This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/GVE1_6oeRDy2_uMOn6hXFH0Z_XM.roa File: GVE1_6oeRDy2_uMOn6hXFH0Z_XM.roa (raw, json) Hash identifier: vw8nSpzF36MDWeqpnJEEtvdPvfCC/FW1EffqrG7+b7o= Subject key identifier: 19:51:35:FF:AA:1E:44:3C:B6:FE:E3:0E:9F:A8:57:14:7D:19:FD:73 Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Certificate serial: 019B7CECCED23ADE8420FADE49C08C01542D Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/GVE1_6oeRDy2_uMOn6hXFH0Z_XM.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200363 IP address blocks: 91.197.232.0/24 maxlen: 24 91.197.233.0/24 maxlen: 24 2a01:af::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ce:d2:3a:de:84:20:fa:de:49:c0:8c:01:54:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=195135ffaa1e443cb6fee30e9fa857147d19fd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:19:6f:e2:0e:d7:c0:41:c9:19:60:23:9d:0e: 72:aa:e3:24:4d:e2:d2:b7:17:49:1e:60:07:aa:50: 96:6c:1e:e6:1d:55:f3:b7:4a:ec:f6:34:36:f6:a8: 22:b9:16:99:5c:2e:77:60:cd:c8:ea:6f:36:2a:b2: 95:21:0e:e9:3c:36:75:3b:b8:59:c6:a8:06:ff:a0: d5:11:97:a0:54:05:6e:a7:42:06:2c:0a:23:fc:4e: 5c:71:93:50:c7:4e:80:1e:9b:ca:d2:50:fa:a6:2f: 1d:d2:9b:6d:9c:76:f8:60:2f:82:29:e2:b4:ba:5b: 47:0d:3d:68:8b:87:93:9e:d4:06:33:63:c1:7d:59: 5e:f5:b8:90:2c:27:e1:44:91:75:1f:54:3a:cf:74: 30:da:0b:ad:45:ac:39:32:9d:43:2a:45:b1:9c:0f: 9b:6f:4f:cb:ee:11:77:cb:12:94:d8:60:ed:85:39: ad:93:90:08:01:34:b6:4e:4c:de:61:f7:2f:13:57: 9e:2a:37:76:31:a3:d4:18:7a:db:75:5e:55:4b:67: 9a:56:f2:66:7c:31:28:43:ce:e1:9e:de:8e:43:10: f0:7b:0b:d4:f6:b2:3e:c3:f0:39:e8:6b:e0:53:a0: 83:6a:2b:bd:6f:fc:85:8a:93:43:92:5a:1c:0b:83: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:51:35:FF:AA:1E:44:3C:B6:FE:E3:0E:9F:A8:57:14:7D:19:FD:73 X509v3 Authority Key Identifier: keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/GVE1_6oeRDy2_uMOn6hXFH0Z_XM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.232.0/23 IPv6: 2a01:af::/32 Signature Algorithm: sha256WithRSAEncryption 27:60:b5:c2:76:6d:16:92:bc:0c:d4:8a:62:82:f5:c5:76:5d: bc:07:64:6e:44:ea:35:9a:be:ef:37:57:7c:67:d5:82:e3:8d: f1:ba:2f:d6:38:74:ad:dc:98:32:1b:1e:e1:e3:55:76:58:56: ff:ca:86:5b:a0:b4:d7:82:01:7a:b4:b2:cb:46:80:c2:2c:8c: 5b:ec:d3:8d:df:2d:57:3f:c1:30:61:68:62:b5:3d:f2:56:44: 08:17:82:25:0b:a5:00:6c:11:31:8e:b4:e4:64:53:80:d2:4b: 92:5a:33:8c:1a:e7:fa:2a:f6:1d:4f:41:bc:07:78:25:a2:70: 02:27:9c:fc:1b:51:87:45:56:e3:44:63:01:c0:6f:2f:fd:3a: d9:dd:97:c1:f7:a7:f7:ba:5b:a1:33:aa:f8:5b:94:b9:af:71: a3:ed:97:95:ab:4d:3b:ff:e0:68:4a:b3:10:9f:4b:0a:72:7b: 1a:ee:fe:88:eb:68:a0:bb:67:a0:9b:ef:f7:4c:24:62:d8:eb: fc:27:88:9d:85:16:6a:d3:a6:8f:2c:2e:ca:29:c8:e7:86:4f: 19:69:5c:61:41:ce:87:92:20:a0:62:08:05:10:7e:1e:96:2b: 9f:ac:45:1a:99:b2:c3:02:97:32:05:45:45:84:94:a0:29:41: 71:49:81:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87M7SOt6EIPreScCMAVQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTZhZWE2YmFiNzljNDhmNWRkZWU0YTQ2YmY0YWI2NGQ4 NjMxNjAwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTUxMzVmZmFhMWU0NDNjYjZmZWUzMGU5ZmE4NTcxNDdkMTlmZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hlv4g7XwEHJGWAjnQ5yquMkTeLS txdJHmAHqlCWbB7mHVXzt0rs9jQ29qgiuRaZXC53YM3I6m82KrKVIQ7pPDZ1O7hZ xqgG/6DVEZegVAVup0IGLAoj/E5ccZNQx06AHpvK0lD6pi8d0pttnHb4YC+CKeK0 ultHDT1oi4eTntQGM2PBfVle9biQLCfhRJF1H1Q6z3Qw2gutRaw5Mp1DKkWxnA+b b0/L7hF3yxKU2GDthTmtk5AIATS2TkzeYfcvE1eeKjd2MaPUGHrbdV5VS2eaVvJm fDEoQ87hnt6OQxDwewvU9rI+w/A56GvgU6CDaiu9b/yFipNDklocC4N/NQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBlRNf+qHkQ8tv7jDp+oVxR9Gf1zMB8GA1UdIwQY MBaAFGaWrqa6t5xI9d3uSka/SrZNhjFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2Qt ZjAxOThjNmMyNDc0LzEvR1ZFMV82b2VSRHkyX3VNT242aFhGSDBaX1hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2QtZjAxOThjNmMyNDc0 LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBW8XoMA0E AgACMAcDBQAqAQCvMA0GCSqGSIb3DQEBCwUAA4IBAQAnYLXCdm0WkrwM1IpigvXF dl28B2RuROo1mr7vN1d8Z9WC443xui/WOHSt3JgyGx7h41V2WFb/yoZboLTXggF6 tLLLRoDCLIxb7NON3y1XP8EwYWhitT3yVkQIF4IlC6UAbBExjrTkZFOA0kuSWjOM Guf6KvYdT0G8B3glonACJ5z8G1GHRVbjRGMBwG8v/TrZ3ZfB96f3uluhM6r4W5S5 r3Gj7ZeVq007/+BoSrMQn0sKcnsa7v6I62igu2egm+/3TCRi2Ov8J4idhRZq06aP LC7KKcjnhk8ZaVxhQc6HkiCgYggFEH4eliufrEUambLDApcyBUVFhJSgKUFxSYGu -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:45 2026 by rpki-client