This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/GvboGrQIvM4Aa9xVL2-TfC6TrQ8.roa File: GvboGrQIvM4Aa9xVL2-TfC6TrQ8.roa (raw, json) Hash identifier: +/48cJgrArlo6mfgDzfzRcH8s7/Ae3+DsHBX0W2Y8io= Subject key identifier: 1A:F6:E8:1A:B4:08:BC:CE:00:6B:DC:55:2F:6F:93:7C:2E:93:AD:0F Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A3269B87CD727CD1697628C6B3B76C Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/GvboGrQIvM4Aa9xVL2-TfC6TrQ8.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212100 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb01::/32 maxlen: 32 2a01:fb05:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:26:9b:87:cd:72:7c:d1:69:76:28:c6:b3:b7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1af6e81ab408bcce006bdc552f6f937c2e93ad0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:5c:87:46:fc:fe:22:63:3e:0d:00:df:3e: 0f:56:32:d8:fe:ef:83:21:be:cf:3a:c1:6e:a1:4e: 50:4e:ee:98:55:f8:92:8e:62:bc:39:7d:85:ea:e6: 47:bf:a9:79:70:91:ff:e7:df:73:4e:ff:9b:96:a6: e9:e7:4d:6c:13:20:b6:c6:99:66:d4:72:13:61:e6: 76:cd:ed:c1:e5:40:ec:8e:d5:6a:6b:7b:3f:08:4c: 0e:61:64:b1:fa:65:fb:06:82:b6:5c:e3:7d:d8:aa: f1:b6:51:1c:63:3a:8f:76:e7:19:89:ad:ff:f8:46: 59:ee:68:84:23:14:9e:6f:63:b3:fd:a4:97:b3:0d: cb:87:01:ca:0b:26:61:7f:f4:51:50:df:87:73:e9: b0:ff:60:3d:c6:03:69:a4:68:59:97:93:a9:61:59: 2f:2c:0e:06:02:1b:d2:dc:25:41:2c:64:a2:d6:ed: 2e:91:55:0e:0a:23:ac:d2:d8:9d:0b:ac:9b:cb:f2: 0d:99:3d:64:0c:e5:87:b2:ea:41:61:31:16:24:37: 4c:8e:39:21:42:be:e3:a8:60:ff:c1:63:9b:70:e6: 9c:d5:de:47:ee:31:1c:ed:d6:1b:30:4f:ec:99:a0: a6:a5:d9:fa:59:54:bc:b7:41:eb:48:b1:57:d3:17: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F6:E8:1A:B4:08:BC:CE:00:6B:DC:55:2F:6F:93:7C:2E:93:AD:0F X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/GvboGrQIvM4Aa9xVL2-TfC6TrQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb01::/32 2a01:fb05:a000::/36 Signature Algorithm: sha256WithRSAEncryption 0d:b1:d8:68:fa:b3:b0:09:e5:bf:4a:1a:27:ce:07:c9:4a:9b: 99:08:fa:81:87:e0:9f:ff:28:41:37:55:09:ff:33:16:b9:5a: 91:7a:a9:8d:60:a2:fc:0f:6d:05:1b:61:80:76:a5:d3:a9:60: 08:41:79:57:65:92:cc:59:63:7d:f5:d7:88:16:05:42:08:f7: 0d:53:99:c4:d3:c6:a7:0d:a0:80:00:d2:42:15:45:13:36:19: e3:8d:7f:fa:c7:26:fd:9e:f2:e1:01:af:7b:95:a3:f6:fd:ab: 22:a8:69:86:43:f9:91:8f:d4:be:ae:16:d9:5f:5f:e3:8e:08: b7:e7:5c:16:6a:d7:cd:5f:01:6a:b2:df:f5:b8:07:f8:db:04: 8f:58:7d:5f:77:a5:8f:fe:2a:40:cc:c9:d5:10:e1:35:0d:cb: e3:d3:9a:77:5b:0e:e3:1f:28:57:39:81:df:43:f8:92:ff:2b: d4:2c:53:1c:97:9c:7c:c5:f4:66:88:e1:98:44:f1:5f:29:78: c7:e2:af:15:2c:2c:8e:ef:42:d2:e5:32:79:29:e6:af:7f:0e: 7f:c5:3f:42:3d:06:ea:cc:c2:85:c2:1f:10:48:75:86:3d:1a: 79:c2:ff:05:bd:4b:5c:e7:e2:d6:d9:da:3b:b7:f3:20:ef:0a: ae:12:27:2f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4oyabh81yfNFpdijGs7dsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWY2ZTgxYWI0MDhiY2NlMDA2YmRjNTUyZjZmOTM3YzJlOTNhZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Rch0b8/iJjPg0A3z4PVjLY/u+D Ib7POsFuoU5QTu6YVfiSjmK8OX2F6uZHv6l5cJH/599zTv+blqbp501sEyC2xplm 1HITYeZ2ze3B5UDsjtVqa3s/CEwOYWSx+mX7BoK2XON92KrxtlEcYzqPducZia3/ +EZZ7miEIxSeb2Oz/aSXsw3LhwHKCyZhf/RRUN+Hc+mw/2A9xgNppGhZl5OpYVkv LA4GAhvS3CVBLGSi1u0ukVUOCiOs0tidC6yby/INmT1kDOWHsupBYTEWJDdMjjkh Qr7jqGD/wWObcOac1d5H7jEc7dYbME/smaCmpdn6WVS8t0HrSLFX0xcv+QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBr26Bq0CLzOAGvcVS9vk3wuk60PMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvR3Zib0dyUUl2TTRBYTl4VkwyLVRmQzZUclE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAbc3BMBUE AgACMA8DBQAqAfsBAwYEKgH7BaAwDQYJKoZIhvcNAQELBQADggEBAA2x2Gj6s7AJ 5b9KGifOB8lKm5kI+oGH4J//KEE3VQn/Mxa5WpF6qY1govwPbQUbYYB2pdOpYAhB eVdlksxZY33114gWBUII9w1TmcTTxqcNoIAA0kIVRRM2GeONf/rHJv2e8uEBr3uV o/b9qyKoaYZD+ZGP1L6uFtlfX+OOCLfnXBZq181fAWqy3/W4B/jbBI9YfV93pY/+ KkDMydUQ4TUNy+PTmndbDuMfKFc5gd9D+JL/K9QsUxyXnHzF9GaI4ZhE8V8peMfi rxUsLI7vQtLlMnkp5q9/Dn/FP0I9BurMwoXCHxBIdYY9GnnC/wW9S1zn4tbZ2ju3 8yDvCq4SJy8= -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client