This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1GNYNSpLZEV6lJSEiC0uCb45Kkg.roa File: 1GNYNSpLZEV6lJSEiC0uCb45Kkg.roa (raw, json) Hash identifier: DoJnuhEW/B73op3Jk3VX1qudvNpeJmTAZynYtUkq/MA= Subject key identifier: D4:63:58:35:2A:4B:64:45:7A:94:94:84:88:2D:2E:09:BE:39:2A:48 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E76C20B656120B239B9007A4E4672 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1GNYNSpLZEV6lJSEiC0uCb45Kkg.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 194.61.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:76:c2:0b:65:61:20:b2:39:b9:00:7a:4e:46:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d46358352a4b64457a949484882d2e09be392a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:72:4f:93:f5:0c:e8:5d:a4:8b:9f:8c:70: 70:13:fa:49:6e:c9:02:8e:0a:9c:c9:98:5d:8b:08: 3c:64:f3:51:9c:d5:55:02:75:8b:0b:a1:fc:f8:a3: 3e:e7:0f:21:8a:b9:f8:b4:cf:da:9e:ce:d4:f7:11: 0f:b3:7d:71:ce:5e:0a:bd:a7:59:71:f4:8a:29:82: 7f:42:c6:52:c8:e2:46:8a:4e:b3:40:26:ae:27:4d: 4c:58:5d:2b:d2:ac:fd:c1:82:cf:c1:e4:f3:a5:7d: 82:fa:0f:19:ab:b4:57:86:d7:66:ae:56:93:c7:d4: 4a:07:3a:56:7a:8f:34:05:b4:f6:34:ed:c4:64:43: 9d:8d:22:e6:5e:1d:2c:0e:75:c5:44:46:ce:d0:0a: 7e:7e:3e:74:8e:dc:00:b7:65:b9:e2:6c:d7:41:15: ef:58:db:40:9e:0a:0f:84:26:c7:10:11:06:e9:a1: ea:cd:ef:1a:11:a6:64:87:fa:79:62:cc:e4:02:5c: a8:93:99:11:d1:2b:73:8c:23:e1:45:1f:3d:f4:0a: 72:da:8a:76:ad:fd:9e:17:21:b6:33:56:c6:94:d5: 97:30:79:a9:ad:87:0c:b6:b9:a3:8e:e4:04:de:6c: b3:29:5a:bf:59:ca:7d:e0:e0:11:59:e2:4f:3b:37: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:63:58:35:2A:4B:64:45:7A:94:94:84:88:2D:2E:09:BE:39:2A:48 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1GNYNSpLZEV6lJSEiC0uCb45Kkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.72.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:05:ee:08:c5:82:d6:40:d6:a2:f8:d5:51:d8:cb:cf:a9:62: 66:ea:66:76:96:57:1a:b1:a8:b8:59:30:18:fc:92:cd:5d:a1: 23:79:d5:ed:b8:0b:5f:2a:47:23:4f:b5:17:63:af:42:be:42: e0:01:4d:73:e0:bb:5b:55:59:7b:29:ac:6c:6b:22:2a:13:0f: d2:9d:d3:54:27:f5:df:13:b7:16:09:2b:25:37:10:03:0d:ca: 1e:ce:dc:31:13:d4:11:42:5a:3d:23:c3:ad:49:91:39:98:1a: 23:32:da:af:b1:6f:85:d1:2d:df:2a:52:60:5b:33:d9:e2:a6: f4:d8:c3:de:73:6e:10:f0:40:37:9b:01:bc:18:71:76:bc:d3: 7e:02:a4:13:e3:c5:7d:38:c4:9b:1c:23:b4:27:6b:a5:c5:11: 51:2e:0c:9a:ca:9c:b7:77:2d:57:65:c6:f8:44:8b:be:d3:89: 7c:53:bd:7b:85:32:2d:16:4a:0c:0b:a1:14:f0:e4:93:d3:0c: 56:f7:bf:f4:72:1e:ce:c6:c1:5a:67:4a:d0:50:21:0e:be:9c: 87:54:c4:1b:9f:30:75:13:6b:8e:ba:d2:70:ed:e6:24:06:11: 59:36:62:bc:de:0b:66:14:95:70:37:3c:9e:9e:a6:0d:92:26: 65:b1:dd:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnbCC2VhILI5uQB6TkZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDYzNTgzNTJhNGI2NDQ1N2E5NDk0ODQ4ODJkMmUwOWJlMzkyYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhZyT5P1DOhdpIufjHBwE/pJbskC jgqcyZhdiwg8ZPNRnNVVAnWLC6H8+KM+5w8hirn4tM/ans7U9xEPs31xzl4KvadZ cfSKKYJ/QsZSyOJGik6zQCauJ01MWF0r0qz9wYLPweTzpX2C+g8Zq7RXhtdmrlaT x9RKBzpWeo80BbT2NO3EZEOdjSLmXh0sDnXFREbO0Ap+fj50jtwAt2W54mzXQRXv WNtAngoPhCbHEBEG6aHqze8aEaZkh/p5YszkAlyok5kR0StzjCPhRR899Apy2op2 rf2eFyG2M1bGlNWXMHmprYcMtrmjjuQE3myzKVq/Wcp94OARWeJPOzco3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRjWDUqS2RFepSUhIgtLgm+OSpIMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvMUdOWU5TcExaRVY2bEpTRWlDMHVDYjQ1S2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1IMA0G CSqGSIb3DQEBCwUAA4IBAQCbBe4IxYLWQNai+NVR2MvPqWJm6mZ2llcasai4WTAY /JLNXaEjedXtuAtfKkcjT7UXY69CvkLgAU1z4LtbVVl7KaxsayIqEw/SndNUJ/Xf E7cWCSslNxADDcoeztwxE9QRQlo9I8OtSZE5mBojMtqvsW+F0S3fKlJgWzPZ4qb0 2MPec24Q8EA3mwG8GHF2vNN+AqQT48V9OMSbHCO0J2ulxRFRLgyaypy3dy1XZcb4 RIu+04l8U717hTItFkoMC6EU8OST0wxW97/0ch7OxsFaZ0rQUCEOvpyHVMQbnzB1 E2uOutJw7eYkBhFZNmK83gtmFJVwNzyenqYNkiZlsd3i -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:14 2026 by rpki-client