This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/GyN2brNi0SyVzTIfSD630KlULEk.roa File: GyN2brNi0SyVzTIfSD630KlULEk.roa (raw, json) Hash identifier: WuqJqU2d7Re2MFRsMAJ/7CUNdgg3R6YAy0ZwMSitoI0= Subject key identifier: 1B:23:76:6E:B3:62:D1:2C:95:CD:32:1F:48:3E:B7:D0:A9:54:2C:49 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B7DCB4ADB66E64A0202C3A3C415DF8774 Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/GyN2brNi0SyVzTIfSD630KlULEk.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.129.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:db:66:e6:4a:02:02:c3:a3:c4:15:df:87:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b23766eb362d12c95cd321f483eb7d0a9542c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:da:a0:7e:fc:6a:d8:3a:7d:ce:48:1d:f8: d9:d1:d0:d6:45:08:f4:d4:13:45:0f:27:4d:80:ed: 8e:91:6f:ac:06:4c:21:c8:0f:ab:27:2d:28:80:ab: 8e:cf:99:7d:51:19:96:6b:c1:d2:a2:dc:23:20:4d: 57:bf:e5:28:0e:63:fc:6d:3a:a7:f1:7b:d7:9a:01: e3:2e:02:7f:35:b3:c0:b7:b7:ad:98:c5:84:d4:90: 9a:08:43:36:93:4a:3e:93:b0:5e:ae:01:68:7e:ed: 86:af:71:ac:b4:95:b3:d9:11:97:0c:8d:14:72:89: 34:f6:53:46:ec:27:78:f8:0d:14:90:25:b6:1b:2b: 88:f7:20:67:cf:30:39:eb:8c:07:dc:54:dc:23:a5: 5f:75:07:65:9e:e6:2a:e2:52:6d:ea:15:45:a9:78: 96:90:53:41:df:87:01:e2:d7:b3:66:42:a9:b0:11: 67:fa:22:40:ed:2f:7f:aa:61:d3:27:a1:b5:58:85: f9:18:6b:ae:78:91:75:82:89:d8:01:b5:1c:08:d0: d1:d7:f5:24:b0:a4:36:d8:78:1c:30:e3:e2:d8:15: 65:12:55:00:23:14:49:e9:24:39:27:82:32:46:fd: 6b:ed:9f:0a:d1:73:b2:2b:f0:df:ca:52:78:6f:2e: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:23:76:6E:B3:62:D1:2C:95:CD:32:1F:48:3E:B7:D0:A9:54:2C:49 X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/GyN2brNi0SyVzTIfSD630KlULEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.192.0/24 Signature Algorithm: sha256WithRSAEncryption 27:5e:c5:29:a8:ec:59:ed:60:9e:7a:07:25:c4:69:d1:b1:ab: f9:12:be:65:c9:e0:2b:da:85:a7:31:a2:e4:28:af:b3:e0:3d: 61:ba:b3:43:c8:99:d5:a9:cf:5a:03:70:28:0e:39:60:b1:17: cc:d8:0d:2e:a0:b9:3a:65:66:59:98:da:54:f9:66:c2:d6:fb: 7e:56:d4:89:77:71:a5:8f:4d:76:9b:3f:d0:f8:88:91:53:db: 03:e7:c1:f2:d7:1c:c0:db:f4:c5:07:82:f4:90:52:0b:54:ba: 1c:25:d7:bc:c0:3d:58:f0:f9:cc:e7:8b:87:2f:f4:60:44:fa: 71:f9:d8:2b:69:a5:b7:ff:ba:8c:be:93:dd:52:f6:e0:87:3d: 50:ea:d8:47:8f:61:7d:7f:8a:4f:c6:ac:4c:21:b9:6c:bc:f5: 8d:5f:90:41:6a:d1:1a:d4:50:eb:7f:14:65:c6:8b:93:59:c4: 62:eb:1d:49:0b:e0:08:68:47:cc:fa:f2:e6:87:4d:f8:72:5c: 9d:20:d3:b7:ca:27:22:1d:47:b3:20:5c:b4:71:4c:49:15:79: 1b:93:bc:61:ae:21:63:05:04:d2:4f:a3:fd:9a:4a:27:b1:87: 41:67:02:72:39:3b:81:a5:34:40:9a:b3:cd:0b:e4:55:77:bd: 92:41:a6:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0rbZuZKAgLDo8QV34d0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjIzNzY2ZWIzNjJkMTJjOTVjZDMyMWY0ODNlYjdkMGE5NTQyYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIHaoH78atg6fc5IHfjZ0dDWRQj0 1BNFDydNgO2OkW+sBkwhyA+rJy0ogKuOz5l9URmWa8HSotwjIE1Xv+UoDmP8bTqn 8XvXmgHjLgJ/NbPAt7etmMWE1JCaCEM2k0o+k7BergFofu2Gr3GstJWz2RGXDI0U cok09lNG7Cd4+A0UkCW2GyuI9yBnzzA564wH3FTcI6VfdQdlnuYq4lJt6hVFqXiW kFNB34cB4tezZkKpsBFn+iJA7S9/qmHTJ6G1WIX5GGuueJF1gonYAbUcCNDR1/Uk sKQ22HgcMOPi2BVlElUAIxRJ6SQ5J4IyRv1r7Z8K0XOyK/DfylJ4by62MwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBsjdm6zYtEslc0yH0g+t9CpVCxJMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvR3lOMmJyTmkwU3lWelRJZlNENjMwS2xVTEVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHAMA0G CSqGSIb3DQEBCwUAA4IBAQAnXsUpqOxZ7WCeegclxGnRsav5Er5lyeAr2oWnMaLk KK+z4D1hurNDyJnVqc9aA3AoDjlgsRfM2A0uoLk6ZWZZmNpU+WbC1vt+VtSJd3Gl j012mz/Q+IiRU9sD58Hy1xzA2/TFB4L0kFILVLocJde8wD1Y8PnM54uHL/RgRPpx +dgraaW3/7qMvpPdUvbghz1Q6thHj2F9f4pPxqxMIblsvPWNX5BBatEa1FDrfxRl xouTWcRi6x1JC+AIaEfM+vLmh034clydINO3yiciHUezIFy0cUxJFXkbk7xhriFj BQTST6P9mkonsYdBZwJyOTuBpTRAmrPNC+RVd72SQaZ8 -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:58 2026 by rpki-client