This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/gPtYr61h83pA7-mt902KElGDuI0.roa File: gPtYr61h83pA7-mt902KElGDuI0.roa (raw, json) Hash identifier: Kfj49mH4lsVszd4rTCsS6tC3nnBrcy/t3kH2S5AxGGo= Subject key identifier: 80:FB:58:AF:AD:61:F3:7A:40:EF:E9:AD:F7:4D:8A:12:51:83:B8:8D Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Certificate serial: 019B77C73AE26293F4B9F3275E9F46349007 Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/gPtYr61h83pA7-mt902KElGDuI0.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 45.94.238.0/24 maxlen: 24 45.148.44.0/24 maxlen: 24 45.148.45.0/24 maxlen: 24 45.148.46.0/24 maxlen: 24 45.148.47.0/24 maxlen: 24 193.3.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:3a:e2:62:93:f4:b9:f3:27:5e:9f:46:34:90:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80fb58afad61f37a40efe9adf74d8a125183b88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:ce:2a:40:63:4c:01:29:38:b2:34:10:6b: 47:3d:17:b0:71:d7:4c:09:90:b9:6e:c2:ce:a5:4a: 2a:a8:ff:9e:c7:68:fa:2d:ba:9e:0f:c1:72:d1:0e: 47:de:f7:22:77:9c:26:85:89:7e:05:82:11:e5:d2: 96:c6:68:5a:2e:48:36:28:c5:22:4c:f8:c0:c3:63: 52:73:89:66:6b:9f:20:38:04:5e:d6:25:98:80:c3: 7f:bf:de:ab:95:9f:9b:ec:7b:17:a7:a0:6b:e8:39: 12:28:e4:74:0b:f4:cb:f5:24:8a:6e:7a:b3:4e:a4: 70:58:5d:45:08:f8:e9:51:a0:1e:75:fb:0b:39:b0: ba:27:f8:4c:eb:56:cf:d1:14:d5:77:c4:d7:10:bc: d9:98:23:43:fd:a3:c3:1e:82:e8:f5:7b:84:82:1c: 0b:cb:7e:2d:fb:92:fa:14:13:a6:fb:40:51:18:62: 0b:d3:08:4b:66:05:5a:81:12:79:3f:dc:87:a4:7d: 17:b3:49:01:59:fd:a0:03:79:77:3e:fd:5a:0d:8a: 7a:ec:0f:aa:19:c0:a6:ae:44:0c:ce:e9:ba:df:71: bb:7d:a8:9e:83:cf:9b:88:e0:85:f6:76:40:04:23: 46:13:ed:6e:f6:92:7a:b2:cc:68:f3:28:cf:17:ca: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FB:58:AF:AD:61:F3:7A:40:EF:E9:AD:F7:4D:8A:12:51:83:B8:8D X509v3 Authority Key Identifier: keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/gPtYr61h83pA7-mt902KElGDuI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.238.0/24 45.148.44.0/22 193.3.176.0/24 Signature Algorithm: sha256WithRSAEncryption 96:c5:6b:59:f1:c7:c2:4f:73:7d:a8:0a:c6:ec:44:96:d8:46: 51:de:7a:ba:fc:58:8c:49:86:1c:ab:3d:b4:bf:14:b2:5f:65: 0d:8a:69:ee:3b:6c:8c:a9:49:01:d9:f9:80:e2:31:0a:d9:8f: bc:d5:d8:6b:b8:0b:ca:c0:dc:77:f3:c9:2f:24:6c:e5:05:bb: 98:76:8d:40:14:8b:f7:c4:4f:44:92:d5:46:16:11:77:9e:75: f2:30:1c:12:74:c1:3f:54:b3:c4:4a:a7:06:ec:d8:b6:e6:bd: 98:17:42:ee:50:23:6a:1b:d4:75:2a:eb:14:d4:fa:e2:48:eb: ae:1a:f7:06:0f:38:f9:3e:a6:a3:a0:ea:53:d8:ad:83:52:35: 1e:75:af:1f:ec:d1:a4:2a:14:02:16:6a:65:a7:70:ca:5b:fd: c3:8c:47:db:81:c2:b3:62:60:26:ab:ec:04:ec:db:89:e3:9c: a4:8e:34:1c:1e:d7:36:a6:9f:19:07:86:95:e4:bc:2b:1d:96: 38:64:35:c1:c2:7f:fe:3c:25:1d:dc:5f:98:2c:09:ce:65:fc: 2b:72:c5:5d:75:6d:7e:d5:3a:72:bd:bd:58:92:28:0e:de:cc: 50:04:ba:82:35:ff:b5:15:77:31:c4:23:ff:56:cb:e6:f7:11: ab:d6:e1:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xzriYpP0ufMnXp9GNJAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh NmY3NTkwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGZiNThhZmFkNjFmMzdhNDBlZmU5YWRmNzRkOGExMjUxODNiODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdzOKkBjTAEpOLI0EGtHPRewcddM CZC5bsLOpUoqqP+ex2j6LbqeD8Fy0Q5H3vcid5wmhYl+BYIR5dKWxmhaLkg2KMUi TPjAw2NSc4lma58gOARe1iWYgMN/v96rlZ+b7HsXp6Br6DkSKOR0C/TL9SSKbnqz TqRwWF1FCPjpUaAedfsLObC6J/hM61bP0RTVd8TXELzZmCND/aPDHoLo9XuEghwL y34t+5L6FBOm+0BRGGIL0whLZgVagRJ5P9yHpH0Xs0kBWf2gA3l3Pv1aDYp67A+q GcCmrkQMzum633G7faieg8+biOCF9nZABCNGE+1u9pJ6ssxo8yjPF8pmfQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFID7WK+tYfN6QO/prfdNihJRg7iNMB8GA1UdIwQY MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt Y2VjODkzMWNlNjMxLzEvZ1B0WXI2MWg4M3BBNy1tdDkwMktFbEdEdUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV7uAwQC LZQsAwQAwQOwMA0GCSqGSIb3DQEBCwUAA4IBAQCWxWtZ8cfCT3N9qArG7ESW2EZR 3nq6/FiMSYYcqz20vxSyX2UNimnuO2yMqUkB2fmA4jEK2Y+81dhruAvKwNx388kv JGzlBbuYdo1AFIv3xE9EktVGFhF3nnXyMBwSdME/VLPESqcG7Ni25r2YF0LuUCNq G9R1KusU1PriSOuuGvcGDzj5PqajoOpT2K2DUjUeda8f7NGkKhQCFmplp3DKW/3D jEfbgcKzYmAmq+wE7NuJ45ykjjQcHtc2pp8ZB4aV5LwrHZY4ZDXBwn/+PCUd3F+Y LAnOZfwrcsVddW1+1Tpyvb1YkigO3sxQBLqCNf+1FXcxxCP/Vsvm9xGr1uGi -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:23 2026 by rpki-client