This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/GXHV4yIeE_uXr_RNvJr8SVOFQ5A.roa File: GXHV4yIeE_uXr_RNvJr8SVOFQ5A.roa (raw, json) Hash identifier: tqlnNkWBmvsWCIi9jBSs1JVzONgC0EmMyLLdAg7SzVo= Subject key identifier: 19:71:D5:E3:22:1E:13:FB:97:AF:F4:4D:BC:9A:FC:49:53:85:43:90 Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Certificate serial: 019B76EB8E149E2D715D229252196449AFE7 Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/GXHV4yIeE_uXr_RNvJr8SVOFQ5A.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207990 IP address blocks: 91.132.114.0/23 maxlen: 32 91.199.253.0/24 maxlen: 24 103.240.180.0/22 maxlen: 32 193.28.182.0/24 maxlen: 32 193.28.191.0/24 maxlen: 32 193.28.202.0/24 maxlen: 32 193.28.237.0/24 maxlen: 32 213.217.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8e:14:9e:2d:71:5d:22:92:52:19:64:49:af:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1971d5e3221e13fb97aff44dbc9afc4953854390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:35:5e:ec:1a:03:38:75:e9:58:f3:8c:b5: 38:99:e5:db:ea:1d:b2:34:f3:ae:d7:00:6b:79:b3: da:52:9a:f2:6d:80:b2:ba:5f:19:75:9c:e0:cb:9f: ca:3d:0b:4c:5a:bb:ca:d8:53:9d:ca:1c:7a:c6:6d: 6a:e4:c6:e1:b3:8c:33:64:1a:a5:82:10:24:33:12: be:9e:27:2e:d2:9e:3d:7b:3c:e3:fe:a0:76:5c:62: ed:27:b7:42:6e:df:35:ad:19:4c:f7:41:36:3f:07: 99:de:16:c0:34:f3:73:69:6c:c1:10:1d:db:32:78: 03:22:ef:1d:fb:29:10:7c:a6:98:aa:30:0b:7f:7c: 26:cd:aa:e5:82:9e:74:84:56:f0:33:65:1a:b0:e8: 75:5b:a7:dd:8b:bd:d9:b3:de:70:cd:5e:c5:c4:b0: 00:a4:71:35:fc:66:ba:98:f8:de:f9:01:b2:d6:1c: 56:45:12:01:81:e0:b8:7d:ff:7b:79:8a:b0:c1:bd: bf:49:7b:9b:ed:e3:bc:d3:47:c5:6e:cf:e1:4a:d9: 8f:da:85:74:9b:b1:32:17:c4:a2:2e:ef:63:53:c9: fc:3d:b3:f1:08:3f:e0:a0:2d:8b:57:e9:74:5a:14: c7:2c:d9:92:2b:37:02:c1:d1:ab:11:2e:3a:6c:d8: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:D5:E3:22:1E:13:FB:97:AF:F4:4D:BC:9A:FC:49:53:85:43:90 X509v3 Authority Key Identifier: keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/GXHV4yIeE_uXr_RNvJr8SVOFQ5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.114.0/23 91.199.253.0/24 103.240.180.0/22 193.28.182.0/24 193.28.191.0/24 193.28.202.0/24 193.28.237.0/24 213.217.10.0/24 Signature Algorithm: sha256WithRSAEncryption 29:81:19:20:e7:ad:ce:76:90:99:fe:2a:e2:2f:23:8c:29:53: aa:cf:4f:d0:3f:0c:4e:04:81:d1:fe:8b:a6:37:ed:d1:ee:48: f8:80:4d:24:42:02:71:06:3b:79:17:b6:2f:62:14:62:3d:92: a5:4e:82:e0:e3:d9:7a:de:b4:cb:8b:9f:21:00:e9:ec:37:ef: 48:e4:04:75:5c:30:36:c8:20:42:20:b0:dc:06:0c:47:5a:45: 6e:a3:13:7c:5b:b0:3c:c8:80:9a:98:cb:87:a5:de:2b:a3:5c: e7:69:69:a5:0a:a1:26:00:2b:24:c7:fc:76:c4:f4:54:28:d8: 14:b4:23:96:c4:c0:da:5d:82:7d:9a:97:b8:9b:a8:3e:7a:0e: 12:66:45:d5:c6:02:fc:42:be:11:70:99:0a:0a:17:a6:ce:c5: b5:25:5c:01:95:b3:ad:86:1a:7e:b4:54:8c:96:e1:a2:ca:dd: 05:7a:d0:97:32:bf:79:a3:c3:91:52:32:81:d4:4f:b1:21:52: 80:8f:7c:6f:ae:b5:e8:c7:4d:69:19:f3:db:70:07:44:71:75: cf:4f:8e:24:c5:47:ae:94:4a:04:bb:19:33:6b:0b:40:9f:ce: e1:d1:03:68:6d:48:96:d4:f0:a7:ec:a3:67:c7:c5:c6:3e:19: 26:89:5d:aa -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt2644Uni1xXSKSUhlkSa/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx MGU4M2MwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTcxZDVlMzIyMWUxM2ZiOTdhZmY0NGRiYzlhZmM0OTUzODU0MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP41XuwaAzh16VjzjLU4meXb6h2y NPOu1wBrebPaUprybYCyul8ZdZzgy5/KPQtMWrvK2FOdyhx6xm1q5Mbhs4wzZBql ghAkMxK+nicu0p49ezzj/qB2XGLtJ7dCbt81rRlM90E2PweZ3hbANPNzaWzBEB3b MngDIu8d+ykQfKaYqjALf3wmzarlgp50hFbwM2UasOh1W6fdi73Zs95wzV7FxLAA pHE1/Ga6mPje+QGy1hxWRRIBgeC4ff97eYqwwb2/SXub7eO800fFbs/hStmP2oV0 m7EyF8SiLu9jU8n8PbPxCD/goC2LV+l0WhTHLNmSKzcCwdGrES46bNhl1QIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFBlx1eMiHhP7l6/0Tbya/ElThUOQMB8GA1UdIwQY MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt ZmMzN2ZiMGNkNDNiLzEvR1hIVjR5SWVFX3VYcl9STnZKcjhTVk9GUTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBW4RyAwQA W8f9AwQCZ/C0AwQAwRy2AwQAwRy/AwQAwRzKAwQAwRztAwQA1dkKMA0GCSqGSIb3 DQEBCwUAA4IBAQApgRkg563OdpCZ/iriLyOMKVOqz0/QPwxOBIHR/oumN+3R7kj4 gE0kQgJxBjt5F7YvYhRiPZKlToLg49l63rTLi58hAOnsN+9I5AR1XDA2yCBCILDc BgxHWkVuoxN8W7A8yICamMuHpd4ro1znaWmlCqEmACskx/x2xPRUKNgUtCOWxMDa XYJ9mpe4m6g+eg4SZkXVxgL8Qr4RcJkKChemzsW1JVwBlbOthhp+tFSMluGiyt0F etCXMr95o8ORUjKB1E+xIVKAj3xvrrXox01pGfPbcAdEcXXPT44kxUeulEoEuxkz awtAn87h0QNobUiW1PCn7KNnx8XGPhkmiV2q -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:33 2026 by rpki-client