This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gPr1aG2clzgFlrJFgCEy9rksrnA.roa File: gPr1aG2clzgFlrJFgCEy9rksrnA.roa (raw, json) Hash identifier: Js2wc0QCbYtBE/WS6vgEdFwjN5rAWv0Y7iGne+oWDFw= Subject key identifier: 80:FA:F5:68:6D:9C:97:38:05:96:B2:45:80:21:32:F6:B9:2C:AE:70 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C69B931E7E590F143DA02BFEEB098D Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gPr1aG2clzgFlrJFgCEy9rksrnA.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44341 IP address blocks: 46.8.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9b:93:1e:7e:59:0f:14:3d:a0:2b:fe:eb:09:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80faf5686d9c97380596b245802132f6b92cae70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d7:f0:a8:dd:68:28:68:41:c9:9f:ec:8b:98: 9a:44:00:0a:1e:65:14:aa:78:d0:30:08:e6:24:85: da:41:ae:ed:ab:94:a0:b4:e5:88:d6:80:3e:9c:43: 38:ab:9c:12:d9:17:63:e1:9d:e9:b3:ed:2f:04:08: 19:c3:01:f6:a8:cb:74:41:10:90:10:17:94:4e:2d: 2e:15:9b:e8:07:3f:49:26:63:45:6e:16:6f:5a:83: 10:f7:21:d9:4a:39:0d:50:cc:a3:df:f6:62:6e:cb: c0:93:9d:fa:4f:81:9e:99:c6:1a:0a:29:56:45:4c: fe:e2:f5:e4:d8:85:fd:a0:1b:09:b9:42:58:ba:c2: 9c:ba:df:8f:69:ff:21:af:03:8c:ba:15:08:ff:ac: 0c:78:2c:cd:86:75:9b:32:7c:84:96:68:60:6b:a8: 1b:6f:93:03:57:88:41:a6:a9:e4:1d:a4:ac:15:e8: da:bc:b0:54:0d:d7:e2:38:50:87:74:e8:e7:e9:4b: ed:c5:48:a1:9d:eb:de:c8:9b:86:47:1d:98:12:94: fc:c6:6d:9f:9c:c8:b3:d6:52:ce:57:dd:6e:85:4f: 6c:f0:db:91:1b:7a:e8:e1:9a:1a:80:1c:16:47:a0: 6e:a7:18:e2:a8:f9:db:57:3d:fc:36:d1:3c:b8:f1: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FA:F5:68:6D:9C:97:38:05:96:B2:45:80:21:32:F6:B9:2C:AE:70 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/gPr1aG2clzgFlrJFgCEy9rksrnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.206.0/24 Signature Algorithm: sha256WithRSAEncryption 03:c9:63:97:b2:e9:d4:db:54:7c:df:2d:53:3d:f8:43:7f:3f: eb:ca:86:00:12:59:f3:d5:ad:dd:f6:7d:9c:77:17:56:d4:c8: 86:99:7b:9f:38:fe:a8:ef:34:50:00:f1:9e:b8:fb:b5:df:09: 5d:95:a7:f5:b3:fd:41:57:be:f5:38:32:0b:e3:31:96:bb:b1: d7:e8:11:e2:3a:09:7a:c2:9e:d8:0e:f6:c0:1a:a6:50:a0:b9: f3:97:9a:77:aa:bc:b4:f2:b9:6f:fc:e7:f5:8d:b2:78:ff:05: ee:1e:22:2a:c5:95:6a:68:59:12:b9:63:fb:e0:4e:fb:b6:6b: a8:65:cf:df:39:f1:bd:08:68:ca:fe:da:71:79:8a:89:b2:0c: 8a:7d:b4:ec:ff:ef:0a:1f:ad:04:96:dd:fe:19:cb:22:46:2e: 04:af:2f:f3:12:86:fd:59:2b:f7:37:ab:6f:7f:dd:d3:04:14: 83:48:1b:9b:56:9e:2c:d9:73:36:48:b7:76:58:35:14:60:05: fd:eb:14:f7:30:fd:14:68:d0:25:c5:64:67:e5:94:de:0b:fd: dd:2d:83:da:96:47:0a:8d:aa:ee:72:85:dd:25:2d:b5:f2:0f: 27:0e:85:86:e2:80:db:d2:d9:28:79:4a:ac:f4:f5:18:29:cd: 14:57:a2:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpuTHn5ZDxQ9oCv+6wmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGZhZjU2ODZkOWM5NzM4MDU5NmIyNDU4MDIxMzJmNmI5MmNhZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59fwqN1oKGhByZ/si5iaRAAKHmUU qnjQMAjmJIXaQa7tq5SgtOWI1oA+nEM4q5wS2Rdj4Z3ps+0vBAgZwwH2qMt0QRCQ EBeUTi0uFZvoBz9JJmNFbhZvWoMQ9yHZSjkNUMyj3/ZibsvAk536T4GemcYaCilW RUz+4vXk2IX9oBsJuUJYusKcut+Paf8hrwOMuhUI/6wMeCzNhnWbMnyElmhga6gb b5MDV4hBpqnkHaSsFejavLBUDdfiOFCHdOjn6UvtxUihneveyJuGRx2YEpT8xm2f nMiz1lLOV91uhU9s8NuRG3ro4ZoagBwWR6BupxjiqPnbVz38NtE8uPHvPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFID69WhtnJc4BZayRYAhMva5LK5wMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvZ1ByMWFHMmNsemdGbHJKRmdDRXk5cmtzcm5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgjOMA0G CSqGSIb3DQEBCwUAA4IBAQADyWOXsunU21R83y1TPfhDfz/ryoYAElnz1a3d9n2c dxdW1MiGmXufOP6o7zRQAPGeuPu13wldlaf1s/1BV771ODIL4zGWu7HX6BHiOgl6 wp7YDvbAGqZQoLnzl5p3qry08rlv/Of1jbJ4/wXuHiIqxZVqaFkSuWP74E77tmuo Zc/fOfG9CGjK/tpxeYqJsgyKfbTs/+8KH60Elt3+GcsiRi4Ery/zEob9WSv3N6tv f93TBBSDSBubVp4s2XM2SLd2WDUUYAX96xT3MP0UaNAlxWRn5ZTeC/3dLYPalkcK jarucoXdJS218g8nDoWG4oDb0tkoeUqs9PUYKc0UV6I2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:41 2026 by rpki-client