This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa File: GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa (raw, json) Hash identifier: EWYqSEaxsJwB3eARQDD/wcNEb9j/xhowyFxphGXlVm8= Subject key identifier: 18:99:81:8C:F1:62:B8:8F:70:A4:B9:43:47:04:BD:9B:16:F8:17:A1 Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Certificate serial: 019B7A5B957DD143CD03FC76C54113DABF06 Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16353 IP address blocks: 83.167.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:95:7d:d1:43:cd:03:fc:76:c5:41:13:da:bf:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1899818cf162b88f70a4b9434704bd9b16f817a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:7c:15:bf:27:60:48:e7:04:4c:30:43:4f: 25:12:5b:45:c9:6e:1a:ae:76:ad:a9:27:f4:74:f1: 82:bd:dd:cb:d9:73:da:d1:b7:31:e7:c0:79:35:ba: cd:01:90:27:e0:fe:fa:73:6d:19:c5:2f:70:55:68: ec:ba:32:6a:64:84:7b:f0:c8:5e:f4:d5:54:8b:16: b4:d1:d7:29:06:c7:fb:74:ed:b6:c5:99:0c:fa:bc: 25:7f:be:e0:d6:65:3f:b8:40:fc:8f:70:4e:b5:99: 8b:73:89:66:81:8f:54:07:06:e8:9d:f8:85:70:57: f2:cb:79:d5:59:4d:29:1d:8a:6b:f1:6f:55:4d:e9: be:10:ab:b1:df:28:94:49:dd:15:ff:ff:78:b1:7a: 15:b6:eb:4f:4d:55:92:8f:28:f9:48:b8:e2:fa:12: c6:3d:4f:22:d0:ed:4e:7c:f5:5c:a5:b6:f5:25:7a: c7:ab:00:8b:42:e7:f5:ea:78:56:e9:b7:dc:24:bb: 96:fe:98:d0:67:72:45:2f:08:f6:99:c7:ef:fa:05: 86:4e:8e:df:2b:a4:19:83:e3:f8:3a:5f:9b:b0:f6: dd:fd:71:57:02:ae:75:a7:d4:bc:d8:6f:5b:89:5b: 65:40:71:78:9c:51:5b:a8:9a:4d:8f:db:3e:a7:5d: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:81:8C:F1:62:B8:8F:70:A4:B9:43:47:04:BD:9B:16:F8:17:A1 X509v3 Authority Key Identifier: keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/GJmBjPFiuI9wpLlDRwS9mxb4F6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.167.191.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:4c:24:a9:41:1a:a0:ce:69:15:60:09:73:9e:1f:53:e1:bf: 9b:24:61:f5:3f:0d:fd:f5:2c:7b:87:4f:61:73:f3:26:83:99: bc:bb:c8:fb:1b:d1:63:c5:27:60:8f:3d:79:bd:99:4e:73:e5: a7:99:27:ce:de:ae:47:47:dd:d1:49:d4:59:c5:9a:e6:64:5a: bc:4b:a3:9a:cc:c9:d7:08:32:33:3d:63:27:26:0c:ed:9d:55: 63:4b:80:0c:12:5b:d7:82:37:2e:64:30:9c:ac:24:23:6b:c7: 87:aa:c5:e8:0e:9b:e4:f2:4d:f6:8f:53:ca:c4:50:ac:88:da: 42:3e:28:83:eb:70:9d:53:03:4a:39:ed:fd:28:2d:bc:67:66: 52:0e:e1:b8:37:47:84:ba:15:c5:90:57:a3:18:f4:2b:04:02: 7e:7a:5a:6c:e7:13:5a:de:95:67:59:62:8e:ed:3d:8b:0a:0b: a6:55:f2:c9:cd:8f:d8:89:22:d8:43:50:52:3b:aa:50:31:44: ad:c2:2e:66:ee:7b:5d:25:3d:8d:cc:4d:09:99:31:9a:86:26: 7a:50:2d:f1:06:80:84:da:17:32:49:74:47:ee:eb:6d:fa:2e: 4d:3c:0f:bc:f3:5a:f0:f2:b7:d9:be:55:d2:4d:95:d9:84:72: 7f:f6:d3:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5V90UPNA/x2xUET2r8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2 YWRjOWYwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODk5ODE4Y2YxNjJiODhmNzBhNGI5NDM0NzA0YmQ5YjE2ZjgxN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gJ8Fb8nYEjnBEwwQ08lEltFyW4a rnatqSf0dPGCvd3L2XPa0bcx58B5NbrNAZAn4P76c20ZxS9wVWjsujJqZIR78Mhe 9NVUixa00dcpBsf7dO22xZkM+rwlf77g1mU/uED8j3BOtZmLc4lmgY9UBwbonfiF cFfyy3nVWU0pHYpr8W9VTem+EKux3yiUSd0V//94sXoVtutPTVWSjyj5SLji+hLG PU8i0O1OfPVcpbb1JXrHqwCLQuf16nhW6bfcJLuW/pjQZ3JFLwj2mcfv+gWGTo7f K6QZg+P4Ol+bsPbd/XFXAq51p9S82G9biVtlQHF4nFFbqJpNj9s+p12p3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBiZgYzxYriPcKS5Q0cEvZsW+BehMB8GA1UdIwQY MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt MzIwOGRlMzljMDlkLzEvR0ptQmpQRml1STl3cExsRFJ3UzlteGI0RjZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU6e/MA0G CSqGSIb3DQEBCwUAA4IBAQAdTCSpQRqgzmkVYAlznh9T4b+bJGH1Pw399Sx7h09h c/Mmg5m8u8j7G9FjxSdgjz15vZlOc+WnmSfO3q5HR93RSdRZxZrmZFq8S6OazMnX CDIzPWMnJgztnVVjS4AMElvXgjcuZDCcrCQja8eHqsXoDpvk8k32j1PKxFCsiNpC PiiD63CdUwNKOe39KC28Z2ZSDuG4N0eEuhXFkFejGPQrBAJ+elps5xNa3pVnWWKO 7T2LCgumVfLJzY/YiSLYQ1BSO6pQMUStwi5m7ntdJT2NzE0JmTGahiZ6UC3xBoCE 2hcySXRH7utt+i5NPA+881rw8rfZvlXSTZXZhHJ/9tPV -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:21 2026 by rpki-client