This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Gb_8n0tx2haBNpIw8xPS9SXit48.roa File: Gb_8n0tx2haBNpIw8xPS9SXit48.roa (raw, json) Hash identifier: 1FP2YFp7dpwDGBipsBLXGrM6+K2sydkh72C6yUVUzA8= Subject key identifier: 19:BF:FC:9F:4B:71:DA:16:81:36:92:30:F3:13:D2:F5:25:E2:B7:8F Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C8088C5AC530026B3180C4F9BE0EA7C Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Gb_8n0tx2haBNpIw8xPS9SXit48.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209641 IP address blocks: 46.243.7.0/24 maxlen: 24 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 92.62.119.0/24 maxlen: 24 94.232.248.0/24 maxlen: 24 95.81.76.0/24 maxlen: 24 95.81.114.0/24 maxlen: 24 95.81.115.0/24 maxlen: 24 95.81.123.0/24 maxlen: 24 95.81.124.0/24 maxlen: 24 95.81.125.0/24 maxlen: 24 109.69.60.0/24 maxlen: 24 185.87.48.0/22 maxlen: 22 185.87.48.0/24 maxlen: 24 185.87.49.0/24 maxlen: 24 185.87.50.0/24 maxlen: 24 185.87.51.0/24 maxlen: 24 185.117.152.0/22 maxlen: 22 2a06:ddc0::/29 maxlen: 29 2a0b:8040::/29 maxlen: 29 2a0b:d900::/29 maxlen: 29 2a0c:5d00:2001::/48 maxlen: 48 2a0c:6980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:88:c5:ac:53:00:26:b3:18:0c:4f:9b:e0:ea:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19bffc9f4b71da1681369230f313d2f525e2b78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:da:c1:09:cb:0d:de:a0:51:69:eb:b8:c3: da:97:70:d8:35:08:dc:0a:a4:27:ca:51:b9:cc:ef: 54:bc:3f:fe:e5:f3:23:2b:d8:00:c7:5c:a0:f6:7a: 87:f4:c9:90:88:7a:6e:0e:50:6b:6d:7f:1c:93:9e: 8a:99:52:5c:b0:6e:03:40:b2:93:dc:47:7c:21:61: 9a:d5:38:a0:1d:fb:ce:c0:25:4c:e0:b8:c7:27:49: 12:a4:ed:59:88:6f:d5:73:1b:a8:0c:45:42:05:af: ba:1d:c0:ab:7f:0d:7d:9f:be:64:bb:0a:6a:44:e6: 7c:44:af:fc:71:b9:52:26:14:5d:8e:c5:1f:8a:31: 73:b2:14:03:f0:c1:94:da:fd:b0:fb:de:ee:0e:cf: ca:c8:c1:65:f0:0a:02:c8:b0:cd:7b:c7:57:23:b9: f9:95:5d:a6:aa:0f:73:a8:86:8e:e4:5f:15:7c:40: 3f:a0:85:87:50:c8:88:ec:77:a3:1e:6a:6b:19:b3: ad:88:6d:c1:bc:5e:ad:0e:7c:4e:e8:6d:83:b1:56: 51:ee:21:03:7d:29:2c:c8:c3:1a:47:19:7f:e7:18: 54:1a:8c:8a:79:b5:7f:2a:ec:0c:ff:33:fe:b9:30: 40:c7:d9:77:6c:f2:2e:01:8c:d5:66:46:13:bc:42: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BF:FC:9F:4B:71:DA:16:81:36:92:30:F3:13:D2:F5:25:E2:B7:8F X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Gb_8n0tx2haBNpIw8xPS9SXit48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.7.0/24 91.200.14.0/23 92.62.119.0/24 94.232.248.0/24 