This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GTbGCpeDw47GEHxkEXqCqnilS_o.roa File: GTbGCpeDw47GEHxkEXqCqnilS_o.roa (raw, json) Hash identifier: KR2cSKv5XGSya4dYKpQN9Y78EAxCEYfobmAjn6APDf8= Subject key identifier: 19:36:C6:0A:97:83:C3:8E:C6:10:7C:64:11:7A:82:AA:78:A5:4B:FA Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019BB6E05BD1C37D329CCA74577AB1024A00 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GTbGCpeDw47GEHxkEXqCqnilS_o.roa Signing time: Tue 13 Jan 2026 10:21:55 +0000 ROA not before: Tue 13 Jan 2026 10:21:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 185.225.1.0/24 maxlen: 24 194.5.64.0/24 maxlen: 24 194.124.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:e0:5b:d1:c3:7d:32:9c:ca:74:57:7a:b1:02:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 13 10:21:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1936c60a9783c38ec6107c64117a82aa78a54bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a7:29:52:3b:e3:a7:59:b1:b3:04:d3:7c:5f: 4c:f2:de:d8:87:ed:42:2e:c4:45:cf:57:a2:68:fa: 4a:89:a9:21:a3:46:14:bc:92:db:99:ed:dd:ff:ce: e5:d3:82:39:cd:d0:34:d7:8e:ab:07:71:ac:c9:1c: 79:82:97:88:bf:d3:3f:63:55:7e:db:23:8b:1d:5f: 64:62:6e:85:6a:fc:f9:6d:f8:2f:a4:8d:c9:1c:48: 19:cd:31:a2:33:23:b1:6e:48:fe:55:7b:30:cc:3e: 37:de:96:18:58:a0:b9:7e:4f:8d:0b:72:51:62:74: 9e:c5:0b:66:25:a0:dc:f7:43:37:62:7c:6a:92:dd: 1a:4b:5f:86:f2:70:c1:a5:60:15:81:4f:f0:20:a7: e6:07:e8:57:2f:20:b6:be:1b:12:a9:60:fe:7d:a2: 7c:c7:9e:30:d7:4d:3e:c5:33:af:6d:36:7c:ab:b8: 74:ac:cc:55:65:6e:9f:ab:23:f8:b3:44:d3:4d:62: 58:a7:c6:08:32:26:d4:1f:3d:9f:7e:8f:2e:13:1a: a1:a4:db:9f:49:54:47:fa:04:7f:a4:ec:65:21:31: 86:92:26:d8:c4:fc:bf:21:9b:8b:8d:93:cf:a6:1d: 53:a0:3d:85:77:fd:74:c7:ba:12:15:f2:9a:4a:31: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:36:C6:0A:97:83:C3:8E:C6:10:7C:64:11:7A:82:AA:78:A5:4B:FA X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GTbGCpeDw47GEHxkEXqCqnilS_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.1.0/24 194.5.64.0/24 194.124.69.0/24 Signature Algorithm: sha256WithRSAEncryption 76:c1:a4:23:f2:dc:1e:3d:05:1a:ee:66:17:03:2a:25:e5:ef: 3f:59:98:61:3b:b4:a2:84:e0:3c:95:1a:28:76:e7:b5:53:dc: 3d:57:0b:b5:30:ee:5b:a6:dc:bc:23:4f:0b:3b:33:55:1f:fb: 36:aa:c4:90:2c:b5:97:eb:9e:cf:6c:be:89:aa:a6:22:4c:f0: fb:a1:4e:0d:9b:b4:f8:f0:d9:27:91:ce:51:50:bd:8b:33:31: 21:5c:40:e6:bd:6b:a5:1f:60:ee:64:c2:25:47:f0:43:92:b5: f6:0f:f2:22:af:82:40:de:60:cb:e9:a0:97:56:88:aa:29:e6: 99:b2:15:d9:a8:58:fa:5e:64:ab:02:a9:fc:88:bc:16:7f:c1: 0b:44:ed:0f:53:a3:51:29:f2:99:fd:27:b5:b6:ff:eb:bd:41: 89:3d:c0:71:bc:00:b4:d0:8c:6e:2d:2f:0e:f9:50:fe:75:51: 45:ee:6c:f2:a8:37:3a:50:18:9f:5c:26:34:6e:95:77:04:e5: 32:1b:24:18:aa:40:c6:74:0e:28:52:79:cc:e9:2b:ff:98:89: ff:64:62:1f:c6:70:8f:05:14:de:f9:2b:bd:42:7a:77:b7:14: 31:b1:3a:fc:6a:85:b4:ff:a5:ec:09:a4:25:d4:db:ad:57:04: c3:3b:c6:68 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu24FvRw30ynMp0V3qxAkoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTEzMTAyMTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTM2YzYwYTk3ODNjMzhlYzYxMDdjNjQxMTdhODJhYTc4YTU0YmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86cpUjvjp1mxswTTfF9M8t7Yh+1C LsRFz1eiaPpKiakho0YUvJLbme3d/87l04I5zdA0146rB3GsyRx5gpeIv9M/Y1V+ 2yOLHV9kYm6Favz5bfgvpI3JHEgZzTGiMyOxbkj+VXswzD433pYYWKC5fk+NC3JR YnSexQtmJaDc90M3Ynxqkt0aS1+G8nDBpWAVgU/wIKfmB+hXLyC2vhsSqWD+faJ8 x54w100+xTOvbTZ8q7h0rMxVZW6fqyP4s0TTTWJYp8YIMibUHz2ffo8uExqhpNuf SVRH+gR/pOxlITGGkibYxPy/IZuLjZPPph1ToD2Fd/10x7oSFfKaSjFkOwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBk2xgqXg8OOxhB8ZBF6gqp4pUv6MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvR1RiR0NwZUR3NDdHRUh4a0VYcUNxbmlsU19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAueEBAwQA wgVAAwQAwnxFMA0GCSqGSIb3DQEBCwUAA4IBAQB2waQj8twePQUa7mYXAyol5e8/ WZhhO7SihOA8lRoodue1U9w9Vwu1MO5bpty8I08LOzNVH/s2qsSQLLWX657PbL6J qqYiTPD7oU4Nm7T48Nknkc5RUL2LMzEhXEDmvWulH2DuZMIlR/BDkrX2D/Iir4JA 3mDL6aCXVoiqKeaZshXZqFj6XmSrAqn8iLwWf8ELRO0PU6NRKfKZ/Se1tv/rvUGJ PcBxvAC00IxuLS8O+VD+dVFF7mzyqDc6UBifXCY0bpV3BOUyGyQYqkDGdA4oUnnM 6Sv/mIn/ZGIfxnCPBRTe+Su9Qnp3txQxsTr8aoW0/6XsCaQl1NutVwTDO8Zo -----END CERTIFICATE-----Generated at Tue Jan 13 14:37:32 2026 by rpki-client