This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa File: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (raw, json) Hash identifier: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME= Subject key identifier: 81:F3:11:17:43:63:D4:28:71:AD:D4:13:70:A0:AC:BE:A6:6A:CD:10 Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C12A3F527852B8D0ABAA91D913597EA Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204967 IP address blocks: 88.119.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a3:f5:27:85:2b:8d:0a:ba:a9:1d:91:35:97:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81f311174363d42871add41370a0acbea66acd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:50:53:c0:80:11:9d:ed:c4:22:e3:f4:df: 75:f0:8b:ed:f5:f9:9e:25:18:47:af:30:8c:11:02: 45:96:25:02:37:bc:67:cf:9d:f0:6f:49:c4:4f:9b: c7:00:14:ec:47:86:df:a6:aa:ef:f9:90:fd:df:79: 2f:2a:ec:38:1b:f0:a3:9a:69:40:e2:9a:5a:9d:a3: 7f:79:15:5a:a5:93:6c:8e:8c:81:bd:34:53:0f:8e: 4b:91:88:47:5f:78:84:5f:26:21:b7:98:87:78:46: 95:d9:45:7a:45:c6:8b:df:67:80:23:9e:49:4c:3f: 4b:11:c2:29:ee:5e:ab:a6:c1:aa:76:30:94:d5:53: 33:13:7e:fd:01:29:da:46:1c:b2:15:10:29:29:11: 2e:18:e6:e8:92:9d:cf:dd:70:b9:1a:dc:9d:8d:31: 79:55:cf:2e:50:f8:09:b0:1e:f9:70:81:34:2e:7d: a6:c3:28:3e:a6:82:9f:0f:d9:6e:bb:89:05:80:eb: 8f:5f:7a:bb:f8:97:3d:68:f7:e5:d3:b2:02:1a:d1: a8:5b:1a:77:5b:8b:e2:22:11:fd:61:16:28:0a:69: ce:c7:22:26:3c:9e:79:fc:2f:44:fb:7e:af:13:4c: ac:93:61:b6:4c:16:33:a6:22:1b:cf:44:8b:b4:d2: 5b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F3:11:17:43:63:D4:28:71:AD:D4:13:70:A0:AC:BE:A6:6A:CD:10 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.119.182.0/24 Signature Algorithm: sha256WithRSAEncryption 77:17:6b:f4:f6:b1:e2:fe:fd:f1:1a:50:a6:13:98:54:6f:ab: 1f:9b:cb:00:b2:f4:05:10:42:3c:eb:a9:44:42:82:bf:8d:e4: b1:45:61:f9:a7:e9:08:d8:94:38:88:82:1d:de:a7:d3:58:be: f9:a9:d8:8f:9d:cf:4c:cf:73:d0:1d:ee:64:c2:80:e1:f7:94: df:47:0c:1b:b7:b5:ed:6e:46:32:dd:04:dd:92:0e:da:e7:4e: ff:d1:49:40:78:1e:fc:98:4c:4a:3d:89:37:84:eb:09:f8:d2: f0:84:8d:59:9c:ad:71:f9:2a:d7:50:a7:d9:cd:e2:cf:06:72: ed:fd:60:27:c8:ab:a8:be:e0:48:9e:83:2c:b0:d2:84:91:76: cc:ce:6c:5e:bf:be:ae:9c:b5:07:e5:c0:1b:6f:e8:5b:b5:ce: 31:85:5f:dc:55:f7:c8:aa:51:a8:27:da:14:8f:f1:3a:c9:88: ae:c9:99:8a:51:26:df:9c:cf:34:fb:91:de:9d:f9:1e:9e:29: 2a:58:57:38:71:97:36:a5:82:23:db:aa:dd:e0:c5:1f:15:71: bc:af:8d:e2:85:d6:84:8c:62:65:7f:81:6c:24:23:24:2d:8d: 9a:7f:97:52:f4:4f:5d:52:e9:09:bf:c0:60:0e:95:05:68:1d: a6:c5:ea:79 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8EqP1J4UrjQq6qR2RNZfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWYzMTExNzQzNjNkNDI4NzFhZGQ0MTM3MGEwYWNiZWE2NmFjZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHRQU8CAEZ3txCLj9N918Ivt9fme JRhHrzCMEQJFliUCN7xnz53wb0nET5vHABTsR4bfpqrv+ZD933kvKuw4G/CjmmlA 4ppanaN/eRVapZNsjoyBvTRTD45LkYhHX3iEXyYht5iHeEaV2UV6RcaL32eAI55J TD9LEcIp7l6rpsGqdjCU1VMzE379ASnaRhyyFRApKREuGObokp3P3XC5GtydjTF5 Vc8uUPgJsB75cIE0Ln2mwyg+poKfD9luu4kFgOuPX3q7+Jc9aPfl07ICGtGoWxp3 W4viIhH9YRYoCmnOxyImPJ55/C9E+36vE0ysk2G2TBYzpiIbz0SLtNJb6wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIHzERdDY9Qoca3UE3CgrL6mas0QMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL2dmTVJGME5qMUNoeHJkUVRjS0NzdnFacXpSQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABYd7Yw DQYJKoZIhvcNAQELBQADggEBAHcXa/T2seL+/fEaUKYTmFRvqx+bywCy9AUQQjzr qURCgr+N5LFFYfmn6QjYlDiIgh3ep9NYvvmp2I+dz0zPc9Ad7mTCgOH3lN9HDBu3 te1uRjLdBN2SDtrnTv/RSUB4HvyYTEo9iTeE6wn40vCEjVmcrXH5KtdQp9nN4s8G cu39YCfIq6i+4Eiegyyw0oSRdszObF6/vq6ctQflwBtv6Fu1zjGFX9xV98iqUagn 2hSP8TrJiK7JmYpRJt+czzT7kd6d+R6eKSpYVzhxlzalgiPbqt3gxR8VcbyvjeKF 1oSMYmV/gWwkIyQtjZp/l1L0T11S6Qm/wGAOlQVoHabF6nk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:20 2026 by rpki-client