CBplx7y1IUryRuOQtPjKE= Subject key identifier: 80:06:33:97:6D:31:22:D2:18:FD:6A:96:54:9E:9F:D8:21:25:0D:7B Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Certificate serial: 019B7C80B1FDA4A5A7AC38A3554598BE67B7 Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/gAYzl20xItIY_WqWVJ6f2CElDXs.roa Signing time: Fri 02 Jan 2026 02:19:27 +0000 ROA not before: Fri 02 Jan 2026 02:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196858 IP address blocks: 213.5.200.0/21 maxlen: 21 2001:67c:188c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b1:fd:a4:a5:a7:ac:38:a3:55:45:98:be:67:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=800633976d3122d218fd6a96549e9fd821250d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6f:94:9d:1d:fe:0e:3c:6e:fb:99:f3:e7:6b: 5f:81:21:6d:5d:4c:70:10:2d:77:f6:70:8e:c5:93: 4b:24:b5:b7:80:0a:2b:f4:ce:f1:f7:ee:1c:20:fa: c1:b6:08:ed:4a:7b:94:2d:45:1b:90:d0:c2:37:db: e3:4d:28:b5:22:60:2b:8d:6d:f0:a8:a2:15:f7:78: 6a:62:c9:b5:90:0d:87:da:dd:fd:6c:c3:39:68:85: 9e:3d:b2:1d:e3:98:76:8c:0a:fa:db:07:b8:3c:2e: 84:64:4b:cc:4a:c3:f1:52:91:4e:5f:86:40:1f:91: d8:85:ad:55:e0:d2:13:93:df:f3:6b:dc:e8:c5:97: f4:89:a6:d6:c7:36:14:78:06:86:e9:8a:72:19:c2: 7e:b0:7d:0c:35:9f:93:2a:90:f0:5f:0d:c7:1b:95: 96:ae:f4:04:42:1c:a9:ea:95:47:58:c9:96:60:ad: 5d:21:41:98:24:b3:0d:1f:70:5a:21:62:85:68:61: 71:a8:b0:9e:18:ca:10:5d:46:19:68:97:37:4d:a9: 37:f8:da:e7:a2:66:5b:37:3b:59:e1:d3:80:4f:40: 0a:44:70:70:2b:2d:ab:a4:44:0e:dc:b0:fa:20:64: d6:39:56:71:4b:6c:4c:61:14:94:62:55:a9:17:00: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:06:33:97:6D:31:22:D2:18:FD:6A:96:54:9E:9F:D8:21:25:0D:7B X509v3 Authority Key Identifier: keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/gAYzl20xItIY_WqWVJ6f2CElDXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.5.200.0/21 IPv6: 2001:67c:188c::/48 Signature Algorithm: sha256WithRSAEncryption 6d:d5:9e:67:b9:59:5e:17:6b:df:60:b7:9c:f5:2a:e3:19:0e: b9:fb:cf:e6:0c:6c:fd:95:87:3c:67:0d:27:96:2a:67:09:64: d7:b7:b7:a3:01:30:6d:d0:21:dd:a7:82:3d:d8:3f:31:c1:38: 0d:52:39:0d:8c:fd:2e:96:d5:ab:8e:d4:37:55:e8:e6:77:5e: 07:3e:d2:2b:b7:b5:7d:18:41:00:e8:c9:fe:2f:56:71:4b:f8: 22:62:19:b3:6d:f2:c9:21:fb:76:dc:88:67:f8:80:df:f1:80: 25:c5:83:18:e0:a8:d1:33:67:01:1c:69:19:52:5a:cd:6b:9d: af:d6:8c:d2:d0:9d:72:47:be:52:b9:5a:8b:dc:66:41:4f:57: 3f:b4:0c:13:7b:62:56:cb:e5:f9:f6:24:be:9f:a2:96:98:20: 5b:78:65:45:b2:e8:29:ec:4f:33:cd:45:d7:b2:f4:aa:26:6e: e8:2f:06:ec:09:94:d1:d0:d9:0c:89:80:a1:66:7c:54:9d:70: 80:df:c4:ae:4b:1d:09:33:37:86:72:af:8c:c8:df:69:e9:a6: e6:ca:95:9d:0a:f5:14:98:b1:12:92:f7:98:90:d4:7e:90:75: c6:c8:94:86:11:0f:dd:de:48:3c:b7:a5:98:e7:00:af:0c:3f: 73:2b:6c:eb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gLH9pKWnrDijVUWYvme3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNjFkMTE4NDc5YjUyMjJlZjBmODY0MTY3Y2FjNWI0YzA3 Y2MyMTkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDA2MzM5NzZkMzEyMmQyMThmZDZhOTY1NDllOWZkODIxMjUwZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9W+UnR3+Djxu+5nz52tfgSFtXUxw EC139nCOxZNLJLW3gAor9M7x9+4cIPrBtgjtSnuULUUbkNDCN9vjTSi1ImArjW3w qKIV93hqYsm1kA2H2t39bMM5aIWePbId45h2jAr62we4PC6EZEvMSsPxUpFOX4ZA H5HYha1V4NITk9/za9zoxZf0iabWxzYUeAaG6YpyGcJ+sH0MNZ+TKpDwXw3HG5WW rvQEQhyp6pVHWMmWYK1dIUGYJLMNH3BaIWKFaGFxqLCeGMoQXUYZaJc3Tak3+Nrn omZbNztZ4dOAT0AKRHBwKy2rpEQO3LD6IGTWOVZxS2xMYRSUYlWpFwA+kQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIAGM5dtMSLSGP1qllSen9ghJQ17MB8GA1UdIwQY MBaAFExh0RhHm1Ii7w+GQWfKxbTAfMIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUt ZTVhYTc0NzAwZjlkLzEvZ0FZemwyMHhJdElZX1dxV1ZKNmYyQ0VsRFhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82ZTlkZmQtY2U0Ny00ZTYxLWEzMTUtZTVhYTc0NzAwZjlk LzEvVEdIUkdFZWJVaUx2RDRaQlo4ckZ0TUI4d2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQD1QXIMA8E AgACMAkDBwAgAQZ8GIwwDQYJKoZIhvcNAQELBQADggEBAG3Vnme5WV4Xa99gt5z1 KuMZDrn7z+YMbP2VhzxnDSeWKmcJZNe3t6MBMG3QId2ngj3YPzHBOA1SOQ2M/S6W 1auO1DdV6OZ3Xgc+0iu3tX0YQQDoyf4vVnFL+CJiGbNt8skh+3bciGf4gN/xgCXF gxjgqNEzZwEcaRlSWs1rna/WjNLQnXJHvlK5WovcZkFPVz+0DBN7YlbL5fn2JL6f opaYIFt4ZUWy6CnsTzPNRdey9KombugvBuwJlNHQ2QyJgKFmfFSdcIDfxK5LHQkz N4Zyr4zI32nppubKlZ0K9RSYsRKS95iQ1H6QdcbIlIYRD93eSDy3pZjnAK8MP3Mr bOs= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:16 2026 by rpki-client