This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GgsPZtT4NnP21kLaKiiN_xNETEU.roa File: GgsPZtT4NnP21kLaKiiN_xNETEU.roa (raw, json) Hash identifier: tja2veN/ZL+BoUigvn0/gDcsWhJOcNHzSiwtUODguNg= Subject key identifier: 1A:0B:0F:66:D4:F8:36:73:F6:D6:42:DA:2A:28:8D:FF:13:44:4C:45 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6971372F54254FED896BEE998E121 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GgsPZtT4NnP21kLaKiiN_xNETEU.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396576 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:13:72:f5:42:54:fe:d8:96:be:e9:98:e1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a0b0f66d4f83673f6d642da2a288dff13444c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:2b:87:a7:79:2f:a1:a6:0d:b7:03:43:66: 73:2a:2b:5b:d7:78:61:04:b2:ad:dc:f3:11:34:c9: 6c:fd:bf:8e:b1:37:d2:09:80:c1:e1:e0:84:73:96: 6d:4a:22:8d:ca:33:17:82:d1:b3:44:a2:6a:c4:1c: 99:6f:8c:bd:a2:53:42:a8:ab:c3:42:f0:69:ea:67: 11:61:52:0a:3f:f2:08:9f:f1:54:5d:39:19:d9:f1: 03:f4:18:f2:af:dc:b3:a3:3b:2f:9d:b9:4b:19:fe: 8d:ca:3b:3a:4b:e0:97:48:44:f5:2e:4c:d3:35:5c: b7:00:8e:23:aa:93:de:fc:b2:75:8f:c2:2d:99:88: b4:7a:f2:91:15:a3:a7:49:cb:a6:eb:8d:b1:68:e5: 97:b4:13:2d:f6:ba:4c:03:46:84:bb:51:2a:06:3c: 3f:df:bf:cd:16:18:3f:d4:d1:6a:6a:f1:ff:0b:47: 2c:f4:82:b7:92:c3:56:14:44:fe:80:4c:61:6b:d1: 0b:42:14:d0:51:85:22:b8:d1:d8:7d:1d:b8:64:72: f2:67:52:85:eb:cd:4a:99:fb:d2:c3:81:ca:91:75: 65:fb:75:ed:a7:26:b0:e4:ad:b3:cc:a8:d8:1c:7d: 42:68:ff:bc:5c:aa:69:39:24:c9:ff:48:9d:8f:9e: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0B:0F:66:D4:F8:36:73:F6:D6:42:DA:2A:28:8D:FF:13:44:4C:45 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GgsPZtT4NnP21kLaKiiN_xNETEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 13:a1:d2:26:5a:b8:79:fd:c7:84:6a:e4:af:91:f4:ae:f1:c4: 4c:00:6b:d8:0a:f2:e6:0e:91:e2:d7:7a:a7:ca:dd:4a:89:29: bd:1e:5a:41:1b:82:4b:74:be:13:52:ff:37:c3:92:91:09:d8: 6a:06:cc:81:32:de:f1:6d:45:4e:60:67:32:1b:69:52:26:d4: e2:93:10:d8:88:ac:83:82:fc:3c:2a:16:70:44:1b:02:36:dd: 58:ca:95:05:e6:e8:60:aa:b6:53:a0:06:ca:bd:57:5a:86:91: 1f:35:a5:c4:9e:d7:44:de:21:78:57:0a:5c:cf:5a:bb:b0:66: d2:18:08:6a:14:5e:c2:71:c5:a6:c3:44:b8:03:f2:fc:d1:14: ab:9d:3e:1c:1f:df:f1:b4:3c:14:ad:42:39:4f:12:13:9a:1d: 0c:26:33:e8:a2:93:35:f3:65:18:bf:cd:63:4e:fb:85:43:2a: f1:7a:c3:1b:39:bd:24:2d:7b:64:8e:d9:7d:62:45:76:0a:34: f2:db:1c:02:f1:b4:8b:65:c1:cd:70:a2:2f:d4:ec:be:2f:d7: 26:25:64:88:02:cc:c4:d3:26:3c:16:cc:b3:e4:55:6b:d8:51: 77:b3:ad:eb:92:07:6e:96:c3:0d:03:80:f8:c9:04:9c:0a:32: db:f9:84:d7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpcTcvVCVP7Ylr7pmOEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTBiMGY2NmQ0ZjgzNjczZjZkNjQyZGEyYTI4OGRmZjEzNDQ0YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Urh6d5L6GmDbcDQ2ZzKitb13hh BLKt3PMRNMls/b+OsTfSCYDB4eCEc5ZtSiKNyjMXgtGzRKJqxByZb4y9olNCqKvD QvBp6mcRYVIKP/IIn/FUXTkZ2fED9Bjyr9yzozsvnblLGf6Nyjs6S+CXSET1LkzT NVy3AI4jqpPe/LJ1j8ItmYi0evKRFaOnScum642xaOWXtBMt9rpMA0aEu1EqBjw/ 37/NFhg/1NFqavH/C0cs9IK3ksNWFET+gExha9ELQhTQUYUiuNHYfR24ZHLyZ1KF 681KmfvSw4HKkXVl+3Xtpyaw5K2zzKjYHH1CaP+8XKppOSTJ/0idj55XPwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBoLD2bU+DZz9tZC2ioojf8TRExFMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvR2dzUFp0VDROblAyMWtMYUtpaU5feE5FVEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBABOh0iZauHn9x4Rq5K+R9K7xxEwAa9gK 8uYOkeLXeqfK3UqJKb0eWkEbgkt0vhNS/zfDkpEJ2GoGzIEy3vFtRU5gZzIbaVIm 1OKTENiIrIOC/DwqFnBEGwI23VjKlQXm6GCqtlOgBsq9V1qGkR81pcSe10TeIXhX ClzPWruwZtIYCGoUXsJxxabDRLgD8vzRFKudPhwf3/G0PBStQjlPEhOaHQwmM+ii kzXzZRi/zWNO+4VDKvF6wxs5vSQte2SO2X1iRXYKNPLbHALxtItlwc1woi/U7L4v 1yYlZIgCzMTTJjwWzLPkVWvYUXezreuSB26Www0DgPjJBJwKMtv5hNc= -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:59 2026 by rpki-client