This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa File: t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa (raw, json) Hash identifier: Gojw7FbJO6oLOCFdJ+IonU5RAeRQTmH3d/fqvSSbRko= Subject key identifier: B7:41:96:67:70:AE:75:09:FE:F4:86:41:6E:A9:46:46:F1:09:7B:58 Certificate issuer: /CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4 Certificate serial: 019B7FF11E52F93C8BC777B9E2B089335585 Authority key identifier: 18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa Signing time: Fri 02 Jan 2026 18:21:06 +0000 ROA not before: Fri 02 Jan 2026 18:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57888 IP address blocks: 91.205.68.0/22 maxlen: 22 93.157.192.0/21 maxlen: 21 176.108.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:1e:52:f9:3c:8b:c7:77:b9:e2:b0:89:33:55:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c68ad6f14be2172c7d0c94f4b4d4d001933bb4 Validity Not Before: Jan 2 18:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b741966770ae7509fef486416ea94646f1097b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:7c:08:7b:2b:df:e3:31:ef:12:a0:74:36: 62:1a:8f:2e:28:ea:a1:d8:c1:ab:ce:10:7a:72:8b: e9:5d:bd:fd:fe:93:6b:66:f6:81:9e:45:12:1c:b0: 1a:01:b4:86:c4:b1:e3:03:d5:f7:b1:b4:42:a7:63: 7d:2c:bd:f5:54:4a:14:fe:26:9d:6c:5b:92:a4:99: ee:87:cd:9b:c6:d4:94:7f:4f:c4:f2:14:0d:ef:a1: b8:c3:08:79:f5:37:cd:c5:1a:ef:4d:c2:f2:d5:8d: 91:18:89:99:76:c3:03:4a:3c:2d:00:bb:8d:1c:34: b1:73:23:fd:81:d6:6e:f9:ac:d7:89:be:bb:85:fd: b5:d6:60:4c:40:00:84:5c:c5:e5:ae:c2:33:d7:9b: 67:85:7f:42:bc:d1:ee:ad:fd:9c:ae:a0:32:d9:f0: 7a:de:b2:91:a9:6b:c0:67:9d:94:f9:9d:2a:1d:36: 02:e0:1d:37:11:97:4f:1d:e0:9c:be:d7:f5:81:16: 84:d9:73:84:bf:0f:ed:10:83:94:f5:13:5a:55:51: de:96:ae:6e:d6:78:c7:8e:a8:fd:c3:1c:04:f8:df: d1:c0:51:f7:3a:43:74:48:68:3d:ee:74:9f:42:50: 5c:81:3b:76:0c:f2:94:bc:70:9c:90:3b:dc:5f:37: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:96:67:70:AE:75:09:FE:F4:86:41:6E:A9:46:46:F1:09:7B:58 X509v3 Authority Key Identifier: keyid:18:C6:8A:D6:F1:4B:E2:17:2C:7D:0C:94:F4:B4:D4:D0:01:93:3B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/t0GWZ3CudQn-9IZBbqlGRvEJe1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/188f03-168f-4942-9505-19803b1fb1f0/1/GMaK1vFL4hcsfQyU9LTU0AGTO7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.68.0/22 93.157.192.0/21 176.108.56.0/21 Signature Algorithm: sha256WithRSAEncryption bb:f5:0b:c4:48:62:7d:53:66:05:72:13:0b:cd:7d:da:fb:83: 33:b3:92:17:25:db:ce:6e:46:1c:5b:0a:26:e7:d7:33:34:88: 41:25:b9:c1:af:29:77:4b:96:94:cd:32:3c:fb:a4:2d:80:9c: 08:2d:68:66:13:ff:d8:97:57:c6:4a:9a:89:40:7a:76:97:88: 74:87:9c:e6:4d:2a:99:6a:6a:84:69:7e:c9:11:a7:ac:d1:96: f2:de:8c:40:63:d2:6e:42:86:4c:7e:7f:72:f1:cd:f5:cc:c8: 99:05:5b:7e:75:d0:a7:bb:ca:c3:91:32:0e:eb:3a:ef:96:6d: cc:22:78:4b:e8:e9:cc:5d:3e:85:3c:15:60:60:50:2b:8e:ae: ae:c3:af:15:2b:c5:ca:8a:8e:cc:d2:2a:3c:8a:f5:85:62:71: c0:98:5b:c5:55:a3:7b:22:dc:73:cd:b6:40:e1:b7:b5:7f:5e: 05:ad:ea:30:1e:b0:59:a7:24:2b:ad:50:41:59:4f:e1:97:12: be:1f:0f:46:1b:0d:ce:27:44:a9:3f:7b:2f:8f:f8:34:30:cc: 12:21:0b:02:a3:93:ec:71:df:bc:41:3f:1b:e3:45:07:38:b2: 74:15:61:ef:9d:41:f0:29:1d:85:35:dc:03:b1:3b:46:cd:00: f5:25:5e:c9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8R5S+TyLx3e54rCJM1WFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YzY4YWQ2ZjE0YmUyMTcyYzdkMGM5NGY0YjRkNGQwMDE5 MzNiYjQwHhcNMjYwMTAyMTgyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQxOTY2NzcwYWU3NTA5ZmVmNDg2NDE2ZWE5NDY0NmYxMDk3YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+58CHsr3+Mx7xKgdDZiGo8uKOqh 2MGrzhB6covpXb39/pNrZvaBnkUSHLAaAbSGxLHjA9X3sbRCp2N9LL31VEoU/iad bFuSpJnuh82bxtSUf0/E8hQN76G4wwh59TfNxRrvTcLy1Y2RGImZdsMDSjwtALuN HDSxcyP9gdZu+azXib67hf211mBMQACEXMXlrsIz15tnhX9CvNHurf2crqAy2fB6 3rKRqWvAZ52U+Z0qHTYC4B03EZdPHeCcvtf1gRaE2XOEvw/tEIOU9RNaVVHelq5u 1njHjqj9wxwE+N/RwFH3OkN0SGg97nSfQlBcgTt2DPKUvHCckDvcXzeAwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLdBlmdwrnUJ/vSGQW6pRkbxCXtYMB8GA1UdIwQY MBaAFBjGitbxS+IXLH0MlPS01NABkzu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUt MTk4MDNiMWZiMWYwLzEvdDBHV1ozQ3VkUW4tOUlaQmJxbEdSdkVKZTFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xODhmMDMtMTY4Zi00OTQyLTk1MDUtMTk4MDNiMWZiMWYw LzEvR01hSzF2Rkw0aGNzZlF5VTlMVFUwQUdUTzdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW81EAwQD XZ3AAwQDsGw4MA0GCSqGSIb3DQEBCwUAA4IBAQC79QvESGJ9U2YFchMLzX3a+4Mz s5IXJdvObkYcWwom59czNIhBJbnBryl3S5aUzTI8+6QtgJwILWhmE//Yl1fGSpqJ QHp2l4h0h5zmTSqZamqEaX7JEaes0Zby3oxAY9JuQoZMfn9y8c31zMiZBVt+ddCn u8rDkTIO6zrvlm3MInhL6OnMXT6FPBVgYFArjq6uw68VK8XKio7M0io8ivWFYnHA mFvFVaN7ItxzzbZA4be1f14FreowHrBZpyQrrVBBWU/hlxK+Hw9GGw3OJ0SpP3sv j/g0MMwSIQsCo5Pscd+8QT8b40UHOLJ0FWHvnUHwKR2FNdwDsTtGzQD1JV7J -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:24 2026 by rpki-client