This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/gW00o8n4Rs81BAgnMAtJNPDGHdU.roa File: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (raw, json) Hash identifier: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90= Subject key identifier: 81:6D:34:A3:C9:F8:46:CF:35:04:08:27:30:0B:49:34:F0:C6:1D:D5 Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Certificate serial: 019B7834592D64A1DAFBFA1C92A021C5522D Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/gW00o8n4Rs81BAgnMAtJNPDGHdU.roa Signing time: Thu 01 Jan 2026 06:17:35 +0000 ROA not before: Thu 01 Jan 2026 06:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 45.88.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:59:2d:64:a1:da:fb:fa:1c:92:a0:21:c5:52:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Validity Not Before: Jan 1 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=816d34a3c9f846cf35040827300b4934f0c61dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:ff:38:e2:6c:6e:a9:e5:5a:0a:34:59:56: ef:04:4b:e5:86:39:75:42:2c:0b:61:41:0e:a3:cc: 1c:ba:aa:6c:e7:e6:d8:72:fc:8c:2a:a5:cf:96:3b: 08:74:42:22:e5:0b:16:54:6e:6f:23:f5:fb:4e:dd: 57:27:ab:85:96:a5:69:89:1d:09:b5:68:e8:a6:fe: be:0b:cb:78:dc:a3:b2:e4:22:97:79:62:d2:55:e0: dd:c0:ac:9b:a9:1f:6f:ee:e7:6c:d4:0f:36:b4:a8: 14:b5:74:ee:a0:d9:34:e5:51:1c:1f:f0:d6:5f:3a: bb:fd:85:47:27:95:3e:15:61:d0:bd:4e:72:50:16: 8d:4c:c9:df:18:1d:ee:ac:7d:53:42:3f:7b:81:e0: 26:3d:34:e6:34:dc:40:65:88:39:42:6f:b1:07:23: cb:de:ea:ac:10:e5:fc:1a:97:ee:fe:5e:e4:6d:9b: 09:98:d8:99:95:5f:34:6d:23:5a:cb:87:a3:70:3f: b8:67:e4:1b:d5:93:b9:7a:ee:18:f1:08:5d:5c:68: 12:fb:76:2b:74:0b:2b:95:83:7e:2d:06:57:41:89: 39:20:2d:75:8d:b0:55:b1:d7:5e:66:73:44:6f:ea: ef:a0:29:47:66:c0:ef:7c:c3:b5:bf:9a:23:11:4e: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6D:34:A3:C9:F8:46:CF:35:04:08:27:30:0B:49:34:F0:C6:1D:D5 X509v3 Authority Key Identifier: keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/gW00o8n4Rs81BAgnMAtJNPDGHdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.236.0/22 Signature Algorithm: sha256WithRSAEncryption 45:5e:00:2f:1f:08:0f:b8:ff:c3:40:86:f4:10:8b:29:e0:4d: 3d:8a:fb:a4:d6:45:5a:9a:34:ef:a8:1a:d7:61:da:53:bc:97: 7a:55:e9:b5:f0:ef:ba:c0:76:80:0f:35:5f:8d:c5:f5:91:7c: f6:cc:b2:b0:b8:da:63:d3:47:d8:75:fe:27:41:c7:5b:16:a0: 19:a5:60:2e:f3:c8:4d:b1:d9:5b:14:ac:f3:1f:57:a1:7b:cd: df:62:79:44:a1:6e:c2:54:3c:4e:4a:8f:d2:17:5c:1d:2d:09: 42:b9:e8:81:9d:af:7d:65:81:6b:72:d6:6d:73:86:92:39:e7: 44:b8:45:da:6e:bc:fe:bb:12:a1:fe:91:78:eb:9b:d9:a9:00: 9e:c6:f9:a0:2b:52:76:9e:8a:cb:2b:97:e9:1e:4f:db:e0:3d: af:b9:30:83:c7:4f:21:ab:20:b0:91:e6:c0:41:32:b1:02:a4: cb:85:e0:60:9c:b4:13:f0:e6:f7:8d:78:f9:b1:e3:4a:1e:e8: b3:48:11:53:49:92:f8:eb:ba:bb:e8:c5:89:c2:6c:be:45:77: c7:4a:c6:fd:a2:22:ff:a2:99:f8:9b:d1:bb:09:81:d8:88:19: 3d:4d:d9:dc:1d:42:f6:2c:c1:45:a3:97:f8:6d:c2:88:3d:1b: da:39:a5:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFktZKHa+/ockqAhxVItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl NGM5MzEwHhcNMjYwMTAxMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTZkMzRhM2M5Zjg0NmNmMzUwNDA4MjczMDBiNDkzNGYwYzYxZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48j/OOJsbqnlWgo0WVbvBEvlhjl1 QiwLYUEOo8wcuqps5+bYcvyMKqXPljsIdEIi5QsWVG5vI/X7Tt1XJ6uFlqVpiR0J tWjopv6+C8t43KOy5CKXeWLSVeDdwKybqR9v7uds1A82tKgUtXTuoNk05VEcH/DW Xzq7/YVHJ5U+FWHQvU5yUBaNTMnfGB3urH1TQj97geAmPTTmNNxAZYg5Qm+xByPL 3uqsEOX8Gpfu/l7kbZsJmNiZlV80bSNay4ejcD+4Z+Qb1ZO5eu4Y8QhdXGgS+3Yr dAsrlYN+LQZXQYk5IC11jbBVsddeZnNEb+rvoClHZsDvfMO1v5ojEU4mPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFtNKPJ+EbPNQQIJzALSTTwxh3VMB8GA1UdIwQY MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt OGQ2Zjc0ODNlNjMyLzEvZ1cwMG84bjRSczgxQkFnbk1BdEpOUERHSGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVjsMA0G CSqGSIb3DQEBCwUAA4IBAQBFXgAvHwgPuP/DQIb0EIsp4E09ivuk1kVamjTvqBrX YdpTvJd6Vem18O+6wHaADzVfjcX1kXz2zLKwuNpj00fYdf4nQcdbFqAZpWAu88hN sdlbFKzzH1ehe83fYnlEoW7CVDxOSo/SF1wdLQlCueiBna99ZYFrctZtc4aSOedE uEXabrz+uxKh/pF465vZqQCexvmgK1J2norLK5fpHk/b4D2vuTCDx08hqyCwkebA QTKxAqTLheBgnLQT8Ob3jXj5seNKHuizSBFTSZL467q76MWJwmy+RXfHSsb9oiL/ opn4m9G7CYHYiBk9TdncHUL2LMFFo5f4bcKIPRvaOaXa -----END CERTIFICATE-----Generated at Tue Feb 3 06:33:35 2026 by rpki-client