This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/gGdMWhv2-eyLZOF6_Y3Kn2Ptw4E.roa File: gGdMWhv2-eyLZOF6_Y3Kn2Ptw4E.roa (raw, json) Hash identifier: ir9QpJ+cZprHCM1364jhyll9k4egUSonINRA6eynL5g= Subject key identifier: 80:67:4C:5A:1B:F6:F9:EC:8B:64:E1:7A:FD:8D:CA:9F:63:ED:C3:81 Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe Certificate serial: 019B7F138E3FB34BE53927C1CB5529B5887D Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/gGdMWhv2-eyLZOF6_Y3Kn2Ptw4E.roa Signing time: Fri 02 Jan 2026 14:19:06 +0000 ROA not before: Fri 02 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200217 IP address blocks: 193.142.60.0/24 maxlen: 24 194.153.72.0/23 maxlen: 24 217.71.192.0/23 maxlen: 24 217.71.194.0/23 maxlen: 24 217.71.196.0/23 maxlen: 24 217.71.198.0/23 maxlen: 24 2a13:7bc0::/48 maxlen: 48 2a13:7bc0:1::/48 maxlen: 48 2a13:7bc0:2::/48 maxlen: 48 2a13:7bc0:3::/48 maxlen: 48 2a13:7bc0:4::/48 maxlen: 48 2a13:7bc0:5::/48 maxlen: 48 2a13:7bc0:6::/48 maxlen: 48 2a13:7bc0:7::/48 maxlen: 48 2a13:7bc0:8::/48 maxlen: 48 2a13:7bc0:9::/48 maxlen: 48 2a13:7bc0:a::/48 maxlen: 48 2a13:7bc0:b::/48 maxlen: 48 2a13:7bc0:c::/48 maxlen: 48 2a13:7bc0:d::/48 maxlen: 48 2a13:7bc0:e::/48 maxlen: 48 2a13:7bc0:f::/48 maxlen: 48 2a13:7bc0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:8e:3f:b3:4b:e5:39:27:c1:cb:55:29:b5:88:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe Validity Not Before: Jan 2 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80674c5a1bf6f9ec8b64e17afd8dca9f63edc381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:eb:12:13:19:0c:b0:cf:05:9e:8d:a0:e3: f8:7f:f3:a1:7c:0a:10:54:c1:92:af:13:47:03:96: b0:88:13:6a:7c:60:8e:d9:7f:86:b7:78:81:9b:0b: 40:5e:45:56:18:92:89:36:a8:c7:81:bd:55:9e:2f: fa:47:88:45:95:ee:1d:28:c7:7f:8c:f9:66:31:eb: 83:ab:95:72:62:9c:4a:8d:4c:c2:49:42:ad:5c:15: 7d:14:d9:18:ea:ae:17:ba:30:e4:10:3f:4a:bf:e1: 97:ac:54:98:18:81:6d:b5:61:00:23:f8:81:c8:74: 81:ea:60:89:73:2b:a5:8c:37:60:d0:b6:70:91:7f: 0b:1c:37:21:67:d9:9a:e3:09:bd:d7:bc:2f:51:a3: 63:82:c0:8b:f7:4a:0b:cd:dc:a4:53:44:df:41:b4: 94:c1:83:a7:14:d4:87:21:d5:83:b8:0e:5d:b1:43: 28:64:6d:08:f2:c1:bd:e8:a3:a7:69:f3:18:d7:fa: 9e:f0:6b:59:93:3b:a4:cd:4d:8d:2d:68:e1:14:eb: bf:89:86:4c:ca:95:35:06:65:0e:48:47:8a:13:a9: 59:f0:f2:37:32:79:cb:6e:a7:99:bb:f6:3b:6f:30: 21:fc:e6:82:69:1d:8e:48:f6:a9:4a:74:56:91:e6: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:67:4C:5A:1B:F6:F9:EC:8B:64:E1:7A:FD:8D:CA:9F:63:ED:C3:81 X509v3 Authority Key Identifier: keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/gGdMWhv2-eyLZOF6_Y3Kn2Ptw4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.60.0/24 