This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/GmCafxAEUvOXy6Xvita-Fy-S--0.roa File: GmCafxAEUvOXy6Xvita-Fy-S--0.roa (raw, json) Hash identifier: Ifx+oHJPGcIANhZeyT+6sYmJnu849Sxqjk3P1GJE7vg= Subject key identifier: 1A:60:9A:7F:10:04:52:F3:97:CB:A5:EF:8A:D6:BE:17:2F:92:FB:ED Certificate issuer: /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2 Certificate serial: 019B7DCAA23ACFD7A614A3AAF191E7758123 Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/GmCafxAEUvOXy6Xvita-Fy-S--0.roa Signing time: Fri 02 Jan 2026 08:19:50 +0000 ROA not before: Fri 02 Jan 2026 08:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42160 IP address blocks: 185.19.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a2:3a:cf:d7:a6:14:a3:aa:f1:91:e7:75:81:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a609a7f100452f397cba5ef8ad6be172f92fbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:f8:f6:6d:b5:a5:4e:46:c2:9e:e9:6c:b6: 07:42:78:17:68:9a:77:c7:70:51:68:af:1b:eb:d7: aa:75:92:ac:2a:c1:5e:f9:e4:79:a6:d0:74:c3:26: 61:92:a5:d8:44:8a:8a:a0:eb:48:96:72:fb:db:8c: 4d:d0:46:26:6d:39:2e:95:ab:69:f7:81:aa:30:a3: 8a:a2:37:b1:c2:7e:08:cc:8e:1f:d3:5d:77:94:f5: 5e:e5:77:76:16:22:e9:6d:ac:74:e5:ec:cc:2f:18: ca:fc:ef:48:3e:9f:dd:fe:b8:53:b8:89:b8:0d:a1: eb:ff:27:08:22:54:24:0a:cf:d7:7a:2f:9c:63:68: 94:e0:cc:ae:1c:e1:a0:a5:d2:70:01:c6:21:ef:3c: 3b:63:a3:24:7d:4e:af:97:d9:d4:5a:4d:9a:5e:ce: 5d:0e:b0:dc:ef:eb:e1:d9:74:22:5e:52:b3:d1:a2: 69:ae:4d:1a:4c:f4:96:0d:52:11:e0:70:c3:fe:85: 22:1d:fd:ed:b8:d5:87:0a:02:d8:e4:c0:5d:55:c3: af:d8:eb:79:86:50:50:b7:40:88:00:ba:fa:a8:c9: 04:5d:12:29:eb:48:db:0e:4f:7a:0e:25:5a:78:ab: 17:69:02:11:87:b5:eb:c7:d4:c0:43:87:0a:d4:63: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:60:9A:7F:10:04:52:F3:97:CB:A5:EF:8A:D6:BE:17:2F:92:FB:ED X509v3 Authority Key Identifier: keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/GmCafxAEUvOXy6Xvita-Fy-S--0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.180.0/22 Signature Algorithm: sha256WithRSAEncryption 65:15:06:2d:c9:5e:1e:95:fb:57:fb:27:79:25:6c:b5:72:c1: a6:06:f0:8c:27:76:64:3b:08:c9:56:9a:2b:78:b9:4e:05:1d: 79:5c:7d:99:5c:31:d6:a6:db:a5:aa:5e:82:de:31:c9:c7:e6: 01:0f:0a:a3:86:ad:3a:5a:46:c9:5f:62:10:8d:ce:1c:77:92: 8f:26:9f:da:50:5c:e9:67:97:c1:d7:53:16:ba:ed:de:40:84: 2f:11:38:00:fd:72:0d:0a:b4:b2:91:94:c4:10:af:29:7e:c4: dc:17:00:fb:03:31:8a:7d:a1:0f:eb:46:af:7c:ff:87:c7:c5: 40:81:b8:6a:ff:a4:57:a4:5c:06:32:c4:9f:4e:eb:1a:7e:69: b8:f5:70:83:5a:71:99:04:99:50:ae:f3:be:28:6a:2b:26:0c: f1:4a:b8:25:61:82:ab:04:e9:4f:5b:ed:ec:d5:7c:43:a1:06: 5c:94:55:04:fc:cf:57:69:d4:27:d3:68:73:75:d9:fa:8d:c5: 29:4e:4c:20:2f:6c:14:41:90:09:2c:04:fb:cb:01:ab:11:d5: f9:63:a3:31:2c:96:e5:7a:cc:ad:18:12:29:db:25:0a:a1:18: ec:05:ac:b4:08:c8:91:d0:06:28:92:7f:f2:f5:58:eb:5e:ac: 8c:8d:34:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yqI6z9emFKOq8ZHndYEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTU1MjgxZWY4NGJiMTExZTMzZWNjN2MwMDg4OTQ4ZmQ0 YThkYjIwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTYwOWE3ZjEwMDQ1MmYzOTdjYmE1ZWY4YWQ2YmUxNzJmOTJmYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvof49m21pU5Gwp7pbLYHQngXaJp3 x3BRaK8b69eqdZKsKsFe+eR5ptB0wyZhkqXYRIqKoOtIlnL724xN0EYmbTkulatp 94GqMKOKojexwn4IzI4f0113lPVe5Xd2FiLpbax05ezMLxjK/O9IPp/d/rhTuIm4 DaHr/ycIIlQkCs/Xei+cY2iU4MyuHOGgpdJwAcYh7zw7Y6MkfU6vl9nUWk2aXs5d DrDc7+vh2XQiXlKz0aJprk0aTPSWDVIR4HDD/oUiHf3tuNWHCgLY5MBdVcOv2Ot5 hlBQt0CIALr6qMkEXRIp60jbDk96DiVaeKsXaQIRh7Xrx9TAQ4cK1GP4GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpgmn8QBFLzl8ul74rWvhcvkvvtMB8GA1UdIwQY MBaAFMOlUoHvhLsRHjPsx8AIiUj9So2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZWU2dlLUV1eEVlTS16SHdBaUpTUDFLamJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lYmE3NDctNGRkYy00MjQ5LThhZDIt N2Y4Y2I4NWZmZGI2LzEvR21DYWZ4QUVVdk9YeTZYdml0YS1GeS1TLS0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9lYmE3NDctNGRkYy00MjQ5LThhZDItN2Y4Y2I4NWZmZGI2 LzEvdzZWU2dlLUV1eEVlTS16SHdBaUpTUDFLamJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRO0MA0G CSqGSIb3DQEBCwUAA4IBAQBlFQYtyV4elftX+yd5JWy1csGmBvCMJ3ZkOwjJVpor eLlOBR15XH2ZXDHWptulql6C3jHJx+YBDwqjhq06WkbJX2IQjc4cd5KPJp/aUFzp Z5fB11MWuu3eQIQvETgA/XINCrSykZTEEK8pfsTcFwD7AzGKfaEP60avfP+Hx8VA gbhq/6RXpFwGMsSfTusafmm49XCDWnGZBJlQrvO+KGorJgzxSrglYYKrBOlPW+3s 1XxDoQZclFUE/M9XadQn02hzddn6jcUpTkwgL2wUQZAJLAT7ywGrEdX5Y6MxLJbl esytGBIp2yUKoRjsBay0CMiR0AYokn/y9VjrXqyMjTS/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:41 2026 by rpki-client