This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g5AzhlVgJmomuZ40xAUUeLP18kk.roa File: g5AzhlVgJmomuZ40xAUUeLP18kk.roa (raw, json) Hash identifier: PXxGwll9KTBV5qt9fjIlzuuLnzYZ1FirhS3PbBAF/VY= Subject key identifier: 83:90:33:86:55:60:26:6A:26:B9:9E:34:C4:05:14:78:B3:F5:F2:49 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B355533410D66C4E764F1C245450949 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g5AzhlVgJmomuZ40xAUUeLP18kk.roa Signing time: Thu 01 Jan 2026 20:17:31 +0000 ROA not before: Thu 01 Jan 2026 20:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6718 IP address blocks: 80.96.42.0/24 maxlen: 24 80.97.49.0/24 maxlen: 24 85.120.222.0/24 maxlen: 24 85.120.223.0/24 maxlen: 24 85.120.228.0/24 maxlen: 24 85.120.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:55:33:41:0d:66:c4:e7:64:f1:c2:45:45:09:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=839033865560266a26b99e34c4051478b3f5f249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:6c:c4:f2:b5:10:31:d8:99:32:c3:26:7f: 75:92:27:98:7c:a2:2b:dd:55:70:cc:24:21:26:5d: 95:91:79:08:4e:a8:be:83:fc:b7:b4:d8:6e:6e:21: 1a:6c:e8:96:1a:26:b9:39:a4:0b:5c:60:02:fc:22: 70:6d:b2:12:cf:95:db:cf:ed:51:54:fd:40:83:ba: d1:62:e1:ce:6a:b1:10:77:89:31:cb:3e:e4:d0:57: 4b:6b:7b:9b:07:e6:bc:93:6f:b8:b1:76:0d:29:6e: 73:f8:a0:c8:e9:9f:04:51:7c:84:98:e7:17:d9:12: 53:53:98:a5:bc:07:54:92:d6:c9:dd:af:fc:6b:da: 0c:7c:9e:63:d3:70:7b:c7:77:e1:bd:48:22:69:f7: d7:b9:55:6b:9a:bc:10:b4:30:f3:3e:f0:e4:ad:ca: eb:0e:ca:92:74:0f:84:ff:10:0f:b6:37:ee:4f:0a: c5:d8:f9:48:da:d4:1d:4f:90:12:3f:10:14:cc:18: 39:c0:c2:1f:73:d2:bd:34:2e:61:b6:0c:ae:60:b9: c7:c8:59:dd:df:18:6e:15:c0:51:81:8d:43:4f:5b: 91:c8:e7:80:9f:9d:dd:de:60:ba:ff:25:ea:2c:c9: c7:4a:8d:a9:22:09:5f:7a:63:23:4e:9a:69:ce:6e: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:90:33:86:55:60:26:6A:26:B9:9E:34:C4:05:14:78:B3:F5:F2:49 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/g5AzhlVgJmomuZ40xAUUeLP18kk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.42.0/24 80.97.49.0/24 85.120.222.0/23 85.120.228.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:0d:75:f7:60:1e:20:8d:e9:31:d2:8c:7d:46:09:f8:46:83: fd:74:c2:60:15:ff:33:b6:5b:bd:09:e5:19:fa:ba:a8:5a:a8: 88:b8:47:b8:26:6b:ce:23:21:eb:19:7a:c4:59:a0:40:31:e1: ec:08:cd:35:31:66:e0:dd:45:22:fa:c1:6a:a5:45:3b:ed:33: 6d:cf:50:06:bc:a5:c8:fb:c0:73:ca:c6:43:a2:d9:70:6a:26: 8d:31:35:31:e1:4a:c5:8f:32:93:2d:62:b8:36:71:41:11:8b: 0c:2d:a4:fb:d1:ac:93:3d:e3:d5:33:93:8b:9b:c7:96:72:f8: ee:15:b8:5e:17:6c:8f:50:23:4b:b4:62:69:67:1b:da:5f:b2: e6:58:04:30:47:d7:25:b3:e1:bf:94:5a:d0:4f:83:21:25:43: ed:61:bd:a8:df:a9:c8:90:e4:e1:7d:bf:53:27:b3:a4:88:dd: d5:b3:5f:e3:a3:2b:37:77:b4:21:26:51:75:3f:96:b3:f3:1b: 23:dc:96:4d:5f:00:88:88:e3:e0:0f:2a:8c:11:b2:a4:6d:0d: 93:02:f9:f4:6f:92:4d:bd:8d:4b:ac:90:50:b2:4a:1d:ae:5f: b7:48:96:a8:8b:0e:fd:80:a3:c3:ef:b6:dd:b2:a7:8a:1f:89: fd:2c:ec:e9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NVUzQQ1mxOdk8cJFRQlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzkwMzM4NjU1NjAyNjZhMjZiOTllMzRjNDA1MTQ3OGIzZjVmMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDxsxPK1EDHYmTLDJn91kieYfKIr 3VVwzCQhJl2VkXkITqi+g/y3tNhubiEabOiWGia5OaQLXGAC/CJwbbISz5Xbz+1R VP1Ag7rRYuHOarEQd4kxyz7k0FdLa3ubB+a8k2+4sXYNKW5z+KDI6Z8EUXyEmOcX 2RJTU5ilvAdUktbJ3a/8a9oMfJ5j03B7x3fhvUgiaffXuVVrmrwQtDDzPvDkrcrr DsqSdA+E/xAPtjfuTwrF2PlI2tQdT5ASPxAUzBg5wMIfc9K9NC5htgyuYLnHyFnd 3xhuFcBRgY1DT1uRyOeAn53d3mC6/yXqLMnHSo2pIglfemMjTpppzm648QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIOQM4ZVYCZqJrmeNMQFFHiz9fJJMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvZzVBemhsVmdKbW9tdVo0MHhBVVVlTFAxOGtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUGAqAwQA UGExAwQBVXjeAwQBVXjkMA0GCSqGSIb3DQEBCwUAA4IBAQBqDXX3YB4gjekx0ox9 Rgn4RoP9dMJgFf8ztlu9CeUZ+rqoWqiIuEe4JmvOIyHrGXrEWaBAMeHsCM01MWbg 3UUi+sFqpUU77TNtz1AGvKXI+8BzysZDotlwaiaNMTUx4UrFjzKTLWK4NnFBEYsM LaT70ayTPePVM5OLm8eWcvjuFbheF2yPUCNLtGJpZxvaX7LmWAQwR9cls+G/lFrQ T4MhJUPtYb2o36nIkOThfb9TJ7OkiN3Vs1/joys3d7QhJlF1P5az8xsj3JZNXwCI iOPgDyqMEbKkbQ2TAvn0b5JNvY1LrJBQskodrl+3SJaoiw79gKPD77bdsqeKH4n9 LOzp -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:15 2026 by rpki-client