This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/GSvze0OvgyB86_aIjXE_zYpEcJ8.roa File: GSvze0OvgyB86_aIjXE_zYpEcJ8.roa (raw, json) Hash identifier: i0T9AmgsVXvoJ7juXc0u6ILs8JxVxErhczJ27Ywnx4c= Subject key identifier: 19:2B:F3:7B:43:AF:83:20:7C:EB:F6:88:8D:71:3F:CD:8A:44:70:9F Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B7B3592D9621BB0FB3F4468F3372A6C8D Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/GSvze0OvgyB86_aIjXE_zYpEcJ8.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42719 IP address blocks: 31.128.253.0/24 maxlen: 24 31.128.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:92:d9:62:1b:b0:fb:3f:44:68:f3:37:2a:6c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=192bf37b43af83207cebf6888d713fcd8a44709f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:84:72:f6:bb:b3:59:13:0a:84:2e:bf:d4:64: db:6d:c8:8c:5c:f6:29:1a:2b:0a:24:7c:e8:85:7b: c3:01:57:b9:7c:52:83:05:cb:6e:f0:75:3f:4e:fa: c6:b6:e3:2e:14:41:d0:cd:73:fc:57:5b:02:ac:cd: 1d:83:d7:cf:cb:fd:cd:b7:aa:61:4c:d7:1a:c0:1d: b6:3c:95:3d:74:23:d4:70:b9:d8:7d:16:47:cf:c0: 15:b5:e1:a4:1b:54:df:8e:79:36:ea:22:88:eb:48: 57:fd:7a:a9:8f:c3:3d:2f:28:63:88:53:9d:d3:61: de:d3:68:2a:36:58:04:b3:91:bd:59:2e:73:da:2f: 77:7e:29:e8:1a:95:5d:46:6c:4b:d3:55:dd:eb:1b: 5c:76:68:2e:30:ae:ef:5c:4f:c8:84:6e:df:c4:de: 27:5a:b3:c3:94:8c:6b:7e:0f:01:1e:02:e7:45:83: 45:42:39:64:c9:78:95:98:4f:9c:24:aa:ca:3e:61: a7:40:55:ba:44:57:d2:40:c3:bb:ee:81:1f:46:de: b2:7f:41:0a:74:40:97:80:df:4d:bc:63:e0:a6:38: 67:36:00:0f:0a:fa:e3:e9:85:8d:82:74:d1:b8:a0: 76:2e:90:1d:af:83:87:03:b3:ee:1e:66:5e:fe:6d: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2B:F3:7B:43:AF:83:20:7C:EB:F6:88:8D:71:3F:CD:8A:44:70:9F X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/GSvze0OvgyB86_aIjXE_zYpEcJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.253.0-31.128.254.255 Signature Algorithm: sha256WithRSAEncryption 09:95:23:47:f4:53:a6:b5:fe:85:65:89:6b:14:a5:0a:2b:84: e7:80:9c:56:0f:c4:ac:51:11:78:3c:29:ab:33:6c:a5:37:39: 04:45:23:36:5f:9b:1d:e1:c0:ab:2e:b2:72:66:25:4f:c7:bb: e9:94:0c:af:46:92:82:be:43:e3:6a:41:5d:03:32:f0:65:97: 32:0e:d7:a0:7a:b3:91:e0:6c:0a:8e:0b:4d:26:f9:46:7a:8d: 82:c0:d8:23:d0:dc:ba:d7:d4:b9:87:04:c6:80:cc:f9:e6:c5: 80:51:4a:e4:68:fa:b4:eb:c7:ce:22:ef:85:b8:af:3b:d0:1f: ad:d9:4d:06:34:a7:4a:58:9b:bc:2e:1b:7e:ff:f9:0b:ab:3b: b2:a9:6f:bb:e1:7a:62:be:21:8b:5b:62:70:c2:b7:e4:0e:54: 1d:5c:d5:d5:2a:15:07:e6:d2:54:ae:48:fc:0e:a0:3e:c6:b0: 82:38:ec:07:21:0d:31:bf:9d:f4:ac:f2:ed:e5:a1:03:dd:69: 0f:1d:31:20:69:2e:23:f3:8a:cc:70:eb:2b:b8:2d:b5:98:94: 75:4d:7d:b6:21:24:62:98:a6:8c:cb:46:9d:d9:0b:95:d6:1d: 64:cf:6f:08:3e:57:86:c2:39:62:e9:a8:13:88:39:d0:9a:3c: 3f:6d:f5:2e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NZLZYhuw+z9EaPM3KmyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTJiZjM3YjQzYWY4MzIwN2NlYmY2ODg4ZDcxM2ZjZDhhNDQ3MDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYRy9ruzWRMKhC6/1GTbbciMXPYp GisKJHzohXvDAVe5fFKDBctu8HU/TvrGtuMuFEHQzXP8V1sCrM0dg9fPy/3Nt6ph TNcawB22PJU9dCPUcLnYfRZHz8AVteGkG1Tfjnk26iKI60hX/Xqpj8M9LyhjiFOd 02He02gqNlgEs5G9WS5z2i93finoGpVdRmxL01Xd6xtcdmguMK7vXE/IhG7fxN4n WrPDlIxrfg8BHgLnRYNFQjlkyXiVmE+cJKrKPmGnQFW6RFfSQMO77oEfRt6yf0EK dECXgN9NvGPgpjhnNgAPCvrj6YWNgnTRuKB2LpAdr4OHA7PuHmZe/m0c0wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBkr83tDr4MgfOv2iI1xP82KRHCfMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEvR1N2emUwT3ZneUI4Nl9hSWpYRV96WXBFY0o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAfgP0D BAAfgP4wDQYJKoZIhvcNAQELBQADggEBAAmVI0f0U6a1/oVliWsUpQorhOeAnFYP xKxREXg8KaszbKU3OQRFIzZfmx3hwKsusnJmJU/Hu+mUDK9GkoK+Q+NqQV0DMvBl lzIO16B6s5HgbAqOC00m+UZ6jYLA2CPQ3LrX1LmHBMaAzPnmxYBRSuRo+rTrx84i 74W4rzvQH63ZTQY0p0pYm7wuG37/+QurO7Kpb7vhemK+IYtbYnDCt+QOVB1c1dUq FQfm0lSuSPwOoD7GsII47AchDTG/nfSs8u3loQPdaQ8dMSBpLiPzisxw6yu4LbWY lHVNfbYhJGKYpozLRp3ZC5XWHWTPbwg+V4bCOWLpqBOIOdCaPD9t9S4= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:37 2026 by rpki-client