This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gTBrVyFvQaw6cPicG87abETxnp0.roa File: gTBrVyFvQaw6cPicG87abETxnp0.roa (raw, json) Hash identifier: 7mlFutJs0RLzSjRvQKOYMTPou8Z7sGqi1Mbl3SLGzcs= Subject key identifier: 81:30:6B:57:21:6F:41:AC:3A:70:F8:9C:1B:CE:DA:6C:44:F1:9E:9D Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8539AACFECACB092888FF1898C5CEB Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gTBrVyFvQaw6cPicG87abETxnp0.roa Signing time: Fri 02 Jan 2026 16:23:16 +0000 ROA not before: Fri 02 Jan 2026 16:23:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49443 IP address blocks: 45.86.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:39:aa:cf:ec:ac:b0:92:88:8f:f1:89:8c:5c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81306b57216f41ac3a70f89c1bceda6c44f19e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:14:08:14:0a:10:f4:60:73:41:03:2a:b8: be:7d:50:ab:0c:e9:b0:f0:50:3e:bc:09:8c:e8:0b: ab:5b:00:62:16:26:03:34:3f:2a:37:c8:b1:ed:c0: e6:46:cb:a3:91:9d:1d:39:38:b1:93:51:cf:4d:89: af:32:cf:cc:d7:32:86:f4:4b:89:24:ff:f4:07:dc: e6:c6:e7:9a:a7:e5:29:9b:cb:fe:c7:93:5b:e8:41: aa:aa:7d:3a:e4:27:de:51:b8:a3:46:41:26:50:70: 9a:3a:c6:a8:23:15:1c:56:55:82:fd:8d:c0:fb:8f: 61:e1:9a:17:a4:f8:bc:b1:62:5e:10:43:08:42:4a: 22:1d:35:75:d5:59:e9:0f:7c:df:4e:0b:c8:f3:c7: d6:64:56:6e:7e:e7:02:f1:ec:e2:2f:f7:c9:f3:15: 16:31:b7:00:61:2e:3a:aa:5e:d3:5e:23:0c:2c:5f: df:32:97:28:ee:6c:9b:ac:d4:53:d5:bd:90:de:d1: 1f:16:2a:97:b8:92:8d:84:7a:51:1d:8e:59:3b:24: f2:bd:d8:fe:3c:78:36:50:9f:eb:cb:89:e9:f9:07: 1d:75:d2:a2:dc:cf:90:b7:a8:f3:dc:5f:a2:83:8b: d6:8d:81:30:77:8f:33:d4:55:be:a9:4b:27:5d:fc: cd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:30:6B:57:21:6F:41:AC:3A:70:F8:9C:1B:CE:DA:6C:44:F1:9E:9D X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gTBrVyFvQaw6cPicG87abETxnp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.19.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:05:4c:9a:5a:ec:f9:e7:d4:8e:81:65:17:8d:ba:8a:3a:22: 88:a8:57:fb:47:b3:3c:af:dc:39:e7:06:b1:24:a8:cd:2b:9c: 59:5e:25:77:d2:30:31:26:41:ae:89:d6:96:71:95:36:19:96: 3c:74:2b:09:70:e8:e0:58:39:42:b1:26:dd:37:c9:b5:1f:3a: ad:74:f2:25:c4:12:df:2d:ef:21:6a:c5:d2:8f:c4:4e:ab:18: 69:3d:5b:a7:6f:ed:3b:47:11:7e:55:39:8f:4b:c6:09:2d:29: 0c:15:61:d4:b5:21:dd:33:ee:14:2d:d2:4a:8f:a1:83:e4:a1: a6:e6:48:52:e3:f1:fb:0d:e2:cb:9e:f5:0d:57:7e:9d:3f:0d: 51:72:f9:31:42:06:ba:0f:de:17:28:68:75:2e:23:d6:cc:23: 2e:59:81:8c:2d:c7:a1:23:0d:42:d8:95:eb:af:ca:eb:75:ab: 68:68:67:58:dd:dd:7d:85:2a:11:9b:76:cd:86:5b:37:1b:d8: c9:df:99:f0:19:b4:d4:ee:5a:f3:77:00:84:ad:9b:99:22:0e: 9b:a6:0b:8b:f0:1b:47:90:8b:e8:77:fd:2d:3c:51:37:a0:7d: 9e:86:22:ac:18:fc:cb:ff:dc:d2:6c:b9:23:c8:8f:21:d4:f5: f7:b7:c7:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTmqz+yssJKIj/GJjFzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTMwNmI1NzIxNmY0MWFjM2E3MGY4OWMxYmNlZGE2YzQ0ZjE5ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmIUCBQKEPRgc0EDKri+fVCrDOmw 8FA+vAmM6AurWwBiFiYDND8qN8ix7cDmRsujkZ0dOTixk1HPTYmvMs/M1zKG9EuJ JP/0B9zmxueap+Upm8v+x5Nb6EGqqn065CfeUbijRkEmUHCaOsaoIxUcVlWC/Y3A +49h4ZoXpPi8sWJeEEMIQkoiHTV11VnpD3zfTgvI88fWZFZufucC8eziL/fJ8xUW MbcAYS46ql7TXiMMLF/fMpco7mybrNRT1b2Q3tEfFiqXuJKNhHpRHY5ZOyTyvdj+ PHg2UJ/ry4np+QcdddKi3M+Qt6jz3F+ig4vWjYEwd48z1FW+qUsnXfzN1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEwa1chb0GsOnD4nBvO2mxE8Z6dMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvZ1RCclZ5RnZRYXc2Y1BpY0c4N2FiRVR4bnAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVYTMA0G CSqGSIb3DQEBCwUAA4IBAQCfBUyaWuz559SOgWUXjbqKOiKIqFf7R7M8r9w55wax JKjNK5xZXiV30jAxJkGuidaWcZU2GZY8dCsJcOjgWDlCsSbdN8m1HzqtdPIlxBLf Le8hasXSj8ROqxhpPVunb+07RxF+VTmPS8YJLSkMFWHUtSHdM+4ULdJKj6GD5KGm 5khS4/H7DeLLnvUNV36dPw1RcvkxQga6D94XKGh1LiPWzCMuWYGMLcehIw1C2JXr r8rrdatoaGdY3d19hSoRm3bNhls3G9jJ35nwGbTU7lrzdwCErZuZIg6bpguL8BtH kIvod/0tPFE3oH2ehiKsGPzL/9zSbLkjyI8h1PX3t8dO -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:20 2026 by rpki-client