This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/gbvXGrxGB3G5yTzOiD7ZYWMB4-Y.roa File: gbvXGrxGB3G5yTzOiD7ZYWMB4-Y.roa (raw, json) Hash identifier: lOpwjGHeMKOcPIBe42SrkQp6oJ0QexxpdTPML3+d34o= Subject key identifier: 81:BB:D7:1A:BC:46:07:71:B9:C9:3C:CE:88:3E:D9:61:63:01:E3:E6 Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15C63BB5469CBC9ED74073AF7812BC Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/gbvXGrxGB3G5yTzOiD7ZYWMB4-Y.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209774 IP address blocks: 194.179.123.0/24 maxlen: 24 212.170.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c6:3b:b5:46:9c:bc:9e:d7:40:73:af:78:12:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81bbd71abc460771b9c93cce883ed9616301e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:c6:f5:e3:43:a7:e0:f0:70:ce:fb:35:71: e7:3f:68:22:cb:b4:df:13:a8:89:a6:fd:b6:f8:9f: 17:d2:9a:c2:21:81:52:ea:25:bf:12:bb:79:ed:17: 7b:b2:87:c1:6c:8b:ab:6c:3d:a5:32:d1:53:93:33: 9b:8b:73:66:ab:22:dc:b6:e0:68:d0:29:0d:4b:af: d3:c6:7c:09:a3:f4:4c:80:78:49:f4:e9:4c:60:9a: 95:99:37:45:18:e5:da:d7:a0:b0:4a:7d:94:05:41: 5c:a3:b2:7e:5d:51:91:7b:8c:15:55:2a:ef:b8:1f: 9f:97:43:52:3a:36:31:a3:4c:c1:37:73:fa:5a:d9: 5e:70:5a:94:7b:fb:21:33:1d:b3:2a:12:87:c4:6c: 37:a3:03:66:19:5a:66:78:9a:9c:09:52:3c:57:89: 6c:a3:4f:e1:06:37:89:9a:38:fe:a0:fe:10:d6:0e: f5:5f:99:0c:0e:81:e9:b2:6e:bc:da:e9:da:13:a3: 70:b7:74:f0:e2:95:c2:99:08:02:59:18:88:03:02: 58:e9:56:15:3a:ad:2b:8d:bd:bc:8d:7b:83:cc:fb: ab:1b:97:8e:c9:d2:42:f7:51:1f:a9:61:24:8e:61: ed:4e:a6:51:51:0d:99:be:2b:2a:be:14:fb:cf:de: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BB:D7:1A:BC:46:07:71:B9:C9:3C:CE:88:3E:D9:61:63:01:E3:E6 X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/gbvXGrxGB3G5yTzOiD7ZYWMB4-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.179.123.0/24 212.170.158.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:8b:6c:6c:b5:9d:ef:b8:6d:03:be:2c:bf:47:e1:3f:b8:56: 95:04:bf:ba:95:ae:a9:2d:6f:a6:d3:2d:34:75:ca:a8:4f:b1: ce:4f:99:7a:c7:8c:87:99:88:eb:24:29:69:41:be:17:bd:02: be:47:13:29:0f:cb:56:eb:05:27:c0:8f:72:7f:bd:eb:c8:82: 7e:eb:13:0f:23:86:67:2a:f0:97:24:84:f4:49:ea:ad:10:53: 4e:be:80:89:c6:4e:0c:52:c3:b7:53:42:35:18:98:dd:5b:0a: ee:8f:cb:56:f8:50:35:ac:1b:27:ab:21:5e:13:05:ac:7c:d7: 3f:40:e5:b7:60:36:6d:a8:cc:e4:0d:b6:d7:34:e4:26:70:6c: cc:04:6a:f5:72:16:cb:e2:77:1c:94:7b:28:93:c1:dc:b4:78: fd:93:7a:ce:51:96:8b:cb:a1:f8:48:83:29:1f:42:db:ab:d1: 2d:51:8f:a7:85:cd:b7:bc:3b:c7:ad:a9:fb:c4:4d:b5:ca:92: 70:38:74:52:c5:5f:8d:72:5a:25:ff:2e:5b:e3:61:65:69:3e: bf:95:49:8b:87:3d:08:f0:61:0f:71:32:43:32:62:86:96:d4: 37:2a:90:82:d8:46:95:16:2e:c4:e3:e1:a1:58:20:ed:33:7a: c5:d8:dc:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FcY7tUacvJ7XQHOveBK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWJiZDcxYWJjNDYwNzcxYjljOTNjY2U4ODNlZDk2MTYzMDFlM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPnG9eNDp+DwcM77NXHnP2giy7Tf E6iJpv22+J8X0prCIYFS6iW/Ert57Rd7sofBbIurbD2lMtFTkzObi3NmqyLctuBo 0CkNS6/TxnwJo/RMgHhJ9OlMYJqVmTdFGOXa16CwSn2UBUFco7J+XVGRe4wVVSrv uB+fl0NSOjYxo0zBN3P6WtlecFqUe/shMx2zKhKHxGw3owNmGVpmeJqcCVI8V4ls o0/hBjeJmjj+oP4Q1g71X5kMDoHpsm682unaE6Nwt3Tw4pXCmQgCWRiIAwJY6VYV Oq0rjb28jXuDzPurG5eOydJC91EfqWEkjmHtTqZRUQ2ZvisqvhT7z94L6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIG71xq8Rgdxuck8zog+2WFjAePmMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvZ2J2WEdyeEdCM0c1eVR6T2lEN1pZV01CNC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwrN7AwQA 1KqeMA0GCSqGSIb3DQEBCwUAA4IBAQALi2xstZ3vuG0Dviy/R+E/uFaVBL+6la6p LW+m0y00dcqoT7HOT5l6x4yHmYjrJClpQb4XvQK+RxMpD8tW6wUnwI9yf73ryIJ+ 6xMPI4ZnKvCXJIT0SeqtEFNOvoCJxk4MUsO3U0I1GJjdWwruj8tW+FA1rBsnqyFe EwWsfNc/QOW3YDZtqMzkDbbXNOQmcGzMBGr1chbL4ncclHsok8HctHj9k3rOUZaL y6H4SIMpH0Lbq9EtUY+nhc23vDvHran7xE21ypJwOHRSxV+Nclol/y5b42FlaT6/ lUmLhz0I8GEPcTJDMmKGltQ3KpCC2EaVFi7E4+GhWCDtM3rF2Nzy -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:21 2026 by rpki-client