This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa File: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (raw, json) Hash identifier: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ= Subject key identifier: 80:12:45:72:86:1B:90:11:CC:63:94:CC:F0:86:38:CC:7C:1D:EE:5F Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Certificate serial: 019B79107BA5FB303C5F7E7487EC9025907D Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa Signing time: Thu 01 Jan 2026 10:18:01 +0000 ROA not before: Thu 01 Jan 2026 10:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19399 IP address blocks: 194.1.186.0/23 maxlen: 23 194.4.8.0/23 maxlen: 23 2a00:f060::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7b:a5:fb:30:3c:5f:7e:74:87:ec:90:25:90:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Validity Not Before: Jan 1 10:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80124572861b9011cc6394ccf08638cc7c1dee5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e5:3a:fa:95:26:89:05:8b:52:c8:45:43:4a: 53:99:71:10:69:31:6e:88:9a:30:59:90:a6:9e:78: c3:8e:a7:b0:d6:58:2c:70:47:da:ed:dc:74:9e:87: 8a:8a:d3:c0:f4:4b:f3:fd:06:f4:65:f7:fb:81:ef: ac:89:a2:6f:d4:ce:dc:38:45:7a:78:1d:c8:da:a5: cf:8f:f7:a8:41:5d:86:46:d3:55:01:3c:16:a7:fc: 69:0c:16:1f:72:70:7a:68:05:c7:97:53:29:9c:ba: c2:36:37:90:0f:51:3e:50:af:6c:d9:7d:a9:6a:aa: 89:8b:d2:24:f6:6a:29:d6:35:02:e7:17:1e:cd:6b: a6:33:de:8a:92:2f:ee:bc:7b:50:45:98:c6:3a:73: 7d:0b:55:92:bf:1b:34:dd:28:48:7b:10:8c:63:1f: df:2e:5d:07:64:0d:2b:ea:40:9c:cd:14:5d:e2:d3: 4e:e7:cd:e1:69:2e:55:13:67:93:dd:6f:6a:26:e3: 8f:8c:00:b0:64:9e:14:4c:19:c7:19:49:e3:87:df: 8b:b3:36:0b:1f:0a:1c:a3:97:ad:b6:a9:aa:52:99: 90:44:90:c1:3b:05:09:ce:25:c1:5c:eb:a8:5e:62: 51:a8:1b:1b:d9:f4:fe:80:bc:ea:af:46:45:68:31: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:12:45:72:86:1B:90:11:CC:63:94:CC:F0:86:38:CC:7C:1D:EE:5F X509v3 Authority Key Identifier: keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.186.0/23 194.4.8.0/23 IPv6: 2a00:f060::/32 Signature Algorithm: sha256WithRSAEncryption 9c:03:cc:54:3a:0b:3c:41:d8:90:75:e5:5e:49:56:f6:b2:9c: f7:7e:73:13:eb:e3:6d:d2:0a:6c:55:87:69:27:31:bd:49:03: d3:6d:f6:67:85:d8:87:f1:ae:b2:a1:4e:89:a1:79:b1:30:34: 50:06:4c:cc:b6:09:48:45:c8:73:4a:e3:17:65:4c:d5:89:ee: cf:5c:d4:cf:93:b0:ba:37:c1:c6:8f:a2:9c:0d:71:c4:03:ac: 67:52:72:90:1d:d0:c9:55:45:04:e6:91:2d:a2:cd:0a:a8:14: d2:cf:d8:41:82:8f:3b:58:e0:a3:ad:f7:a9:a0:bb:8f:5b:6d: 63:84:c2:8a:4d:6a:c4:40:01:a5:9e:d7:af:43:f2:43:14:72: 59:24:40:6c:66:c5:1d:b9:6f:0f:08:34:d1:2d:b2:4c:b2:8f: e7:ae:df:15:77:49:0c:e8:24:5c:af:22:1e:11:5e:cd:1a:b3: 47:69:7c:de:90:1f:39:3d:3a:ee:e2:e6:7c:cf:d9:be:68:a0: 33:fd:88:56:ca:b6:3f:cc:a0:e2:cf:de:9b:c6:2f:c2:6e:81: 77:fc:12:76:2e:93:e9:e3:a6:6d:00:17:ab:52:e2:3c:b8:c8: 3f:f6:4a:02:57:01:bd:04:7c:25:1c:d7:b5:05:c5:9c:45:bc: a7:6c:14:3d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EHul+zA8X350h+yQJZB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw YjFmOTcwHhcNMjYwMTAxMTAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDEyNDU3Mjg2MWI5MDExY2M2Mzk0Y2NmMDg2MzhjYzdjMWRlZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOU6+pUmiQWLUshFQ0pTmXEQaTFu iJowWZCmnnjDjqew1lgscEfa7dx0noeKitPA9Evz/Qb0Zff7ge+siaJv1M7cOEV6 eB3I2qXPj/eoQV2GRtNVATwWp/xpDBYfcnB6aAXHl1MpnLrCNjeQD1E+UK9s2X2p aqqJi9Ik9mop1jUC5xcezWumM96Kki/uvHtQRZjGOnN9C1WSvxs03ShIexCMYx/f Ll0HZA0r6kCczRRd4tNO583haS5VE2eT3W9qJuOPjACwZJ4UTBnHGUnjh9+LszYL Hwoco5ettqmqUpmQRJDBOwUJziXBXOuoXmJRqBsb2fT+gLzqr0ZFaDGz9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIASRXKGG5ARzGOUzPCGOMx8He5fMB8GA1UdIwQY MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt YmFjYWUwMzBlMzc0LzEvZ0JKRmNvWWJrQkhNWTVUTThJWTR6SHdkN2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0 LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwgG6AwQB wgQIMA0EAgACMAcDBQAqAPBgMA0GCSqGSIb3DQEBCwUAA4IBAQCcA8xUOgs8QdiQ deVeSVb2spz3fnMT6+Nt0gpsVYdpJzG9SQPTbfZnhdiH8a6yoU6JoXmxMDRQBkzM tglIRchzSuMXZUzVie7PXNTPk7C6N8HGj6KcDXHEA6xnUnKQHdDJVUUE5pEtos0K qBTSz9hBgo87WOCjrfepoLuPW21jhMKKTWrEQAGlntevQ/JDFHJZJEBsZsUduW8P CDTRLbJMso/nrt8Vd0kM6CRcryIeEV7NGrNHaXzekB85PTru4uZ8z9m+aKAz/YhW yrY/zKDiz96bxi/CboF3/BJ2LpPp46ZtABerUuI8uMg/9koCVwG9BHwlHNe1BcWc RbynbBQ9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:49 2026 by rpki-client