This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/Gj58Ycc5sgTKpy5rCKA-P9AzQZY.roa File: Gj58Ycc5sgTKpy5rCKA-P9AzQZY.roa (raw, json) Hash identifier: Q6gNonEq5nLMUlgVgoa+TSlQSkKmWvACZYbgKJpSJls= Subject key identifier: 1A:3E:7C:61:C7:39:B2:04:CA:A7:2E:6B:08:A0:3E:3F:D0:33:41:96 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 019B797EBEA248813AA482D3B27433B4CF26 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/Gj58Ycc5sgTKpy5rCKA-P9AzQZY.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 81.199.112.0/24 maxlen: 24 81.199.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:a2:48:81:3a:a4:82:d3:b2:74:33:b4:cf:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a3e7c61c739b204caa72e6b08a03e3fd0334196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:79:a2:97:55:7a:5f:2f:f1:51:69:b8:53: 07:32:de:95:21:72:50:7d:59:0a:87:81:99:73:39: 09:d9:96:bb:6d:ce:ff:79:3d:ee:ba:90:10:a3:a6: a9:cc:86:7e:07:ff:86:c0:61:d4:70:06:dd:15:f8: 2a:52:82:76:1b:6e:10:c5:f1:7c:f5:38:7a:95:17: 09:3b:2d:87:80:51:eb:a9:44:20:fc:4b:1f:7b:74: 11:13:4a:c6:78:5d:85:dc:35:01:10:af:65:01:68: a3:36:b0:14:a9:e4:5c:c7:bc:7e:87:39:80:38:fb: b5:2a:b9:f0:7b:a1:f5:af:4a:49:89:1b:90:2e:8c: 93:ce:55:ab:19:bf:fd:f1:a6:d5:ab:bb:3a:f6:1e: e1:eb:7c:34:e4:bd:b9:93:38:b7:37:60:be:c8:1d: 49:75:98:65:25:39:70:ed:59:40:43:47:92:9e:5c: d5:5f:1f:f9:98:74:52:01:fa:d0:00:90:ff:1c:cd: ab:6c:a1:97:78:0e:08:4f:ed:78:57:95:da:52:23: cf:1f:cd:85:26:87:43:bc:5c:d0:d2:80:eb:6c:4f: df:4a:7f:b5:7a:88:1c:bd:ea:d5:86:66:e1:c3:f9: 59:f5:d3:fe:16:d0:33:71:e9:c9:00:39:11:22:9b: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3E:7C:61:C7:39:B2:04:CA:A7:2E:6B:08:A0:3E:3F:D0:33:41:96 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/Gj58Ycc5sgTKpy5rCKA-P9AzQZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.112.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:5d:6c:a6:b0:ea:ed:ed:a2:46:5e:db:1d:da:8a:8f:b2:aa: df:a4:40:26:b5:3c:b7:86:ed:11:c6:b1:32:85:f6:4a:20:29: df:f8:9e:c5:bc:31:33:39:4d:7f:09:83:fe:cd:f7:14:6a:ef: 00:16:23:f0:77:ab:59:c3:d0:16:3c:03:b7:83:08:fc:1c:5b: 05:22:dc:fe:79:9a:32:64:c9:11:8b:31:e1:7d:07:ce:2c:f7: 7f:cd:ca:c6:6a:a0:1b:61:ce:a5:9c:ca:61:c4:c3:0c:d6:9a: 20:7f:8a:dd:50:4f:54:da:b4:2f:22:ac:b7:ac:dc:58:dc:40: 82:af:b5:23:73:e3:fb:ab:0f:d3:c8:17:c6:e7:f4:02:ad:c8: c4:42:b7:e3:6b:00:15:65:c2:7a:3e:62:a9:98:47:47:cb:f0: 50:d1:b8:c7:21:df:fc:f3:ec:e4:ba:a6:35:ab:04:c7:91:54: 32:e7:ad:6f:57:1c:d3:34:61:65:12:a1:25:f3:17:13:e1:55: 5c:9e:02:c8:bc:ee:41:58:72:62:31:42:36:67:8a:51:ff:e6: 4d:ba:64:2f:dc:91:41:5d:d9:4b:9d:30:83:1d:a5:59:77:47: f7:6b:9b:50:c7:5b:b6:aa:1b:e6:be:81:11:86:29:8d:20:dd: 6f:48:71:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr6iSIE6pILTsnQztM8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTNlN2M2MWM3MzliMjA0Y2FhNzJlNmIwOGEwM2UzZmQwMzM0MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wp5opdVel8v8VFpuFMHMt6VIXJQ fVkKh4GZczkJ2Za7bc7/eT3uupAQo6apzIZ+B/+GwGHUcAbdFfgqUoJ2G24QxfF8 9Th6lRcJOy2HgFHrqUQg/Esfe3QRE0rGeF2F3DUBEK9lAWijNrAUqeRcx7x+hzmA OPu1Krnwe6H1r0pJiRuQLoyTzlWrGb/98abVq7s69h7h63w05L25kzi3N2C+yB1J dZhlJTlw7VlAQ0eSnlzVXx/5mHRSAfrQAJD/HM2rbKGXeA4IT+14V5XaUiPPH82F JodDvFzQ0oDrbE/fSn+1eogcverVhmbhw/lZ9dP+FtAzcenJADkRIpsOSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBo+fGHHObIEyqcuawigPj/QM0GWMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvR2o1OFljYzVzZ1RLcHk1ckNLQS1QOUF6UVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUcdwMA0G CSqGSIb3DQEBCwUAA4IBAQB9XWymsOrt7aJGXtsd2oqPsqrfpEAmtTy3hu0RxrEy hfZKICnf+J7FvDEzOU1/CYP+zfcUau8AFiPwd6tZw9AWPAO3gwj8HFsFItz+eZoy ZMkRizHhfQfOLPd/zcrGaqAbYc6lnMphxMMM1pogf4rdUE9U2rQvIqy3rNxY3ECC r7Ujc+P7qw/TyBfG5/QCrcjEQrfjawAVZcJ6PmKpmEdHy/BQ0bjHId/88+zkuqY1 qwTHkVQy561vVxzTNGFlEqEl8xcT4VVcngLIvO5BWHJiMUI2Z4pR/+ZNumQv3JFB XdlLnTCDHaVZd0f3a5tQx1u2qhvmvoERhimNIN1vSHGm -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:45 2026 by rpki-client