This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa File: G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa (raw, json) Hash identifier: CL8qT2kYIrJ9NwJgE0Acghs3urkbaGANrFWydwL2iRg= Subject key identifier: 1B:43:F9:5A:53:65:64:61:63:6C:48:5B:FD:1D:59:9F:67:5F:DB:1B Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Certificate serial: 019B7AC8EF25F589EB9B82EF26E531D00372 Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa Signing time: Thu 01 Jan 2026 18:19:07 +0000 ROA not before: Thu 01 Jan 2026 18:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41644 IP address blocks: 45.81.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ef:25:f5:89:eb:9b:82:ef:26:e5:31:d0:03:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b43f95a53656461636c485bfd1d599f675fdb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:b3:71:36:5e:dc:e2:67:6f:83:38:14:39: a7:46:cb:6c:c0:ee:37:e3:a6:c3:d6:b6:64:1f:c5: c7:c9:c2:42:77:b1:fa:f9:86:31:be:10:d1:79:1f: e4:68:14:59:5e:2f:f4:e6:67:5e:13:f1:1a:da:e5: 4f:23:e8:37:b1:46:0c:7f:91:02:b4:66:8a:cd:09: 36:88:ca:7b:31:46:1d:96:16:56:cc:ac:b6:61:9e: bd:56:b6:36:a1:50:22:2c:0c:7d:93:e6:21:6e:a1: 64:42:2e:aa:00:5c:7f:58:c2:24:74:d7:a5:29:b6: ef:8c:29:96:fb:d4:29:66:42:bf:8f:a7:4a:a2:a8: 75:78:34:ce:0e:5f:50:4e:6b:a2:fe:15:65:9e:36: 57:1e:4d:14:89:5c:ca:22:89:c5:17:39:5f:96:8b: 3d:f1:07:77:0c:63:6f:4a:15:55:21:22:e3:d2:b4: cc:20:6a:2b:53:43:40:de:aa:bb:49:e7:cd:73:04: 55:30:b5:b9:52:44:7b:d5:69:63:c8:c5:8a:1e:14: 21:71:98:1f:96:a4:95:03:05:b2:72:df:60:f2:e9: 3b:b0:a2:e3:f0:4c:fa:9c:2c:c3:b6:98:cb:71:ae: 77:14:b0:ff:c4:ea:5b:34:06:8e:7a:91:63:5c:86: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:F9:5A:53:65:64:61:63:6C:48:5B:FD:1D:59:9F:67:5F:DB:1B X509v3 Authority Key Identifier: keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/G0P5WlNlZGFjbEhb_R1Zn2df2xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.64.0/22 Signature Algorithm: sha256WithRSAEncryption 84:cd:bb:ee:62:dd:54:24:cf:35:3b:2c:aa:af:ff:a4:e3:72: 91:30:0b:d4:b8:99:6a:b2:53:c6:39:9b:96:65:f9:97:45:45: 3a:49:9a:8f:2b:5e:8a:d3:36:25:50:d0:1c:8d:64:b3:37:7c: 71:36:db:ec:92:f2:75:c6:db:b6:79:8b:f0:24:c4:45:ae:e3: 9e:ed:55:94:af:f1:d3:63:93:a8:3f:fe:6f:3e:75:3d:e1:f4: 6a:27:45:77:57:04:e6:45:7f:34:e1:55:29:7e:04:a5:22:5d: 44:8f:81:97:dd:b0:4f:65:36:8c:98:75:5e:79:67:da:1a:74: 6f:de:f5:c9:e9:e2:28:09:9f:66:7a:79:70:bb:ce:cb:70:76: 0e:6d:a9:d5:44:72:77:41:80:26:0e:25:8f:35:c8:6a:b3:61: 73:d0:6d:db:7f:7b:48:c6:7d:ac:c2:44:47:82:e0:a1:a8:f3: e8:00:76:7a:71:cb:5a:dd:11:64:b1:4c:4c:e2:53:23:d9:31: 22:31:7c:02:9e:b2:eb:07:0f:d1:11:a5:64:f6:f5:7a:39:2b: f5:a5:64:25:29:34:f5:24:87:21:dc:77:7e:6b:b6:94:07:a5: 0f:e6:c0:af:06:89:ce:d2:23:91:8c:8f:00:83:77:1c:fb:ef: 6e:66:2d:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yO8l9Ynrm4LvJuUx0ANyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw ZmQ1NjAwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjQzZjk1YTUzNjU2NDYxNjM2YzQ4NWJmZDFkNTk5ZjY3NWZkYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI2zcTZe3OJnb4M4FDmnRstswO43 46bD1rZkH8XHycJCd7H6+YYxvhDReR/kaBRZXi/05mdeE/Ea2uVPI+g3sUYMf5EC tGaKzQk2iMp7MUYdlhZWzKy2YZ69VrY2oVAiLAx9k+YhbqFkQi6qAFx/WMIkdNel KbbvjCmW+9QpZkK/j6dKoqh1eDTODl9QTmui/hVlnjZXHk0UiVzKIonFFzlflos9 8Qd3DGNvShVVISLj0rTMIGorU0NA3qq7SefNcwRVMLW5UkR71WljyMWKHhQhcZgf lqSVAwWyct9g8uk7sKLj8Ez6nCzDtpjLca53FLD/xOpbNAaOepFjXIZD/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtD+VpTZWRhY2xIW/0dWZ9nX9sbMB8GA1UdIwQY MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt OTQ1ODdkODMzMWY5LzEvRzBQNVdsTmxaR0ZqYkVoYl9SMVpuMmRmMnhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5 LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVFAMA0G CSqGSIb3DQEBCwUAA4IBAQCEzbvuYt1UJM81Oyyqr/+k43KRMAvUuJlqslPGOZuW ZfmXRUU6SZqPK16K0zYlUNAcjWSzN3xxNtvskvJ1xtu2eYvwJMRFruOe7VWUr/HT Y5OoP/5vPnU94fRqJ0V3VwTmRX804VUpfgSlIl1Ej4GX3bBPZTaMmHVeeWfaGnRv 3vXJ6eIoCZ9menlwu87LcHYObanVRHJ3QYAmDiWPNchqs2Fz0G3bf3tIxn2swkRH guChqPPoAHZ6ccta3RFksUxM4lMj2TEiMXwCnrLrBw/REaVk9vV6OSv1pWQlKTT1 JIch3Hd+a7aUB6UP5sCvBonO0iORjI8Ag3cc++9uZi0q -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:30 2026 by rpki-client