This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa File: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (raw, json) Hash identifier: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ= Subject key identifier: 1A:F0:9D:90:AF:D6:14:D9:E2:EA:3D:40:D7:07:06:58:5E:D4:56:44 Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Certificate serial: 019B7F15DA4E987CBE99A61D642CEC76514B Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 91.200.136.0/23 maxlen: 23 91.202.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:da:4e:98:7c:be:99:a6:1d:64:2c:ec:76:51:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1af09d90afd614d9e2ea3d40d70706585ed45644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:83:3a:99:08:ba:a8:ea:64:41:e7:0e:91: 3f:0f:7b:2b:17:7b:e1:fe:9c:87:fd:83:fd:17:2b: c2:e8:ca:eb:b4:21:8b:ff:8f:a1:8a:6f:37:2d:ad: f3:45:d9:43:16:50:1d:b7:aa:1f:a8:00:e1:3b:a5: 01:ef:7f:5a:14:bb:1e:96:ae:e6:5e:c8:5e:48:0b: 20:2b:f1:ad:9f:2c:9b:1d:f1:84:31:45:90:15:b2: 30:47:ef:1c:eb:02:e8:8f:68:b1:02:d2:a1:23:00: e5:31:11:f8:c3:e9:47:15:6b:5e:c5:74:0f:61:58: a9:f5:79:77:92:44:48:8b:04:3c:29:00:f8:6b:c7: c4:86:b6:ac:b8:fa:16:e3:0f:fe:7c:01:1b:f7:c5: cf:83:dc:55:6c:05:55:e7:11:fc:6c:4f:2c:fd:d0: 12:5d:b2:54:ac:12:44:7b:d8:db:92:85:e4:6a:1f: df:a5:2d:70:de:d5:5a:00:8e:c1:be:04:f9:55:e2: a9:1e:8a:96:29:87:56:c2:25:36:ac:df:c0:ea:c2: 14:64:aa:84:b2:d4:63:33:e5:ba:82:06:33:fe:22: ca:5e:79:eb:69:30:ca:44:98:60:01:35:85:fb:b5: ab:fc:7a:94:7f:f5:86:5d:f8:61:f2:68:21:55:73: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F0:9D:90:AF:D6:14:D9:E2:EA:3D:40:D7:07:06:58:5E:D4:56:44 X509v3 Authority Key Identifier: keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.136.0/23 91.202.56.0/22 Signature Algorithm: sha256WithRSAEncryption 90:23:79:52:be:84:ed:43:ac:63:0a:20:fc:45:a4:50:45:a5: e9:69:b7:58:b9:70:1c:f7:0e:f2:d1:16:40:c9:57:0f:ea:c5: 7c:20:93:95:0d:9a:f5:1c:4b:93:53:24:fd:78:3e:9d:60:cd: 8e:25:26:73:5b:a8:3d:21:cc:35:90:f7:eb:74:f1:67:1b:37: e0:c6:92:9f:05:3e:8c:fc:e3:7f:59:b0:80:bb:5b:a9:2c:e2: 68:d0:d9:7b:ef:6e:06:76:5e:d2:4c:2d:33:82:78:6e:fd:e7: f4:38:4e:2b:91:c8:5d:bc:19:67:cf:b0:5b:1e:63:27:31:86: bd:1e:2b:85:ca:fb:d6:02:09:4d:21:39:01:6f:d6:6f:a2:fe: 6a:f8:d5:3a:76:36:85:60:b6:e3:4b:78:16:a3:8a:6c:b1:33: 17:c0:cf:44:09:9d:11:1c:6d:c6:97:e4:0b:7a:d0:c4:2b:df: 83:8d:8c:5f:7a:5c:0a:bf:11:24:ee:0d:ca:d3:9f:90:6e:f3: 9f:7b:ed:3b:04:08:e0:5f:b5:45:6c:7a:eb:62:d6:0d:2c:c6: 27:f9:a8:5d:30:9b:ab:8a:ea:a8:bd:33:8f:bf:b6:63:d4:20: ba:d5:4b:cd:94:80:27:85:6f:88:ea:3f:03:2d:a9:8b:68:9c: 68:25:c7:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FdpOmHy+maYdZCzsdlFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx OTZhYTEwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWYwOWQ5MGFmZDYxNGQ5ZTJlYTNkNDBkNzA3MDY1ODVlZDQ1NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS+DOpkIuqjqZEHnDpE/D3srF3vh /pyH/YP9FyvC6MrrtCGL/4+him83La3zRdlDFlAdt6ofqADhO6UB739aFLselq7m XsheSAsgK/GtnyybHfGEMUWQFbIwR+8c6wLoj2ixAtKhIwDlMRH4w+lHFWtexXQP YVip9Xl3kkRIiwQ8KQD4a8fEhrasuPoW4w/+fAEb98XPg9xVbAVV5xH8bE8s/dAS XbJUrBJEe9jbkoXkah/fpS1w3tVaAI7BvgT5VeKpHoqWKYdWwiU2rN/A6sIUZKqE stRjM+W6ggYz/iLKXnnraTDKRJhgATWF+7Wr/HqUf/WGXfhh8mghVXMPaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBrwnZCv1hTZ4uo9QNcHBlhe1FZEMB8GA1UdIwQY MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt ZGQ4NjI3NzRhMDkyLzEvR3ZDZGtLX1dGTm5pNmoxQTF3Y0dXRjdVVmtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8iIAwQC W8o4MA0GCSqGSIb3DQEBCwUAA4IBAQCQI3lSvoTtQ6xjCiD8RaRQRaXpabdYuXAc 9w7y0RZAyVcP6sV8IJOVDZr1HEuTUyT9eD6dYM2OJSZzW6g9Icw1kPfrdPFnGzfg xpKfBT6M/ON/WbCAu1upLOJo0Nl7724Gdl7STC0zgnhu/ef0OE4rkchdvBlnz7Bb HmMnMYa9HiuFyvvWAglNITkBb9Zvov5q+NU6djaFYLbjS3gWo4pssTMXwM9ECZ0R HG3Gl+QLetDEK9+DjYxfelwKvxEk7g3K05+QbvOfe+07BAjgX7VFbHrrYtYNLMYn +ahdMJuriuqovTOPv7Zj1CC61UvNlIAnhW+I6j8DLamLaJxoJcf2 -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:38 2026 by rpki-client