This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/GB_a4b1kVxMMUZoZCCtwC17cEDo.roa File: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (raw, json) Hash identifier: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac= Subject key identifier: 18:1F:DA:E1:BD:64:57:13:0C:51:9A:19:08:2B:70:0B:5E:DC:10:3A Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3 Certificate serial: 019B7BA37F2CD6ABD59C851E20022D156655 Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/GB_a4b1kVxMMUZoZCCtwC17cEDo.roa Signing time: Thu 01 Jan 2026 22:17:51 +0000 ROA not before: Thu 01 Jan 2026 22:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 160.216.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7f:2c:d6:ab:d5:9c:85:1e:20:02:2d:15:66:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3 Validity Not Before: Jan 1 22:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=181fdae1bd6457130c519a19082b700b5edc103a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:05:f4:51:0e:ed:f1:34:1f:66:08:33:60: c4:d7:ee:24:3f:8a:21:76:76:a5:31:4c:10:69:b1: ad:9e:00:0a:88:cd:11:f4:d9:e9:f8:9f:cb:e0:89: e5:53:f7:6b:64:a0:d9:8f:d6:ec:e0:96:25:0e:61: 4e:50:44:d3:14:4e:8c:b8:b8:3d:c1:30:33:b0:40: a5:4f:07:b0:d7:a4:1e:fe:d8:ed:ea:76:35:9d:e1: ee:ea:f8:49:cd:8e:27:b7:1a:59:e7:6e:9e:df:1b: 91:07:06:b8:27:60:57:9d:cb:3a:5e:42:74:07:c4: 14:4e:08:3e:de:bb:e5:69:14:2b:64:21:d5:70:ed: 64:ba:57:d9:51:16:30:43:ca:21:f4:ed:56:e2:ff: 09:29:de:55:ec:15:72:c7:73:04:22:d7:bb:e6:25: bc:83:86:70:f8:40:4f:a0:a7:21:ee:86:64:96:46: b8:57:91:2d:0c:48:8f:c3:7f:3b:3e:09:d3:3f:40: fa:8a:97:60:d1:71:30:08:bf:66:81:8c:90:53:f3: 6f:c8:50:e6:16:39:e4:45:d5:6e:12:6c:9b:63:99: d8:1f:16:08:fc:e8:cc:a2:df:d0:10:bd:30:21:40: 8f:0c:86:46:7f:b6:95:65:7c:9c:02:99:da:29:50: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1F:DA:E1:BD:64:57:13:0C:51:9A:19:08:2B:70:0B:5E:DC:10:3A X509v3 Authority Key Identifier: keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/GB_a4b1kVxMMUZoZCCtwC17cEDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.216.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:30:a1:0d:19:60:e4:3f:67:53:7b:81:e5:96:14:67:6c:f7: 0c:55:e7:e7:25:72:bd:4f:94:51:a6:17:d7:40:48:36:38:52: 41:84:b8:5d:c7:3f:15:90:87:cc:94:2a:57:57:d8:46:35:31: dd:38:89:fc:7a:8a:4b:3d:ca:51:74:a4:44:c7:c3:5c:c0:33: b4:e3:78:b9:ca:72:ef:58:a0:37:8a:5e:2a:88:c0:aa:9e:d4: 58:35:d5:2d:c3:d6:87:d2:28:8a:eb:24:87:40:04:2e:32:9e: 52:23:48:bc:3b:4e:5f:0a:3a:7e:79:a8:6f:e1:b9:01:93:c2: 83:9b:3b:53:2f:dd:51:5c:fe:b5:cc:e7:a1:a8:8e:fc:a8:3c: b1:0e:96:47:68:1a:62:0a:b5:e2:89:17:2e:88:9e:ea:4d:4b: 9f:e5:44:a2:67:8d:f2:52:b3:eb:73:40:b0:27:66:b4:b8:76: 2f:7f:41:3c:2c:13:0f:31:7c:1e:20:12:26:be:8b:52:c8:ac: c9:47:bd:b9:a3:0f:ca:fe:c4:73:53:76:18:81:db:a6:5d:fe: 45:71:45:02:2b:87:ce:23:2d:c0:96:56:dc:77:96:88:ea:ca: 18:83:b0:37:1c:4c:f0:13:75:97:10:b0:c6:49:ab:ed:73:21: bb:82:c8:5d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7o38s1qvVnIUeIAItFWZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTE2OTA5Y2E0ZGEzOTkzNWVhYjlhZjAzOGI1OGE1MjMz MTIyYjMwHhcNMjYwMTAxMjIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODFmZGFlMWJkNjQ1NzEzMGM1MTlhMTkwODJiNzAwYjVlZGMxMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5IF9FEO7fE0H2YIM2DE1+4kP4oh dnalMUwQabGtngAKiM0R9Nnp+J/L4InlU/drZKDZj9bs4JYlDmFOUETTFE6MuLg9 wTAzsEClTwew16Qe/tjt6nY1neHu6vhJzY4ntxpZ526e3xuRBwa4J2BXncs6XkJ0 B8QUTgg+3rvlaRQrZCHVcO1kulfZURYwQ8oh9O1W4v8JKd5V7BVyx3MEIte75iW8 g4Zw+EBPoKch7oZklka4V5EtDEiPw387PgnTP0D6ipdg0XEwCL9mgYyQU/NvyFDm FjnkRdVuEmybY5nYHxYI/OjMot/QEL0wIUCPDIZGf7aVZXycApnaKVC+CwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBgf2uG9ZFcTDFGaGQgrcAte3BA6MB8GA1UdIwQY MBaAFPqhaQnKTaOZNeq5rwOLWKUjMSKzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xRnBDY3BObzVrMTZybXZBNHRZcFNNeElyTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4 LTkyMGI1MmE5ZjZhNS8xL0dCX2E0YjFrVnhNTVVab1pDQ3R3QzE3Y0VEby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDIvMDQ2NmY4LTMzMGQtNGFjOS1hYzE4LTkyMGI1MmE5ZjZh NS8xLzEtcUZwQ2NwTm81azE2cm12QTR0WXBTTXhJck0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCg2DAN BgkqhkiG9w0BAQsFAAOCAQEACjChDRlg5D9nU3uB5ZYUZ2z3DFXn5yVyvU+UUaYX 10BINjhSQYS4Xcc/FZCHzJQqV1fYRjUx3TiJ/HqKSz3KUXSkRMfDXMAztON4ucpy 71igN4peKojAqp7UWDXVLcPWh9Ioiuskh0AELjKeUiNIvDtOXwo6fnmob+G5AZPC g5s7Uy/dUVz+tcznoaiO/Kg8sQ6WR2gaYgq14okXLoie6k1Ln+VEomeN8lKz63NA sCdmtLh2L39BPCwTDzF8HiASJr6LUsisyUe9uaMPyv7Ec1N2GIHbpl3+RXFFAiuH ziMtwJZW3HeWiOrKGIOwNxxM8BN1lxCwxkmr7XMhu4LIXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:38 2026 by rpki-client