This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa File: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (raw, json) Hash identifier: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg= Subject key identifier: 1A:AC:2B:01:99:86:80:D0:71:23:D9:49:04:E9:16:CF:EB:E6:D4:CA Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Certificate serial: 019B797EE8371B664B2AA06C1F34DF2DC675 Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa Signing time: Thu 01 Jan 2026 12:18:38 +0000 ROA not before: Thu 01 Jan 2026 12:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6837 IP address blocks: 193.5.178.0/24 maxlen: 24 2001:67c:1818::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e8:37:1b:66:4b:2a:a0:6c:1f:34:df:2d:c6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Validity Not Before: Jan 1 12:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aac2b01998680d07123d94904e916cfebe6d4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:31:05:18:1d:cc:0b:3d:00:34:89:5d:c3:18: 6b:5b:0b:88:3d:1c:8d:80:6d:21:a0:b2:b0:58:81: 9f:ac:e0:5d:5c:21:6d:fd:3b:4d:bb:6f:bd:c5:65: bc:46:f3:49:e9:9b:44:18:d8:56:ea:e7:08:e6:47: 4a:83:03:11:89:34:e2:5c:51:8e:af:b9:20:46:54: f8:07:9c:57:b6:71:04:49:a8:51:bd:87:4e:46:12: cd:da:8e:52:ff:a6:2d:a7:06:8c:75:18:ef:24:02: e0:06:69:2c:00:5a:1d:03:7c:0d:93:6c:cb:db:4e: 12:09:44:1a:9b:34:db:7a:85:b5:77:80:ab:c7:90: a0:00:7b:40:73:95:90:df:b9:48:d2:c7:9e:23:08: 8a:7f:21:3a:3a:e2:3c:1a:66:53:ea:5b:7d:1e:80: e5:ff:22:d5:b1:dc:02:d2:a0:62:1a:22:89:9f:a6: c6:eb:e9:07:37:9d:20:d3:12:d7:0e:85:ae:08:01: 72:62:07:85:29:17:39:c2:13:e3:5c:71:57:73:03: 3e:35:f1:44:65:2b:d2:1e:46:1d:5e:1f:e4:39:09: 97:0f:e3:90:08:75:7a:f6:47:f4:45:17:01:95:15: 18:56:f2:16:8b:7a:65:54:5e:72:16:56:26:00:4f: 46:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AC:2B:01:99:86:80:D0:71:23:D9:49:04:E9:16:CF:EB:E6:D4:CA X509v3 Authority Key Identifier: keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.178.0/24 IPv6: 2001:67c:1818::/48 Signature Algorithm: sha256WithRSAEncryption 4f:e0:23:98:37:f3:75:20:1d:64:7b:bc:2c:15:65:bf:ba:4e: 21:d8:8c:4e:3d:46:63:52:37:21:c5:8c:05:56:9b:cf:9e:b2: f2:e8:7c:3e:5d:a3:75:92:18:6c:f6:9b:5b:31:7a:a3:71:0a: b6:e7:47:0c:40:f6:cc:21:91:13:49:7c:a7:21:09:97:d4:3b: c8:2c:ad:db:f9:ae:07:f9:f4:f5:ec:e2:94:2c:99:9b:30:7e: dd:a9:b7:30:d8:67:eb:d9:e4:b7:9f:1a:c2:36:97:0f:d2:8b: 44:2c:e6:dd:2b:ac:00:c9:dd:46:10:e0:65:42:68:65:f8:a3: ef:a5:cd:91:53:a3:64:cd:89:f3:67:51:30:41:d9:78:af:b4: 76:57:06:65:f4:80:f3:38:e5:1d:40:c8:74:e3:69:ad:d7:af: 26:be:6e:58:f1:c1:33:2c:84:98:cf:e7:ff:92:66:0c:c7:b8: c7:d3:c1:22:3b:82:9b:dc:73:d4:40:8c:60:8b:31:a1:57:ad: b4:23:55:9a:0f:7a:45:3b:60:11:14:0c:fc:3a:74:2c:93:64: 01:4e:16:a9:11:22:a4:0f:a5:05:25:0e:99:63:7c:9a:bb:27: 92:59:f1:61:01:ee:10:dd:24:85:1c:d9:ca:28:df:e7:df:ca: d1:e7:73:9f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fug3G2ZLKqBsHzTfLcZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk ZjM3MmQwHhcNMjYwMTAxMTIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWFjMmIwMTk5ODY4MGQwNzEyM2Q5NDkwNGU5MTZjZmViZTZkNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zEFGB3MCz0ANIldwxhrWwuIPRyN gG0hoLKwWIGfrOBdXCFt/TtNu2+9xWW8RvNJ6ZtEGNhW6ucI5kdKgwMRiTTiXFGO r7kgRlT4B5xXtnEESahRvYdORhLN2o5S/6YtpwaMdRjvJALgBmksAFodA3wNk2zL 204SCUQamzTbeoW1d4Crx5CgAHtAc5WQ37lI0seeIwiKfyE6OuI8GmZT6lt9HoDl /yLVsdwC0qBiGiKJn6bG6+kHN50g0xLXDoWuCAFyYgeFKRc5whPjXHFXcwM+NfFE ZSvSHkYdXh/kOQmXD+OQCHV69kf0RRcBlRUYVvIWi3plVF5yFlYmAE9GkwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBqsKwGZhoDQcSPZSQTpFs/r5tTKMB8GA1UdIwQY MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt ODMzZWU5Y2IzOTgwLzEvR3F3ckFabUdnTkJ4STlsSkJPa1d6LXZtMU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwQWyMA8E AgACMAkDBwAgAQZ8GBgwDQYJKoZIhvcNAQELBQADggEBAE/gI5g383UgHWR7vCwV Zb+6TiHYjE49RmNSNyHFjAVWm8+esvLofD5do3WSGGz2m1sxeqNxCrbnRwxA9swh kRNJfKchCZfUO8gsrdv5rgf59PXs4pQsmZswft2ptzDYZ+vZ5LefGsI2lw/Si0Qs 5t0rrADJ3UYQ4GVCaGX4o++lzZFTo2TNifNnUTBB2XivtHZXBmX0gPM45R1AyHTj aa3Xrya+bljxwTMshJjP5/+SZgzHuMfTwSI7gpvcc9RAjGCLMaFXrbQjVZoPekU7 YBEUDPw6dCyTZAFOFqkRIqQPpQUlDpljfJq7J5JZ8WEB7hDdJIUc2coo3+ffytHn c58= -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:26 2026 by rpki-client