95.81.76.0/24 95.81.114.0/23 95.81.123.0-95.81.125.255 109.69.60.0/24 185.87.48.0/22 185.117.152.0/22 IPv6: 2a06:ddc0::/29 2a0b:8040::/29 2a0b:d900::/29 2a0c:5d00:2001::/48 2a0c:6980::/29 Signature Algorithm: sha256WithRSAEncryption b5:fe:40:09:26:ed:c7:25:f0:1e:3b:74:71:c4:bd:66:34:f9: 14:23:12:50:32:30:38:0f:f4:e7:8a:33:93:35:05:92:bc:98: 80:ca:08:19:25:32:1e:41:a9:e6:22:5e:93:04:15:6e:30:2c: a1:bc:d3:89:87:13:23:16:cb:bc:32:03:90:57:47:79:b6:d2: d1:51:d9:16:41:92:be:d2:46:41:5d:ef:33:d5:ba:44:f8:73: 6c:96:85:81:74:97:84:30:0f:03:09:85:d0:38:23:46:86:5e: a6:72:2e:a7:18:e4:05:77:cc:27:4f:52:f1:2a:79:98:4d:fc: 29:c6:26:a6:61:9a:a9:57:47:cd:4b:75:5c:d7:1c:02:c3:20: 6f:d2:51:e5:4a:6e:a7:d5:75:08:e8:33:d6:97:83:59:aa:61: 4e:f5:58:22:94:e2:80:7f:e0:5f:68:df:24:6f:cf:7a:18:45: 22:f7:38:77:84:5f:df:a8:01:c9:8a:c5:d2:60:b1:0f:be:a7: 2d:4d:bd:05:03:54:c5:47:17:7b:e5:79:ca:f3:63:07:10:71: 36:e7:64:57:df:c4:49:43:2b:65:ec:8d:0d:4c:b3:79:58:3d: 8b:b0:9a:59:a5:33:11:4f:4d:23:c8:cf:95:77:e9:f8:25:cc: 0a:3d:27:fc -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISAZt8gIjFrFMAJrMYDE+b4Op8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWJmZmM5ZjRiNzFkYTE2ODEzNjkyMzBmMzEzZDJmNTI1ZTJiNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhrawQnLDd6gUWnruMPal3DYNQjc CqQnylG5zO9UvD/+5fMjK9gAx1yg9nqH9MmQiHpuDlBrbX8ck56KmVJcsG4DQLKT 3Ed8IWGa1TigHfvOwCVM4LjHJ0kSpO1ZiG/VcxuoDEVCBa+6HcCrfw19n75kuwpq ROZ8RK/8cblSJhRdjsUfijFzshQD8MGU2v2w+97uDs/KyMFl8AoCyLDNe8dXI7n5 lV2mqg9zqIaO5F8VfEA/oIWHUMiI7HejHmprGbOtiG3BvF6tDnxO6G2DsVZR7iED fSksyMMaRxl/5xhUGoyKebV/KuwM/zP+uTBAx9l3bPIuAYzVZkYTvELUewIDAQAB o4ICdTCCAnEwHQYDVR0OBBYEFBm//J9LcdoWgTaSMPMT0vUl4rePMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvR2JfOG4wdHgyaGFCTnBJdzh4UFM5U1hpdDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGKBggrBgEFBQcBBwEB/wR7MHkwSgQCAAEwRAMEAC7zBwME AVvIDgMEAFw+dwMEAF7o+AMEAF9RTAMEAV9RcjAMAwQAX1F7AwQBX1F8AwQAbUU8 AwQCuVcwAwQCuXWYMCsEAgACMCUDBQMqBt3AAwUDKguAQAMFAyoL2QADBwAqDF0A IAEDBQMqDGmAMA0GCSqGSIb3DQEBCwUAA4IBAQC1/kAJJu3HJfAeO3RxxL1mNPkU IxJQMjA4D/TnijOTNQWSvJiAyggZJTIeQanmIl6TBBVuMCyhvNOJhxMjFsu8MgOQ V0d5ttLRUdkWQZK+0kZBXe8z1bpE+HNsloWBdJeEMA8DCYXQOCNGhl6mci6nGOQF d8wnT1LxKnmYTfwpxiamYZqpV0fNS3Vc1xwCwyBv0lHlSm6n1XUI6DPWl4NZqmFO 9VgilOKAf+BfaN8kb896GEUi9zh3hF/fqAHJisXSYLEPvqctTb0FA1TFRxd75XnK 82MHEHE252RX38RJQytl7I0NTLN5WD2LsJpZpTMRT00jyM+Vd+n4JcwKPSf8 -----END CERTIFICATE-----Generated at Wed Jan 21 08:05:13 2026 by rpki-client