This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/GvsNXqyPm3O1muA1KhzUZIC7rvw.roa File: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (raw, json) Hash identifier: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE= Subject key identifier: 1A:FB:0D:5E:AC:8F:9B:73:B5:9A:E0:35:2A:1C:D4:64:80:BB:AE:FC Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019B7C80D656E7AE94A6ADCF256CAD964BBE Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/GvsNXqyPm3O1muA1KhzUZIC7rvw.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60976 IP address blocks: 91.232.73.0/24 maxlen: 24 185.222.122.0/24 maxlen: 24 185.222.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d6:56:e7:ae:94:a6:ad:cf:25:6c:ad:96:4b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1afb0d5eac8f9b73b59ae0352a1cd46480bbaefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:8c:69:07:96:eb:60:bc:d5:81:51:eb:16: fe:bf:62:40:b6:12:87:2e:57:19:b4:22:ef:df:ac: 1a:5b:78:07:b9:31:55:d9:08:cc:53:10:9f:73:b8: f5:e8:dd:43:ae:ad:41:53:9c:1e:ae:52:7d:66:51: 6c:97:49:21:f8:c5:8f:1e:94:b9:e8:fc:7d:4a:42: 59:0b:ff:fd:71:60:ab:83:c2:5a:44:ed:1d:20:0c: eb:5d:f0:4e:c2:4c:2e:b5:2a:a9:d3:bf:aa:27:9c: 57:aa:95:8b:65:7b:29:ec:b2:79:a9:d2:4b:6b:e5: d2:78:39:20:d9:33:98:3f:b6:e5:6c:f0:c6:35:0d: 95:6c:ca:fc:cf:60:bd:e0:3d:5b:6f:74:db:45:d3: 6c:a8:9c:be:ff:7d:28:80:e9:06:86:06:6c:9d:8b: ff:c9:85:c7:5d:6d:3d:82:df:62:2b:ab:35:b1:f2: 7c:26:75:59:c0:1e:98:90:05:fb:96:da:9b:92:bb: d4:01:66:b0:86:10:c9:1c:4d:f7:f5:79:7d:8d:0d: 5f:7b:bf:fb:00:09:95:0a:3a:3f:a7:d4:07:fe:f8: 22:df:c9:fe:ad:26:0e:7e:4e:78:cd:15:f3:6d:80: 13:7d:2c:51:65:c3:09:25:53:ee:d2:8d:f7:d9:59: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FB:0D:5E:AC:8F:9B:73:B5:9A:E0:35:2A:1C:D4:64:80:BB:AE:FC X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/GvsNXqyPm3O1muA1KhzUZIC7rvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.73.0/24 185.222.122.0/23 Signature Algorithm: sha256WithRSAEncryption 09:b8:f4:99:1c:2c:3e:2e:f8:df:30:ea:19:5d:9c:1d:a8:2b: 8d:10:75:97:22:ce:64:f0:52:db:1b:c1:21:27:94:b4:38:5a: f2:54:8e:cd:b9:df:07:30:57:47:97:c8:be:41:d2:81:2f:80: f8:61:dd:19:18:09:48:8b:c1:ce:07:73:ae:b2:ac:61:28:c7: 0b:64:00:c1:5c:62:e8:54:dc:5f:d2:c9:f3:a8:d4:f7:e1:0a: 75:85:de:7a:fe:6a:15:32:f0:73:37:9e:10:40:14:04:c2:39: 0e:f7:97:9a:70:cf:0c:d3:bb:b6:ad:d1:3f:43:bf:1b:d7:c5: da:8d:4e:96:14:27:0b:13:d0:c4:65:22:80:2c:30:99:32:f0: 61:af:95:6b:42:56:d8:f6:e2:28:3c:09:75:d5:cf:17:61:30: 99:96:4c:60:ff:16:8c:b4:18:df:9f:a8:e4:9a:d4:78:79:c1: 06:42:69:e0:63:16:50:f5:56:96:e0:51:f5:58:12:61:5f:fa: 52:dd:34:84:16:d2:6a:c0:ae:82:26:ba:b5:4c:bb:aa:a0:a4: 35:43:1c:dd:96:6e:2c:19:a5:9c:15:1a:30:b4:e1:a0:4c:45: 79:76:e0:7e:0f:c9:05:2e:e5:27:41:99:69:87:c6:1d:42:82: 57:e0:8c:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gNZW566Upq3PJWytlku+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWZiMGQ1ZWFjOGY5YjczYjU5YWUwMzUyYTFjZDQ2NDgwYmJhZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA076MaQeW62C81YFR6xb+v2JAthKH LlcZtCLv36waW3gHuTFV2QjMUxCfc7j16N1Drq1BU5werlJ9ZlFsl0kh+MWPHpS5 6Px9SkJZC//9cWCrg8JaRO0dIAzrXfBOwkwutSqp07+qJ5xXqpWLZXsp7LJ5qdJL a+XSeDkg2TOYP7blbPDGNQ2VbMr8z2C94D1bb3TbRdNsqJy+/30ogOkGhgZsnYv/ yYXHXW09gt9iK6s1sfJ8JnVZwB6YkAX7ltqbkrvUAWawhhDJHE339Xl9jQ1fe7/7 AAmVCjo/p9QH/vgi38n+rSYOfk54zRXzbYATfSxRZcMJJVPu0o332VkOFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBr7DV6sj5tztZrgNSoc1GSAu678MB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvR3ZzTlhxeVBtM08xbXVBMUtoelVaSUM3cnZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+hJAwQB ud56MA0GCSqGSIb3DQEBCwUAA4IBAQAJuPSZHCw+LvjfMOoZXZwdqCuNEHWXIs5k 8FLbG8EhJ5S0OFryVI7Nud8HMFdHl8i+QdKBL4D4Yd0ZGAlIi8HOB3OusqxhKMcL ZADBXGLoVNxf0snzqNT34Qp1hd56/moVMvBzN54QQBQEwjkO95eacM8M07u2rdE/ Q78b18XajU6WFCcLE9DEZSKALDCZMvBhr5VrQlbY9uIoPAl11c8XYTCZlkxg/xaM tBjfn6jkmtR4ecEGQmngYxZQ9VaW4FH1WBJhX/pS3TSEFtJqwK6CJrq1TLuqoKQ1 Qxzdlm4sGaWcFRowtOGgTEV5duB+D8kFLuUnQZlph8YdQoJX4IxX -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:16 2026 by rpki-client