This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/GmYrfW3k8osvPQTynxaphEXGOF0.roa File: GmYrfW3k8osvPQTynxaphEXGOF0.roa (raw, json) Hash identifier: KL4WvC6vPGKTcuwvQwS3AK/arMjab0ANyIFkXhXDgSc= Subject key identifier: 1A:66:2B:7D:6D:E4:F2:8B:2F:3D:04:F2:9F:16:A9:84:45:C6:38:5D Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Certificate serial: 019B78A2D16B06A5D834102AC60EE29C8D44 Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/GmYrfW3k8osvPQTynxaphEXGOF0.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42160 IP address blocks: 91.206.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d1:6b:06:a5:d8:34:10:2a:c6:0e:e2:9c:8d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a662b7d6de4f28b2f3d04f29f16a98445c6385d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:ed:25:f0:78:10:9a:3f:c6:07:91:8b:d5: bd:ec:bd:32:46:49:10:2d:46:7e:c3:0e:60:83:f2: 84:e8:cb:d5:59:6f:7c:33:f0:9c:7b:b8:1f:94:2d: eb:47:9b:7d:77:a9:d8:dc:c2:4f:d7:48:18:f6:33: ba:c7:c2:61:0e:1c:e6:b7:74:5b:97:10:64:7a:db: ab:dc:ee:1b:43:19:aa:81:7c:58:16:20:e6:75:99: 83:3c:e2:ac:ec:df:22:bc:87:50:cf:06:d2:45:e1: 9d:f0:ce:3c:66:f8:80:bf:e5:aa:76:45:29:1b:98: 64:c7:e0:13:6f:30:b5:4f:d3:23:de:09:ee:8c:9f: 4c:80:bb:a8:ed:c5:f3:32:d5:70:fa:5c:7c:d4:eb: c8:20:cc:44:dd:dc:8b:6d:bf:57:76:6a:0d:01:62: c6:a5:d9:17:cd:5d:cb:ad:0c:f2:09:b7:fe:fc:31: 11:65:08:6a:21:2f:4c:9f:b7:b1:9f:92:58:27:ca: 47:94:25:6f:79:fd:5c:42:0a:3d:69:3d:13:d6:9a: f5:28:d0:6e:11:5a:07:72:05:91:48:31:4d:9d:17: e0:9f:d7:cc:8f:21:95:4d:43:3b:66:cb:e0:53:05: 0d:67:15:ac:17:03:9b:93:3d:b8:97:c9:75:8d:fb: c7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:66:2B:7D:6D:E4:F2:8B:2F:3D:04:F2:9F:16:A9:84:45:C6:38:5D X509v3 Authority Key Identifier: keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/GmYrfW3k8osvPQTynxaphEXGOF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.84.0/23 Signature Algorithm: sha256WithRSAEncryption 41:46:80:cf:ed:c3:9e:bd:05:51:74:27:e4:9d:e9:7a:db:9c: 4d:a5:39:33:9f:c6:19:97:9c:20:14:9a:97:88:0e:d6:c9:e4: dd:71:3f:4b:af:5f:58:5d:20:46:23:12:bc:ff:16:fb:a7:c3: 8c:90:56:f7:98:2a:6e:6b:22:f5:b6:c1:5d:a9:e5:47:1f:7d: ca:fa:2c:45:7e:3f:6a:fe:20:00:ea:4c:43:df:23:be:9b:00: 85:ce:76:6c:cd:51:66:c3:a2:24:b8:b5:a1:f2:7c:1e:9d:8d: e0:63:69:be:f1:88:b5:d5:5b:80:a2:2a:49:9d:da:0e:e9:7e: 4b:02:ea:64:fb:56:8b:cf:f6:28:30:e2:52:85:99:0f:10:4c: f2:f6:2c:72:01:b9:85:ba:65:52:9d:1b:19:a2:04:dd:48:31: 9d:47:3c:c1:3e:e0:3c:18:34:a3:fa:b0:10:1d:6d:33:80:37: 40:d2:78:ff:02:3d:a0:6e:da:bf:4d:94:31:53:f7:8f:d6:da: a0:e2:1b:d1:fd:cf:82:10:84:f5:a3:4b:3a:9d:a2:a9:5a:4b: 6e:65:47:95:07:9a:d5:54:0d:7c:7a:28:ae:36:8a:89:7d:6f: 92:77:a1:6d:24:5a:d4:6b:1d:98:12:67:ae:82:58:8b:01:8c: 4b:e2:ee:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otFrBqXYNBAqxg7inI1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk NzkwYzkwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTY2MmI3ZDZkZTRmMjhiMmYzZDA0ZjI5ZjE2YTk4NDQ1YzYzODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6btJfB4EJo/xgeRi9W97L0yRkkQ LUZ+ww5gg/KE6MvVWW98M/Cce7gflC3rR5t9d6nY3MJP10gY9jO6x8JhDhzmt3Rb lxBketur3O4bQxmqgXxYFiDmdZmDPOKs7N8ivIdQzwbSReGd8M48ZviAv+WqdkUp G5hkx+ATbzC1T9Mj3gnujJ9MgLuo7cXzMtVw+lx81OvIIMxE3dyLbb9XdmoNAWLG pdkXzV3LrQzyCbf+/DERZQhqIS9Mn7exn5JYJ8pHlCVvef1cQgo9aT0T1pr1KNBu EVoHcgWRSDFNnRfgn9fMjyGVTUM7ZsvgUwUNZxWsFwObkz24l8l1jfvHJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpmK31t5PKLLz0E8p8WqYRFxjhdMB8GA1UdIwQY MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct MGNkZmExYzI5MWY2LzEvR21ZcmZXM2s4b3N2UFFUeW54YXBoRVhHT0YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2 LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW85UMA0G CSqGSIb3DQEBCwUAA4IBAQBBRoDP7cOevQVRdCfknel625xNpTkzn8YZl5wgFJqX iA7WyeTdcT9Lr19YXSBGIxK8/xb7p8OMkFb3mCpuayL1tsFdqeVHH33K+ixFfj9q /iAA6kxD3yO+mwCFznZszVFmw6IkuLWh8nwenY3gY2m+8Yi11VuAoipJndoO6X5L Aupk+1aLz/YoMOJShZkPEEzy9ixyAbmFumVSnRsZogTdSDGdRzzBPuA8GDSj+rAQ HW0zgDdA0nj/Aj2gbtq/TZQxU/eP1tqg4hvR/c+CEIT1o0s6naKpWktuZUeVB5rV VA18eiiuNoqJfW+Sd6FtJFrUax2YEmeugliLAYxL4u73 -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:34 2026 by rpki-client