This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/GKUVBc7-LD1_E5BxA3s5Q24wKRc.roa File: GKUVBc7-LD1_E5BxA3s5Q24wKRc.roa (raw, json) Hash identifier: PJ4tHS8apGhvLe8TYz2cpr3MotUGBCPTkvdJ0n2/4ow= Subject key identifier: 18:A5:15:05:CE:FE:2C:3D:7F:13:90:71:03:7B:39:43:6E:30:29:17 Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Certificate serial: 019B7C1290CE312711B1A1F38E17C7100327 Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/GKUVBc7-LD1_E5BxA3s5Q24wKRc.roa Signing time: Fri 02 Jan 2026 00:19:10 +0000 ROA not before: Fri 02 Jan 2026 00:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50351 IP address blocks: 195.191.110.0/24 maxlen: 24 195.191.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:90:ce:31:27:11:b1:a1:f3:8e:17:c7:10:03:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18a51505cefe2c3d7f139071037b39436e302917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:42:74:78:3a:31:6c:1c:e2:8e:c2:36:89: 62:51:2a:62:c2:7e:f4:f5:bc:de:0f:a0:6b:df:97: e8:6f:e3:a9:9f:47:9a:99:01:2c:9d:b1:2a:6e:58: 4d:a6:a0:a5:22:56:cd:1a:53:29:b0:7f:90:e1:35: e6:b8:ba:25:95:77:22:d9:1f:5a:b3:76:f1:51:70: 7f:11:42:be:e8:b3:76:24:48:93:3d:4f:25:c1:6e: 86:2e:8e:14:89:0d:13:55:22:18:68:39:77:59:fd: 70:62:88:bb:49:81:6b:a3:d9:bb:03:32:a4:c4:62: fd:5c:14:b2:9f:9b:d3:11:25:2f:2f:7e:af:d1:a0: 79:90:92:a6:f5:21:11:43:79:27:c0:db:38:d4:bc: 82:68:a0:fb:f6:3d:2b:84:51:8a:1e:7e:aa:93:96: a0:fb:5e:c9:c4:6b:c7:10:4c:bd:ea:07:f5:4a:c6: b0:31:61:42:66:5e:bc:9f:80:7b:96:17:db:f9:c9: b4:2f:87:b1:2e:aa:49:15:19:15:db:a2:c9:1f:4a: d3:b1:27:81:66:25:e8:e7:01:0c:8b:58:28:46:3d: cc:d2:a6:43:ca:1d:5f:43:3c:40:75:1b:99:22:c6: 31:73:da:17:8a:ed:be:67:47:0f:d2:33:1b:22:7e: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A5:15:05:CE:FE:2C:3D:7F:13:90:71:03:7B:39:43:6E:30:29:17 X509v3 Authority Key Identifier: keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/GKUVBc7-LD1_E5BxA3s5Q24wKRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.110.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:2f:0f:37:fa:e4:bc:66:f6:39:ae:65:70:a0:5c:33:35:96: 09:58:8b:77:42:6b:86:3a:6b:4c:34:0b:84:ef:c0:b1:5b:d3: 9b:14:bd:3f:f8:16:18:cd:5e:4a:ec:2b:6f:2b:f0:f4:2c:e5: ea:cb:39:71:16:0c:58:1a:ee:b4:10:0c:51:77:da:9b:85:b7: 6d:e2:b8:ec:59:41:44:a7:92:ad:96:a4:b3:bc:33:6f:8f:bc: 6a:e8:b1:64:44:60:d2:5a:9b:b5:3a:e3:7b:78:5a:83:03:c7: 23:0d:76:c7:29:9b:30:01:ba:b8:d5:bd:5a:73:e7:44:9d:15: ff:af:c5:bf:25:56:17:6c:5b:66:67:00:71:36:ff:d0:2d:83: b9:64:9c:5c:cf:1e:67:da:11:8f:33:22:0a:2a:df:cb:cb:43: e8:7f:3c:85:2e:41:bd:11:49:5f:be:b7:53:9b:f2:8b:74:64: b2:d8:2d:b9:c6:36:db:38:49:6c:62:0c:22:66:72:a1:ae:0e: 12:6c:20:15:ee:ba:7f:61:1f:fc:df:35:6f:5c:9a:22:1c:03: e4:d8:93:b2:d6:67:ae:9c:aa:82:8b:6d:4b:0f:e5:26:07:1c: 99:93:5c:31:6f:9f:80:03:fa:62:20:b2:00:59:f3:df:88:f5: 43:6d:70:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EpDOMScRsaHzjhfHEAMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMzZlOTFiNjJkM2RjN2MxMzdhMjhhYWEwMDZlZGU5Yjll YTFmZTQwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGE1MTUwNWNlZmUyYzNkN2YxMzkwNzEwMzdiMzk0MzZlMzAyOTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5pCdHg6MWwc4o7CNoliUSpiwn70 9bzeD6Br35fob+Opn0eamQEsnbEqblhNpqClIlbNGlMpsH+Q4TXmuLollXci2R9a s3bxUXB/EUK+6LN2JEiTPU8lwW6GLo4UiQ0TVSIYaDl3Wf1wYoi7SYFro9m7AzKk xGL9XBSyn5vTESUvL36v0aB5kJKm9SERQ3knwNs41LyCaKD79j0rhFGKHn6qk5ag +17JxGvHEEy96gf1SsawMWFCZl68n4B7lhfb+cm0L4exLqpJFRkV26LJH0rTsSeB ZiXo5wEMi1goRj3M0qZDyh1fQzxAdRuZIsYxc9oXiu2+Z0cP0jMbIn4LZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBilFQXO/iw9fxOQcQN7OUNuMCkXMB8GA1UdIwQY MBaAFJ026Rti09x8E3ooqqAG7em56h/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGIt YjJjZWE3NjkwODM3LzEvR0tVVkJjNy1MRDFfRTVCeEEzczVRMjR3S1JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGItYjJjZWE3NjkwODM3 LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79uMA0G CSqGSIb3DQEBCwUAA4IBAQBNLw83+uS8ZvY5rmVwoFwzNZYJWIt3QmuGOmtMNAuE 78CxW9ObFL0/+BYYzV5K7CtvK/D0LOXqyzlxFgxYGu60EAxRd9qbhbdt4rjsWUFE p5KtlqSzvDNvj7xq6LFkRGDSWpu1OuN7eFqDA8cjDXbHKZswAbq41b1ac+dEnRX/ r8W/JVYXbFtmZwBxNv/QLYO5ZJxczx5n2hGPMyIKKt/Ly0PofzyFLkG9EUlfvrdT m/KLdGSy2C25xjbbOElsYgwiZnKhrg4SbCAV7rp/YR/83zVvXJoiHAPk2JOy1meu nKqCi21LD+UmBxyZk1wxb5+AA/piILIAWfPfiPVDbXAi -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:37 2026 by rpki-client