This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/gI4tnW4kPKjRONzlu_6zH8MeB9U.roa File: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (raw, json) Hash identifier: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI= Subject key identifier: 80:8E:2D:9D:6E:24:3C:A8:D1:38:DC:E5:BB:FE:B3:1F:C3:1E:07:D5 Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Certificate serial: 019B797EAA6C8E52BA0C5EFEBCA990D333AF Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/gI4tnW4kPKjRONzlu_6zH8MeB9U.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 91.198.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:aa:6c:8e:52:ba:0c:5e:fe:bc:a9:90:d3:33:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=808e2d9d6e243ca8d138dce5bbfeb31fc31e07d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:50:46:75:71:6e:f7:cb:4e:45:ef:d0:c6: 97:29:23:e1:e5:9e:fd:29:e2:de:76:78:2c:0e:cc: 60:78:54:1d:e6:4b:ce:9e:f0:ad:43:83:af:79:77: ce:9b:cc:d4:a8:9d:d6:d5:d4:23:5b:85:ea:e5:f8: 75:78:0e:81:dd:63:2c:e0:40:69:5c:b2:be:62:1a: da:ad:fa:e2:59:a0:eb:a2:41:0a:55:12:55:6a:7b: 99:09:23:44:fd:3d:3f:34:38:50:1b:ca:73:a6:de: f8:0d:7f:f9:a0:61:5a:52:2b:32:fd:a0:82:be:69: 51:5b:1c:71:09:f7:dd:2a:16:a7:7f:6f:ef:16:b6: d4:9d:84:b6:31:d4:b5:68:e8:54:3c:a4:7c:26:d5: 7d:b6:3d:67:43:22:41:88:ea:f1:f1:09:ca:34:ed: c3:53:f2:4a:6d:3c:6d:a2:ad:b8:eb:cb:45:78:93: a0:a6:80:b1:5f:b0:a8:b6:3b:ab:1f:a3:72:5c:8a: 89:27:c9:4d:e7:1c:ac:e8:cc:15:89:e0:03:44:63: 15:c9:ec:09:b7:ee:31:d1:f6:97:09:ea:ea:a9:ac: ed:ea:d8:e2:52:6d:f5:3b:7e:57:4e:2e:ca:77:19: c5:4f:24:9f:05:87:e2:3a:78:96:8f:6b:d0:14:2f: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8E:2D:9D:6E:24:3C:A8:D1:38:DC:E5:BB:FE:B3:1F:C3:1E:07:D5 X509v3 Authority Key Identifier: keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/gI4tnW4kPKjRONzlu_6zH8MeB9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.124.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:06:c3:29:a5:d6:bd:bf:09:db:23:2f:bf:b8:68:94:e6:e6: 54:a5:49:5b:7c:ed:96:a2:f8:9d:71:cc:30:40:02:51:5d:90: b0:34:bc:e6:21:16:22:8d:85:54:06:33:e1:b0:2e:3c:9e:43: f1:16:63:72:f2:cb:28:a0:65:e1:7e:ea:9d:2f:bc:fd:4d:62: 4d:05:c7:8f:df:9e:b8:cd:6e:cd:28:a3:00:40:91:79:8e:95: 1f:a2:0c:c4:73:66:73:ff:dc:e7:be:7b:59:49:10:b2:f0:29: 79:d8:78:28:a8:d3:87:18:73:6c:0c:5d:dc:05:96:5e:a1:a8: 87:cc:1f:a0:a3:f1:62:d5:98:30:01:0c:c1:af:00:bc:16:2e: cb:53:bb:b7:08:5a:02:24:06:ef:73:fb:39:52:4f:f4:fa:d5: 70:6f:f1:34:bf:d0:65:54:ad:ca:d7:02:a6:94:9f:43:89:b8: d5:49:a2:99:f7:2f:5c:19:1f:ba:91:b6:75:fd:b9:ac:a3:67: e7:51:32:c9:3c:fe:a6:ac:da:3c:c1:82:0a:89:40:cb:52:54: d1:a9:e4:40:56:0b:33:25:80:f0:09:80:b8:55:b0:04:58:80: c0:60:13:47:90:d0:d7:bf:17:a5:c7:3f:db:dd:a5:9a:76:d9: 47:43:d1:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqpsjlK6DF7+vKmQ0zOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWJlZWRmNDM4YTlhYTk2MWMzNDMyNjQzN2MyOWM0ZGQw Y2M0YmMwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDhlMmQ5ZDZlMjQzY2E4ZDEzOGRjZTViYmZlYjMxZmMzMWUwN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAdQRnVxbvfLTkXv0MaXKSPh5Z79 KeLedngsDsxgeFQd5kvOnvCtQ4OveXfOm8zUqJ3W1dQjW4Xq5fh1eA6B3WMs4EBp XLK+YhrarfriWaDrokEKVRJVanuZCSNE/T0/NDhQG8pzpt74DX/5oGFaUisy/aCC vmlRWxxxCffdKhanf2/vFrbUnYS2MdS1aOhUPKR8JtV9tj1nQyJBiOrx8QnKNO3D U/JKbTxtoq2468tFeJOgpoCxX7CotjurH6NyXIqJJ8lN5xys6MwVieADRGMVyewJ t+4x0faXCerqqazt6tjiUm31O35XTi7KdxnFTySfBYfiOniWj2vQFC8gTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICOLZ1uJDyo0Tjc5bv+sx/DHgfVMB8GA1UdIwQY MBaAFIRb7t9DipqpYcNDJkN8KcTdDMS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWIt MThlNjQ0NDFkMDFlLzEvZ0k0dG5XNGtQS2pST056bHVfNnpIOE1lQjlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWItMThlNjQ0NDFkMDFl LzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Z8MA0G CSqGSIb3DQEBCwUAA4IBAQB8BsMppda9vwnbIy+/uGiU5uZUpUlbfO2Wovidccww QAJRXZCwNLzmIRYijYVUBjPhsC48nkPxFmNy8ssooGXhfuqdL7z9TWJNBceP3564 zW7NKKMAQJF5jpUfogzEc2Zz/9znvntZSRCy8Cl52HgoqNOHGHNsDF3cBZZeoaiH zB+go/Fi1ZgwAQzBrwC8Fi7LU7u3CFoCJAbvc/s5Uk/0+tVwb/E0v9BlVK3K1wKm lJ9DibjVSaKZ9y9cGR+6kbZ1/bmso2fnUTLJPP6mrNo8wYIKiUDLUlTRqeRAVgsz JYDwCYC4VbAEWIDAYBNHkNDXvxelxz/b3aWadtlHQ9Hk -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:50 2026 by rpki-client