This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa File: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (raw, json) Hash identifier: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k= Subject key identifier: 1A:F3:45:63:20:54:4D:95:4A:A9:FC:46:27:6F:40:43:CC:9B:50:E2 Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52 Certificate serial: 019B7C132F20F3A126AB7B5CF436453F55D7 Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201080 IP address blocks: 194.146.205.0/24 maxlen: 24 194.146.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2f:20:f3:a1:26:ab:7b:5c:f4:36:45:3f:55:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1af3456320544d954aa9fc46276f4043cc9b50e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:ae:db:bd:e0:77:67:53:a8:2c:0a:04:32: 9b:15:ed:88:11:19:95:55:0e:4b:d1:93:3c:ab:b4: cf:87:49:02:11:c8:3a:a4:6d:7e:ee:fc:e1:e5:0a: 1b:4b:a6:d3:ba:44:c2:6f:83:29:e5:e4:82:83:99: 72:f0:f1:07:26:5b:37:ac:d5:ce:52:c0:de:70:a0: fb:23:d4:40:1c:0b:0c:26:00:a7:ce:a3:6e:57:5f: 3f:29:34:b1:68:23:1b:64:3b:06:c4:89:f4:29:82: 29:98:79:b7:64:02:10:5f:d5:b9:b4:c6:3c:47:41: f7:b4:a1:ad:fc:9c:af:1e:b6:3a:90:a4:ed:50:53: 5f:74:3b:91:c6:1d:dc:1f:91:45:05:8e:81:93:63: 53:9c:5a:41:73:dc:a5:4c:57:b8:36:78:e2:67:53: d2:51:34:f6:56:ed:29:de:23:c3:aa:a2:27:77:ed: 8a:89:d9:21:f7:fe:b3:4f:df:b5:c5:05:a1:32:ed: 9d:4a:bf:56:76:fb:57:5b:5e:51:a7:91:de:3b:b6: 07:29:e4:21:11:a4:51:92:f8:ae:60:5d:c8:0e:84: f6:c9:c6:21:52:d2:4a:8d:36:07:13:78:ae:10:90: 81:11:dd:aa:5e:6e:98:81:b4:e7:4c:1f:cd:8e:a5: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F3:45:63:20:54:4D:95:4A:A9:FC:46:27:6F:40:43:CC:9B:50:E2 X509v3 Authority Key Identifier: keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.205.0-194.146.207.255 Signature Algorithm: sha256WithRSAEncryption 48:c2:75:27:bb:f5:5c:b2:b2:37:27:21:bf:18:8b:71:48:bf: f7:37:f8:eb:eb:42:87:47:14:ff:1e:f8:fb:0e:af:44:a6:b9: bb:b3:da:ae:98:49:1e:27:42:f7:95:e6:f3:70:28:fa:58:ca: 7d:9d:db:da:19:2d:f1:7b:02:ed:16:f4:02:ab:18:f2:ef:ce: 83:65:6d:cb:38:ae:5c:74:ef:ac:88:89:f4:8c:8c:b9:1e:c9: ef:b7:75:ea:60:12:67:80:74:f8:78:09:b5:77:01:81:54:e8: a8:dd:51:c6:7a:f3:2d:5d:3f:df:50:44:4c:a3:c3:db:2d:29: 90:4e:0f:33:cf:39:d9:ca:eb:ec:78:b9:4c:3f:59:20:dc:9f: ac:88:8a:18:a2:b9:12:23:f6:31:bb:5b:f1:f4:65:23:44:42: 9a:55:70:5b:90:48:5f:63:15:dd:53:05:fd:2a:e5:42:d1:ca: 1c:40:16:9b:de:9b:06:63:9b:06:dc:4e:00:01:e5:e4:66:ba: 8f:47:c7:89:66:46:79:d7:11:97:85:68:6b:d9:75:8c:42:ab: 2f:2d:4b:6f:83:30:2f:44:38:ea:b5:f9:69:4f:6f:69:fe:5c: 7f:2d:76:88:a7:50:2b:eb:15:d9:22:ff:a8:51:38:31:40:83: c0:0c:89:21 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8Ey8g86Emq3tc9DZFP1XXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmUyNTY1NjVlMWMyN2M0YjI2NTYwMTkwZTk5NzgyODZh ODJiNTIwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWYzNDU2MzIwNTQ0ZDk1NGFhOWZjNDYyNzZmNDA0M2NjOWI1MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosCu273gd2dTqCwKBDKbFe2IERmV VQ5L0ZM8q7TPh0kCEcg6pG1+7vzh5QobS6bTukTCb4Mp5eSCg5ly8PEHJls3rNXO UsDecKD7I9RAHAsMJgCnzqNuV18/KTSxaCMbZDsGxIn0KYIpmHm3ZAIQX9W5tMY8 R0H3tKGt/JyvHrY6kKTtUFNfdDuRxh3cH5FFBY6Bk2NTnFpBc9ylTFe4NnjiZ1PS UTT2Vu0p3iPDqqInd+2Kidkh9/6zT9+1xQWhMu2dSr9WdvtXW15Rp5HeO7YHKeQh EaRRkviuYF3IDoT2ycYhUtJKjTYHE3iuEJCBEd2qXm6YgbTnTB/NjqVTTwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBrzRWMgVE2VSqn8RidvQEPMm1DiMB8GA1UdIwQY MBaAFP++JWVl4cJ8SyZWAZDpl4KGqCtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUt YjFmYzIwODNjOTA2LzEvR3ZORll5QlVUWlZLcWZ4R0oyOUFROHliVU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUtYjFmYzIwODNjOTA2 LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCks0D BATCksAwDQYJKoZIhvcNAQELBQADggEBAEjCdSe79VyysjcnIb8Yi3FIv/c3+Ovr QodHFP8e+PsOr0Smubuz2q6YSR4nQveV5vNwKPpYyn2d29oZLfF7Au0W9AKrGPLv zoNlbcs4rlx076yIifSMjLkeye+3depgEmeAdPh4CbV3AYFU6KjdUcZ68y1dP99Q REyjw9stKZBODzPPOdnK6+x4uUw/WSDcn6yIihiiuRIj9jG7W/H0ZSNEQppVcFuQ SF9jFd1TBf0q5ULRyhxAFpvemwZjmwbcTgAB5eRmuo9Hx4lmRnnXEZeFaGvZdYxC qy8tS2+DMC9EOOq1+WlPb2n+XH8tdoinUCvrFdki/6hRODFAg8AMiSE= -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:45 2026 by rpki-client