This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/G5xYweczugT7y9iKv0C3tFH_n0s.roa File: G5xYweczugT7y9iKv0C3tFH_n0s.roa (raw, json) Hash identifier: mJ6ZUqGAfQj432UWOlXl+ZROquxNC18uSJrAS/I3FwY= Subject key identifier: 1B:9C:58:C1:E7:33:BA:04:FB:CB:D8:8A:BF:40:B7:B4:51:FF:9F:4B Certificate issuer: /CN=4c468f181265b4d96ca2835a3e570c2679035dff Certificate serial: 019B79ECB2955AB15E2CD2D36E64695CABDB Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/G5xYweczugT7y9iKv0C3tFH_n0s.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208708 IP address blocks: 45.87.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b2:95:5a:b1:5e:2c:d2:d3:6e:64:69:5c:ab:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b9c58c1e733ba04fbcbd88abf40b7b451ff9f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:05:1b:9f:cf:f6:1a:d6:fd:3c:e8:46:60: b8:b7:d5:4f:68:43:5c:c0:70:74:b9:cd:77:69:7b: 46:6f:53:ad:1e:b2:84:9e:d5:33:10:2b:e9:e0:4d: 7f:e1:87:8d:8a:e9:61:a3:f3:37:c4:8f:20:43:80: ad:20:90:f8:a3:df:d5:47:c1:01:eb:b0:75:6f:00: ea:57:ed:83:8d:1a:0f:17:29:aa:34:23:f1:90:66: 43:2f:d3:83:90:53:91:ce:52:80:a4:9a:c4:82:84: a6:f3:db:60:03:ca:c8:4f:4e:82:53:1d:20:71:2f: 67:46:4a:e0:3e:e0:62:49:65:31:78:1e:4b:8b:d9: 06:d8:0b:41:08:08:12:d5:1b:7f:9f:ee:85:7e:02: 65:c9:06:00:0f:40:e3:70:94:44:27:4e:fb:14:7e: a8:05:24:8a:c0:34:de:63:ea:2e:a8:bb:8a:57:4d: 4c:a1:01:32:4b:5f:e5:87:66:6f:fb:36:8c:a5:2c: 19:9a:9f:cd:ea:6b:3c:02:db:b9:77:25:c7:93:54: 79:52:e3:17:26:bb:f3:c0:41:3c:f7:1d:a1:4d:5d: bf:00:13:30:db:d3:74:20:b2:52:b3:0d:ee:92:4b: dc:f5:2e:29:2c:aa:e5:c3:f5:55:a7:68:64:dc:f9: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9C:58:C1:E7:33:BA:04:FB:CB:D8:8A:BF:40:B7:B4:51:FF:9F:4B X509v3 Authority Key Identifier: keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/G5xYweczugT7y9iKv0C3tFH_n0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.112.0/22 Signature Algorithm: sha256WithRSAEncryption 17:4c:bd:84:57:4a:dc:a6:b4:67:6e:f7:5e:95:a5:2b:70:a8: 37:d8:af:e9:7f:83:d6:eb:a9:70:e0:aa:40:bc:c7:8b:29:74: f9:18:da:28:2b:3f:b9:d9:20:46:c8:60:28:1e:1b:b3:a3:60: 6f:60:12:6e:5b:eb:a5:18:d5:69:99:16:cf:e5:bb:ee:2a:23: 1c:78:0e:a6:36:03:ce:56:f4:6b:b1:19:2f:50:8a:52:c3:d7: 9d:5f:36:38:fb:56:96:cd:4e:44:60:50:22:87:e9:3b:1e:9b: 59:41:e7:74:57:0c:88:8a:db:7e:95:2a:3d:5a:87:61:3f:2c: 72:a6:5d:6f:f8:63:28:4f:0a:28:e9:39:c8:6b:45:9c:a9:c7: 58:a7:43:dd:51:ca:1c:51:3a:34:31:0c:6c:54:85:0d:80:e6: a2:42:1d:e8:c0:49:b0:69:1e:a9:96:22:f4:8e:85:16:27:0f: bd:bd:02:7d:db:b5:ba:ab:3e:65:75:2e:5c:43:7b:3c:81:35: 0a:c6:be:89:29:2f:5a:b7:b8:b9:da:fa:da:74:a7:7b:8e:7a: 01:0e:33:24:0e:d4:99:1a:c0:85:8c:02:0c:21:e4:64:88:b2: a9:7b:14:29:02:fa:6d:93:a1:19:11:66:1b:ba:21:4c:42:21: 4b:63:c8:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LKVWrFeLNLTbmRpXKvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNDY4ZjE4MTI2NWI0ZDk2Y2EyODM1YTNlNTcwYzI2Nzkw MzVkZmYwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjljNThjMWU3MzNiYTA0ZmJjYmQ4OGFiZjQwYjdiNDUxZmY5ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufYFG5/P9hrW/TzoRmC4t9VPaENc wHB0uc13aXtGb1OtHrKEntUzECvp4E1/4YeNiulho/M3xI8gQ4CtIJD4o9/VR8EB 67B1bwDqV+2DjRoPFymqNCPxkGZDL9ODkFORzlKApJrEgoSm89tgA8rIT06CUx0g cS9nRkrgPuBiSWUxeB5Li9kG2AtBCAgS1Rt/n+6FfgJlyQYAD0DjcJREJ077FH6o BSSKwDTeY+ouqLuKV01MoQEyS1/lh2Zv+zaMpSwZmp/N6ms8Atu5dyXHk1R5UuMX JrvzwEE89x2hTV2/ABMw29N0ILJSsw3ukkvc9S4pLKrlw/VVp2hk3PnfjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBucWMHnM7oE+8vYir9At7RR/59LMB8GA1UdIwQY MBaAFExGjxgSZbTZbKKDWj5XDCZ5A13/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjIt MWNkMzM5M2QwYmY1LzEvRzV4WXdlY3p1Z1Q3eTlpS3YwQzN0RkhfbjBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi82OTA2NTktMzE5MC00MzRkLThjMjItMWNkMzM5M2QwYmY1 LzEvVEVhUEdCSmx0Tmxzb29OYVBsY01KbmtEWGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVdwMA0G CSqGSIb3DQEBCwUAA4IBAQAXTL2EV0rcprRnbvdelaUrcKg32K/pf4PW66lw4KpA vMeLKXT5GNooKz+52SBGyGAoHhuzo2BvYBJuW+ulGNVpmRbP5bvuKiMceA6mNgPO VvRrsRkvUIpSw9edXzY4+1aWzU5EYFAih+k7HptZQed0VwyIitt+lSo9WodhPyxy pl1v+GMoTwoo6TnIa0WcqcdYp0PdUcocUTo0MQxsVIUNgOaiQh3owEmwaR6pliL0 joUWJw+9vQJ927W6qz5ldS5cQ3s8gTUKxr6JKS9at7i52vradKd7jnoBDjMkDtSZ GsCFjAIMIeRkiLKpexQpAvptk6EZEWYbuiFMQiFLY8jh -----END CERTIFICATE-----Generated at Mon Jan 12 04:03:57 2026 by rpki-client