This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/gsSMevSvZTZe98EK6RP8YHuCxw4.roa File: gsSMevSvZTZe98EK6RP8YHuCxw4.roa (raw, json) Hash identifier: X62VNlKw339lH1TCZ6ldIrCv+LWgEECVzzmdv2OQDYg= Subject key identifier: 82:C4:8C:7A:F4:AF:65:36:5E:F7:C1:0A:E9:13:FC:60:7B:82:C7:0E Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae Certificate serial: 019B7D5CE00C5B0FE7B8C40C99BDA8738C5D Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/gsSMevSvZTZe98EK6RP8YHuCxw4.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21469 IP address blocks: 80.252.192.0/20 maxlen: 20 80.252.192.0/22 maxlen: 22 80.252.192.0/23 maxlen: 23 80.252.194.0/23 maxlen: 23 80.252.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e0:0c:5b:0f:e7:b8:c4:0c:99:bd:a8:73:8c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82c48c7af4af65365ef7c10ae913fc607b82c70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:37:d3:23:a0:1c:04:0f:fe:93:19:27:a4: 67:57:43:66:5f:e1:f4:dc:da:cd:09:c7:96:3a:47: 8d:97:bc:4c:19:47:c0:88:82:51:9a:2b:f3:9b:af: a7:2e:13:54:78:e4:2d:d6:b6:85:83:db:58:99:38: 21:e3:d1:e0:94:b5:a6:92:da:c7:02:8a:91:25:04: b5:50:f2:90:0f:18:94:7b:8b:68:70:c9:51:d5:be: 99:59:38:bc:e4:54:f3:dc:d7:85:ce:b6:c9:01:1c: 83:d3:60:6f:5b:fa:e6:12:83:c9:e3:6f:c8:4f:f3: 0c:45:e1:63:c4:4f:6d:74:4a:bd:a6:fa:d3:57:9b: 31:c7:f2:dd:1f:3b:64:ee:01:ad:03:74:60:a6:5e: be:53:c0:4b:b2:da:63:ee:d8:f6:5d:49:e4:77:2e: 5a:d5:d1:0d:96:4e:0c:29:a4:74:f0:37:82:8c:e2: 31:46:a5:65:cf:cd:84:9a:19:31:ff:3b:7d:c8:ec: 76:4b:d4:ef:d3:1c:46:2c:e4:28:f4:30:2c:58:ac: 0f:9f:ee:d2:92:9c:61:99:b3:5f:e9:ab:63:e9:71: 2a:97:f9:b1:fa:20:ec:1e:05:ea:9c:b1:e0:8e:90: 7a:b8:51:ca:05:94:46:0d:0e:f5:a4:1a:1f:aa:11: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C4:8C:7A:F4:AF:65:36:5E:F7:C1:0A:E9:13:FC:60:7B:82:C7:0E X509v3 Authority Key Identifier: keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/gsSMevSvZTZe98EK6RP8YHuCxw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.252.192.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:14:12:d9:73:d6:63:4b:f6:7e:ea:81:cd:8a:19:0a:4c:55: 7a:35:15:2b:94:e1:f4:85:eb:4b:49:03:68:dd:02:d3:6d:76: de:0f:be:20:68:81:8d:98:ee:04:66:9f:5a:0b:1d:28:f6:1c: 78:eb:9a:d9:68:79:f5:57:fa:0d:50:c4:4e:26:2c:60:3f:7f: d4:21:18:57:0a:c7:82:e4:01:37:26:7e:be:a3:5e:83:23:d8: 7f:f1:03:66:2e:90:d1:2e:7a:33:ce:c6:77:c8:f4:97:a1:f6: e8:9b:1f:0a:51:55:d4:a3:54:11:d4:15:23:c2:00:17:d3:d7: 4e:71:c6:d2:f3:0c:f2:3c:a5:24:09:dd:eb:bb:f5:72:82:87: 2b:da:30:50:bc:72:43:27:28:f5:80:09:81:6c:49:7b:4e:ec: 34:a1:0f:e0:d4:99:ee:5b:3e:ab:02:e4:20:4a:42:6a:65:bc: 04:6c:08:ca:88:1a:c5:6d:be:e5:5e:5e:02:0f:d0:1d:bf:6b: df:03:08:dc:7c:cc:d6:d0:f0:b1:a1:5e:f8:b5:0d:ce:c9:31: f7:1f:04:ef:7d:af:48:e5:36:f9:56:22:52:30:79:6b:6c:d0: a5:b7:ed:14:54:9d:a6:9b:cf:8c:2f:8c:34:67:16:88:1e:eb: aa:34:12:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOAMWw/nuMQMmb2oc4xdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGNlNzgxZGIwZGM3ZTRmOWY0OTQxNDVhMjk1ZTRjY2Ix MjFjYWUwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmM0OGM3YWY0YWY2NTM2NWVmN2MxMGFlOTEzZmM2MDdiODJjNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt430yOgHAQP/pMZJ6RnV0NmX+H0 3NrNCceWOkeNl7xMGUfAiIJRmivzm6+nLhNUeOQt1raFg9tYmTgh49HglLWmktrH AoqRJQS1UPKQDxiUe4tocMlR1b6ZWTi85FTz3NeFzrbJARyD02BvW/rmEoPJ42/I T/MMReFjxE9tdEq9pvrTV5sxx/LdHztk7gGtA3Rgpl6+U8BLstpj7tj2XUnkdy5a 1dENlk4MKaR08DeCjOIxRqVlz82Emhkx/zt9yOx2S9Tv0xxGLOQo9DAsWKwPn+7S kpxhmbNf6atj6XEql/mx+iDsHgXqnLHgjpB6uFHKBZRGDQ71pBofqhFUbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFILEjHr0r2U2XvfBCukT/GB7gscOMB8GA1UdIwQY MBaAFFEM54HbDcfk+fSUFFopXkzLEhyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQt YzFkNmM4ZjMxOWMxLzEvZ3NTTWV2U3ZaVFplOThFSzZSUDhZSHVDeHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8zMWZkMTYtNmQwMC00ZDA5LWE4ZDQtYzFkNmM4ZjMxOWMx LzEvVVF6bmdkc054LVQ1OUpRVVdpbGVUTXNTSEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPzAMA0G CSqGSIb3DQEBCwUAA4IBAQAuFBLZc9ZjS/Z+6oHNihkKTFV6NRUrlOH0hetLSQNo 3QLTbXbeD74gaIGNmO4EZp9aCx0o9hx465rZaHn1V/oNUMROJixgP3/UIRhXCseC 5AE3Jn6+o16DI9h/8QNmLpDRLnozzsZ3yPSXofbomx8KUVXUo1QR1BUjwgAX09dO ccbS8wzyPKUkCd3ru/Vygocr2jBQvHJDJyj1gAmBbEl7Tuw0oQ/g1JnuWz6rAuQg SkJqZbwEbAjKiBrFbb7lXl4CD9Adv2vfAwjcfMzW0PCxoV74tQ3OyTH3HwTvfa9I 5Tb5ViJSMHlrbNClt+0UVJ2mm8+ML4w0ZxaIHuuqNBI9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:52 2026 by rpki-client