This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/gQeDlAB2b-yz40wa6y4f9jvVDIs.roa File: gQeDlAB2b-yz40wa6y4f9jvVDIs.roa (raw, json) Hash identifier: gxyp6+EX2f9gbDwhqzkUqdu0QE4bPoPhIRtQBnEAra0= Subject key identifier: 81:07:83:94:00:76:6F:EC:B3:E3:4C:1A:EB:2E:1F:F6:3B:D5:0C:8B Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c Certificate serial: 019B7B36A8E07A59AEE24FE66F26052E10D8 Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/gQeDlAB2b-yz40wa6y4f9jvVDIs.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44938 IP address blocks: 45.14.128.0/24 maxlen: 24 45.14.129.0/24 maxlen: 24 45.14.130.0/24 maxlen: 24 45.14.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a8:e0:7a:59:ae:e2:4f:e6:6f:26:05:2e:10:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8107839400766fecb3e34c1aeb2e1ff63bd50c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:ab:9e:8a:89:12:8c:a7:76:dc:d1:eb:a3: 35:9b:e4:5a:f1:2c:4c:ae:4c:3a:18:21:e9:d9:ad: 19:81:d8:94:f9:08:d5:05:7a:90:c1:8f:53:21:7d: 71:8c:1b:c4:75:fe:5a:92:5b:20:a9:2a:14:63:4f: d3:a3:b2:e7:10:c3:de:58:70:e8:24:79:8c:44:ce: 30:36:4e:d2:e9:c8:c0:c3:53:3f:62:7c:19:60:24: 6f:26:58:34:e7:df:87:61:83:6b:02:18:65:14:84: 65:d8:7f:eb:5d:c4:52:19:f3:ce:8c:0c:e9:cb:45: 6b:13:7d:ea:06:ac:a1:e5:07:7a:ef:02:6f:28:e6: d3:d5:47:18:84:0e:56:48:2a:cc:b8:14:e8:6f:a5: ce:fd:d6:92:b4:4c:70:39:b9:21:93:7c:58:fb:23: 1e:76:36:37:a4:17:52:db:cf:72:19:7b:cc:39:14: 1a:22:bc:c0:7c:53:42:00:f9:9d:dd:d7:af:40:5e: 3b:fc:52:73:d9:83:4c:74:7a:4d:fb:05:9e:ce:b4: 4f:f0:3a:5b:9c:ba:97:9a:49:78:a2:6c:32:a5:5a: e3:6c:ea:af:b5:9b:74:8e:60:0c:5a:ca:d3:11:59: 32:08:2c:ec:8d:ba:ff:97:25:b6:71:d3:ae:e0:63: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:83:94:00:76:6F:EC:B3:E3:4C:1A:EB:2E:1F:F6:3B:D5:0C:8B X509v3 Authority Key Identifier: keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/gQeDlAB2b-yz40wa6y4f9jvVDIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.128.0/22 Signature Algorithm: sha256WithRSAEncryption bf:14:83:6d:5e:f5:6f:fb:db:02:cd:52:2a:55:bc:4f:c0:09: 2e:70:3e:c5:17:27:c5:07:d7:2c:29:c0:c7:86:8a:f8:82:08: cd:7c:5f:60:0a:84:9e:3a:d2:b2:fe:3a:be:6d:bf:ab:81:65: 03:da:3e:19:f1:9b:14:2e:ca:2f:4f:d4:5d:a8:0e:f0:4f:e8: f1:dd:49:22:2d:cf:29:35:48:d5:26:6f:ca:c1:c8:a9:5e:2c: 92:44:c8:74:71:d2:f3:27:bc:e2:85:b8:6e:c0:59:5a:3b:a9: 53:d0:f3:02:8b:36:5e:98:ca:d9:b6:05:93:4b:2c:f9:f6:4d: ad:a1:b6:31:37:7e:4a:14:28:2a:4e:28:b0:0d:fb:7f:17:d6: 3c:07:2b:84:35:05:96:b8:b0:af:44:73:53:e2:f9:5d:07:d9: 7b:cc:0f:75:6e:80:94:a1:b4:f4:0f:9c:0b:cc:d0:2c:d2:4e: 7e:a6:31:9e:62:b1:37:23:db:72:c2:7b:a7:5b:05:97:f2:0b: 27:ca:5e:33:2a:1b:f4:f4:c4:3a:d1:17:cf:4f:a3:da:b3:37: 2c:43:74:98:b2:5d:e9:69:fc:2c:70:6d:ec:cd:79:d6:04:82: a7:4a:b9:0f:e5:5d:8c:8f:a3:04:11:a4:02:b0:75:a0:ed:a4: 25:6d:b3:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nqjgelmu4k/mbyYFLhDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWE2YTliZWI1MmVmZjI5NjQ0NjU5Yjk0MzJhMGE1OTIz NzMxNGMwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA3ODM5NDAwNzY2ZmVjYjNlMzRjMWFlYjJlMWZmNjNiZDUwYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5qrnoqJEoyndtzR66M1m+Ra8SxM rkw6GCHp2a0ZgdiU+QjVBXqQwY9TIX1xjBvEdf5aklsgqSoUY0/To7LnEMPeWHDo JHmMRM4wNk7S6cjAw1M/YnwZYCRvJlg059+HYYNrAhhlFIRl2H/rXcRSGfPOjAzp y0VrE33qBqyh5Qd67wJvKObT1UcYhA5WSCrMuBTob6XO/daStExwObkhk3xY+yMe djY3pBdS289yGXvMORQaIrzAfFNCAPmd3devQF47/FJz2YNMdHpN+wWezrRP8Dpb nLqXmkl4omwypVrjbOqvtZt0jmAMWsrTEVkyCCzsjbr/lyW2cdOu4GNP/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEHg5QAdm/ss+NMGusuH/Y71QyLMB8GA1UdIwQY MBaAFFGaapvrUu/ylkRlm5QyoKWSNzFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQt OTA1ZDlkY2Y1MGFlLzEvZ1FlRGxBQjJiLXl6NDB3YTZ5NGY5anZWRElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84NmQyM2UtNDAwYS00YWRjLTgwZTQtOTA1ZDlkY2Y1MGFl LzEvVVpwcW0tdFM3X0tXUkdXYmxES2dwWkkzTVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ6AMA0G CSqGSIb3DQEBCwUAA4IBAQC/FINtXvVv+9sCzVIqVbxPwAkucD7FFyfFB9csKcDH hor4ggjNfF9gCoSeOtKy/jq+bb+rgWUD2j4Z8ZsULsovT9RdqA7wT+jx3UkiLc8p NUjVJm/KwcipXiySRMh0cdLzJ7zihbhuwFlaO6lT0PMCizZemMrZtgWTSyz59k2t obYxN35KFCgqTiiwDft/F9Y8ByuENQWWuLCvRHNT4vldB9l7zA91boCUobT0D5wL zNAs0k5+pjGeYrE3I9tywnunWwWX8gsnyl4zKhv09MQ60RfPT6PaszcsQ3SYsl3p afwscG3szXnWBIKnSrkP5V2Mj6MEEaQCsHWg7aQlbbPa -----END CERTIFICATE-----Generated at Tue Feb 10 04:13:59 2026 by rpki-client