This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa File: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (raw, json) Hash identifier: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE= Subject key identifier: 1A:21:3E:E0:53:A1:C0:7B:6D:F9:3F:8C:40:0B:D6:60:78:43:A8:A1 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A3497F51215329B0DEB1110E8133F6 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 91.186.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:49:7f:51:21:53:29:b0:de:b1:11:0e:81:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a213ee053a1c07b6df93f8c400bd6607843a8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:27:72:98:63:e5:58:1e:6b:5d:da:0a:ba: ec:5b:3c:82:82:03:81:b5:8a:be:0b:2b:7b:82:15: 67:4c:39:b0:cb:2f:80:c0:09:0d:d3:77:f2:b2:b1: fe:31:15:e2:5f:cd:f4:41:80:6a:1f:6f:92:bc:61: ff:93:98:1d:97:10:d2:a8:73:61:69:48:da:d3:6e: ac:6e:a2:2b:a6:87:69:2d:ec:f2:60:54:30:66:da: 58:ee:bc:e5:9d:91:8b:1d:54:4b:72:bf:f6:c2:b1: f8:2e:c8:e9:77:4f:29:a7:74:31:ce:73:0d:e9:61: 38:cc:b0:74:85:15:da:4b:cb:0b:d8:9e:ae:29:64: 80:c0:b1:b5:2c:2a:e2:e2:14:bc:20:a3:ad:49:9e: 6a:81:75:df:22:75:31:1b:d6:37:c4:34:aa:60:e7: a7:c1:c7:60:14:97:ff:19:29:ac:a1:0c:2d:dc:56: 64:ef:03:26:d6:2d:b8:19:75:43:a5:12:77:98:e3: 4d:3d:3f:a2:d5:cc:4f:60:b9:a2:db:78:0d:c2:b6: bd:73:32:27:5c:38:19:17:88:a5:a6:df:2d:c8:d5: 84:1e:12:21:fe:00:63:2a:fb:60:b9:52:9c:76:00: ec:45:40:08:95:85:61:39:b3:81:e9:f4:01:35:d3: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:3E:E0:53:A1:C0:7B:6D:F9:3F:8C:40:0B:D6:60:78:43:A8:A1 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.186.195.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:75:62:a3:d5:42:48:1c:04:af:b1:7f:e1:21:11:8f:d6:a3: e4:9f:38:6b:6c:91:28:da:f3:a7:41:aa:cc:45:7f:a7:56:18: 5c:51:6a:09:38:de:bb:41:45:f2:37:fb:e6:88:8b:e8:76:28: 02:ba:9d:96:6e:ee:63:bd:37:c8:68:fe:c1:77:4a:aa:b3:c5: 74:a9:ae:94:75:6f:a4:44:40:6c:d9:e3:19:6d:dc:7a:43:21: 15:3a:d1:77:30:fc:e6:ef:94:42:dc:c2:bb:73:60:e5:d6:07: 59:b0:3b:34:43:8d:49:7a:6a:d5:66:da:30:e0:84:10:92:a6: 36:28:2b:2b:eb:2d:ad:37:6f:cc:08:b0:10:25:f7:58:e8:a9: 0f:2a:c3:76:78:27:84:b5:07:b8:ab:6d:ad:73:d4:71:e8:c3: 47:00:1e:cc:06:f6:86:5c:16:b1:a8:3f:c7:ab:c1:e9:17:69: 85:49:0a:a3:4c:ce:72:58:47:ba:e5:e7:98:27:96:25:9e:b9: d8:16:d2:8a:4d:94:d0:22:88:80:c4:de:06:d4:20:f1:30:54: 3e:6f:bc:f7:6d:0c:af:c3:65:83:19:f5:ad:fd:0c:c9:75:28: 52:cb:99:52:5f:5b:03:e9:51:24:b1:67:c0:db:17:82:2c:6b: a4:a4:b1:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0l/USFTKbDesREOgTP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTIxM2VlMDUzYTFjMDdiNmRmOTNmOGM0MDBiZDY2MDc4NDNhOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaQncphj5Vgea13aCrrsWzyCggOB tYq+Cyt7ghVnTDmwyy+AwAkN03fysrH+MRXiX830QYBqH2+SvGH/k5gdlxDSqHNh aUja026sbqIrpodpLezyYFQwZtpY7rzlnZGLHVRLcr/2wrH4Lsjpd08pp3QxznMN 6WE4zLB0hRXaS8sL2J6uKWSAwLG1LCri4hS8IKOtSZ5qgXXfInUxG9Y3xDSqYOen wcdgFJf/GSmsoQwt3FZk7wMm1i24GXVDpRJ3mONNPT+i1cxPYLmi23gNwra9czIn XDgZF4ilpt8tyNWEHhIh/gBjKvtguVKcdgDsRUAIlYVhObOB6fQBNdMf2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBohPuBTocB7bfk/jEAL1mB4Q6ihMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvR2lFLTRGT2h3SHR0LVQtTVFBdldZSGhEcUtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7rDMA0G CSqGSIb3DQEBCwUAA4IBAQBPdWKj1UJIHASvsX/hIRGP1qPknzhrbJEo2vOnQarM RX+nVhhcUWoJON67QUXyN/vmiIvodigCup2Wbu5jvTfIaP7Bd0qqs8V0qa6UdW+k REBs2eMZbdx6QyEVOtF3MPzm75RC3MK7c2Dl1gdZsDs0Q41JemrVZtow4IQQkqY2 KCsr6y2tN2/MCLAQJfdY6KkPKsN2eCeEtQe4q22tc9Rx6MNHAB7MBvaGXBaxqD/H q8HpF2mFSQqjTM5yWEe65eeYJ5YlnrnYFtKKTZTQIoiAxN4G1CDxMFQ+b7z3bQyv w2WDGfWt/QzJdShSy5lSX1sD6VEksWfA2xeCLGukpLGn -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:55 2026 by rpki-client