This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/GnPeNkJcWmVud11YHPGxCPwESaw.roa File: GnPeNkJcWmVud11YHPGxCPwESaw.roa (raw, json) Hash identifier: ibO2Cb+R8UorxLYYdEI5lPaQv6vYtWFXG95Sh2B2jxw= Subject key identifier: 1A:73:DE:36:42:5C:5A:65:6E:77:5D:58:1C:F1:B1:08:FC:04:49:AC Certificate issuer: /CN=63444210ea08ac529878d51917e3b30054d620d1 Certificate serial: 019B7F8097E76FAB83519F77F00F439B791D Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/GnPeNkJcWmVud11YHPGxCPwESaw.roa Signing time: Fri 02 Jan 2026 16:18:12 +0000 ROA not before: Fri 02 Jan 2026 16:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2.37.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:97:e7:6f:ab:83:51:9f:77:f0:0f:43:9b:79:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1 Validity Not Before: Jan 2 16:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a73de36425c5a656e775d581cf1b108fc0449ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:a5:a1:be:ce:46:b8:91:07:3b:42:d5:7d: 33:6e:be:e8:7d:91:42:d0:ee:cc:9a:93:d4:68:25: 22:4b:e8:cc:1d:7f:64:63:6e:58:24:74:d7:bd:da: ba:05:3b:db:d8:1f:05:c0:ba:55:f3:2f:02:f4:e7: dc:0f:ab:4f:a5:b1:5c:18:3a:16:d3:8f:18:e7:60: fc:15:93:ff:bb:52:9c:ce:61:ba:38:a0:1a:df:9a: d4:74:7f:ba:7b:e8:21:d1:06:3a:f2:7c:0b:fe:2e: 39:06:8a:79:f5:c2:10:a4:3b:8c:d6:18:51:e1:8b: e7:f7:cc:0e:91:5f:1c:77:44:29:bb:5a:ec:6b:2a: 4b:ba:fa:eb:ac:bb:f4:a9:b8:17:b3:30:62:80:e2: 45:34:9a:5f:af:04:bc:28:19:51:53:61:0f:ad:20: 12:d2:40:69:bb:f2:92:93:b9:36:15:9c:eb:22:1b: 97:90:d0:b5:9b:fd:93:ba:7c:52:c9:1a:ca:cc:a6: 97:61:72:93:ec:9e:aa:90:73:56:99:e9:76:19:7c: 49:7a:a5:3b:27:28:e0:af:e4:8e:36:3e:80:b5:cc: 10:5d:8a:42:05:05:a1:df:f5:30:21:79:f7:74:67: 07:6a:95:b6:70:30:f6:d3:6c:52:09:eb:08:c6:61: 98:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:DE:36:42:5C:5A:65:6E:77:5D:58:1C:F1:B1:08:FC:04:49:AC X509v3 Authority Key Identifier: keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/GnPeNkJcWmVud11YHPGxCPwESaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.37.111.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:f0:74:47:c9:02:cf:f5:61:45:e7:be:ee:df:a6:47:7f:58: 29:35:21:f4:0f:a0:67:36:ea:e0:5c:fd:ab:45:63:e9:a1:8d: 54:e5:2d:4e:aa:ae:70:29:92:81:88:9f:14:48:08:66:39:98: 53:d1:e1:0d:82:48:44:94:cb:22:e7:bd:f8:c5:d1:2f:aa:50: c9:4c:65:55:6e:4b:74:5c:93:de:87:fa:1e:b3:a3:51:ef:c8: 18:6a:a1:f3:07:d6:f2:be:6c:a4:39:49:51:a6:26:3e:f6:c9: ff:05:37:41:ae:34:3e:80:3d:b9:e4:73:1b:83:76:b6:6a:02: f9:48:87:20:82:75:ea:4d:c2:f7:16:75:23:9f:c0:1f:21:aa: 2a:1a:c4:67:5b:19:4b:d5:f7:5b:58:80:4e:9c:13:2c:2b:05: 77:e4:91:9a:db:29:61:dc:33:fc:9b:1d:90:a9:cd:ff:d9:ee: e4:12:d9:d1:32:09:42:40:e1:a8:01:ac:4a:21:a3:62:48:2b: e7:76:7c:45:be:4f:27:36:aa:b5:ae:e8:37:40:44:8c:b6:1d: b0:b3:7c:3c:22:98:bd:3a:2a:a4:59:6e:35:95:a3:d8:08:0a: 67:aa:b0:7c:0d:9c:79:7e:a0:80:aa:f0:27:95:ab:66:27:92: 23:b9:4c:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gJfnb6uDUZ938A9Dm3kdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNDQ0MjEwZWEwOGFjNTI5ODc4ZDUxOTE3ZTNiMzAwNTRk NjIwZDEwHhcNMjYwMTAyMTYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTczZGUzNjQyNWM1YTY1NmU3NzVkNTgxY2YxYjEwOGZjMDQ0OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppSlob7ORriRBztC1X0zbr7ofZFC 0O7MmpPUaCUiS+jMHX9kY25YJHTXvdq6BTvb2B8FwLpV8y8C9OfcD6tPpbFcGDoW 048Y52D8FZP/u1KczmG6OKAa35rUdH+6e+gh0QY68nwL/i45Bop59cIQpDuM1hhR 4Yvn98wOkV8cd0Qpu1rsaypLuvrrrLv0qbgXszBigOJFNJpfrwS8KBlRU2EPrSAS 0kBpu/KSk7k2FZzrIhuXkNC1m/2TunxSyRrKzKaXYXKT7J6qkHNWmel2GXxJeqU7 Jyjgr+SONj6AtcwQXYpCBQWh3/UwIXn3dGcHapW2cDD202xSCesIxmGY0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBpz3jZCXFplbnddWBzxsQj8BEmsMB8GA1UdIwQY MBaAFGNEQhDqCKxSmHjVGRfjswBU1iDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQt ZmU4MzdmOThlMDI2LzEvR25QZU5rSmNXbVZ1ZDExWUhQR3hDUHdFU2F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lZGVhNmUtNjZjYy00ZmIxLWE0NTQtZmU4MzdmOThlMDI2 LzEvWTBSQ0VPb0lyRktZZU5VWkYtT3pBRlRXSU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAiVvMA0G CSqGSIb3DQEBCwUAA4IBAQAc8HRHyQLP9WFF577u36ZHf1gpNSH0D6BnNurgXP2r RWPpoY1U5S1Oqq5wKZKBiJ8USAhmOZhT0eENgkhElMsi5734xdEvqlDJTGVVbkt0 XJPeh/oes6NR78gYaqHzB9byvmykOUlRpiY+9sn/BTdBrjQ+gD255HMbg3a2agL5 SIcggnXqTcL3FnUjn8AfIaoqGsRnWxlL1fdbWIBOnBMsKwV35JGa2ylh3DP8mx2Q qc3/2e7kEtnRMglCQOGoAaxKIaNiSCvndnxFvk8nNqq1rug3QESMth2ws3w8Ipi9 OiqkWW41laPYCApnqrB8DZx5fqCAqvAnlatmJ5IjuUzv -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:22 2026 by rpki-client