This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/gLcTJvZ-bTiZKez7VJlhXddzj5I.roa File: gLcTJvZ-bTiZKez7VJlhXddzj5I.roa (raw, json) Hash identifier: njLU3hmp1ice1mv35YuU3QwtIJDPeTW7I2pUB3WU76k= Subject key identifier: 80:B7:13:26:F6:7E:6D:38:99:29:EC:FB:54:99:61:5D:D7:73:8F:92 Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Certificate serial: 019B77591596F2BD7AEF55445A89A8747A23 Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/gLcTJvZ-bTiZKez7VJlhXddzj5I.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24631 IP address blocks: 46.54.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:15:96:f2:bd:7a:ef:55:44:5a:89:a8:74:7a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80b71326f67e6d389929ecfb5499615dd7738f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:5b:d4:7d:c5:68:54:4e:ee:58:19:0b:a1: 37:82:1a:de:83:65:5e:06:35:3d:61:a4:1c:c1:b1: df:9f:14:65:9e:c0:50:c1:ef:3c:c7:ba:5d:b0:b5: 0a:10:25:14:24:22:a4:cb:49:75:f3:de:28:5c:ea: a2:a5:41:19:86:16:85:55:13:fc:6e:04:03:c4:e6: d0:cb:2a:00:3b:c0:d8:25:90:ad:25:a7:d2:97:ca: 61:c9:ff:16:cc:0a:5e:68:85:0c:a8:d8:de:23:db: 6d:92:4b:56:88:55:4b:47:fb:d4:d7:4f:56:c9:4d: fa:55:6a:32:12:c0:c6:dd:1b:5a:e0:43:54:c5:a3: 42:aa:a0:f2:e3:ca:0b:c2:b8:3b:b5:f5:f5:b3:9e: 28:33:56:dd:15:d6:8b:25:21:6f:e8:c9:d8:d0:38: fe:5d:29:49:1c:d6:d4:19:84:d8:a6:ef:20:9d:4d: dc:4f:42:6d:fc:b4:31:2b:e0:87:74:53:3f:cf:7d: 19:b5:bc:74:04:29:57:63:3c:18:91:ff:27:c0:06: 17:0f:90:ff:fb:9c:1b:ea:a8:0a:1e:3a:e1:77:67: ea:99:e1:76:67:63:64:36:be:11:a8:fc:d7:a4:a4: a0:41:b9:e3:e0:4d:c7:cf:4d:8d:36:58:bf:0c:60: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B7:13:26:F6:7E:6D:38:99:29:EC:FB:54:99:61:5D:D7:73:8F:92 X509v3 Authority Key Identifier: keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/gLcTJvZ-bTiZKez7VJlhXddzj5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.54.139.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:0f:d3:e7:c7:3a:6d:81:32:00:99:d9:b5:f9:ff:5f:05:9a: 7f:2a:f2:2e:8c:65:9a:1a:a2:2c:5f:ed:9a:52:e2:02:a9:47: 58:8d:51:16:fc:8c:a9:43:48:ba:fa:b7:8a:9d:b6:d6:77:0c: 82:2f:65:b5:f3:26:30:e9:99:31:14:d3:a9:f4:8a:d4:b8:c1: f6:c3:b9:76:45:e5:81:a1:3f:fa:81:5e:f8:88:be:bb:fe:0f: 5d:76:7b:99:82:30:fa:8e:03:63:b6:b5:33:26:57:ea:08:6c: 1b:cf:d9:9b:22:ce:cc:b5:b2:05:18:1b:b3:37:1d:49:ff:3f: 9e:74:e2:67:c3:f4:c6:ab:a1:cb:9c:ce:7f:ec:66:60:12:f3: 75:bd:b8:d9:ec:04:e8:15:71:e8:7e:ff:af:22:18:03:7d:a0: a2:79:7b:ad:7a:89:a1:ef:7c:7f:5e:94:41:6a:0c:ee:55:6f: 5c:7f:f6:ea:d6:00:d6:f9:f8:8d:8e:b1:d4:b6:89:fc:27:b1: a4:98:91:1f:33:29:72:1c:40:8f:40:62:20:c5:1d:e3:36:39: e7:43:ad:7b:c4:74:ce:30:27:09:3f:40:f9:0c:7d:df:52:9f: 2a:08:c8:ba:e0:51:78:d5:88:82:a8:71:f4:13:63:39:af:e2: dd:69:9b:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRWW8r1671VEWomodHojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy OWVhMWYwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGI3MTMyNmY2N2U2ZDM4OTkyOWVjZmI1NDk5NjE1ZGQ3NzM4ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm9b1H3FaFRO7lgZC6E3ghreg2Ve BjU9YaQcwbHfnxRlnsBQwe88x7pdsLUKECUUJCKky0l1894oXOqipUEZhhaFVRP8 bgQDxObQyyoAO8DYJZCtJafSl8phyf8WzApeaIUMqNjeI9ttkktWiFVLR/vU109W yU36VWoyEsDG3Rta4ENUxaNCqqDy48oLwrg7tfX1s54oM1bdFdaLJSFv6MnY0Dj+ XSlJHNbUGYTYpu8gnU3cT0Jt/LQxK+CHdFM/z30Ztbx0BClXYzwYkf8nwAYXD5D/ +5wb6qgKHjrhd2fqmeF2Z2NkNr4RqPzXpKSgQbnj4E3Hz02NNli/DGBfdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIC3Eyb2fm04mSns+1SZYV3Xc4+SMB8GA1UdIwQY MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt ZTIwYTY1NGZjYTk1LzEvZ0xjVEp2Wi1iVGlaS2V6N1ZKbGhYZGR6ajVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1 LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALjaLMA0G CSqGSIb3DQEBCwUAA4IBAQBrD9PnxzptgTIAmdm1+f9fBZp/KvIujGWaGqIsX+2a UuICqUdYjVEW/IypQ0i6+reKnbbWdwyCL2W18yYw6ZkxFNOp9IrUuMH2w7l2ReWB oT/6gV74iL67/g9ddnuZgjD6jgNjtrUzJlfqCGwbz9mbIs7MtbIFGBuzNx1J/z+e dOJnw/TGq6HLnM5/7GZgEvN1vbjZ7AToFXHofv+vIhgDfaCieXuteomh73x/XpRB agzuVW9cf/bq1gDW+fiNjrHUton8J7GkmJEfMylyHECPQGIgxR3jNjnnQ617xHTO MCcJP0D5DH3fUp8qCMi64FF41YiCqHH0E2M5r+LdaZsX -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:03 2026 by rpki-client