This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gvSbWzv_DojjwFhLyFmGlmAtQLA.roa File: gvSbWzv_DojjwFhLyFmGlmAtQLA.roa (raw, json) Hash identifier: +GVJjJsFHVyVhQuedF6Ij3ve42htrbyvTrGxXtc7HMY= Subject key identifier: 82:F4:9B:5B:3B:FF:0E:88:E3:C0:58:4B:C8:59:86:96:60:2D:40:B0 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A348D50CEC67913895C08B6E1BB60E Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gvSbWzv_DojjwFhLyFmGlmAtQLA.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214255 IP address blocks: 45.149.240.0/24 maxlen: 24 87.121.46.0/24 maxlen: 24 93.123.116.0/24 maxlen: 24 95.214.25.0/24 maxlen: 24 95.214.26.0/24 maxlen: 24 185.218.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:48:d5:0c:ec:67:91:38:95:c0:8b:6e:1b:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82f49b5b3bff0e88e3c0584bc8598696602d40b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:26:12:b2:8f:75:c6:8f:99:e9:73:73:09: 62:2d:2b:5c:10:6d:a2:96:c7:b9:53:b0:2c:48:3c: c5:31:a3:8a:b4:9a:45:8e:1d:cc:0c:9d:65:02:90: 23:14:de:57:12:44:dd:dd:c4:1b:be:b3:3b:19:93: 54:d1:9b:fe:54:be:75:af:00:f4:e1:c9:c8:26:3f: 1c:fc:3b:6c:9c:c6:61:ea:94:25:29:9d:e0:21:9d: c4:f3:e2:87:14:aa:58:d5:ba:6a:4a:3b:64:6d:64: 81:94:c7:89:59:d4:e1:93:32:b4:32:1f:70:2e:91: a3:86:0c:ab:a0:8a:af:6a:ff:36:eb:33:94:52:2d: 66:42:ec:77:0e:ee:8f:fb:0b:d9:8b:c0:87:0d:b9: 85:7f:14:a2:2c:2d:7d:d1:3d:6b:75:69:0e:45:7d: a8:79:dd:77:86:77:48:48:a4:88:0b:d5:e2:2a:34: 71:30:63:f0:ae:72:0f:d6:e4:25:21:bd:17:b6:d5: 84:b5:ca:39:72:d6:0c:42:e5:29:12:63:2b:7c:6b: 00:20:af:5f:b4:38:79:75:b4:2d:f2:ab:be:a9:1a: fa:32:96:df:23:a5:6b:d1:49:07:ec:88:cd:62:cd: 50:67:78:d8:84:f3:b8:1b:a9:e7:15:33:61:46:78: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F4:9B:5B:3B:FF:0E:88:E3:C0:58:4B:C8:59:86:96:60:2D:40:B0 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gvSbWzv_DojjwFhLyFmGlmAtQLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.240.0/24 87.121.46.0/24 93.123.116.0/24 95.214.25.0-95.214.26.255 185.218.136.0/24 Signature Algorithm: sha256WithRSAEncryption 02:be:5c:09:6e:55:14:34:1c:9e:e6:87:f9:32:02:95:ae:47: 42:f2:3c:de:af:f8:ed:82:96:6f:2b:dc:cc:7a:de:6c:74:a6: 14:4b:eb:ba:95:8f:bd:6c:d5:62:b8:a3:0a:9b:02:bc:b8:31: 05:e7:ad:61:de:99:91:6d:82:76:5f:6b:36:86:13:24:cd:f2: 18:ab:ba:6f:7f:ad:be:88:c1:73:97:78:00:72:a1:f0:30:0f: 2c:9b:88:df:f0:38:a3:fb:a1:90:5a:16:df:9b:97:51:77:3b: 24:b6:3f:fe:b1:c1:b3:c6:1b:fb:c6:87:88:de:ef:39:d9:d1: 0d:81:19:7a:29:25:19:0c:68:68:0b:8c:52:fd:a3:3b:09:34: 9d:db:a2:e3:d7:5f:9b:06:10:c0:1c:64:56:2b:fd:1d:4b:3d: 97:71:d3:3f:0b:3f:41:46:33:fe:1b:7b:82:3a:43:53:31:9e: a7:c0:78:ea:18:0d:60:99:3a:f1:21:5b:4e:ca:72:ef:e0:74: 72:a9:4b:e0:52:8a:fa:f9:69:2a:01:af:79:95:1c:bb:15:dd: 47:bf:96:5e:86:8a:a1:60:a5:e5:4b:d4:7c:78:8d:c0:0b:97: 6e:fb:d8:67:cf:66:5b:68:a2:5c:61:90:81:6d:1e:d4:11:3b: 03:bf:fd:45 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4o0jVDOxnkTiVwItuG7YOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmY0OWI1YjNiZmYwZTg4ZTNjMDU4NGJjODU5ODY5NjYwMmQ0MGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRwmErKPdcaPmelzcwliLStcEG2i lse5U7AsSDzFMaOKtJpFjh3MDJ1lApAjFN5XEkTd3cQbvrM7GZNU0Zv+VL51rwD0 4cnIJj8c/DtsnMZh6pQlKZ3gIZ3E8+KHFKpY1bpqSjtkbWSBlMeJWdThkzK0Mh9w LpGjhgyroIqvav826zOUUi1mQux3Du6P+wvZi8CHDbmFfxSiLC190T1rdWkORX2o ed13hndISKSIC9XiKjRxMGPwrnIP1uQlIb0XttWEtco5ctYMQuUpEmMrfGsAIK9f tDh5dbQt8qu+qRr6MpbfI6Vr0UkH7IjNYs1QZ3jYhPO4G6nnFTNhRnhB9wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFIL0m1s7/w6I48BYS8hZhpZgLUCwMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZ3ZTYld6dl9Eb2pqd0ZoTHlGbUdsbUF0UUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALZXwAwQA V3kuAwQAXXt0MAwDBABf1hkDBABf1hoDBAC52ogwDQYJKoZIhvcNAQELBQADggEB AAK+XAluVRQ0HJ7mh/kyApWuR0LyPN6v+O2Clm8r3Mx63mx0phRL67qVj71s1WK4 owqbAry4MQXnrWHemZFtgnZfazaGEyTN8hirum9/rb6IwXOXeAByofAwDyybiN/w OKP7oZBaFt+bl1F3OyS2P/6xwbPGG/vGh4je7znZ0Q2BGXopJRkMaGgLjFL9ozsJ NJ3bouPXX5sGEMAcZFYr/R1LPZdx0z8LP0FGM/4be4I6Q1MxnqfAeOoYDWCZOvEh W07Kcu/gdHKpS+BSivr5aSoBr3mVHLsV3Ue/ll6GiqFgpeVL1Hx4jcALl2772GfP ZltoolxhkIFtHtQROwO//UU= -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:30 2026 by rpki-client