This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/GgOfbd9F5KPJoYLhExG-OXyRwK4.roa File: GgOfbd9F5KPJoYLhExG-OXyRwK4.roa (raw, json) Hash identifier: Av0WKgdWyMP5jVBTfHweW1CBduaCDbaswF0VMggKgCk= Subject key identifier: 1A:03:9F:6D:DF:45:E4:A3:C9:A1:82:E1:13:11:BE:39:7C:91:C0:AE Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11 Certificate serial: 019B7A5ACB445E2C3413313CA2B0EF011FFC Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/GgOfbd9F5KPJoYLhExG-OXyRwK4.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 194.180.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cb:44:5e:2c:34:13:31:3c:a2:b0:ef:01:1f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a039f6ddf45e4a3c9a182e11311be397c91c0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:cc:da:d4:97:95:c7:33:7d:83:e8:e3:dd: 49:8c:44:ca:43:89:4c:cb:94:f3:1a:d8:7b:1e:10: b1:4e:77:6c:1e:d8:8e:b1:40:35:e3:ca:03:d1:dc: 99:6c:f8:67:ed:7f:d8:b6:0f:da:3f:33:a8:21:5d: 4c:01:46:46:b8:c5:48:90:f6:d0:57:a4:06:3a:f0: 12:43:aa:82:15:29:ff:c7:45:a0:a1:ac:9c:89:9c: 59:98:2d:ee:8b:fd:f3:0f:24:1e:f0:86:b1:a8:93: 47:c9:4f:22:17:c5:96:0c:e6:b7:6e:8b:76:8f:ed: a3:57:ec:69:87:7a:fd:20:bf:ce:a0:ec:3e:9e:51: e3:b9:0b:c1:1d:3a:13:54:03:33:06:cd:4c:0c:ac: fa:b2:ea:4d:79:81:fc:db:d6:89:07:63:a6:38:45: 16:f8:4c:0d:89:5d:66:60:3a:3d:84:ae:ff:7b:f6: 5d:51:d2:1d:92:ca:9e:28:d5:0e:17:48:58:79:7e: 4b:bc:18:12:2f:e1:57:b2:bd:0e:2a:af:a5:f5:52: dd:b2:24:f5:54:0b:02:39:c0:3e:2f:c7:19:d6:13: 1e:f3:e8:98:68:65:5a:d1:db:f3:a3:b1:2f:9b:be: 9f:62:14:27:a7:f3:cc:95:44:cf:79:04:cd:c6:20: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:9F:6D:DF:45:E4:A3:C9:A1:82:E1:13:11:BE:39:7C:91:C0:AE X509v3 Authority Key Identifier: keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/GgOfbd9F5KPJoYLhExG-OXyRwK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.131.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:44:41:e3:c4:05:ae:e1:52:54:c3:2b:64:86:34:d3:39:12: ae:e0:55:11:83:8d:92:8f:e9:15:95:9d:c0:9b:84:03:3d:bf: 42:2d:54:aa:f9:c9:3a:6f:78:93:5a:74:d6:ae:8d:bd:d7:7b: 46:69:c6:98:c5:52:44:6b:8b:92:18:7f:b7:af:b6:4d:ca:8e: 43:05:4c:73:0f:b2:1b:56:fe:b5:0e:04:74:fd:ae:b7:00:40: 0c:36:20:34:ee:e8:2b:83:06:01:95:22:94:ff:66:97:e5:42: 89:00:2b:5d:c1:d4:8d:db:05:1e:dd:d8:23:21:1e:51:48:76: 5f:84:3b:19:9a:e6:50:bb:c1:ce:7c:62:8c:02:82:ec:20:84: d5:66:af:fd:19:39:98:08:e7:49:cb:b1:9f:8c:db:bd:e6:1a: 25:7b:19:4a:93:56:a7:d5:0a:07:ac:0b:07:a6:85:be:3f:eb: 0d:fe:e9:67:14:9a:8f:2e:3e:f4:95:54:2a:97:bf:b4:5d:0c: 2a:fc:ad:d4:65:c9:a3:bb:b5:d4:47:1e:b2:47:50:71:70:01: c4:4e:23:5b:9a:94:94:76:77:46:00:fe:e0:08:a7:78:5a:61: 7c:1a:ec:d9:14:9d:dd:22:5f:47:b4:3f:b0:91:b3:0f:6a:b4: 7c:7a:47:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WstEXiw0EzE8orDvAR/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMWFhOTI4NTBlYmZlNjQ4YWQzZDg5YWRkOGU3MzZlYzM2 NzVhMTEwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTAzOWY2ZGRmNDVlNGEzYzlhMTgyZTExMzExYmUzOTdjOTFjMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KfM2tSXlcczfYPo491JjETKQ4lM y5TzGth7HhCxTndsHtiOsUA148oD0dyZbPhn7X/Ytg/aPzOoIV1MAUZGuMVIkPbQ V6QGOvASQ6qCFSn/x0WgoayciZxZmC3ui/3zDyQe8IaxqJNHyU8iF8WWDOa3bot2 j+2jV+xph3r9IL/OoOw+nlHjuQvBHToTVAMzBs1MDKz6supNeYH829aJB2OmOEUW +EwNiV1mYDo9hK7/e/ZdUdIdksqeKNUOF0hYeX5LvBgSL+FXsr0OKq+l9VLdsiT1 VAsCOcA+L8cZ1hMe8+iYaGVa0dvzo7Evm76fYhQnp/PMlUTPeQTNxiBhQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBoDn23fReSjyaGC4RMRvjl8kcCuMB8GA1UdIwQY MBaAFOEaqShQ6/5kitPYmt2Oc27DZ1oRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEt MGY4OGQxNmUxYWZlLzEvR2dPZmJkOUY1S1BKb1lMaEV4Ry1PWHlSd0s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEtMGY4OGQxNmUxYWZl LzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrSDMA0G CSqGSIb3DQEBCwUAA4IBAQAKREHjxAWu4VJUwytkhjTTORKu4FURg42Sj+kVlZ3A m4QDPb9CLVSq+ck6b3iTWnTWro2913tGacaYxVJEa4uSGH+3r7ZNyo5DBUxzD7Ib Vv61DgR0/a63AEAMNiA07ugrgwYBlSKU/2aX5UKJACtdwdSN2wUe3dgjIR5RSHZf hDsZmuZQu8HOfGKMAoLsIITVZq/9GTmYCOdJy7GfjNu95holexlKk1an1QoHrAsH poW+P+sN/ulnFJqPLj70lVQql7+0XQwq/K3UZcmju7XURx6yR1BxcAHETiNbmpSU dndGAP7gCKd4WmF8GuzZFJ3dIl9HtD+wkbMParR8ekf8 -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:38 2026 by rpki-client