This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa File: GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa (raw, json) Hash identifier: YTbCU6GzTrIzftbZbD0fHbZANynvTnyxCIyn5sAM1mc= Subject key identifier: 18:6E:59:F5:B7:20:46:18:F9:6E:F7:53:9A:A3:09:46:B3:A8:2F:53 Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11 Certificate serial: 019B7A5ACBB4DC61495D1C427A72E695634A Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20676 IP address blocks: 194.180.128.0/23 maxlen: 23 194.180.132.0/22 maxlen: 22 194.180.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cb:b4:dc:61:49:5d:1c:42:7a:72:e6:95:63:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=186e59f5b7204618f96ef7539aa30946b3a82f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8c:af:c6:c5:db:8f:d7:eb:20:44:8e:48:0e: f3:61:9f:c9:1e:fc:ec:c6:5d:15:55:8a:33:b4:0e: 02:97:fd:28:15:00:3f:b1:d8:56:6b:66:61:90:bb: 8e:73:5e:6e:3b:a8:d6:a2:d2:f7:b7:f5:13:27:34: b1:8a:83:25:0d:bc:f7:8c:1e:f2:8c:b9:76:44:e2: 30:17:94:99:bb:d8:c6:32:68:e2:11:c0:d3:31:31: 91:05:9a:a5:cd:4b:37:de:cb:f5:35:1d:ec:d7:9e: c5:3e:ff:a3:ae:85:6b:84:e1:d2:95:89:f9:41:23: 4f:06:7c:2d:25:81:bb:66:b2:5e:51:48:4b:b2:7e: 7e:6f:79:b9:6d:47:25:18:60:a8:dc:1a:35:f1:10: 2a:2c:c3:7f:63:cf:9d:a3:9e:bc:4f:84:49:6f:da: 9c:d0:72:c8:dd:33:29:75:18:51:c6:27:00:eb:46: cd:b1:52:aa:24:39:e2:4a:7d:91:3a:5f:1e:aa:28: 91:95:83:08:15:4d:18:da:fe:a1:94:8b:6c:59:0f: da:7b:84:e6:16:b3:3b:66:11:2e:75:2b:f9:bf:ae: b0:32:e7:5e:8f:99:01:a6:ad:3f:15:e1:27:77:37: e2:10:ce:bf:d5:40:df:86:db:86:f9:e7:8a:7d:74: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6E:59:F5:B7:20:46:18:F9:6E:F7:53:9A:A3:09:46:B3:A8:2F:53 X509v3 Authority Key Identifier: keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/GG5Z9bcgRhj5bvdTmqMJRrOoL1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.128.0/23 194.180.132.0/22 194.180.142.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:b0:33:bb:28:e9:49:f6:08:3f:9c:22:9e:fd:7d:32:c0:71: 85:1e:94:2c:bb:ad:e0:78:cb:93:c0:2b:2f:91:d6:f5:71:c7: 86:2a:17:dc:3f:7c:df:7f:0c:12:12:5d:e1:c8:44:4c:40:6f: 6e:da:16:cb:e5:ff:fa:90:0d:77:99:0b:b8:29:b4:27:8b:28: 38:ff:d7:9e:2f:99:16:67:e4:5d:08:81:aa:46:a5:17:9c:2c: 38:5e:e0:ff:e6:d8:0f:2f:23:ce:ac:0e:c0:65:3f:2e:34:93: 74:44:d0:0d:b0:6d:5c:0c:f9:02:ba:40:ac:7f:76:a7:6e:9f: ed:7f:68:14:ef:f5:7c:7c:3f:91:99:8b:6f:cd:71:31:01:12: dd:c6:95:47:b6:44:97:b7:eb:bd:11:f9:d3:b4:d8:06:32:c3: a0:d6:35:08:21:d1:75:54:34:eb:51:2e:01:1c:9b:f0:82:f3: 6f:71:5c:04:09:cd:ec:9b:64:86:0c:98:be:b4:c0:10:b0:c2: 7b:1c:27:42:7c:ac:f9:b6:19:ba:ca:4a:89:e6:1a:4a:01:32: 66:b9:f3:5e:3d:fe:db:6f:c2:ab:00:48:ce:68:ab:87:00:d1: 99:07:5e:73:fb:67:dd:bf:15:e5:65:b9:29:2e:03:42:ff:e1: a3:43:38:ba -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6Wsu03GFJXRxCenLmlWNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMWFhOTI4NTBlYmZlNjQ4YWQzZDg5YWRkOGU3MzZlYzM2 NzVhMTEwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODZlNTlmNWI3MjA0NjE4Zjk2ZWY3NTM5YWEzMDk0NmIzYTgyZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IyvxsXbj9frIESOSA7zYZ/JHvzs xl0VVYoztA4Cl/0oFQA/sdhWa2ZhkLuOc15uO6jWotL3t/UTJzSxioMlDbz3jB7y jLl2ROIwF5SZu9jGMmjiEcDTMTGRBZqlzUs33sv1NR3s157FPv+jroVrhOHSlYn5 QSNPBnwtJYG7ZrJeUUhLsn5+b3m5bUclGGCo3Bo18RAqLMN/Y8+do568T4RJb9qc 0HLI3TMpdRhRxicA60bNsVKqJDniSn2ROl8eqiiRlYMIFU0Y2v6hlItsWQ/ae4Tm FrM7ZhEudSv5v66wMudej5kBpq0/FeEndzfiEM6/1UDfhtuG+eeKfXTY6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBhuWfW3IEYY+W73U5qjCUazqC9TMB8GA1UdIwQY MBaAFOEaqShQ6/5kitPYmt2Oc27DZ1oRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEt MGY4OGQxNmUxYWZlLzEvR0c1WjliY2dSaGo1YnZkVG1xTUpSck9vTDFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8yZWJiYTUtN2EwZC00MzMzLWI5MTEtMGY4OGQxNmUxYWZl LzEvNFJxcEtGRHJfbVNLMDlpYTNZNXpic05uV2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwrSAAwQC wrSEAwQBwrSOMA0GCSqGSIb3DQEBCwUAA4IBAQA6sDO7KOlJ9gg/nCKe/X0ywHGF HpQsu63geMuTwCsvkdb1cceGKhfcP3zffwwSEl3hyERMQG9u2hbL5f/6kA13mQu4 KbQniyg4/9eeL5kWZ+RdCIGqRqUXnCw4XuD/5tgPLyPOrA7AZT8uNJN0RNANsG1c DPkCukCsf3anbp/tf2gU7/V8fD+RmYtvzXExARLdxpVHtkSXt+u9EfnTtNgGMsOg 1jUIIdF1VDTrUS4BHJvwgvNvcVwECc3sm2SGDJi+tMAQsMJ7HCdCfKz5thm6ykqJ 5hpKATJmufNePf7bb8KrAEjOaKuHANGZB15z+2fdvxXlZbkpLgNC/+GjQzi6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:41 2026 by rpki-client