This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/GfskLOZoVhgQg_wzxEm8GfZcHM4.roa File: GfskLOZoVhgQg_wzxEm8GfZcHM4.roa (raw, json) Hash identifier: ofrsA1DT7Aku9raL2XzjxdFLHd4Z33+79Febk9dotIQ= Subject key identifier: 19:FB:24:2C:E6:68:56:18:10:83:FC:33:C4:49:BC:19:F6:5C:1C:CE Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a Certificate serial: 019B7F1556B6E953F53C4D0A340A424F2172 Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/GfskLOZoVhgQg_wzxEm8GfZcHM4.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39592 IP address blocks: 195.244.28.0/23 maxlen: 23 195.244.28.0/24 maxlen: 24 195.244.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:56:b6:e9:53:f5:3c:4d:0a:34:0a:42:4f:21:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19fb242ce66856181083fc33c449bc19f65c1cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:3e:7e:8e:f5:51:3b:41:47:bd:41:f6:af: 21:2a:0c:c5:69:ef:eb:4e:9b:1f:e6:0f:13:36:c7: 19:6a:df:ea:9f:ab:ce:5e:b7:35:76:8e:6c:ba:e7: c9:98:cd:a6:dd:38:36:f5:0c:fd:83:aa:08:a3:39: 7e:63:74:6b:02:f9:79:ea:72:24:40:7b:44:7c:9f: 42:04:8e:69:89:e6:fa:00:90:1b:73:84:2b:34:b2: 55:4a:36:ad:02:8e:93:e2:c4:ec:2c:dd:7d:58:46: 7f:7e:64:71:60:f6:c6:f2:84:aa:ee:e1:3e:a1:bb: 43:31:c2:b4:71:c0:e2:d3:04:c2:e2:ef:c6:eb:fd: e4:21:e1:8d:d0:2b:f8:ff:c2:3d:1b:4e:a1:e3:68: 43:61:90:42:db:ce:e1:fc:5f:8f:ce:4b:8d:55:cb: 8d:84:39:dc:d3:29:1b:29:26:f9:b9:68:10:6e:d9: cf:05:96:a2:14:68:5f:3d:f0:87:ba:cf:aa:c5:26: f0:ec:4c:da:aa:0c:67:2c:97:76:7c:35:89:10:84: 2f:ad:40:dc:15:9f:65:ec:b5:2e:16:dc:27:97:80: 26:0f:a0:ec:bb:a2:33:bc:f3:c1:81:ed:39:dd:1f: 18:3c:ba:a1:3e:64:f2:d9:f1:56:aa:67:5b:2e:6f: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:24:2C:E6:68:56:18:10:83:FC:33:C4:49:BC:19:F6:5C:1C:CE X509v3 Authority Key Identifier: keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/GfskLOZoVhgQg_wzxEm8GfZcHM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.28.0/23 Signature Algorithm: sha256WithRSAEncryption 02:7f:45:7f:1a:a0:e8:d1:21:14:bd:4e:0b:81:d6:b4:23:38: 57:0b:77:63:b3:a5:30:96:62:af:69:ea:ae:df:73:d5:ca:5a: 84:5f:5e:3c:6d:35:d0:1e:9b:b2:98:1f:b8:33:9e:fc:2d:eb: ec:13:bd:d6:ed:7a:57:33:ac:25:cf:24:b9:e7:cd:74:f4:01: 3d:6b:b8:1a:e1:25:89:3f:7d:a4:e7:6c:9a:82:b9:ac:fc:3a: fe:88:a4:11:99:ad:49:14:93:bc:47:3d:49:7d:a0:ff:c6:fa: 5a:f7:d6:16:c4:91:ec:66:fa:e8:0d:44:99:74:6a:33:4c:db: ae:79:5a:1d:2f:18:ad:e7:2f:22:0e:0a:df:0d:29:0d:25:72: 80:a8:3d:86:6e:37:66:37:39:0e:3c:61:f3:4b:96:54:02:10: cd:8c:09:d7:6b:07:de:ae:3e:45:30:0b:7e:cb:84:10:e6:a1: 48:03:e8:63:d8:0c:1f:66:8c:7c:9f:04:97:a6:ef:4a:20:44: b5:d2:d0:d0:73:94:14:f7:fd:f7:bb:c8:ee:10:ad:5c:39:fd: f8:3d:23:20:41:8c:7f:e9:15:57:c8:67:fe:22:75:55:60:40: 63:81:ac:11:3a:13:57:fe:7c:76:a5:61:e8:2f:9e:e4:83:13: 3f:0e:25:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVa26VP1PE0KNApCTyFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm ZTAwOWEwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWZiMjQyY2U2Njg1NjE4MTA4M2ZjMzNjNDQ5YmMxOWY2NWMxY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4c+fo71UTtBR71B9q8hKgzFae/r Tpsf5g8TNscZat/qn6vOXrc1do5suufJmM2m3Tg29Qz9g6oIozl+Y3RrAvl56nIk QHtEfJ9CBI5pieb6AJAbc4QrNLJVSjatAo6T4sTsLN19WEZ/fmRxYPbG8oSq7uE+ obtDMcK0ccDi0wTC4u/G6/3kIeGN0Cv4/8I9G06h42hDYZBC287h/F+PzkuNVcuN hDnc0ykbKSb5uWgQbtnPBZaiFGhfPfCHus+qxSbw7EzaqgxnLJd2fDWJEIQvrUDc FZ9l7LUuFtwnl4AmD6Dsu6IzvPPBge053R8YPLqhPmTy2fFWqmdbLm93bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBn7JCzmaFYYEIP8M8RJvBn2XBzOMB8GA1UdIwQY MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt ZWZhYWZmMGE5ODJmLzEvR2Zza0xPWm9WaGdRZ193enhFbThHZlpjSE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QcMA0G CSqGSIb3DQEBCwUAA4IBAQACf0V/GqDo0SEUvU4Lgda0IzhXC3djs6UwlmKvaequ 33PVylqEX148bTXQHpuymB+4M578LevsE73W7XpXM6wlzyS558109AE9a7ga4SWJ P32k52yagrms/Dr+iKQRma1JFJO8Rz1JfaD/xvpa99YWxJHsZvroDUSZdGozTNuu eVodLxit5y8iDgrfDSkNJXKAqD2GbjdmNzkOPGHzS5ZUAhDNjAnXawferj5FMAt+ y4QQ5qFIA+hj2AwfZox8nwSXpu9KIES10tDQc5QU9/33u8juEK1cOf34PSMgQYx/ 6RVXyGf+InVVYEBjgawROhNX/nx2pWHoL57kgxM/DiUf -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:54 2026 by rpki-client