This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/gasIi9uIBm_j6aD0r4hpEpXQM6k.roa File: gasIi9uIBm_j6aD0r4hpEpXQM6k.roa (raw, json) Hash identifier: Wp7nXb862KjRHfKzxWCc0lZMplvU3kmdQKf28f0j66g= Subject key identifier: 81:AB:08:8B:DB:88:06:6F:E3:E9:A0:F4:AF:88:69:12:95:D0:33:A9 Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706 Certificate serial: 019B77C68C918737BE5B0A6475101F9E70A8 Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/gasIi9uIBm_j6aD0r4hpEpXQM6k.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 45.81.132.0/22 maxlen: 22 91.212.140.0/24 maxlen: 24 2a0e:4680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8c:91:87:37:be:5b:0a:64:75:10:1f:9e:70:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81ab088bdb88066fe3e9a0f4af88691295d033a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:e3:03:a0:65:8b:53:16:84:d4:cc:44:6b: 7d:64:58:ab:f0:5f:fb:37:f0:d8:59:16:af:6e:5f: 45:d9:98:87:23:9c:73:33:31:72:16:1f:1e:21:0a: 4c:af:94:05:4d:15:f5:54:24:6f:31:65:43:63:cb: 11:4d:a0:2c:4f:31:c2:f1:c6:fc:7b:ae:01:79:2d: b6:89:e8:1f:aa:b1:c0:01:a2:61:a8:7f:92:da:3b: 3d:b0:a7:c1:62:2b:e0:b8:bc:27:6d:26:b9:4f:02: 21:2b:49:a5:98:b2:09:a7:dc:f9:50:62:b4:43:68: 9c:b1:3b:0c:6d:09:c9:a7:a2:72:60:0c:aa:31:93: 45:5e:25:81:7b:ca:63:96:f8:b6:a4:4e:8c:cf:84: 55:e7:de:e6:b7:0d:f8:76:fa:15:54:ea:96:0a:2a: 2f:9c:22:e0:3f:fa:38:44:8b:ea:45:75:66:e3:34: 8d:d8:73:04:b3:42:55:1a:8d:96:5d:f2:f0:70:54: d6:8d:d3:6a:ef:0e:bc:ff:17:7a:2b:c0:2c:e9:69: c7:b1:9a:9b:73:f1:06:6d:db:f9:76:e3:95:c2:a2: 29:aa:4c:5a:c5:55:ea:b6:2e:d1:59:ed:3b:f6:e5: 51:ba:9f:ee:e9:d0:9d:17:8a:4f:25:60:19:d8:05: 49:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AB:08:8B:DB:88:06:6F:E3:E9:A0:F4:AF:88:69:12:95:D0:33:A9 X509v3 Authority Key Identifier: keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/gasIi9uIBm_j6aD0r4hpEpXQM6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.132.0/22 91.212.140.0/24 IPv6: 2a0e:4680::/32 Signature Algorithm: sha256WithRSAEncryption b1:1a:d7:10:65:4e:9f:aa:72:aa:35:5c:98:a7:bd:a9:ae:67: 3c:98:66:81:8a:4a:a2:8c:9a:6c:bb:16:15:73:6f:3d:b9:e3: 48:11:63:3e:be:b5:c6:45:aa:d4:b1:77:2a:b9:cf:3b:5c:f9: 49:32:d3:4e:41:a4:60:b4:73:09:1f:f1:f2:c1:a9:a3:17:2d: 16:db:34:49:5b:53:b3:91:2e:37:73:7b:28:82:d6:69:bb:39: 99:dd:b4:65:1b:70:b5:fe:4f:40:52:86:42:3f:a8:95:7a:41: 8d:cb:df:f0:31:98:2f:af:d1:e8:26:87:f1:3d:f5:a4:1b:0e: fc:a6:ae:55:da:7d:1d:a6:d3:a4:39:15:3e:bf:a0:c4:0b:28: 6b:ba:b9:b7:a6:c9:ad:1d:42:9d:42:ba:99:7f:3f:be:15:66: 2b:6c:e5:60:db:81:45:08:6e:ac:76:eb:b9:d6:33:93:af:86: 8d:55:0c:ed:07:12:6f:c1:1c:10:44:35:7d:e3:6e:70:9b:3b: eb:0a:46:d1:52:87:45:61:62:9c:f6:69:38:cb:a5:1f:55:9d: 55:6e:9a:58:4a:a8:1a:80:97:86:f3:b6:07:96:f9:f6:ad:58: c5:6a:e2:ca:b7:8c:74:ef:18:c3:4e:ae:1d:46:b1:7e:37:c1: 71:c4:d4:b4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xoyRhze+WwpkdRAfnnCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWYyNDdkNGJjNzAyMTQ2MDZkMDdkNjU5MzE5ZWMzZjM0 Nzk3MDYwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWFiMDg4YmRiODgwNjZmZTNlOWEwZjRhZjg4NjkxMjk1ZDAzM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PnjA6Bli1MWhNTMRGt9ZFir8F/7 N/DYWRavbl9F2ZiHI5xzMzFyFh8eIQpMr5QFTRX1VCRvMWVDY8sRTaAsTzHC8cb8 e64BeS22iegfqrHAAaJhqH+S2js9sKfBYivguLwnbSa5TwIhK0mlmLIJp9z5UGK0 Q2icsTsMbQnJp6JyYAyqMZNFXiWBe8pjlvi2pE6Mz4RV597mtw34dvoVVOqWCiov nCLgP/o4RIvqRXVm4zSN2HMEs0JVGo2WXfLwcFTWjdNq7w68/xd6K8As6WnHsZqb c/EGbdv5duOVwqIpqkxaxVXqti7RWe079uVRup/u6dCdF4pPJWAZ2AVJ8QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIGrCIvbiAZv4+mg9K+IaRKV0DOpMB8GA1UdIwQY MBaAFFMfJH1LxwIUYG0H1lkxnsPzR5cGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMt OGVkODQzM2QzOGM0LzEvZ2FzSWk5dUlCbV9qNmFEMHI0aHBFcFhRTTZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83NTQ1MmItYTRlYS00MTEyLWFmMDMtOGVkODQzM2QzOGM0 LzEvVXg4a2ZVdkhBaFJnYlFmV1dUR2V3X05IbHdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVGEAwQA W9SMMA0EAgACMAcDBQAqDkaAMA0GCSqGSIb3DQEBCwUAA4IBAQCxGtcQZU6fqnKq NVyYp72prmc8mGaBikqijJpsuxYVc289ueNIEWM+vrXGRarUsXcquc87XPlJMtNO QaRgtHMJH/HywamjFy0W2zRJW1OzkS43c3sogtZpuzmZ3bRlG3C1/k9AUoZCP6iV ekGNy9/wMZgvr9HoJofxPfWkGw78pq5V2n0dptOkORU+v6DECyhrurm3psmtHUKd QrqZfz++FWYrbOVg24FFCG6sduu51jOTr4aNVQztBxJvwRwQRDV9425wmzvrCkbR UodFYWKc9mk4y6UfVZ1VbppYSqgagJeG87YHlvn2rVjFauLKt4x07xjDTq4dRrF+ N8FxxNS0 -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:04 2026 by rpki-client