This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/gxpF5Ywmi9CVdy65UZl-VezFpFY.roa File: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (raw, json) Hash identifier: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw= Subject key identifier: 83:1A:45:E5:8C:26:8B:D0:95:77:2E:B9:51:99:7E:55:EC:C5:A4:56 Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 019B7FF18DDA4FE77DABF7BD553C4766E29B Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/gxpF5Ywmi9CVdy65UZl-VezFpFY.roa Signing time: Fri 02 Jan 2026 18:21:35 +0000 ROA not before: Fri 02 Jan 2026 18:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 45.157.138.0/24 maxlen: 24 178.211.154.0/24 maxlen: 24 193.56.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:8d:da:4f:e7:7d:ab:f7:bd:55:3c:47:66:e2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Jan 2 18:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=831a45e58c268bd095772eb951997e55ecc5a456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:36:7a:25:7a:1d:52:f3:ea:d3:c6:33:a0: 37:bf:3c:a8:cf:e3:12:a6:c9:a2:b3:48:ef:59:8d: 13:d9:d9:02:f7:87:8b:d1:99:c4:96:c9:45:80:86: d9:18:8f:05:d2:56:21:53:0c:24:dc:08:ab:75:81: 41:16:e6:69:0d:29:ae:28:fd:75:d7:31:ba:13:46: 32:d4:6a:c3:04:84:b1:1d:b8:08:89:0b:dd:d5:3e: d7:7c:fe:61:d5:f8:62:66:60:f0:1a:23:40:2a:b7: 94:fc:ed:8c:ac:5d:36:2b:c0:9f:d8:2d:75:b3:6b: 87:91:05:4a:58:88:21:2b:25:44:c8:df:8d:04:c4: 50:18:c1:0e:51:1a:c5:94:43:d4:e0:c0:f6:15:4c: e2:a4:27:28:c8:ef:3e:22:93:b5:ae:80:b6:75:37: 06:4c:1a:c3:a5:37:70:f7:5d:0c:69:a3:f7:78:2f: 10:80:5e:36:5d:46:ab:cd:7f:ba:e6:d5:d3:7e:07: 9e:3f:27:67:b4:5e:af:a9:3a:78:36:88:f5:11:01: 47:97:a9:fd:3e:8f:56:59:cb:d3:a9:1b:14:31:68: 39:83:fa:e2:0c:ad:75:a6:84:00:3c:d6:76:5f:75: 6f:6e:31:28:7e:0f:65:bf:21:24:9b:da:86:9d:7c: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:45:E5:8C:26:8B:D0:95:77:2E:B9:51:99:7E:55:EC:C5:A4:56 X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/gxpF5Ywmi9CVdy65UZl-VezFpFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.138.0/24 178.211.154.0/24 193.56.112.0/24 Signature Algorithm: sha256WithRSAEncryption a2:34:ea:3e:8e:6f:71:43:3c:3e:84:e5:f6:a0:db:12:65:13: 36:56:b6:7b:59:e1:22:6f:a8:57:b7:a2:47:bf:24:55:cc:8c: ab:3c:f4:48:b3:09:50:7d:8c:8f:a1:72:07:55:4a:7e:c7:78: 70:eb:7f:ca:7d:e0:d1:f6:8b:f9:e7:7f:1a:ec:7b:f7:b4:2e: 59:ee:b7:5e:fc:56:83:de:2b:f9:9f:98:40:b0:fc:bf:c8:39: 10:3d:05:30:10:67:56:66:64:0a:22:14:69:69:1d:0f:10:c0: f5:f8:ef:ed:8b:25:d2:c6:38:89:9f:d3:34:cc:37:58:8e:95: ab:f8:94:91:27:d4:f6:4c:71:14:16:a7:b3:5d:dc:0c:da:40: 6e:34:44:d6:4b:f8:15:ee:af:38:aa:90:bc:f7:50:e7:6b:48: 6d:b5:2d:75:8b:d6:13:e5:44:1a:37:b1:3d:a3:3c:df:03:42: 3a:5d:25:e8:99:9e:1a:dc:f8:ee:0b:ab:91:b2:b2:b0:18:b6: 2b:5b:f1:ee:a8:3c:f7:0a:6e:c7:3f:ef:74:1a:a4:37:be:11: 67:77:1a:fa:d8:28:ff:5a:4c:2a:ec:a3:a9:e3:59:0d:5e:2d: c9:35:08:98:7f:b3:55:8b:7b:d4:87:05:64:4d:e7:d8:56:3d: c5:59:d5:0e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8Y3aT+d9q/e9VTxHZuKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjYwMTAyMTgyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzFhNDVlNThjMjY4YmQwOTU3NzJlYjk1MTk5N2U1NWVjYzVhNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVM2eiV6HVLz6tPGM6A3vzyoz+MS psmis0jvWY0T2dkC94eL0ZnElslFgIbZGI8F0lYhUwwk3AirdYFBFuZpDSmuKP11 1zG6E0Yy1GrDBISxHbgIiQvd1T7XfP5h1fhiZmDwGiNAKreU/O2MrF02K8Cf2C11 s2uHkQVKWIghKyVEyN+NBMRQGMEOURrFlEPU4MD2FUzipCcoyO8+IpO1roC2dTcG TBrDpTdw910MaaP3eC8QgF42XUarzX+65tXTfgeePydntF6vqTp4Noj1EQFHl6n9 Po9WWcvTqRsUMWg5g/riDK11poQAPNZ2X3VvbjEofg9lvyEkm9qGnXxOIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIMaReWMJovQlXcuuVGZflXsxaRWMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvZ3hwRjVZd21pOUNWZHk2NVVabC1WZXpGcEZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZ2KAwQA stOaAwQAwThwMA0GCSqGSIb3DQEBCwUAA4IBAQCiNOo+jm9xQzw+hOX2oNsSZRM2 VrZ7WeEib6hXt6JHvyRVzIyrPPRIswlQfYyPoXIHVUp+x3hw63/KfeDR9ov5538a 7Hv3tC5Z7rde/FaD3iv5n5hAsPy/yDkQPQUwEGdWZmQKIhRpaR0PEMD1+O/tiyXS xjiJn9M0zDdYjpWr+JSRJ9T2THEUFqezXdwM2kBuNETWS/gV7q84qpC891Dna0ht tS11i9YT5UQaN7E9ozzfA0I6XSXomZ4a3PjuC6uRsrKwGLYrW/HuqDz3Cm7HP+90 GqQ3vhFndxr62Cj/Wkwq7KOp41kNXi3JNQiYf7NVi3vUhwVkTefYVj3FWdUO -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:35 2026 by rpki-client