This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/GGfTyBNbI489PdjBnrpK0_0Pbtw.roa File: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (raw, json) Hash identifier: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc= Subject key identifier: 18:67:D3:C8:13:5B:23:8F:3D:3D:D8:C1:9E:BA:4A:D3:FD:0F:6E:DC Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4B80D96D8B67701719B9C2E1BADC Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/GGfTyBNbI489PdjBnrpK0_0Pbtw.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213278 IP address blocks: 195.211.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4b:80:d9:6d:8b:67:70:17:19:b9:c2:e1:ba:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1867d3c8135b238f3d3dd8c19eba4ad3fd0f6edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:36:94:1f:c9:37:3a:89:47:63:12:c7:51: 47:ec:56:e3:4d:b1:46:6c:5c:d4:0b:c6:e4:32:5c: 8b:c5:bc:7f:c3:e4:00:de:e7:87:76:3a:26:53:97: 88:ce:98:f3:0d:60:31:84:9f:8d:bf:75:0e:6a:8b: 9b:04:54:b1:c9:c9:80:8a:a7:b3:0a:6e:d8:d7:81: 22:08:f8:5f:f5:37:df:e8:e2:e6:86:79:47:c2:79: f1:b5:6f:1a:41:98:36:46:f5:31:ca:46:39:83:3c: ea:2e:da:d5:af:a6:a8:5f:67:16:a9:2c:86:94:88: c6:1b:1d:c3:7a:e6:21:c3:8f:05:a3:d8:a7:ee:ce: 30:9f:33:52:e1:38:fd:71:c4:82:87:06:6b:78:e6: 8c:02:a8:03:67:50:c4:d9:b5:e6:d3:04:de:f1:87: b9:62:bf:c2:8d:62:7a:e5:b2:57:26:d0:c4:fd:9d: 76:0b:4d:d8:84:63:d4:55:4a:9d:1b:a7:fc:ed:c5: 63:ae:38:b6:6e:4e:99:5c:47:50:41:21:b2:c9:2c: 86:49:ba:4b:6a:5b:0a:e7:cf:22:eb:98:9e:39:07: f2:fa:26:12:9e:fd:19:9c:0a:73:58:89:34:4e:39: 2a:ac:f5:d5:58:bf:75:71:2b:8e:5f:cd:dd:4f:aa: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:67:D3:C8:13:5B:23:8F:3D:3D:D8:C1:9E:BA:4A:D3:FD:0F:6E:DC X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/GGfTyBNbI489PdjBnrpK0_0Pbtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.163.0/24 Signature Algorithm: sha256WithRSAEncryption b2:43:ad:32:17:5d:0e:f5:68:a0:50:69:c6:93:b1:21:9e:3c: 70:ef:1e:f4:9e:c4:ad:59:70:ee:32:2f:50:17:10:2d:79:00: 10:d8:f2:3a:e0:52:aa:2f:55:b6:d6:1e:0d:d8:77:fd:23:0f: 32:21:86:a6:17:82:75:1f:eb:ed:45:a4:5f:d5:f6:49:00:dd: 5a:a9:51:f3:26:35:f1:a9:65:be:8c:6f:dc:52:91:3e:d4:a1: bb:8b:e2:9d:dc:52:7a:b1:82:b1:dd:13:2a:5d:e0:b9:63:21: ec:c5:44:1f:d5:c1:db:d0:25:db:e3:18:77:36:e2:0f:3b:02: fa:8a:b3:7b:44:59:87:81:e6:e4:a1:fa:28:cd:d0:07:a7:8f: 2d:94:f2:78:c7:d6:41:82:da:98:67:56:7f:5b:57:f5:4d:1e: 2e:8b:2b:1a:17:f7:44:5e:71:9e:38:90:03:b8:28:c7:df:1c: eb:e7:40:b5:4e:40:21:13:c2:32:dc:05:20:c7:92:78:e6:0f: 79:e6:4f:2f:f0:13:f5:67:96:ce:0f:3f:ca:78:2d:29:a6:b7: 4f:d0:4c:63:e9:34:99:ff:63:42:04:b4:c5:04:6a:c4:1f:bb: 87:00:83:7f:7f:7d:bd:2b:ef:36:b6:03:28:8c:90:02:b9:18: 59:2c:4e:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EuA2W2LZ3AXGbnC4brcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODY3ZDNjODEzNWIyMzhmM2QzZGQ4YzE5ZWJhNGFkM2ZkMGY2ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoos2lB/JNzqJR2MSx1FH7FbjTbFG bFzUC8bkMlyLxbx/w+QA3ueHdjomU5eIzpjzDWAxhJ+Nv3UOaoubBFSxycmAiqez Cm7Y14EiCPhf9Tff6OLmhnlHwnnxtW8aQZg2RvUxykY5gzzqLtrVr6aoX2cWqSyG lIjGGx3DeuYhw48Fo9in7s4wnzNS4Tj9ccSChwZreOaMAqgDZ1DE2bXm0wTe8Ye5 Yr/CjWJ65bJXJtDE/Z12C03YhGPUVUqdG6f87cVjrji2bk6ZXEdQQSGyySyGSbpL alsK588i65ieOQfy+iYSnv0ZnApzWIk0TjkqrPXVWL91cSuOX83dT6q5GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhn08gTWyOPPT3YwZ66StP9D27cMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvR0dmVHlCTmJJNDg5UGRqQm5ycEswXzBQYnR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9OjMA0G CSqGSIb3DQEBCwUAA4IBAQCyQ60yF10O9WigUGnGk7Ehnjxw7x70nsStWXDuMi9Q FxAteQAQ2PI64FKqL1W21h4N2Hf9Iw8yIYamF4J1H+vtRaRf1fZJAN1aqVHzJjXx qWW+jG/cUpE+1KG7i+Kd3FJ6sYKx3RMqXeC5YyHsxUQf1cHb0CXb4xh3NuIPOwL6 irN7RFmHgebkofoozdAHp48tlPJ4x9ZBgtqYZ1Z/W1f1TR4uiysaF/dEXnGeOJAD uCjH3xzr50C1TkAhE8Iy3AUgx5J45g955k8v8BP1Z5bODz/KeC0pprdP0Exj6TSZ /2NCBLTFBGrEH7uHAIN/f329K+82tgMojJACuRhZLE7x -----END CERTIFICATE-----Generated at Mon Jan 26 08:06:34 2026 by rpki-client