This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/GQiwBku-A5AZLc3avjt2f6r__BY.roa File: GQiwBku-A5AZLc3avjt2f6r__BY.roa (raw, json) Hash identifier: /sgvG1yd4aMwAy5Ru1eFPap5cgqJXUuTDaejadWpONE= Subject key identifier: 19:08:B0:06:4B:BE:03:90:19:2D:CD:DA:BE:3B:76:7F:AA:FF:FC:16 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019BD667C953BB9EABEB7DD45CCE7FE65648 Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/GQiwBku-A5AZLc3avjt2f6r__BY.roa Signing time: Mon 19 Jan 2026 13:18:04 +0000 ROA not before: Mon 19 Jan 2026 13:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197000 IP address blocks: 193.0.8.0/23 maxlen: 23 193.0.8.0/24 maxlen: 24 193.0.9.0/24 maxlen: 24 2a13:27c0:30::/44 maxlen: 44 2a13:27c0:30::/48 maxlen: 48 2a13:27c0:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:67:c9:53:bb:9e:ab:eb:7d:d4:5c:ce:7f:e6:56:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jan 19 13:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1908b0064bbe0390192dcddabe3b767faafffc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:bd:5d:fa:9d:e3:f2:ca:8e:3e:e9:5f:0b: 92:10:94:b4:71:60:80:ef:a4:2a:0e:63:c0:32:66: f4:48:d6:0b:ad:32:5d:bb:85:11:74:b3:67:55:32: d3:d0:31:c1:19:a3:47:01:9f:e5:d5:4b:23:a7:54: e1:3f:eb:24:9b:53:92:ce:ef:71:dc:77:4d:76:df: a0:da:55:a7:78:1c:68:22:8a:53:b9:ef:bd:fb:7b: 63:14:99:75:db:1e:c1:9c:06:69:e5:e0:10:63:d7: 51:e4:c8:e3:63:bc:e5:db:3e:08:87:5f:a8:14:21: 78:e1:98:b1:18:cb:43:b1:c4:a8:17:1c:af:fe:54: 20:dc:7a:ff:16:b2:f9:d0:1a:7f:0c:e1:15:89:77: 23:55:65:6b:a6:74:f3:14:c1:87:74:25:bf:d9:60: 73:2d:bb:4b:af:6f:2a:5a:ab:5c:5d:41:aa:30:76: e1:1f:7b:c0:1b:b9:14:52:68:ee:fc:59:06:78:ee: 1d:94:57:c9:d3:43:8d:03:e5:fe:97:b3:21:68:40: f2:f7:80:46:08:99:ec:5b:30:73:23:71:44:d1:32: a2:b7:80:6c:66:30:11:de:cf:61:9f:1e:f9:71:f1: 5f:9e:a9:c3:21:da:af:b6:00:cf:18:42:9d:90:bb: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:08:B0:06:4B:BE:03:90:19:2D:CD:DA:BE:3B:76:7F:AA:FF:FC:16 X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/GQiwBku-A5AZLc3avjt2f6r__BY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.8.0/23 IPv6: 2a13:27c0:30::/44 Signature Algorithm: sha256WithRSAEncryption 0a:ae:f8:40:61:01:1e:24:df:9f:e5:19:9e:3d:8c:50:36:89: 43:ab:9e:a2:a3:cf:98:a8:6f:1c:14:4d:00:23:e9:47:08:ac: 36:ac:53:c5:fe:61:7b:98:80:c2:a7:53:d7:47:ac:c6:12:40: 7c:21:4f:3f:a8:47:04:65:6a:4a:db:76:83:3f:37:b7:bc:9d: 02:cd:88:74:b0:84:4d:fb:51:60:da:25:f7:12:d5:bb:c5:28: 48:2a:1b:52:e8:4b:d3:0d:29:4e:03:40:dc:29:7d:49:57:a1: f9:e7:1d:97:13:4f:13:1e:86:6d:99:48:e6:dc:0d:e6:b4:2f: 8c:2e:39:33:c4:e8:f3:46:18:5d:c8:21:e2:be:ef:d4:7d:ee: 01:b9:17:51:02:24:c1:e0:cc:01:c0:fd:28:c4:16:f8:63:1e: 63:28:4b:c5:3f:4a:d0:3c:df:f5:d3:df:17:6c:ee:1d:21:c9: b8:33:ad:dc:16:09:49:6a:4a:a2:bf:86:aa:62:9e:bf:5a:a3: 8a:a3:ce:dd:38:15:1b:05:e6:34:2b:c2:f0:1a:97:83:cc:e1: b7:fe:3a:6b:90:97:86:e7:7d:44:93:7e:c4:67:18:bc:e5:f4: 3a:13:08:8a:2e:6f:2b:17:93:de:43:4b:03:87:4f:8b:d5:a1: 83:67:2e:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZvWZ8lTu56r633UXM5/5lZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwMTE5MTMxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTA4YjAwNjRiYmUwMzkwMTkyZGNkZGFiZTNiNzY3ZmFhZmZmYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAore9Xfqd4/LKjj7pXwuSEJS0cWCA 76QqDmPAMmb0SNYLrTJdu4URdLNnVTLT0DHBGaNHAZ/l1Usjp1ThP+skm1OSzu9x 3HdNdt+g2lWneBxoIopTue+9+3tjFJl12x7BnAZp5eAQY9dR5MjjY7zl2z4Ih1+o FCF44ZixGMtDscSoFxyv/lQg3Hr/FrL50Bp/DOEViXcjVWVrpnTzFMGHdCW/2WBz LbtLr28qWqtcXUGqMHbhH3vAG7kUUmju/FkGeO4dlFfJ00ONA+X+l7MhaEDy94BG CJnsWzBzI3FE0TKit4BsZjAR3s9hnx75cfFfnqnDIdqvtgDPGEKdkLttNwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBkIsAZLvgOQGS3N2r47dn+q//wWMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvR1Fpd0JrdS1BNUFaTGMzYXZqdDJmNnJfX0JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwQAIMA8E AgACMAkDBwQqEyfAADAwDQYJKoZIhvcNAQELBQADggEBAAqu+EBhAR4k35/lGZ49 jFA2iUOrnqKjz5iobxwUTQAj6UcIrDasU8X+YXuYgMKnU9dHrMYSQHwhTz+oRwRl akrbdoM/N7e8nQLNiHSwhE37UWDaJfcS1bvFKEgqG1LoS9MNKU4DQNwpfUlXofnn HZcTTxMehm2ZSObcDea0L4wuOTPE6PNGGF3IIeK+79R97gG5F1ECJMHgzAHA/SjE FvhjHmMoS8U/StA83/XT3xds7h0hybgzrdwWCUlqSqK/hqpinr9ao4qjzt04FRsF 5jQrwvAal4PM4bf+OmuQl4bnfUSTfsRnGLzl9DoTCIoubysXk95DSwOHT4vVoYNn LgI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:36 2026 by rpki-client