This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gVt-RkHkItzb7x1eNIyO6aB_yqk.roa File: gVt-RkHkItzb7x1eNIyO6aB_yqk.roa (raw, json) Hash identifier: x/g2P7SAd+RXb1dBmjtZYMjQ1qVz5Q3XISz+TFc3sFI= Subject key identifier: 81:5B:7E:46:41:E4:22:DC:DB:EF:1D:5E:34:8C:8E:E9:A0:7F:CA:A9 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C8FA0F0E244D093D8A250C755A4E Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gVt-RkHkItzb7x1eNIyO6aB_yqk.roa Signing time: Fri 02 Jan 2026 16:20:35 +0000 ROA not before: Fri 02 Jan 2026 16:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204914 IP address blocks: 2.56.165.0/24 maxlen: 24 77.83.242.0/24 maxlen: 24 89.190.158.0/24 maxlen: 24 185.234.75.0/24 maxlen: 24 194.56.226.0/24 maxlen: 24 212.107.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c8:fa:0f:0e:24:4d:09:3d:8a:25:0c:75:5a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=815b7e4641e422dcdbef1d5e348c8ee9a07fcaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:73:d0:c5:0e:16:35:be:94:75:f0:e6:6f: ef:9d:db:26:74:c8:7d:8e:71:5d:61:79:55:31:35: 77:63:0c:a6:cb:1f:1e:40:6f:53:81:03:57:71:71: 8d:a8:46:7b:98:d0:31:51:c2:14:b1:bd:20:0d:b9: ec:56:e8:3b:78:af:c7:8e:7f:19:30:41:4e:08:b2: 1b:c3:ca:d7:82:11:57:f5:f3:6c:35:af:b9:06:a9: de:8d:ae:82:29:75:5a:3d:4e:16:2b:fa:c3:30:d2: 73:8b:8c:63:62:71:60:37:2d:a5:87:21:85:e4:5c: 6a:ff:eb:16:c1:d0:ce:0d:3c:89:3c:aa:af:6f:ca: 30:c7:77:9a:05:a9:66:db:51:5f:ce:ca:db:41:03: df:94:7e:d9:d0:15:46:0c:21:7c:ea:81:46:e3:db: 5a:a8:fa:9e:8c:3c:4e:88:ce:38:6c:3b:60:9e:91: f0:b8:8c:58:34:e8:7c:59:20:fc:ae:9b:83:bd:b4: 69:86:5d:55:32:e9:cc:27:54:c2:79:8a:24:9c:6a: 71:47:4d:d7:08:19:89:0d:d3:c0:7d:3a:b9:fb:57: e9:d8:20:6f:f1:10:34:14:20:5b:85:de:c8:09:76: 8d:a8:59:68:8f:3d:cd:2d:f0:fb:46:c7:74:3c:0a: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5B:7E:46:41:E4:22:DC:DB:EF:1D:5E:34:8C:8E:E9:A0:7F:CA:A9 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gVt-RkHkItzb7x1eNIyO6aB_yqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.165.0/24 77.83.242.0/24 89.190.158.0/24 185.234.75.0/24 194.56.226.0/24 212.107.14.0/24 Signature Algorithm: sha256WithRSAEncryption e1:6a:75:2e:8e:8d:69:39:b6:02:c7:97:04:67:1b:fa:c7:53: 7b:b2:9b:37:a5:c1:a4:a2:25:14:0e:50:3a:b7:b1:76:bc:c4: d1:f5:9f:97:db:a4:f8:8f:c5:88:6f:b0:41:fe:7d:63:53:8f: ba:83:2a:9c:6a:56:d7:9e:54:60:b8:f5:a0:4d:49:83:aa:7d: ec:5a:74:ef:d8:6c:97:59:5f:03:f1:63:0b:1a:ad:a5:9a:a1: bb:18:12:a2:8f:8d:56:af:9f:d2:bb:69:5c:21:6f:af:cf:6e: 12:6a:5d:00:41:02:df:62:7b:1b:87:51:0f:8b:37:1b:fb:58: 12:aa:8c:40:4c:0e:dd:cb:df:5c:19:c3:f6:c9:ae:da:5b:b1: dd:29:87:62:16:e9:75:85:6d:9f:a8:32:7c:fd:eb:06:4a:d9: 8e:31:85:8e:ad:41:98:fc:18:41:3d:c5:1f:22:c5:ce:d9:0b: f5:ac:9a:29:5d:b8:23:be:bf:06:db:7f:10:4b:55:b0:0e:d8: d1:bf:00:ff:e2:cf:38:d2:01:b2:9d:a3:41:40:2a:8c:f1:fc: 2d:4c:3b:21:2d:63:17:63:27:2b:58:4c:bb:e5:8d:f8:fe:f0: e8:e2:04:7d:b1:d9:d8:74:b1:0f:ce:ed:23:ca:ac:78:1e:1a: 48:50:7b:0b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/gsj6Dw4kTQk9iiUMdVpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTViN2U0NjQxZTQyMmRjZGJlZjFkNWUzNDhjOGVlOWEwN2ZjYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnslz0MUOFjW+lHXw5m/vndsmdMh9 jnFdYXlVMTV3Ywymyx8eQG9TgQNXcXGNqEZ7mNAxUcIUsb0gDbnsVug7eK/Hjn8Z MEFOCLIbw8rXghFX9fNsNa+5Bqneja6CKXVaPU4WK/rDMNJzi4xjYnFgNy2lhyGF 5Fxq/+sWwdDODTyJPKqvb8owx3eaBalm21FfzsrbQQPflH7Z0BVGDCF86oFG49ta qPqejDxOiM44bDtgnpHwuIxYNOh8WSD8rpuDvbRphl1VMunMJ1TCeYoknGpxR03X CBmJDdPAfTq5+1fp2CBv8RA0FCBbhd7ICXaNqFlojz3NLfD7Rsd0PArSKwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFIFbfkZB5CLc2+8dXjSMjumgf8qpMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZ1Z0LVJrSGtJdHpiN3gxZU5JeU82YUJfeXFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjilAwQA TVPyAwQAWb6eAwQAuepLAwQAwjjiAwQA1GsOMA0GCSqGSIb3DQEBCwUAA4IBAQDh anUujo1pObYCx5cEZxv6x1N7sps3pcGkoiUUDlA6t7F2vMTR9Z+X26T4j8WIb7BB /n1jU4+6gyqcalbXnlRguPWgTUmDqn3sWnTv2GyXWV8D8WMLGq2lmqG7GBKij41W r5/Su2lcIW+vz24Sal0AQQLfYnsbh1EPizcb+1gSqoxATA7dy99cGcP2ya7aW7Hd KYdiFul1hW2fqDJ8/esGStmOMYWOrUGY/BhBPcUfIsXO2Qv1rJopXbgjvr8G238Q S1WwDtjRvwD/4s840gGynaNBQCqM8fwtTDshLWMXYycrWEy75Y34/vDo4gR9sdnY dLEPzu0jyqx4HhpIUHsL -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:53 2026 by rpki-client