This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVNmomIE4Ips87BLUCgBH0k956g.roa File: gVNmomIE4Ips87BLUCgBH0k956g.roa (raw, json) Hash identifier: tCCtbJo0i/rHYjiRiqQtIsxKPiAmMnjNrGmAeZCA300= Subject key identifier: 81:53:66:A2:62:04:E0:8A:6C:F3:B0:4B:50:28:01:1F:49:3D:E7:A8 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85619B2FA986F58DEBE5BB39C7BCF4 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVNmomIE4Ips87BLUCgBH0k956g.roa Signing time: Fri 02 Jan 2026 16:23:26 +0000 ROA not before: Fri 02 Jan 2026 16:23:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202799 IP address blocks: 212.193.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:61:9b:2f:a9:86:f5:8d:eb:e5:bb:39:c7:bc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=815366a26204e08a6cf3b04b5028011f493de7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:51:53:58:f2:cb:66:b5:f9:8d:e5:0a:c3:13: c0:a5:7b:45:80:e0:7d:0a:5c:9c:eb:ed:65:9b:4f: 09:c0:4d:a9:85:bd:b7:15:66:17:f1:7f:2c:00:5d: 4b:01:3c:90:f8:90:d4:e2:26:e3:21:72:09:1a:73: a5:59:49:fd:c2:11:3d:03:0f:1d:21:a3:e3:e6:53: d4:56:2d:75:47:08:55:67:eb:15:65:e1:81:46:42: bc:91:7f:c8:d1:4b:1b:e4:b0:56:23:f8:f0:57:cb: 54:f6:26:e8:22:43:ca:0b:0c:0e:99:0b:63:fa:ea: 1d:f5:d4:3c:70:5d:8b:dc:36:bb:06:aa:17:8b:a0: dc:b9:14:76:30:9a:69:48:c7:2e:59:92:7a:d4:95: 09:b8:fa:48:82:1b:85:cf:eb:36:bb:d3:de:b3:84: 66:72:22:22:74:3e:a3:3d:9c:3c:f6:fc:41:1c:d4: d4:e4:4b:1c:96:d0:05:a5:0b:ac:61:bf:45:55:2f: 92:13:45:56:2d:fb:44:e0:4b:7f:eb:a7:52:e2:b1: 4a:a5:1e:83:4b:31:63:a6:e0:ea:31:e3:6f:08:72: cf:3e:b7:42:e3:0d:81:d9:aa:62:4f:07:cd:3c:dc: 20:b9:52:d5:e2:7f:a7:7e:04:9a:96:92:7d:40:81: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:53:66:A2:62:04:E0:8A:6C:F3:B0:4B:50:28:01:1F:49:3D:E7:A8 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVNmomIE4Ips87BLUCgBH0k956g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.31.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:2e:dd:48:fa:f5:ba:a7:6c:6f:41:a0:a6:e3:3c:67:00:15: e7:19:7f:3f:9f:74:8a:e9:78:bf:8a:9b:e1:9c:9f:d8:8f:3c: c2:d6:90:40:7b:d6:d7:18:b1:ca:d3:96:00:a2:78:50:45:02: fa:d6:e3:42:f1:d0:ec:97:db:a7:7c:b8:30:b9:59:35:1f:3c: 2a:79:0d:18:7c:5f:d2:c5:6c:b5:56:fb:bd:7c:2d:ef:d5:69: 5e:10:6f:47:50:f6:9c:da:c4:7e:6d:80:df:21:64:7c:0a:c1: 7a:e8:95:ce:0c:c3:d9:66:19:27:94:68:34:df:4d:d0:8e:51: 13:0d:fa:af:c8:26:eb:3b:cd:9c:fb:dd:7f:23:13:ea:1e:6f: 2f:1b:a7:40:cd:4b:a8:89:1b:58:e9:01:5e:6e:8c:40:00:4d: 9a:02:4f:96:14:68:41:fd:61:81:16:96:00:94:ee:79:9d:05: bf:a0:3a:13:b7:6e:e5:32:a6:2e:c9:c9:2b:0d:a8:d1:10:88: 6e:aa:c2:7d:86:da:db:d3:d4:93:6b:c3:45:0e:39:25:c3:90: 89:c6:78:6e:e8:ab:da:f6:05:85:0c:fe:a2:94:55:4b:7b:15: 0a:e9:f3:eb:f8:90:e3:86:b1:1a:83:25:42:29:47:bf:86:28: 1c:1c:b2:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hWGbL6mG9Y3r5bs5x7z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTUzNjZhMjYyMDRlMDhhNmNmM2IwNGI1MDI4MDExZjQ5M2RlN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVFTWPLLZrX5jeUKwxPApXtFgOB9 Clyc6+1lm08JwE2phb23FWYX8X8sAF1LATyQ+JDU4ibjIXIJGnOlWUn9whE9Aw8d IaPj5lPUVi11RwhVZ+sVZeGBRkK8kX/I0Usb5LBWI/jwV8tU9iboIkPKCwwOmQtj +uod9dQ8cF2L3Da7BqoXi6DcuRR2MJppSMcuWZJ61JUJuPpIghuFz+s2u9Pes4Rm ciIidD6jPZw89vxBHNTU5EscltAFpQusYb9FVS+SE0VWLftE4Et/66dS4rFKpR6D SzFjpuDqMeNvCHLPPrdC4w2B2apiTwfNPNwguVLV4n+nfgSalpJ9QIHPZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFTZqJiBOCKbPOwS1AoAR9JPeeoMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvZ1ZObW9tSUU0SXBzODdCTFVDZ0JIMGs5NTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEfMA0G CSqGSIb3DQEBCwUAA4IBAQBNLt1I+vW6p2xvQaCm4zxnABXnGX8/n3SK6Xi/ipvh nJ/YjzzC1pBAe9bXGLHK05YAonhQRQL61uNC8dDsl9unfLgwuVk1HzwqeQ0YfF/S xWy1Vvu9fC3v1WleEG9HUPac2sR+bYDfIWR8CsF66JXODMPZZhknlGg0303QjlET DfqvyCbrO82c+91/IxPqHm8vG6dAzUuoiRtY6QFeboxAAE2aAk+WFGhB/WGBFpYA lO55nQW/oDoTt27lMqYuyckrDajREIhuqsJ9htrb09STa8NFDjklw5CJxnhu6Kva 9gWFDP6ilFVLexUK6fPr+JDjhrEagyVCKUe/higcHLKm -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:40 2026 by rpki-client