This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/GVjcU6D8aWZVpw7PDbk3WG3ZDeM.roa File: GVjcU6D8aWZVpw7PDbk3WG3ZDeM.roa (raw, json) Hash identifier: /yPUh4RShIPRU6JRwk4aAlU3tTd7eBKky9bhRB1Hohc= Subject key identifier: 19:58:DC:53:A0:FC:69:66:55:A7:0E:CF:0D:B9:37:58:6D:D9:0D:E3 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B791039EDFA677B0A7807C4111B469C93 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/GVjcU6D8aWZVpw7PDbk3WG3ZDeM.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31863 IP address blocks: 195.216.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:39:ed:fa:67:7b:0a:78:07:c4:11:1b:46:9c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1958dc53a0fc696655a70ecf0db937586dd90de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:7e:9f:f9:98:b8:30:e5:21:cc:cc:57:67: d4:6b:e3:de:39:65:bc:4f:46:22:95:15:fe:fa:5b: 30:9c:74:af:bf:21:8f:b6:9f:25:de:72:62:8b:fa: 12:e6:73:4a:76:e7:d9:2b:47:6d:bf:03:b7:4c:0e: 29:bd:23:c8:1e:f3:97:4c:a1:b4:43:f7:32:a1:62: bd:ec:9e:cc:93:0d:ff:ff:6a:8d:a3:db:4c:9b:20: df:b0:9b:1d:3f:1c:9e:3f:bc:43:9a:2b:4c:03:8b: 16:32:2e:d9:c4:ff:1b:ca:19:5e:02:94:b1:3b:f9: 02:ce:cd:3a:63:af:46:ff:93:cf:c4:93:91:ed:ac: 93:bb:bd:23:cd:89:11:64:32:9d:e6:c5:7d:da:34: 93:8d:b1:42:ab:77:c1:f6:70:e3:ca:b6:85:12:3d: 2b:20:c3:fd:00:81:ad:71:d1:ef:c9:ac:b4:27:58: 46:cc:49:44:3a:67:c8:1f:d0:e0:c3:a4:76:87:14: 1c:fa:4a:fd:9b:96:6a:8f:a2:fe:6f:3d:7b:78:b3: c4:aa:96:f9:66:7e:85:b9:9e:7f:f5:59:1d:93:29: 8a:8a:ef:cf:6e:d6:21:08:39:0f:db:fe:00:32:72: f6:03:2f:15:2e:22:0f:6c:d8:37:a9:68:fc:30:d0: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:DC:53:A0:FC:69:66:55:A7:0E:CF:0D:B9:37:58:6D:D9:0D:E3 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/GVjcU6D8aWZVpw7PDbk3WG3ZDeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.190.0/24 Signature Algorithm: sha256WithRSAEncryption 93:c4:55:21:5b:36:c1:ab:d6:93:7d:74:0b:a7:ad:58:0f:ad: 87:3e:1c:84:e0:c5:ce:0d:6c:02:ae:32:38:58:76:d2:97:42: 87:99:1e:ca:79:0e:a3:f1:10:75:9a:8e:d1:d6:f3:d9:23:34: 93:8a:20:e7:09:0f:a3:a4:4e:6f:ce:63:70:7b:17:dc:6a:ea: 57:17:24:97:98:e7:58:4c:34:1d:30:76:1e:1c:75:8e:e4:36: 20:33:08:0e:7e:79:f1:1e:1b:4c:16:91:01:7d:ed:cc:26:81: 40:e6:37:07:29:24:9e:07:89:61:67:80:f7:96:26:23:8b:8d: 1c:b8:70:77:7b:9b:a6:12:12:df:37:b8:08:f7:67:28:29:4a: 03:85:5c:d5:f0:24:0a:62:b8:9e:a2:25:be:36:50:a5:a7:fb: 6c:45:25:82:9b:2a:0f:7d:5d:34:ba:90:5b:5f:b3:df:24:a9: f1:b4:15:ea:a8:84:be:ff:0b:49:27:8f:23:a0:fc:32:1d:b9: de:4d:e4:61:5e:3d:54:05:7c:e8:6a:30:53:66:1d:e0:bd:d1: c9:50:13:d7:dc:62:60:93:1e:33:25:54:12:11:54:aa:62:2c: 47:c4:db:c8:7f:cb:34:b9:4e:cb:54:4f:09:43:27:92:cc:5f: c6:58:db:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDnt+md7CngHxBEbRpyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTU4ZGM1M2EwZmM2OTY2NTVhNzBlY2YwZGI5Mzc1ODZkZDkwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBJ+n/mYuDDlIczMV2fUa+PeOWW8 T0YilRX++lswnHSvvyGPtp8l3nJii/oS5nNKdufZK0dtvwO3TA4pvSPIHvOXTKG0 Q/cyoWK97J7Mkw3//2qNo9tMmyDfsJsdPxyeP7xDmitMA4sWMi7ZxP8byhleApSx O/kCzs06Y69G/5PPxJOR7ayTu70jzYkRZDKd5sV92jSTjbFCq3fB9nDjyraFEj0r IMP9AIGtcdHvyay0J1hGzElEOmfIH9Dgw6R2hxQc+kr9m5Zqj6L+bz17eLPEqpb5 Zn6FuZ5/9VkdkymKiu/PbtYhCDkP2/4AMnL2Ay8VLiIPbNg3qWj8MNCr5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBlY3FOg/GlmVacOzw25N1ht2Q3jMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvR1ZqY1U2RDhhV1pWcHc3UERiazNXRzNaRGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i+MA0G CSqGSIb3DQEBCwUAA4IBAQCTxFUhWzbBq9aTfXQLp61YD62HPhyE4MXODWwCrjI4 WHbSl0KHmR7KeQ6j8RB1mo7R1vPZIzSTiiDnCQ+jpE5vzmNwexfcaupXFySXmOdY TDQdMHYeHHWO5DYgMwgOfnnxHhtMFpEBfe3MJoFA5jcHKSSeB4lhZ4D3liYji40c uHB3e5umEhLfN7gI92coKUoDhVzV8CQKYrieoiW+NlClp/tsRSWCmyoPfV00upBb X7PfJKnxtBXqqIS+/wtJJ48joPwyHbneTeRhXj1UBXzoajBTZh3gvdHJUBPX3GJg kx4zJVQSEVSqYixHxNvIf8s0uU7LVE8JQyeSzF/GWNus -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:22 2026 by rpki-client