This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/GgsNGmdZHgLW-ddgZSb5azBRB4s.roa File: GgsNGmdZHgLW-ddgZSb5azBRB4s.roa (raw, json) Hash identifier: 0lSWx1Ilm6593jItri1ZknwKF0SCucZqnZPjH56EoXI= Subject key identifier: 1A:0B:0D:1A:67:59:1E:02:D6:F9:D7:60:65:26:F9:6B:30:51:07:8B Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B282630B486C806D4396D8AB40C1BF399 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/GgsNGmdZHgLW-ddgZSb5azBRB4s.roa Signing time: Tue 16 Dec 2025 17:12:30 +0000 ROA not before: Tue 16 Dec 2025 17:12:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 193.68.88.0/24 maxlen: 24 193.68.89.0/24 maxlen: 24 213.21.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:26:30:b4:86:c8:06:d4:39:6d:8a:b4:0c:1b:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Dec 16 17:12:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1a0b0d1a67591e02d6f9d7606526f96b3051078b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:8c:5b:40:65:80:3e:18:c4:63:0f:93:62: 06:6b:d1:f5:8b:f0:66:4a:c3:a2:2f:35:ec:c7:69: 10:06:ed:2a:dd:0b:b8:48:d9:a4:a4:3d:58:eb:a6: 73:fe:13:ee:e8:a0:6c:c4:f1:6c:f6:bc:0f:15:4f: 63:7f:16:77:23:8f:8a:06:e6:cf:bc:6e:04:6f:53: 54:7c:7b:8b:eb:5b:13:c4:9d:c5:a5:d2:7e:75:70: 76:cd:b7:62:7e:a3:e1:10:97:52:d6:fc:b6:1c:0a: 4d:0c:4a:a3:c3:e4:fa:8f:6c:eb:4d:0b:c1:3c:6c: e1:2a:e8:63:9b:ce:87:be:62:07:42:78:27:91:a8: 22:d3:77:b2:d4:1d:d8:cf:eb:46:b0:3d:a5:60:0e: 27:b9:74:67:dd:c5:df:3c:af:a3:c7:35:65:36:5e: ed:c7:67:c2:44:28:ae:6b:92:8c:e1:8d:cb:86:b3: 87:7c:24:e0:76:97:bd:7c:ad:d6:a9:dd:37:45:de: df:49:09:74:3c:d1:24:53:2d:93:79:b8:9a:ae:f7: 9c:85:d7:99:19:48:e3:f4:52:71:32:6c:9c:62:a2: 3c:d7:50:80:10:5a:23:05:2d:e0:e8:5f:24:a0:fe: c9:5e:bc:f8:50:38:92:5c:bb:1f:19:8b:5c:0d:dd: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0B:0D:1A:67:59:1E:02:D6:F9:D7:60:65:26:F9:6B:30:51:07:8B X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/GgsNGmdZHgLW-ddgZSb5azBRB4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.68.88.0/23 213.21.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:40:64:62:f9:bf:ec:e5:b2:fd:cb:61:d0:9e:a1:ed:df:0a: 47:17:95:24:03:63:d6:96:bc:fd:4c:ab:8b:2e:bc:bf:e5:96: 8f:20:f6:3b:44:4a:08:e5:8f:a5:d8:5b:31:fb:28:95:3a:00: 58:a3:b7:88:70:dc:21:7e:f5:6c:76:b6:5f:25:87:2d:ec:d3: ac:bf:96:22:79:75:68:dc:22:d8:c7:ce:2d:08:c4:7e:e9:47: a5:89:c8:30:61:aa:b9:95:db:8c:dd:42:7b:51:2d:b6:a0:2a: 54:c8:b7:0d:8e:fa:7a:4c:5f:c8:a9:d3:40:6a:b3:db:ee:ee: 55:8b:00:9b:cb:dd:f0:a8:46:ab:e9:5c:6e:1a:d6:54:63:14: 11:12:49:5c:30:64:f2:b1:53:1a:76:8e:99:d5:91:a0:e1:64: 53:db:49:e7:5b:02:20:c4:e8:8d:cf:2a:fb:c3:ec:bf:fb:af: c2:e4:a2:bd:b6:13:f8:35:85:8a:22:7c:98:68:aa:d0:2a:0f: 3a:e7:22:28:47:7d:8f:38:dc:10:6f:98:89:65:6e:fd:4b:f3: aa:b5:77:4c:0c:45:20:b7:be:e3:8a:d4:19:3a:de:ca:68:1a: 25:fe:43:0a:64:8f:15:ff:2c:ea:ae:bf:3f:71:5e:99:99:f4: 16:b3:18:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsoJjC0hsgG1DltirQMG/OZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUxMjE2MTcxMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTBiMGQxYTY3NTkxZTAyZDZmOWQ3NjA2NTI2Zjk2YjMwNTEwNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaaMW0BlgD4YxGMPk2IGa9H1i/Bm SsOiLzXsx2kQBu0q3Qu4SNmkpD1Y66Zz/hPu6KBsxPFs9rwPFU9jfxZ3I4+KBubP vG4Eb1NUfHuL61sTxJ3FpdJ+dXB2zbdifqPhEJdS1vy2HApNDEqjw+T6j2zrTQvB PGzhKuhjm86HvmIHQngnkagi03ey1B3Yz+tGsD2lYA4nuXRn3cXfPK+jxzVlNl7t x2fCRCiua5KM4Y3LhrOHfCTgdpe9fK3Wqd03Rd7fSQl0PNEkUy2TebiarvechdeZ GUjj9FJxMmycYqI811CAEFojBS3g6F8koP7JXrz4UDiSXLsfGYtcDd1MzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBoLDRpnWR4C1vnXYGUm+WswUQeLMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvR2dzTkdtZFpIZ0xXLWRkZ1pTYjVhekJSQjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwURYAwQA 1RXwMA0GCSqGSIb3DQEBCwUAA4IBAQBaQGRi+b/s5bL9y2HQnqHt3wpHF5UkA2PW lrz9TKuLLry/5ZaPIPY7REoI5Y+l2Fsx+yiVOgBYo7eIcNwhfvVsdrZfJYct7NOs v5YieXVo3CLYx84tCMR+6UelicgwYaq5lduM3UJ7US22oCpUyLcNjvp6TF/IqdNA arPb7u5ViwCby93wqEar6VxuGtZUYxQREklcMGTysVMado6Z1ZGg4WRT20nnWwIg xOiNzyr7w+y/+6/C5KK9thP4NYWKInyYaKrQKg865yIoR32PONwQb5iJZW79S/Oq tXdMDEUgt77jitQZOt7KaBol/kMKZI8V/yzqrr8/cV6ZmfQWsxji -----END CERTIFICATE-----Generated at Sat Dec 20 12:05:34 2025 by rpki-client