This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gLrkCw5Rn-60vS9ewZpe_8u6uc0.roa File: gLrkCw5Rn-60vS9ewZpe_8u6uc0.roa (raw, json) Hash identifier: jqC1ihklBdxUjDBp0xXOBr9jZ76vHFopHZOGaxwcI+I= Subject key identifier: 80:BA:E4:0B:0E:51:9F:EE:B4:BD:2F:5E:C1:9A:5E:FF:CB:BA:B9:CD Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA41787DACBB60A383EB480F3460F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gLrkCw5Rn-60vS9ewZpe_8u6uc0.roa Signing time: Fri 02 Jan 2026 06:19:41 +0000 ROA not before: Fri 02 Jan 2026 06:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 194.50.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a4:17:87:da:cb:b6:0a:38:3e:b4:80:f3:46:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80bae40b0e519feeb4bd2f5ec19a5effcbbab9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:43:67:a3:1a:ea:7c:81:f6:7c:44:6c:25: c2:db:17:16:95:d0:89:ed:e6:fb:a0:74:3c:0b:09: c1:76:55:f3:f4:80:66:f4:9f:ce:7b:57:47:2e:18: ff:dd:d2:23:14:af:bf:66:0a:a6:22:7d:1a:57:6e: d2:97:da:25:13:82:b5:be:e6:8c:85:bb:dc:04:d6: 5e:3e:98:ac:cd:14:a0:51:59:c5:d2:83:7e:1b:8c: af:43:bf:56:13:54:6a:b5:af:0e:9e:23:c2:7f:d6: aa:c6:bb:fc:f3:eb:3e:26:3b:51:e5:5c:ae:f8:83: 4a:88:51:f3:6b:cb:08:59:e3:d9:bf:9d:32:92:24: f9:d3:13:fe:c8:0b:54:5c:7d:5d:31:b6:c6:32:df: ec:63:b9:a1:cc:11:f3:41:f6:57:17:ce:e3:e8:de: 24:8c:97:4d:45:ff:7a:27:85:76:07:d2:fc:4f:9e: cc:9c:08:4f:c6:2e:97:10:7c:2d:04:18:4d:b6:50: 7a:33:83:54:eb:d3:ee:8d:fc:81:a4:a6:0d:1a:b2: 19:2d:47:72:fd:37:53:77:fa:91:10:51:4c:14:02: a2:bd:c8:bd:36:6c:b7:a7:93:7e:ab:d4:ba:3b:fb: 79:0d:34:3f:79:12:8e:cc:85:89:25:a5:d7:7b:93: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:E4:0B:0E:51:9F:EE:B4:BD:2F:5E:C1:9A:5E:FF:CB:BA:B9:CD X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gLrkCw5Rn-60vS9ewZpe_8u6uc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.111.0/24 Signature Algorithm: sha256WithRSAEncryption 54:96:b1:52:5a:2a:9b:12:f7:99:e9:d0:74:b2:14:8a:b8:4b: 99:ac:50:aa:b3:b7:20:31:65:69:c9:4e:a2:c3:0a:40:11:da: 3b:fd:3d:54:57:52:a1:3d:b8:e4:52:5e:ba:ee:dc:f3:18:79: 04:52:de:94:89:7d:b9:9f:67:e9:b2:a1:18:cd:04:bf:10:b6: 4c:d7:d2:66:ad:fc:98:62:e6:61:fc:54:a5:f9:92:a0:62:5b: 40:a6:de:d9:d6:2a:7c:a9:d2:1f:09:da:20:bf:c0:81:b4:db: 48:2d:8e:bf:d6:c2:1e:f8:63:45:21:df:62:60:f3:1a:5e:ce: a0:e4:0c:95:22:d1:4b:48:99:61:b9:21:9c:a7:bb:45:2a:56: cb:7a:48:95:b5:ee:8b:5f:55:87:95:71:74:7d:04:05:ad:c0: 30:78:aa:06:92:65:04:d7:83:b4:ec:63:f9:81:bb:74:51:13: ad:67:29:55:fd:2f:af:ba:ba:c1:19:37:b4:75:08:7f:ef:01: 7c:47:d2:3b:e2:4f:a8:52:32:9d:ca:cd:11:b8:a1:b3:78:8c: e1:b0:9d:64:f6:87:3c:56:9d:48:26:0e:66:69:9c:b1:e0:d4: e9:f3:21:25:e5:b8:2b:8b:2a:f7:bc:6c:30:90:1b:4d:b2:bd: 20:ac:84:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKQXh9rLtgo4PrSA80YPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGJhZTQwYjBlNTE5ZmVlYjRiZDJmNWVjMTlhNWVmZmNiYmFiOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjJDZ6Ma6nyB9nxEbCXC2xcWldCJ 7eb7oHQ8CwnBdlXz9IBm9J/Oe1dHLhj/3dIjFK+/ZgqmIn0aV27Sl9olE4K1vuaM hbvcBNZePpiszRSgUVnF0oN+G4yvQ79WE1Rqta8OniPCf9aqxrv88+s+JjtR5Vyu +INKiFHza8sIWePZv50ykiT50xP+yAtUXH1dMbbGMt/sY7mhzBHzQfZXF87j6N4k jJdNRf96J4V2B9L8T57MnAhPxi6XEHwtBBhNtlB6M4NU69PujfyBpKYNGrIZLUdy /TdTd/qREFFMFAKivci9Nmy3p5N+q9S6O/t5DTQ/eRKOzIWJJaXXe5MsNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIC65AsOUZ/utL0vXsGaXv/LurnNMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZ0xya0N3NVJuLTYwdlM5ZXdacGVfOHU2dWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJvMA0G CSqGSIb3DQEBCwUAA4IBAQBUlrFSWiqbEveZ6dB0shSKuEuZrFCqs7cgMWVpyU6i wwpAEdo7/T1UV1KhPbjkUl667tzzGHkEUt6UiX25n2fpsqEYzQS/ELZM19JmrfyY YuZh/FSl+ZKgYltApt7Z1ip8qdIfCdogv8CBtNtILY6/1sIe+GNFId9iYPMaXs6g 5AyVItFLSJlhuSGcp7tFKlbLekiVte6LX1WHlXF0fQQFrcAweKoGkmUE14O07GP5 gbt0UROtZylV/S+vurrBGTe0dQh/7wF8R9I74k+oUjKdys0RuKGzeIzhsJ1k9oc8 Vp1IJg5maZyx4NTp8yEl5bgriyr3vGwwkBtNsr0grIT9 -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:15 2026 by rpki-client