This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa File: Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa (raw, json) Hash identifier: yU2DLGFjN9TCcYSlsrT9XWj7qaKv71819e5tIEo7sAw= Subject key identifier: 19:BC:FE:06:01:0C:62:4F:C4:67:FD:FB:9D:0A:BD:9E:29:12:30:23 Certificate issuer: /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Certificate serial: 019B79ED2DC2BDD71DD87402775E0CC89350 Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204890 IP address blocks: 92.119.45.0/24 maxlen: 24 92.119.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2d:c2:bd:d7:1d:d8:74:02:77:5e:0c:c8:93:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19bcfe06010c624fc467fdfb9d0abd9e29123023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:cd:25:ce:60:5f:c1:14:1d:ca:94:1b:50: c4:e1:ed:70:5f:a5:01:1f:c0:ef:bb:9f:8b:5b:f2: 76:b6:f1:d8:25:8d:00:90:fc:a8:97:64:b0:a4:f9: 7c:75:39:fa:71:b0:5b:bc:d4:e9:11:f7:12:a5:9f: 23:2b:a8:97:af:ff:cd:5b:96:f2:fe:be:14:0f:53: e4:d7:8b:7d:7c:e2:6b:6d:f9:c2:80:b3:b7:d7:6a: 0f:1f:c4:74:c2:0a:f6:de:be:9e:e1:e6:df:b3:60: 27:d2:53:3e:30:ce:d1:e3:84:c8:b3:49:bd:40:9b: 90:bb:ab:b2:2c:9c:6a:d1:c4:16:b5:2a:16:13:eb: 7e:2c:78:b0:79:9e:66:35:f1:53:1b:f8:64:f3:a5: af:d6:90:bf:7d:93:2d:ad:9f:e7:53:87:55:80:55: 2f:85:ea:d0:bd:b2:87:ae:8e:ea:6f:f3:cc:d8:5a: 5b:39:86:f9:16:21:81:f3:ee:20:55:c4:0b:91:1e: 7a:35:3c:0b:cb:03:72:f4:85:26:a5:2b:77:17:49: f5:5c:bf:29:41:9d:6c:9f:1e:e7:a2:01:61:dd:d6: 62:68:09:77:7b:b5:ab:1d:2b:ce:46:64:fb:07:22: 9e:bf:2d:2f:dc:53:35:3f:21:95:79:df:f5:74:d3: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BC:FE:06:01:0C:62:4F:C4:67:FD:FB:9D:0A:BD:9E:29:12:30:23 X509v3 Authority Key Identifier: keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/Gbz-BgEMYk_EZ_37nQq9nikSMCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.45.0-92.119.46.255 Signature Algorithm: sha256WithRSAEncryption 82:98:e2:a6:a1:2e:9c:aa:ea:a0:fd:f5:53:08:81:92:b5:ed: 06:8f:cc:c8:36:90:9d:df:14:b8:6d:b7:d6:85:ec:e6:2f:58: 13:7b:0c:24:f0:6c:0e:e2:d1:4d:46:57:7c:73:2c:82:86:d9: a1:41:84:3b:05:cd:e3:20:e7:7d:36:d7:b7:d8:34:88:3b:67: 91:94:fe:63:56:5d:d1:b4:fd:f2:bb:0e:95:c5:e0:15:3f:e0: 4e:71:20:70:92:d8:e5:25:81:ae:d5:67:0d:18:a9:49:40:14: 3f:2b:22:e7:ee:50:f1:3a:18:e8:e7:28:e8:bb:85:7e:8d:73: f1:49:f9:be:97:44:0c:b8:8c:f0:14:6f:dc:89:23:39:50:d1: 38:8b:3b:e3:c3:d7:62:51:7e:cb:30:6f:3d:39:e0:b4:0d:76: c6:ea:5a:3d:15:87:26:67:31:c4:6b:fd:bb:91:7d:2a:b9:9d: f9:b6:c8:c6:c8:0f:d1:35:b4:98:44:88:bb:5d:96:33:8c:de: 6d:f5:b8:c7:96:f2:23:59:77:c7:af:06:5b:6d:57:a2:19:9b: 85:c6:88:52:f3:8b:9a:47:e0:2d:62:43:25:24:93:6b:a4:ff: 71:26:14:83:03:d0:4f:c8:5e:34:c2:76:9d:d9:31:e0:69:e2: 09:3e:93:55 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57S3Cvdcd2HQCd14MyJNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmRiYjJjM2Y5ODIzMjhlMDc0OTUxNDc5MWNlYmMyZTBl YTlmODgwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWJjZmUwNjAxMGM2MjRmYzQ2N2ZkZmI5ZDBhYmQ5ZTI5MTIzMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GXNJc5gX8EUHcqUG1DE4e1wX6UB H8Dvu5+LW/J2tvHYJY0AkPyol2SwpPl8dTn6cbBbvNTpEfcSpZ8jK6iXr//NW5by /r4UD1Pk14t9fOJrbfnCgLO312oPH8R0wgr23r6e4ebfs2An0lM+MM7R44TIs0m9 QJuQu6uyLJxq0cQWtSoWE+t+LHiweZ5mNfFTG/hk86Wv1pC/fZMtrZ/nU4dVgFUv herQvbKHro7qb/PM2FpbOYb5FiGB8+4gVcQLkR56NTwLywNy9IUmpSt3F0n1XL8p QZ1snx7nogFh3dZiaAl3e7WrHSvORmT7ByKevy0v3FM1PyGVed/1dNNhFwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBm8/gYBDGJPxGf9+50KvZ4pEjAjMB8GA1UdIwQY MBaAFP5tuyw/mCMo4HSVFHkc68Lg6p+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAt NTMxMjY2ZGYzMmMwLzEvR2J6LUJnRU1Za19FWl8zN25RcTluaWtTTUNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lMDgzNTUtY2JkMC00MDEyLWJjZjAtNTMxMjY2ZGYzMmMw LzEvX20yN0xELVlJeWpnZEpVVWVSenJ3dURxbjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABcdy0D BABcdy4wDQYJKoZIhvcNAQELBQADggEBAIKY4qahLpyq6qD99VMIgZK17QaPzMg2 kJ3fFLhtt9aF7OYvWBN7DCTwbA7i0U1GV3xzLIKG2aFBhDsFzeMg530217fYNIg7 Z5GU/mNWXdG0/fK7DpXF4BU/4E5xIHCS2OUlga7VZw0YqUlAFD8rIufuUPE6GOjn KOi7hX6Nc/FJ+b6XRAy4jPAUb9yJIzlQ0TiLO+PD12JRfsswbz054LQNdsbqWj0V hyZnMcRr/buRfSq5nfm2yMbID9E1tJhEiLtdljOM3m31uMeW8iNZd8evBlttV6IZ m4XGiFLzi5pH4C1iQyUkk2uk/3EmFIMD0E/IXjTCdp3ZMeBp4gk+k1U= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:56 2026 by rpki-client