This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/G-RbIUzq1PlvE-q3SCybhunvJKI.roa File: G-RbIUzq1PlvE-q3SCybhunvJKI.roa (raw, json) Hash identifier: opq2WoRARYg0RhIa4g9HMBvHxIPBPs39AMNusR3Lt3w= Subject key identifier: 1B:E4:5B:21:4C:EA:D4:F9:6F:13:EA:B7:48:2C:9B:86:E9:EF:24:A2 Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f Certificate serial: 019B7C11DCADD3B20775C715D897996950B0 Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/G-RbIUzq1PlvE-q3SCybhunvJKI.roa Signing time: Fri 02 Jan 2026 00:18:23 +0000 ROA not before: Fri 02 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214401 IP address blocks: 185.160.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:dc:ad:d3:b2:07:75:c7:15:d8:97:99:69:50:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f Validity Not Before: Jan 2 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1be45b214cead4f96f13eab7482c9b86e9ef24a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:c6:77:23:d9:11:cd:3f:b0:37:1b:04:ca: 08:27:9a:fc:dd:a9:a1:c1:ea:8d:bd:36:06:56:0e: 34:91:91:09:26:3c:29:84:35:7a:c9:fc:0b:73:bc: 8c:c5:5b:7f:2d:ae:ba:ca:83:62:fc:77:d9:85:cb: 4c:1e:d8:00:bb:cf:7e:8b:56:70:6f:4d:0b:1b:e0: 0e:f1:0a:59:e4:7c:5f:b7:cc:b9:06:81:80:17:0f: 68:b0:eb:e6:66:5b:38:cc:18:43:c4:c3:04:b1:43: 99:52:36:51:9c:40:c7:80:6f:36:df:2e:a3:9f:ef: 3c:83:11:3f:a9:c2:62:0a:ed:36:01:8d:a6:ba:03: 27:2f:6a:05:63:30:80:a6:10:1a:00:8d:6a:db:7a: f5:09:cc:07:44:a4:ba:eb:f3:42:60:e0:9b:67:3e: 94:d2:a9:20:8a:60:ce:59:c4:73:13:d2:87:e2:86: bd:f3:00:bb:6a:4a:e6:8e:0d:ea:81:76:3e:d8:af: 6a:ad:df:fb:2c:98:b8:96:eb:02:e2:3b:41:92:f5: 77:8e:86:38:7a:fa:f1:2c:02:c3:84:63:be:f8:59: 6d:26:31:20:85:d4:5f:06:28:ec:41:5f:bd:19:83: 57:aa:d0:db:74:f7:58:1f:54:63:26:f9:16:6b:75: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E4:5B:21:4C:EA:D4:F9:6F:13:EA:B7:48:2C:9B:86:E9:EF:24:A2 X509v3 Authority Key Identifier: keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/G-RbIUzq1PlvE-q3SCybhunvJKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.96.0/22 Signature Algorithm: sha256WithRSAEncryption 53:bc:5b:58:e4:8f:09:c1:7f:51:b4:de:4a:0b:c5:7c:39:3d: 72:b2:b7:88:1e:9e:97:fa:c2:51:b7:42:b6:96:0a:d6:25:45: 8d:dd:3d:c7:45:39:a5:30:31:96:cf:9b:d7:eb:a3:19:49:48: 41:38:68:07:80:99:38:b4:db:0a:55:a1:ed:8e:e8:14:20:2b: aa:e5:63:43:56:19:a8:4a:eb:02:e0:c1:39:4e:34:8e:95:51: 60:80:69:b7:0f:90:58:93:f5:65:ee:d0:e8:b9:72:a1:f9:5b: 87:4a:08:de:2c:38:12:f9:11:ab:4b:f5:31:b5:cf:17:1a:7a: df:75:a6:e9:d6:dd:a9:51:7d:ac:cd:1d:02:7a:43:25:0d:82: e0:1c:3f:be:10:fd:a6:b3:27:3f:be:55:e4:68:d9:b0:fe:17: 98:5a:39:5a:f3:83:9a:ab:d5:02:4d:25:c9:af:bd:0b:00:83: 21:46:b5:a2:7b:da:a3:c3:29:65:e9:4d:91:ef:13:81:c8:93: 88:10:79:85:97:4a:e2:f5:54:3d:cb:f0:d4:3a:79:cb:93:26: da:49:27:d8:b1:27:28:3e:1f:2d:27:83:43:f7:bb:8d:f3:be: a9:a5:8a:d9:70:40:55:2f:2b:a1:e2:cf:4a:da:12:f9:36:22: ad:ef:49:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Edyt07IHdccV2JeZaVCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMmJiZjM0NmViZDRhYTBiNzZlMTBjNTgzMjFhZDMzZDcy ZDUxOWYwHhcNMjYwMTAyMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmU0NWIyMTRjZWFkNGY5NmYxM2VhYjc0ODJjOWI4NmU5ZWYyNGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzHGdyPZEc0/sDcbBMoIJ5r83amh weqNvTYGVg40kZEJJjwphDV6yfwLc7yMxVt/La66yoNi/HfZhctMHtgAu89+i1Zw b00LG+AO8QpZ5Hxft8y5BoGAFw9osOvmZls4zBhDxMMEsUOZUjZRnEDHgG823y6j n+88gxE/qcJiCu02AY2mugMnL2oFYzCAphAaAI1q23r1CcwHRKS66/NCYOCbZz6U 0qkgimDOWcRzE9KH4oa98wC7akrmjg3qgXY+2K9qrd/7LJi4lusC4jtBkvV3joY4 evrxLALDhGO++FltJjEghdRfBijsQV+9GYNXqtDbdPdYH1RjJvkWa3VnSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvkWyFM6tT5bxPqt0gsm4bp7ySiMB8GA1UdIwQY MBaAFD4rvzRuvUqgt24QxYMhrTPXLVGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEt MWFhMjc3ZGYzNzY5LzEvRy1SYklVenExUGx2RS1xM1NDeWJodW52SktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEtMWFhMjc3ZGYzNzY5 LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaBgMA0G CSqGSIb3DQEBCwUAA4IBAQBTvFtY5I8JwX9RtN5KC8V8OT1ysreIHp6X+sJRt0K2 lgrWJUWN3T3HRTmlMDGWz5vX66MZSUhBOGgHgJk4tNsKVaHtjugUICuq5WNDVhmo SusC4ME5TjSOlVFggGm3D5BYk/Vl7tDouXKh+VuHSgjeLDgS+RGrS/Uxtc8XGnrf dabp1t2pUX2szR0CekMlDYLgHD++EP2msyc/vlXkaNmw/heYWjla84Oaq9UCTSXJ r70LAIMhRrWie9qjwyll6U2R7xOByJOIEHmFl0ri9VQ9y/DUOnnLkybaSSfYsSco Ph8tJ4ND97uN876ppYrZcEBVLyuh4s9K2hL5NiKt70kp -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:44 2026 by rpki-client