This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/GcuCBFhhPLtm6AWump2_50RkipM.roa File: GcuCBFhhPLtm6AWump2_50RkipM.roa (raw, json) Hash identifier: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos= Subject key identifier: 19:CB:82:04:58:61:3C:BB:66:E8:05:AE:9A:9D:BF:E7:44:64:8A:93 Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Certificate serial: 019B7E387AB275E5898C1DB0EE6C5A92BD2D Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/GcuCBFhhPLtm6AWump2_50RkipM.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205293 IP address blocks: 45.143.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7a:b2:75:e5:89:8c:1d:b0:ee:6c:5a:92:bd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19cb820458613cbb66e805ae9a9dbfe744648a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:83:71:8b:25:b7:e6:e6:24:5e:fb:51:d8: 45:55:6c:48:9d:91:52:b3:9e:ca:dd:2b:72:36:5b: d1:f4:64:e2:48:95:3a:cf:d6:ec:2a:a5:b3:80:c0: eb:91:f9:5b:40:92:b1:f2:80:5d:c4:fb:22:32:f5: df:f6:48:26:37:89:de:b5:9f:37:ed:2f:61:cb:79: 47:00:f4:f8:29:0c:c7:1c:7e:14:48:2d:cd:80:da: 9d:45:f1:a9:27:6c:cd:d1:f0:32:5e:5f:4e:15:a1: 88:7d:c7:f7:01:4e:3c:1e:54:1b:59:6d:5c:54:67: d9:e6:8a:5f:e7:32:1d:07:60:5b:0b:c2:59:a4:52: 73:e1:16:b6:52:40:e5:fe:82:31:9f:af:1f:ba:d6: 39:cb:6a:2b:03:3b:90:62:e3:23:df:09:06:ca:f6: 04:27:90:68:d8:22:98:1e:51:6c:fc:a9:b5:75:de: 29:f5:80:6a:3c:7d:e5:2e:95:4d:b5:b7:4e:3c:5a: 8a:2d:df:87:26:c2:7c:f6:ee:b3:17:57:d4:05:e4: c8:fc:5e:f6:8c:84:3e:23:fb:99:80:57:54:26:0d: 1e:a4:b3:87:fe:ad:fa:26:ed:b3:ea:5d:fa:0c:4f: 2f:d6:c8:f8:d6:f7:4f:52:65:1d:79:90:88:8b:94: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CB:82:04:58:61:3C:BB:66:E8:05:AE:9A:9D:BF:E7:44:64:8A:93 X509v3 Authority Key Identifier: keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/GcuCBFhhPLtm6AWump2_50RkipM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.206.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:7a:d6:bf:5c:14:3e:93:6c:df:4c:ab:28:5a:50:e8:12:d1: 99:10:d5:1a:58:7f:51:59:4f:19:17:53:01:b3:72:08:b3:3a: b3:2a:a6:3e:df:3e:c7:ae:b6:0e:35:fb:fa:b4:09:18:0f:ca: 8a:db:e9:51:27:c4:11:b1:c4:e2:e9:be:fc:70:49:d6:25:35: e1:ab:50:a5:bf:f2:a0:c7:98:f9:1d:b0:4e:b5:ab:39:4f:91: 4e:fc:93:9c:fd:54:c5:08:d2:46:d2:cd:47:c7:f9:f5:3e:e1: 0a:80:f4:2d:13:87:28:18:8c:54:e7:47:72:45:b8:6a:ff:06: 19:cb:a5:4a:4d:37:af:28:8b:27:d7:37:c2:55:1e:cc:4c:b6: 1b:dc:2a:b1:80:04:3b:78:8c:a3:24:ce:c7:9c:3e:64:c3:22: 37:4a:78:ba:a0:e3:c9:aa:7f:01:a9:93:0a:c8:68:26:3f:5c: 76:78:6c:09:fc:ff:74:89:52:83:43:ba:39:09:f8:03:51:14: 44:a3:eb:c0:db:6b:29:4d:b2:0d:39:b1:2d:06:45:10:e7:dc: f4:1b:ec:95:9a:82:ee:0f:2a:4a:e0:dd:70:c6:78:f3:2f:b2: 64:2b:92:39:66:30:4e:6c:d1:63:55:c5:72:8b:e2:82:88:3d: 8e:9a:ea:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHqydeWJjB2w7mxakr0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4 YTFiZDkwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWNiODIwNDU4NjEzY2JiNjZlODA1YWU5YTlkYmZlNzQ0NjQ4YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb2DcYslt+bmJF77UdhFVWxInZFS s57K3StyNlvR9GTiSJU6z9bsKqWzgMDrkflbQJKx8oBdxPsiMvXf9kgmN4netZ83 7S9hy3lHAPT4KQzHHH4USC3NgNqdRfGpJ2zN0fAyXl9OFaGIfcf3AU48HlQbWW1c VGfZ5opf5zIdB2BbC8JZpFJz4Ra2UkDl/oIxn68futY5y2orAzuQYuMj3wkGyvYE J5Bo2CKYHlFs/Km1dd4p9YBqPH3lLpVNtbdOPFqKLd+HJsJ89u6zF1fUBeTI/F72 jIQ+I/uZgFdUJg0epLOH/q36Ju2z6l36DE8v1sj41vdPUmUdeZCIi5QTtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBnLggRYYTy7ZugFrpqdv+dEZIqTMB8GA1UdIwQY MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt MjhmYzcwNjNkOTUyLzEvR2N1Q0JGaGhQTHRtNkFXdW1wMl81MFJraXBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY/OMA0G CSqGSIb3DQEBCwUAA4IBAQALeta/XBQ+k2zfTKsoWlDoEtGZENUaWH9RWU8ZF1MB s3IIszqzKqY+3z7HrrYONfv6tAkYD8qK2+lRJ8QRscTi6b78cEnWJTXhq1Clv/Kg x5j5HbBOtas5T5FO/JOc/VTFCNJG0s1Hx/n1PuEKgPQtE4coGIxU50dyRbhq/wYZ y6VKTTevKIsn1zfCVR7MTLYb3CqxgAQ7eIyjJM7HnD5kwyI3Sni6oOPJqn8BqZMK yGgmP1x2eGwJ/P90iVKDQ7o5CfgDURREo+vA22spTbINObEtBkUQ59z0G+yVmoLu DypK4N1wxnjzL7JkK5I5ZjBObNFjVcVyi+KCiD2OmuoR -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:25 2026 by rpki-client