This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gIGATRUVwQ9zFA0ChaB1d7ZWyVk.roa File: gIGATRUVwQ9zFA0ChaB1d7ZWyVk.roa (raw, json) Hash identifier: 6N8jGG5PkTbTC36bm3PXk6f1Csq9D+i1suUmpJYutfE= Subject key identifier: 80:81:80:4D:15:15:C1:0F:73:14:0D:02:85:A0:75:77:B6:56:C9:59 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F92E9581C286A0649494EC069804 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gIGATRUVwQ9zFA0ChaB1d7ZWyVk.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215761 IP address blocks: 45.138.183.0/24 maxlen: 24 45.144.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f9:2e:95:81:c2:86:a0:64:94:94:ec:06:98:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8081804d1515c10f73140d0285a07577b656c959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:5e:d7:68:0d:aa:f5:f5:61:47:41:33:57: 54:ab:09:89:a1:71:af:45:39:39:ec:c3:65:dc:38: 58:8c:c7:c3:d4:20:c9:cc:03:54:6b:39:b8:25:e0: bb:75:a8:d9:7e:73:11:9a:b9:4f:74:c7:a4:ef:3f: 3b:8d:15:85:01:b2:48:50:c0:c1:b2:d5:bf:c6:15: b7:57:ef:7b:42:62:3d:d2:57:83:5c:20:4e:6b:12: ff:fb:ad:54:24:b4:6f:b4:5c:44:09:42:fc:1a:5c: 06:71:33:0a:5e:14:82:d0:1e:85:29:60:75:9e:20: 9c:c8:68:f5:ae:94:b2:ea:87:b4:3d:6f:41:e2:f1: eb:dc:47:ab:1b:49:aa:ee:cb:f7:8c:5c:db:6a:fc: 8b:62:6a:2d:4a:60:8c:20:fb:17:4c:05:c6:09:3a: 4b:d2:80:14:55:2a:b4:83:ea:2f:2c:be:da:fb:e0: c5:06:94:e8:a0:ef:f5:b1:c2:66:0b:86:7f:38:d6: 61:0d:45:d4:9f:1b:87:5e:68:48:26:aa:4f:12:a4: 26:dd:67:66:d0:4b:f7:e1:e6:86:f7:16:d5:43:13: d5:be:c3:cf:6a:5b:73:09:ec:f2:67:93:ec:cf:a6: 0c:84:52:4c:30:70:12:c6:85:a8:d7:f5:1c:ac:aa: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:81:80:4D:15:15:C1:0F:73:14:0D:02:85:A0:75:77:B6:56:C9:59 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gIGATRUVwQ9zFA0ChaB1d7ZWyVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.183.0/24 45.144.214.0/24 Signature Algorithm: sha256WithRSAEncryption bf:5f:dd:a5:cd:1f:fb:8b:c1:51:c9:72:23:00:92:3d:2c:8c: 8a:9b:5f:28:1d:c1:1f:73:e1:0c:d7:f6:60:38:07:27:91:d4: 65:82:da:ef:e3:87:fa:38:c8:32:42:c4:ae:b5:6f:52:bf:fc: ee:6a:29:e8:7c:8c:37:c3:ee:2b:28:7d:b9:7a:3a:3b:f7:a7: 54:3b:7c:48:aa:1d:47:f9:0e:d6:2c:d6:85:01:22:ce:2f:35: 21:6b:c2:bb:0e:3f:54:7e:80:39:e0:57:4c:15:16:e2:71:40: 4a:bb:3f:71:e0:7e:50:65:b3:75:a9:06:df:cb:f8:f7:c5:e8: ae:9c:38:57:6f:b9:31:6b:65:1f:48:2e:89:f9:4c:fb:53:bd: dd:c5:da:c5:5c:57:fa:0e:17:a0:35:49:11:10:77:1e:69:80: ff:86:a3:ee:63:56:ce:73:de:e2:eb:fa:f0:29:b9:b1:56:13: 11:0e:bc:b2:a6:a7:94:6d:bd:39:35:0c:dd:61:a8:9d:75:36: c5:a6:0c:2b:3c:11:2d:4b:c2:63:fc:e4:1e:32:3e:26:4b:b0: 25:14:80:ec:72:91:a2:5e:33:7b:cb:5b:52:61:0a:45:f2:cb: 32:24:0a:83:b8:50:01:3f:ed:b1:0d:0b:65:e2:42:bd:cc:80: d8:4f:48:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FfkulYHChqBklJTsBpgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDgxODA0ZDE1MTVjMTBmNzMxNDBkMDI4NWEwNzU3N2I2NTZjOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrBe12gNqvX1YUdBM1dUqwmJoXGv RTk57MNl3DhYjMfD1CDJzANUazm4JeC7dajZfnMRmrlPdMek7z87jRWFAbJIUMDB stW/xhW3V+97QmI90leDXCBOaxL/+61UJLRvtFxECUL8GlwGcTMKXhSC0B6FKWB1 niCcyGj1rpSy6oe0PW9B4vHr3EerG0mq7sv3jFzbavyLYmotSmCMIPsXTAXGCTpL 0oAUVSq0g+ovLL7a++DFBpTooO/1scJmC4Z/ONZhDUXUnxuHXmhIJqpPEqQm3Wdm 0Ev34eaG9xbVQxPVvsPPaltzCezyZ5Psz6YMhFJMMHASxoWo1/UcrKqpswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFICBgE0VFcEPcxQNAoWgdXe2VslZMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvZ0lHQVRSVVZ3UTl6RkEwQ2hhQjFkN1pXeVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYq3AwQA LZDWMA0GCSqGSIb3DQEBCwUAA4IBAQC/X92lzR/7i8FRyXIjAJI9LIyKm18oHcEf c+EM1/ZgOAcnkdRlgtrv44f6OMgyQsSutW9Sv/zuainofIw3w+4rKH25ejo796dU O3xIqh1H+Q7WLNaFASLOLzUha8K7Dj9UfoA54FdMFRbicUBKuz9x4H5QZbN1qQbf y/j3xeiunDhXb7kxa2UfSC6J+Uz7U73dxdrFXFf6DhegNUkREHceaYD/hqPuY1bO c97i6/rwKbmxVhMRDryypqeUbb05NQzdYaiddTbFpgwrPBEtS8Jj/OQeMj4mS7Al FIDscpGiXjN7y1tSYQpF8ssyJAqDuFABP+2xDQtl4kK9zIDYT0iM -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:36 2026 by rpki-client