This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/GwlPBnPafwNESxPOmYchrobp9kc.roa File: GwlPBnPafwNESxPOmYchrobp9kc.roa (raw, json) Hash identifier: 2bg5Zps/9Nl20iDTOVJMixlxSv+z0s4P6wxJpe1+ojE= Subject key identifier: 1B:09:4F:06:73:DA:7F:03:44:4B:13:CE:99:87:21:AE:86:E9:F6:47 Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019B7F812A32D6E6267164D08B888913C934 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/GwlPBnPafwNESxPOmYchrobp9kc.roa Signing time: Fri 02 Jan 2026 16:18:49 +0000 ROA not before: Fri 02 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22104 IP address blocks: 213.161.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:2a:32:d6:e6:26:71:64:d0:8b:88:89:13:c9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 2 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b094f0673da7f03444b13ce998721ae86e9f647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:46:64:0b:da:a4:d8:24:57:d1:3a:21:12: 62:43:42:9a:8b:27:98:61:27:58:b9:d7:52:f3:55: 22:02:3a:63:a6:db:db:88:24:81:41:9d:4c:79:cc: 49:db:b0:dc:a0:c3:82:75:a2:db:35:41:2b:ea:0f: 5b:33:e5:2f:c6:33:6e:53:1e:e8:f5:dc:54:cf:3f: 6f:8f:c7:27:7e:6b:ef:83:59:f0:61:f6:cc:cb:0f: 7e:e2:fd:a9:dc:e0:4d:70:53:13:90:46:37:14:b4: 51:7b:61:cb:45:56:6f:9f:0f:78:e9:cf:a3:96:59: cb:f1:ae:3c:83:92:62:52:e2:2a:b4:d0:95:ab:92: af:47:11:5f:00:3f:83:21:df:23:16:49:b7:8b:e3: d4:10:0c:50:dc:45:3d:a1:af:99:2d:83:37:1e:b0: 54:62:8e:99:f6:9d:63:f6:ed:6a:ff:ed:ee:5f:14: f7:5d:ea:42:5e:8d:78:20:08:fd:27:79:1a:ec:e4: bd:fe:19:ff:f8:54:a0:ed:d2:e1:57:6d:3b:5d:90: 69:34:d3:9d:b0:4d:9d:42:a5:0e:4b:5d:b2:a5:6b: 05:da:d8:cd:9a:3e:b9:73:e7:61:7a:b9:ca:f6:38: 11:21:17:60:f8:94:88:3b:a2:e3:20:4c:c8:03:2e: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:09:4F:06:73:DA:7F:03:44:4B:13:CE:99:87:21:AE:86:E9:F6:47 X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/GwlPBnPafwNESxPOmYchrobp9kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.161.87.0/24 Signature Algorithm: sha256WithRSAEncryption 77:f8:82:bb:1f:cc:d8:83:2c:b6:41:01:47:b9:fc:57:94:13: ca:98:6b:6c:6b:9a:c4:71:a5:26:d8:c7:fa:d1:13:47:2c:7e: a4:30:2b:b4:7d:a1:ad:1f:49:77:af:8f:93:c7:7a:49:e7:35: 7f:8e:8a:c5:81:be:a9:8f:db:3e:67:d1:9a:df:d1:c1:23:c6: 74:14:73:d9:58:3e:c5:fb:29:ec:e4:80:9b:21:f7:3b:8a:df: 31:1a:18:b7:e4:10:2a:af:30:1e:84:b2:d4:38:90:43:96:45: d7:d8:aa:4c:a6:43:fa:0c:af:6a:76:41:1e:ba:ce:c9:9b:7c: db:2f:e9:2f:54:15:31:5c:52:42:f0:8e:50:a3:0b:f4:ea:2c: 97:fc:9e:ba:3e:65:b2:4a:a8:5e:33:c7:84:b2:8b:b5:33:a7: bf:64:e1:1e:7f:af:bb:fa:6b:97:c7:66:e9:07:14:e4:d7:c7: 73:a3:91:48:20:ad:d0:c3:41:1f:67:a1:da:1f:76:2f:72:59: 0c:cc:fa:6d:e9:35:b8:52:67:51:3d:2b:2a:fd:6c:9e:e0:a0: dc:c8:9b:08:d4:23:35:a6:32:84:bc:9e:99:e3:77:f0:ec:e3: 63:4f:db:4e:dc:ba:e2:d3:bd:83:30:a7:5c:f8:5a:a0:8b:51: f4:a6:0a:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gSoy1uYmcWTQi4iJE8k0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTAyMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjA5NGYwNjczZGE3ZjAzNDQ0YjEzY2U5OTg3MjFhZTg2ZTlmNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpdGZAvapNgkV9E6IRJiQ0KaiyeY YSdYuddS81UiAjpjptvbiCSBQZ1MecxJ27DcoMOCdaLbNUEr6g9bM+UvxjNuUx7o 9dxUzz9vj8cnfmvvg1nwYfbMyw9+4v2p3OBNcFMTkEY3FLRRe2HLRVZvnw946c+j llnL8a48g5JiUuIqtNCVq5KvRxFfAD+DId8jFkm3i+PUEAxQ3EU9oa+ZLYM3HrBU Yo6Z9p1j9u1q/+3uXxT3XepCXo14IAj9J3ka7OS9/hn/+FSg7dLhV207XZBpNNOd sE2dQqUOS12ypWsF2tjNmj65c+dhernK9jgRIRdg+JSIO6LjIEzIAy5tUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsJTwZz2n8DREsTzpmHIa6G6fZHMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvR3dsUEJuUGFmd05FU3hQT21ZY2hyb2JwOWtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aFXMA0G CSqGSIb3DQEBCwUAA4IBAQB3+IK7H8zYgyy2QQFHufxXlBPKmGtsa5rEcaUm2Mf6 0RNHLH6kMCu0faGtH0l3r4+Tx3pJ5zV/jorFgb6pj9s+Z9Ga39HBI8Z0FHPZWD7F +yns5ICbIfc7it8xGhi35BAqrzAehLLUOJBDlkXX2KpMpkP6DK9qdkEeus7Jm3zb L+kvVBUxXFJC8I5Qowv06iyX/J66PmWySqheM8eEsou1M6e/ZOEef6+7+muXx2bp BxTk18dzo5FIIK3Qw0EfZ6HaH3YvclkMzPpt6TW4UmdRPSsq/Wye4KDcyJsI1CM1 pjKEvJ6Z43fw7ONjT9tO3Lri072DMKdc+Fqgi1H0pgpU -----END CERTIFICATE-----Generated at Wed Jan 21 03:48:29 2026 by rpki-client