This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa File: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (raw, json) Hash identifier: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw= Subject key identifier: 19:36:C8:21:42:28:F9:D5:0F:5C:30:CD:73:42:03:4F:A1:41:F2:DE Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Certificate serial: 019B7834CFBAF3E13E05630A70C8DE44BAC2 Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa Signing time: Thu 01 Jan 2026 06:18:05 +0000 ROA not before: Thu 01 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 194.180.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cf:ba:f3:e1:3e:05:63:0a:70:c8:de:44:ba:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1936c8214228f9d50f5c30cd7342034fa141f2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:97:24:20:31:da:b3:e4:2d:3e:08:77:ff: 55:45:0b:d6:c8:5c:30:7e:f4:8c:ed:cb:a4:4e:6c: 67:67:23:86:e7:99:46:98:24:82:8d:2f:59:81:88: f3:87:58:0c:40:81:92:28:b5:be:12:c8:51:7b:ba: 80:48:23:ef:7e:ae:b3:49:73:dd:f3:24:dc:d4:d0: cf:e2:91:9d:47:b6:14:7a:69:56:19:94:79:80:82: ea:05:e5:c3:5c:b3:9b:81:12:ca:36:58:b6:c7:52: 31:25:ae:9f:65:87:3d:4c:2a:ed:be:0d:20:eb:cd: 01:0a:35:ac:07:1f:bb:cc:fa:d3:c9:9d:bf:2a:e3: de:9e:92:f0:a9:cb:76:a7:98:48:ff:22:fe:85:9c: f1:0b:7d:9a:54:a4:3e:ab:9d:2b:f9:4a:e2:36:8b: 06:ef:2e:6d:39:7f:c0:b8:14:9e:e5:be:77:54:a8: e8:3f:6f:13:04:a4:4b:80:38:01:a1:c2:fc:bb:8f: c7:a6:d5:d5:d9:89:db:5b:91:a5:e1:48:25:a3:c5: 27:a5:7f:d3:6a:a1:aa:ef:69:87:5a:0a:43:59:e4: 00:2a:46:87:db:28:c6:0f:b2:aa:41:d2:8f:9c:91: 7d:50:fd:28:ff:03:1b:a3:38:95:a9:4e:44:59:cc: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:36:C8:21:42:28:F9:D5:0F:5C:30:CD:73:42:03:4F:A1:41:F2:DE X509v3 Authority Key Identifier: keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.11.0/24 Signature Algorithm: sha256WithRSAEncryption 71:fc:ca:8e:60:f9:05:b4:d8:34:a9:26:f1:b4:93:e2:77:ab: f8:db:5d:83:c3:68:2c:32:f6:96:69:b0:30:80:f4:3e:5d:51: 7c:bd:bd:1e:75:a8:28:0e:ef:03:30:91:f3:f3:0b:12:f3:32: 53:dc:3b:fb:2c:fa:eb:92:3e:61:cd:24:de:fb:4c:ca:d1:c7: 48:c4:90:d9:d1:f4:85:cb:a5:c1:1f:77:42:1a:e0:f5:9c:0a: 7b:4e:c9:90:a7:ec:98:69:8c:99:bc:77:5d:79:22:af:cc:b7: 23:90:ea:e4:c0:b9:1e:d0:17:90:a9:0b:bd:1e:f9:68:02:68: 4b:0d:8f:87:35:d7:c4:45:0f:0e:44:c9:e7:13:29:71:0e:6a: 51:aa:00:42:21:4c:83:70:a1:99:56:2d:76:a6:dd:d5:84:f4: 7c:7e:6a:cf:c8:43:53:6f:aa:9e:2d:5b:3b:83:39:58:ac:83: 83:5c:2f:0c:8c:ec:4e:c9:ad:e3:70:fe:47:3c:75:90:53:94: 80:c2:1b:4b:d8:9c:ab:24:72:97:0a:19:fb:49:ec:82:ab:bf: 4d:bd:aa:78:6b:d3:28:0b:29:70:90:e1:d7:5d:72:4c:e1:bc: 80:93:b1:13:34:f9:d3:2a:37:92:0f:68:9d:ab:90:99:71:58: 78:41:b4:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NM+68+E+BWMKcMjeRLrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk NzcxYjIwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTM2YzgyMTQyMjhmOWQ1MGY1YzMwY2Q3MzQyMDM0ZmExNDFmMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWKXJCAx2rPkLT4Id/9VRQvWyFww fvSM7cukTmxnZyOG55lGmCSCjS9ZgYjzh1gMQIGSKLW+EshRe7qASCPvfq6zSXPd 8yTc1NDP4pGdR7YUemlWGZR5gILqBeXDXLObgRLKNli2x1IxJa6fZYc9TCrtvg0g 680BCjWsBx+7zPrTyZ2/KuPenpLwqct2p5hI/yL+hZzxC32aVKQ+q50r+UriNosG 7y5tOX/AuBSe5b53VKjoP28TBKRLgDgBocL8u4/HptXV2YnbW5Gl4Uglo8UnpX/T aqGq72mHWgpDWeQAKkaH2yjGD7KqQdKPnJF9UP0o/wMboziVqU5EWcwFfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBk2yCFCKPnVD1wwzXNCA0+hQfLeMB8GA1UdIwQY MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt NDM3NWQ2NzVmY2YzLzEvR1RiSUlVSW8tZFVQWERETmMwSURUNkZCOHQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrQLMA0G CSqGSIb3DQEBCwUAA4IBAQBx/MqOYPkFtNg0qSbxtJPid6v4212Dw2gsMvaWabAw gPQ+XVF8vb0edagoDu8DMJHz8wsS8zJT3Dv7LPrrkj5hzSTe+0zK0cdIxJDZ0fSF y6XBH3dCGuD1nAp7TsmQp+yYaYyZvHddeSKvzLcjkOrkwLke0BeQqQu9HvloAmhL DY+HNdfERQ8ORMnnEylxDmpRqgBCIUyDcKGZVi12pt3VhPR8fmrPyENTb6qeLVs7 gzlYrIODXC8MjOxOya3jcP5HPHWQU5SAwhtL2JyrJHKXChn7SeyCq79Nvap4a9Mo CylwkOHXXXJM4byAk7ETNPnTKjeSD2idq5CZcVh4QbQJ -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:15 2026 by rpki-client