This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gkpnlRECrlyz86ZNCkxYW9CRRXk.roa File: gkpnlRECrlyz86ZNCkxYW9CRRXk.roa (raw, json) Hash identifier: WEa4SH2LXLxmCyXhtR0WrjBoGpuNeyu/fga7h7y9Jik= Subject key identifier: 82:4A:67:95:11:02:AE:5C:B3:F3:A6:4D:0A:4C:58:5B:D0:91:45:79 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69A3937B37D2D6AA19BAC2905F969 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gkpnlRECrlyz86ZNCkxYW9CRRXk.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396584 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:39:37:b3:7d:2d:6a:a1:9b:ac:29:05:f9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=824a67951102ae5cb3f3a64d0a4c585bd0914579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e3:a6:18:03:71:3d:fc:1e:5c:51:7c:fc:d8: 20:a4:7f:7d:5e:6a:62:25:b5:1d:89:ee:b5:38:f6: 01:0e:9c:61:38:d8:86:4d:d3:b3:6f:b2:8c:de:38: d0:2c:6f:dd:4f:5e:56:76:f5:cd:b2:f2:4d:df:10: c8:f8:9d:46:85:55:75:27:2f:bc:95:02:88:1b:1a: 6e:4e:51:d1:c4:09:1e:9c:85:50:07:d5:d4:9f:8d: a4:a9:6a:12:62:fc:2b:b5:f7:4b:de:04:99:45:6a: d0:e6:08:dd:3a:5d:b7:6d:b3:c7:48:88:fe:40:6b: 51:30:68:e4:d7:cc:d6:f8:e0:98:d7:a8:46:7c:59: 71:35:e5:4a:79:ad:52:f5:4d:52:0c:04:b3:b1:6d: fc:e5:63:fe:f2:70:02:6c:3d:68:ad:eb:39:ff:76: 5c:78:cc:d8:4e:60:49:62:45:92:42:7b:04:83:f3: 7f:dc:05:ab:1f:68:c5:f9:ea:21:4a:cc:5e:83:02: e3:aa:71:2e:35:08:87:d2:59:b7:4a:9d:bd:b7:e3: 63:8a:00:34:94:e3:47:ff:6a:ab:9b:b6:8f:ef:f4: 2f:78:0b:0b:54:ba:8a:e3:d0:3d:ec:9f:96:c0:75: ba:ba:c7:d5:79:04:ea:fb:d9:86:9f:25:07:e8:52: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:67:95:11:02:AE:5C:B3:F3:A6:4D:0A:4C:58:5B:D0:91:45:79 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gkpnlRECrlyz86ZNCkxYW9CRRXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 25:81:80:a7:a9:c0:08:3a:20:65:4e:f1:9b:09:68:05:eb:a4: 2c:f2:5d:7e:b2:6a:bb:04:f9:a9:54:0a:24:35:e6:bb:f0:16: 56:e2:71:08:16:9a:15:18:6b:97:15:43:da:b7:d4:4f:2c:ae: ad:0e:c2:3b:a7:cf:e0:42:e0:e3:8b:9f:52:4d:09:e3:c8:4b: 94:39:29:88:5e:d6:33:1e:d7:65:dd:42:62:44:68:cd:d9:31: 99:3e:11:2d:5a:35:fe:ae:8c:66:fd:7d:9c:76:18:d0:a6:79: ea:ea:41:10:5c:c1:f8:6d:b1:8d:50:ef:30:43:e7:7b:d1:dd: 07:b3:78:5d:49:33:0c:fd:df:fa:cf:9d:92:67:41:d7:47:84: b0:17:35:9b:ef:cd:0e:7e:da:2d:2d:f5:f9:db:54:af:99:a4: d6:1c:1d:50:d3:03:cb:82:fe:2b:a1:03:1a:d1:6e:c7:f6:bd: 98:15:07:29:ae:21:99:c5:b8:d7:d8:1a:ff:f4:ea:6a:49:fe: 7a:6b:35:77:23:6b:7a:9b:18:8a:9c:84:ce:1f:fb:06:8b:b1: 51:6b:ec:02:1a:ca:f4:92:d2:c4:94:b5:ce:30:96:cf:6b:97: 42:ce:ec:e6:b8:00:79:d7:e4:e0:fb:6c:78:0b:b8:c2:22:eb: 38:9b:5c:0b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpo5N7N9LWqhm6wpBflpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjRhNjc5NTExMDJhZTVjYjNmM2E2NGQwYTRjNTg1YmQwOTE0NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OOmGANxPfweXFF8/NggpH99Xmpi JbUdie61OPYBDpxhONiGTdOzb7KM3jjQLG/dT15WdvXNsvJN3xDI+J1GhVV1Jy+8 lQKIGxpuTlHRxAkenIVQB9XUn42kqWoSYvwrtfdL3gSZRWrQ5gjdOl23bbPHSIj+ QGtRMGjk18zW+OCY16hGfFlxNeVKea1S9U1SDASzsW385WP+8nACbD1ores5/3Zc eMzYTmBJYkWSQnsEg/N/3AWrH2jF+eohSsxegwLjqnEuNQiH0lm3Sp29t+NjigA0 lONH/2qrm7aP7/QveAsLVLqK49A97J+WwHW6usfVeQTq+9mGnyUH6FII/QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIJKZ5URAq5cs/OmTQpMWFvQkUV5MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvZ2twbmxSRUNybHl6ODZaTkNreFlXOUNSUlhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBACWBgKepwAg6IGVO8ZsJaAXrpCzyXX6y arsE+alUCiQ15rvwFlbicQgWmhUYa5cVQ9q31E8srq0Owjunz+BC4OOLn1JNCePI S5Q5KYhe1jMe12XdQmJEaM3ZMZk+ES1aNf6ujGb9fZx2GNCmeerqQRBcwfhtsY1Q 7zBD53vR3QezeF1JMwz93/rPnZJnQddHhLAXNZvvzQ5+2i0t9fnbVK+ZpNYcHVDT A8uC/iuhAxrRbsf2vZgVBymuIZnFuNfYGv/06mpJ/nprNXcja3qbGIqchM4f+waL sVFr7AIayvSS0sSUtc4wls9rl0LO7Oa4AHnX5OD7bHgLuMIi6zibXAs= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:33 2026 by rpki-client