This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/gvoNw609bD_6W2IwVPcUpI-Guaw.roa File: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (raw, json) Hash identifier: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480= Subject key identifier: 82:FA:0D:C3:AD:3D:6C:3F:FA:5B:62:30:54:F7:14:A4:8F:86:B9:AC Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Certificate serial: 019B76EAFAC39830324E80714E2AB63F54B6 Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/gvoNw609bD_6W2IwVPcUpI-Guaw.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203210 IP address blocks: 193.43.100.0/24 maxlen: 24 193.43.110.0/24 maxlen: 24 193.43.126.0/24 maxlen: 24 193.43.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fa:c3:98:30:32:4e:80:71:4e:2a:b6:3f:54:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82fa0dc3ad3d6c3ffa5b623054f714a48f86b9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:4c:21:55:f8:95:4a:1d:c8:3b:e1:1b:2a: c2:45:94:e3:ac:52:68:9e:39:e6:31:66:d7:3d:41: 2f:e9:72:f6:02:d4:e8:a6:8b:61:44:3c:1c:63:5d: 72:66:18:d7:67:89:8c:0b:d3:d8:12:ff:fb:fa:d9: 4e:65:3c:13:f1:a3:4d:0a:57:87:26:00:bd:3a:e9: 1f:8c:88:be:16:0d:93:87:7d:2f:47:b2:af:89:67: c9:24:ab:84:ab:c1:c3:1f:5d:75:b2:b3:61:df:79: 1e:7e:30:d8:12:2c:ac:cc:af:a3:8f:32:8e:b5:fc: 5a:9c:9f:e1:b8:d8:9b:0e:77:bc:38:50:bf:af:82: 2a:c8:75:61:30:df:fc:0c:be:4a:bd:6a:b6:1c:2c: be:57:27:c9:7b:55:f2:a4:81:28:70:23:a6:5e:a6: 18:3e:47:91:a7:c0:4a:49:44:c2:c2:d0:e7:34:f1: c3:79:f9:0b:d6:2b:57:6a:c7:b3:e1:47:07:24:db: 34:b5:e7:d7:ab:80:7a:2b:66:e5:3f:7f:51:50:dd: 44:e2:73:d2:f3:d1:89:93:b1:c4:13:4c:63:fd:58: 2c:76:22:5a:a8:ca:69:d0:35:f9:31:3b:f2:76:83: 4e:8f:07:8d:71:b3:e7:70:27:f9:ec:b5:e6:83:98: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:0D:C3:AD:3D:6C:3F:FA:5B:62:30:54:F7:14:A4:8F:86:B9:AC X509v3 Authority Key Identifier: keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/gvoNw609bD_6W2IwVPcUpI-Guaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.100.0/24 193.43.110.0/24 193.43.126.0/24 193.43.136.0/24 Signature Algorithm: sha256WithRSAEncryption 11:92:10:65:f3:ba:0e:85:7e:34:9d:61:b3:51:0d:f2:55:34: 68:43:03:d8:8f:bb:69:f4:33:17:84:85:e3:07:59:ae:41:3b: ed:7d:b0:62:7a:a2:9d:dc:6a:29:30:3d:e8:2c:d4:46:4a:8b: d4:ab:8b:20:a5:de:8b:80:c5:87:f5:61:9a:a6:ae:ca:38:42: df:b8:26:0e:d5:a3:a4:0b:c0:7c:4b:c8:fb:75:1b:63:a2:1c: 07:13:60:a4:51:d4:cc:bc:31:b1:a4:4e:ee:13:a3:3d:99:b0: 35:aa:10:53:8d:30:6a:7f:c9:a0:32:ec:36:49:17:e6:5c:d7: 6b:85:81:d4:95:f6:a6:53:bc:47:06:20:35:6c:d8:f8:b7:04: 17:2e:0c:e9:21:bf:4a:6b:cf:b1:0b:bc:d9:6d:e8:ef:57:bc: 0f:6e:ad:87:92:35:63:e6:cf:cb:e7:3e:b3:2e:41:44:7f:6c: 93:47:65:47:02:56:ed:e5:c1:b6:50:52:b1:66:21:ae:6c:bc: 06:0d:9e:12:bc:dc:8a:ad:0d:62:50:85:0b:75:51:99:74:e2: 52:6b:37:bc:5d:90:f5:b2:72:0f:ab:c1:46:82:2f:f1:ba:22: 77:a5:a2:a3:48:2b:e3:bf:08:e2:2d:12:94:74:16:44:d9:9f: 59:a4:06:3c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26vrDmDAyToBxTiq2P1S2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5 MTFmMzYwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmZhMGRjM2FkM2Q2YzNmZmE1YjYyMzA1NGY3MTRhNDhmODZiOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnZMIVX4lUodyDvhGyrCRZTjrFJo njnmMWbXPUEv6XL2AtTopothRDwcY11yZhjXZ4mMC9PYEv/7+tlOZTwT8aNNCleH JgC9OukfjIi+Fg2Th30vR7KviWfJJKuEq8HDH111srNh33kefjDYEiyszK+jjzKO tfxanJ/huNibDne8OFC/r4IqyHVhMN/8DL5KvWq2HCy+VyfJe1XypIEocCOmXqYY PkeRp8BKSUTCwtDnNPHDefkL1itXasez4UcHJNs0tefXq4B6K2blP39RUN1E4nPS 89GJk7HEE0xj/VgsdiJaqMpp0DX5MTvydoNOjweNcbPncCf57LXmg5hGQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIL6DcOtPWw/+ltiMFT3FKSPhrmsMB8GA1UdIwQY MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt OWZlZjAxMTRhMmU1LzEvZ3ZvTnc2MDliRF82VzJJd1ZQY1VwSS1HdWF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1 LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwStkAwQA wStuAwQAwSt+AwQAwSuIMA0GCSqGSIb3DQEBCwUAA4IBAQARkhBl87oOhX40nWGz UQ3yVTRoQwPYj7tp9DMXhIXjB1muQTvtfbBieqKd3GopMD3oLNRGSovUq4sgpd6L gMWH9WGapq7KOELfuCYO1aOkC8B8S8j7dRtjohwHE2CkUdTMvDGxpE7uE6M9mbA1 qhBTjTBqf8mgMuw2SRfmXNdrhYHUlfamU7xHBiA1bNj4twQXLgzpIb9Ka8+xC7zZ bejvV7wPbq2HkjVj5s/L5z6zLkFEf2yTR2VHAlbt5cG2UFKxZiGubLwGDZ4SvNyK rQ1iUIULdVGZdOJSaze8XZD1snIPq8FGgi/xuiJ3paKjSCvjvwjiLRKUdBZE2Z9Z pAY8 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:36 2026 by rpki-client