This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/giCv_eoabdDGNQ76ze62UyFFjv8.roa File: giCv_eoabdDGNQ76ze62UyFFjv8.roa (raw, json) Hash identifier: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA= Subject key identifier: 82:20:AF:FD:EA:1A:6D:D0:C6:35:0E:FA:CD:EE:B6:53:21:45:8E:FF Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019B79111E199D72CCEE1FA0EB6759AC13E3 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/giCv_eoabdDGNQ76ze62UyFFjv8.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216199 IP address blocks: 45.89.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1e:19:9d:72:cc:ee:1f:a0:eb:67:59:ac:13:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8220affdea1a6dd0c6350efacdeeb65321458eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:fb:f1:a9:c0:5e:57:16:07:a3:4a:46:5d: dd:af:22:ae:25:76:36:25:51:02:07:ad:7c:ba:cf: c9:8b:b9:3f:64:02:ca:25:24:84:83:c4:72:64:2f: 30:63:38:e1:cb:63:cf:37:e9:99:59:9e:fd:5f:d9: 30:1c:da:95:b9:7c:d8:31:b6:52:23:fc:3d:dc:db: 74:e9:e6:e2:ef:3f:e5:5d:c2:7c:4f:1b:24:f4:f6: 06:cc:f5:51:48:68:e2:4e:44:74:fb:ab:0a:36:90: fb:50:28:a5:a5:04:96:71:32:6e:52:9c:79:fe:36: 0a:b5:b9:67:0a:70:0e:f4:b6:43:80:14:9e:6f:f2: e7:d8:26:7a:8b:49:b6:0c:dd:74:5e:de:f3:1d:f1: c2:65:a7:9a:c2:05:be:7c:89:45:bc:a9:15:4f:88: ed:c3:d3:ff:33:bf:be:51:e3:55:36:06:06:1d:9f: b7:f0:65:3a:f0:5d:3e:61:0b:42:df:b6:f8:4a:95: ce:8b:f9:39:be:a9:43:49:48:07:04:96:fb:d7:82: 8f:9b:00:9f:b7:e9:fe:ac:8a:70:09:bf:66:b1:4c: d8:aa:b9:61:27:83:0d:65:02:d6:ad:63:6c:85:a8: 86:9c:43:6c:33:eb:de:32:f0:5d:e0:fb:e5:4a:ac: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:20:AF:FD:EA:1A:6D:D0:C6:35:0E:FA:CD:EE:B6:53:21:45:8E:FF X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/giCv_eoabdDGNQ76ze62UyFFjv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.28.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:b1:04:1d:22:ab:0f:68:c5:f2:ad:07:97:bd:80:53:6e:de: 02:09:b4:9f:fa:a1:69:db:57:b9:8f:f6:0f:87:35:7e:77:6d: 8b:c1:49:2d:20:b9:3a:16:6c:39:5f:df:34:9d:95:57:68:78: 87:12:b0:db:bf:b7:a0:8d:df:11:cf:74:f3:fe:d7:8f:1e:d8: 74:07:fe:ff:bb:f6:ba:9d:9b:ba:04:19:67:c7:c4:7e:03:31: ff:5a:ce:92:04:4b:d1:03:b2:99:6f:fd:5f:3f:b9:04:85:a9: 6f:9f:36:60:b9:69:0d:3f:0c:aa:e8:73:26:59:0e:6c:49:64: d3:fe:e1:f2:df:8b:6d:d2:98:b0:25:7d:17:03:54:1a:fb:89: 5a:2a:f0:4a:b1:98:4a:6a:eb:fb:9a:ff:c6:77:f6:77:3d:82: 68:a9:8a:f4:2f:fb:4d:c6:e1:06:bc:a3:0b:f2:d2:f6:32:f9: 54:28:39:95:af:25:4a:57:19:14:3b:24:62:de:53:82:8d:50: a6:ce:f9:28:67:22:5f:78:74:dc:11:2a:1d:2c:cf:a1:a2:a3: a4:84:51:bd:d4:f6:dd:ac:09:ef:49:50:35:05:4f:4f:d2:90: 6f:1a:94:ab:59:6e:d9:29:e6:c7:bf:9d:c3:a6:de:0a:9b:b7: 3c:86:e8:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ER4ZnXLM7h+g62dZrBPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjIwYWZmZGVhMWE2ZGQwYzYzNTBlZmFjZGVlYjY1MzIxNDU4ZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEb78anAXlcWB6NKRl3dryKuJXY2 JVECB618us/Ji7k/ZALKJSSEg8RyZC8wYzjhy2PPN+mZWZ79X9kwHNqVuXzYMbZS I/w93Nt06ebi7z/lXcJ8Txsk9PYGzPVRSGjiTkR0+6sKNpD7UCilpQSWcTJuUpx5 /jYKtblnCnAO9LZDgBSeb/Ln2CZ6i0m2DN10Xt7zHfHCZaeawgW+fIlFvKkVT4jt w9P/M7++UeNVNgYGHZ+38GU68F0+YQtC37b4SpXOi/k5vqlDSUgHBJb714KPmwCf t+n+rIpwCb9msUzYqrlhJ4MNZQLWrWNshaiGnENsM+veMvBd4PvlSqygLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIIgr/3qGm3QxjUO+s3utlMhRY7/MB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvZ2lDdl9lb2FiZERHTlE3NnplNjJVeUZGanY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkcMA0G CSqGSIb3DQEBCwUAA4IBAQBLsQQdIqsPaMXyrQeXvYBTbt4CCbSf+qFp21e5j/YP hzV+d22LwUktILk6Fmw5X980nZVXaHiHErDbv7egjd8Rz3Tz/tePHth0B/7/u/a6 nZu6BBlnx8R+AzH/Ws6SBEvRA7KZb/1fP7kEhalvnzZguWkNPwyq6HMmWQ5sSWTT /uHy34tt0piwJX0XA1Qa+4laKvBKsZhKauv7mv/Gd/Z3PYJoqYr0L/tNxuEGvKML 8tL2MvlUKDmVryVKVxkUOyRi3lOCjVCmzvkoZyJfeHTcESodLM+hoqOkhFG91Pbd rAnvSVA1BU9P0pBvGpSrWW7ZKebHv53Dpt4Km7c8huja -----END CERTIFICATE-----Generated at Tue Jan 20 00:56:00 2026 by rpki-client