This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa File: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (raw, json) Hash identifier: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0= Subject key identifier: 1A:F0:9A:2C:43:2D:AD:E5:9E:D1:31:3B:88:19:7E:16:7D:41:01:05 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB0857F5866B3516D11CD5F7F9AC4C Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39744 IP address blocks: 185.216.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:08:57:f5:86:6b:35:16:d1:1c:d5:f7:f9:ac:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1af09a2c432dade59ed1313b88197e167d410105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:04:19:6c:4d:4d:4e:9e:d2:66:46:9e:82: 78:e3:71:27:07:30:39:4b:73:0c:b5:a2:9b:1d:04: 1f:53:10:83:d1:2a:c1:6f:b9:85:3f:04:69:ad:dd: d4:66:14:96:0f:31:79:1d:4b:09:60:ec:af:46:ba: 03:91:9f:bd:ab:03:a0:8f:35:f1:e1:78:c1:1f:45: 1f:11:de:a2:31:cb:c4:03:68:12:84:10:9b:3f:77: f9:34:b3:1b:d9:67:cc:a9:71:e2:07:b2:31:b6:de: 72:58:b5:09:40:1d:be:2b:41:9c:cf:ad:de:17:ff: 49:44:39:5e:13:c2:06:58:84:a7:39:68:89:fb:63: f1:33:ca:b1:e8:09:f9:17:c7:02:4f:a5:e9:d1:f6: 48:79:34:13:69:50:6c:67:f9:36:38:6e:ea:86:44: 64:da:8e:da:6e:0c:b5:de:ba:06:79:44:9c:1c:94: 43:1d:32:3c:08:99:2b:c7:e4:31:44:ba:29:27:35: 4c:eb:cd:df:50:f1:91:de:09:c9:de:b4:fc:a9:d8: a4:a0:91:50:bb:6e:3d:12:f9:8f:1b:af:5b:c8:65: e9:39:7e:90:97:95:f1:d9:2a:73:41:9b:e8:0c:df: e6:81:f2:d2:40:ce:fc:70:1e:82:e6:8d:76:41:3a: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F0:9A:2C:43:2D:AD:E5:9E:D1:31:3B:88:19:7E:16:7D:41:01:05 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.168.0/22 Signature Algorithm: sha256WithRSAEncryption 77:e3:cd:85:85:f5:2c:9c:f3:9b:36:0c:1c:71:31:4b:7f:4e: 05:57:d1:d0:54:42:50:1a:d5:6c:ad:69:cb:8b:af:73:58:79: e3:7a:1d:2b:da:52:68:5d:c7:95:9f:3c:f5:54:78:cc:fd:f6: 02:d9:cb:88:2b:56:96:1e:db:5d:a5:68:1d:af:5e:e5:2c:69: 37:f4:bb:dc:6f:47:6a:14:9c:73:90:7d:b7:7b:7a:fc:76:36: 41:39:6f:66:75:25:5e:fe:8a:7c:04:b8:6f:11:c0:8d:43:53: 0f:4e:34:af:e3:bf:88:93:34:12:5e:5a:ed:d8:a5:b0:23:d4: f9:66:a6:ef:f8:0c:6f:7d:fc:ab:8e:ad:18:57:17:ca:ff:b2: c2:d6:fa:a2:1d:cc:0d:c8:b9:d1:cf:cf:67:1f:32:28:f7:ad: 78:c3:5e:bc:5f:ac:37:ae:2a:5e:d1:ea:ec:ab:84:85:8c:a3: 9c:1f:03:aa:3d:06:70:88:85:5a:6b:9a:74:c9:2a:ab:9b:20: 9d:15:51:45:3e:24:a4:da:ad:3c:71:d3:40:1b:25:c4:f1:c9: 33:68:45:ae:72:77:95:4e:46:28:44:28:2e:32:d5:c1:46:97: 49:d6:e0:58:64:c2:a5:af:da:b9:98:16:e4:14:6a:f1:74:bd: 15:db:7a:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26whX9YZrNRbRHNX3+axMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWYwOWEyYzQzMmRhZGU1OWVkMTMxM2I4ODE5N2UxNjdkNDEwMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIQEGWxNTU6e0mZGnoJ443EnBzA5 S3MMtaKbHQQfUxCD0SrBb7mFPwRprd3UZhSWDzF5HUsJYOyvRroDkZ+9qwOgjzXx 4XjBH0UfEd6iMcvEA2gShBCbP3f5NLMb2WfMqXHiB7Ixtt5yWLUJQB2+K0Gcz63e F/9JRDleE8IGWISnOWiJ+2PxM8qx6An5F8cCT6Xp0fZIeTQTaVBsZ/k2OG7qhkRk 2o7abgy13roGeUScHJRDHTI8CJkrx+QxRLopJzVM683fUPGR3gnJ3rT8qdikoJFQ u249EvmPG69byGXpOX6Ql5Xx2SpzQZvoDN/mgfLSQM78cB6C5o12QTrPbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrwmixDLa3lntExO4gZfhZ9QQEFMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvR3ZDYUxFTXRyZVdlMFRFN2lCbC1GbjFCQVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudioMA0G CSqGSIb3DQEBCwUAA4IBAQB3482FhfUsnPObNgwccTFLf04FV9HQVEJQGtVsrWnL i69zWHnjeh0r2lJoXceVnzz1VHjM/fYC2cuIK1aWHttdpWgdr17lLGk39Lvcb0dq FJxzkH23e3r8djZBOW9mdSVe/op8BLhvEcCNQ1MPTjSv47+IkzQSXlrt2KWwI9T5 Zqbv+Axvffyrjq0YVxfK/7LC1vqiHcwNyLnRz89nHzIo9614w168X6w3ripe0ers q4SFjKOcHwOqPQZwiIVaa5p0ySqrmyCdFVFFPiSk2q08cdNAGyXE8ckzaEWucneV TkYoRCguMtXBRpdJ1uBYZMKlr9q5mBbkFGrxdL0V23oI -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:37 2026 by rpki-client