This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/gbxId3GOowlzCHPpf6Jyfef6KGQ.roa File: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (raw, json) Hash identifier: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds= Subject key identifier: 81:BC:48:77:71:8E:A3:09:73:08:73:E9:7F:A2:72:7D:E7:FA:28:64 Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b Certificate serial: 019B7DC9EEC1A3820A49EE1A35F04E3D385A Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/gbxId3GOowlzCHPpf6Jyfef6KGQ.roa Signing time: Fri 02 Jan 2026 08:19:04 +0000 ROA not before: Fri 02 Jan 2026 08:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 702 IP address blocks: 213.208.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ee:c1:a3:82:0a:49:ee:1a:35:f0:4e:3d:38:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b Validity Not Before: Jan 2 08:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81bc4877718ea309730873e97fa2727de7fa2864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:7e:61:56:d4:61:e7:ca:34:f7:ef:59:3b: f6:94:8b:41:f3:d3:a9:bc:8f:c9:fb:6c:6a:1a:21: bd:e6:95:b0:f6:a6:52:97:a2:ca:50:4e:20:2f:cc: 32:25:98:92:16:a8:9b:0a:fe:30:4e:56:4b:8e:63: ff:57:84:6b:d6:a5:24:6d:75:b4:f5:63:8e:0b:56: 02:be:29:47:04:3f:a6:71:f3:6d:0f:ef:f7:5a:ea: 1f:57:f3:93:54:60:3f:1d:ba:f4:a7:a5:61:9a:23: 83:41:4a:4f:e5:5c:f5:1a:f8:bf:72:75:c9:c0:d9: b3:b1:71:7b:68:ec:48:74:bf:c9:0f:b4:04:51:84: 92:ec:5f:28:8e:6d:77:06:43:d8:c9:89:ff:88:7b: 47:7f:02:c0:27:41:e4:3d:89:43:39:77:0c:b0:0f: e2:38:34:ad:14:7d:88:a4:d0:6f:80:4e:7e:56:d3: 3f:91:17:b0:c5:1c:fa:ef:71:02:9a:9c:b9:fc:63: ca:c3:bf:b8:1f:ec:a9:50:82:7f:01:30:07:f0:e4: 25:c5:d7:74:98:fb:52:f9:16:e5:04:c9:0c:63:e8: f9:ad:0f:10:85:08:5a:e4:2e:e0:0c:d5:07:db:c5: 78:53:68:b4:39:44:3d:b2:2e:3c:cf:bc:12:ff:e9: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BC:48:77:71:8E:A3:09:73:08:73:E9:7F:A2:72:7D:E7:FA:28:64 X509v3 Authority Key Identifier: keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/gbxId3GOowlzCHPpf6Jyfef6KGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.208.0.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:77:15:b0:33:d3:1d:8c:50:93:cb:b6:fb:52:d7:f8:e5:29: b7:d5:29:49:c8:75:2d:7c:1d:69:1e:47:12:03:96:59:a6:92: 4e:a7:bc:82:6d:ad:04:5d:bd:52:4c:82:ad:12:2a:9f:42:00: 16:42:af:19:2f:d0:d5:93:35:8f:d9:16:44:5e:f2:85:08:c5: 3a:d0:df:2c:a9:01:18:e3:7a:09:12:87:fe:0d:3b:ea:83:60: 78:8a:25:1d:c2:77:34:45:fd:d1:38:c1:9b:97:37:0e:83:a7: 7f:92:3f:c0:ce:f9:a8:6b:e5:ff:61:6a:5f:1b:a1:de:f4:53: 86:58:d9:a9:ef:40:7a:26:06:f6:cb:f8:4a:d1:b0:60:e2:a0: af:b5:a0:b3:d3:69:8c:3d:55:50:25:22:18:16:3a:e2:0f:7e: 60:80:07:0c:61:83:32:8a:c7:b2:fa:7f:36:06:4c:5a:7d:48: ad:52:4b:74:94:c9:99:0e:87:12:9e:a0:a6:0d:1c:a5:44:b2: 75:0d:bb:e9:8c:13:39:97:c7:79:0b:98:aa:14:12:a4:69:4d: 03:49:97:e3:e9:39:3e:80:6a:21:65:2d:42:7f:a6:07:24:9a: b3:04:1f:6d:f5:12:e6:29:3f:0f:4e:b2:80:b6:7a:b9:21:0a: ab:d5:bf:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ye7Bo4IKSe4aNfBOPThaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy Zjg4OGIwHhcNMjYwMTAyMDgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWJjNDg3NzcxOGVhMzA5NzMwODczZTk3ZmEyNzI3ZGU3ZmEyODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hh+YVbUYefKNPfvWTv2lItB89Op vI/J+2xqGiG95pWw9qZSl6LKUE4gL8wyJZiSFqibCv4wTlZLjmP/V4Rr1qUkbXW0 9WOOC1YCvilHBD+mcfNtD+/3WuofV/OTVGA/Hbr0p6VhmiODQUpP5Vz1Gvi/cnXJ wNmzsXF7aOxIdL/JD7QEUYSS7F8ojm13BkPYyYn/iHtHfwLAJ0HkPYlDOXcMsA/i ODStFH2IpNBvgE5+VtM/kRewxRz673ECmpy5/GPKw7+4H+ypUIJ/ATAH8OQlxdd0 mPtS+RblBMkMY+j5rQ8QhQha5C7gDNUH28V4U2i0OUQ9si48z7wS/+lUxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIG8SHdxjqMJcwhz6X+icn3n+ihkMB8GA1UdIwQY MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt Y2M3YWQxNmQxYjBjLzEvZ2J4SWQzR09vd2x6Q0hQcGY2SnlmZWY2S0dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1dAAMA0G CSqGSIb3DQEBCwUAA4IBAQAtdxWwM9MdjFCTy7b7Utf45Sm31SlJyHUtfB1pHkcS A5ZZppJOp7yCba0EXb1STIKtEiqfQgAWQq8ZL9DVkzWP2RZEXvKFCMU60N8sqQEY 43oJEof+DTvqg2B4iiUdwnc0Rf3ROMGblzcOg6d/kj/Azvmoa+X/YWpfG6He9FOG WNmp70B6Jgb2y/hK0bBg4qCvtaCz02mMPVVQJSIYFjriD35ggAcMYYMyisey+n82 BkxafUitUkt0lMmZDocSnqCmDRylRLJ1DbvpjBM5l8d5C5iqFBKkaU0DSZfj6Tk+ gGohZS1Cf6YHJJqzBB9t9RLmKT8PTrKAtnq5IQqr1b8p -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:27 2026 by rpki-client