194.153.72.0/23 217.71.192.0/21 IPv6: 2a13:7bc0::-2a13:7bc0:10:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2c:73:53:5f:a7:07:dc:27:a0:26:58:43:d4:dc:25:fd:d5:55: 54:3f:b1:7c:a7:2a:33:4e:38:0e:ce:80:18:d7:45:a4:54:74: d0:c8:d4:67:f8:30:76:91:31:8f:55:12:c2:64:e9:a8:03:29: 90:bc:c4:ed:ac:a7:01:71:3d:92:ac:a5:6e:18:e1:25:9f:fd: 5d:69:68:f9:e7:4e:f4:a0:90:1d:16:ee:e3:19:61:12:d6:e9: 28:38:6c:39:1d:ee:d0:13:b1:82:3a:d0:f2:98:8b:08:07:ee: 6c:23:d2:b0:36:3b:93:98:93:65:d2:3c:e7:fa:66:d7:b1:eb: b6:0b:d9:f5:1b:40:48:8d:0d:73:46:17:1f:3e:1a:d2:0c:02: 13:31:9b:27:e6:20:e4:0f:5b:68:42:77:20:5f:b8:24:7a:45: 25:e2:c1:95:5c:ff:d2:53:ee:9f:1d:45:06:cb:91:d7:76:23: c9:92:f6:25:5c:5e:16:2f:b5:1f:e3:85:22:19:9f:94:75:26: 6f:fe:a1:01:7b:05:98:8e:b6:8f:3e:39:04:15:14:71:b6:bb: 56:c3:5f:97:4f:a3:c7:59:75:a9:be:29:85:6e:d8:15:92:fb: 6f:86:bc:14:4b:b9:cd:ee:68:bb:52:87:69:08:d1:9e:98:60: eb:88:41:9d -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/E44/s0vlOSfBy1UptYh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjRiMGIwNDY5ZWIwZDA3MTk5NGNkODIzOGYzNGJlZjAw YzZmYmUwHhcNMjYwMTAyMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDY3NGM1YTFiZjZmOWVjOGI2NGUxN2FmZDhkY2E5ZjYzZWRjMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GXrEhMZDLDPBZ6NoOP4f/OhfAoQ VMGSrxNHA5awiBNqfGCO2X+Gt3iBmwtAXkVWGJKJNqjHgb1Vni/6R4hFle4dKMd/ jPlmMeuDq5VyYpxKjUzCSUKtXBV9FNkY6q4XujDkED9Kv+GXrFSYGIFttWEAI/iB yHSB6mCJcyuljDdg0LZwkX8LHDchZ9ma4wm917wvUaNjgsCL90oLzdykU0TfQbSU wYOnFNSHIdWDuA5dsUMoZG0I8sG96KOnafMY1/qe8GtZkzukzU2NLWjhFOu/iYZM ypU1BmUOSEeKE6lZ8PI3MnnLbqeZu/Y7bzAh/OaCaR2OSPapSnRWkeZGCwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFIBnTFob9vnsi2Thev2Nyp9j7cOBMB8GA1UdIwQY MBaAFFH0sLBGnrDQcZlM2COPNL7wDG++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEt Nzg4NDRlMTAxMTMzLzEvZ0dkTVdodjItZXlMWk9GNl9ZM0tuMlB0dzRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9kM2FiMjgtN2Y0Ny00MWYzLWIyMzEtNzg4NDRlMTAxMTMz LzEvVWZTd3NFYWVzTkJ4bVV6WUk0ODB2dkFNYjc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQAwY48AwQB wplIAwQD2UfAMBgEAgACMBIwEAMFBioTe8ADBwAqE3vAABAwDQYJKoZIhvcNAQEL BQADggEBACxzU1+nB9wnoCZYQ9TcJf3VVVQ/sXynKjNOOA7OgBjXRaRUdNDI1Gf4 MHaRMY9VEsJk6agDKZC8xO2spwFxPZKspW4Y4SWf/V1paPnnTvSgkB0W7uMZYRLW 6Sg4bDkd7tATsYI60PKYiwgH7mwj0rA2O5OYk2XSPOf6Ztex67YL2fUbQEiNDXNG Fx8+GtIMAhMxmyfmIOQPW2hCdyBfuCR6RSXiwZVc/9JT7p8dRQbLkdd2I8mS9iVc XhYvtR/jhSIZn5R1Jm/+oQF7BZiOto8+OQQVFHG2u1bDX5dPo8dZdam+KYVu2BWS +2+GvBRLuc3uaLtSh2kI0Z6YYOuIQZ0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:03 2026 by rpki-client