This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa File: gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa (raw, json) Hash identifier: 3PftaD58PWAe1nqPJMST42Vt40zBG+AVvzxMfB6cylU= Subject key identifier: 80:F9:78:AA:7B:E2:67:C5:F4:D6:54:39:67:4C:AC:4B:00:0D:17:C2 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C72565F9EBE8BB4907F3337366C672 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 91.149.215.0/24 maxlen: 24 91.149.228.0/24 maxlen: 24 91.149.244.0/22 maxlen: 22 91.149.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:25:65:f9:eb:e8:bb:49:07:f3:33:73:66:c6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80f978aa7be267c5f4d65439674cac4b000d17c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:e5:18:d1:d9:54:c6:c5:28:09:e2:eb:41: f9:d8:88:98:3d:19:27:44:92:1b:7d:1a:82:41:94: f3:a7:56:f2:69:58:67:7d:01:6a:4e:88:ca:94:fe: 27:7d:03:ea:d9:3e:e2:35:16:70:8b:22:77:9c:c8: bf:cd:58:85:ba:0d:3c:9f:95:04:7a:e8:4d:97:8c: 74:59:98:35:da:e7:49:37:18:8a:5c:c6:df:fe:7c: 6a:93:d0:d0:c6:87:90:95:55:a2:5f:b4:a5:65:51: 99:af:a6:4f:fc:f7:3c:1b:e9:f8:9e:bf:aa:86:2a: aa:c0:84:da:df:ce:8b:b2:eb:a3:4c:25:79:54:9c: 18:de:9a:52:34:c9:46:62:ff:e4:67:07:08:ea:ad: 09:18:4e:e6:21:0c:af:e4:d6:94:ce:f1:6a:3a:2b: e9:3a:27:7f:6f:12:37:0f:34:79:24:ac:c4:d1:bc: d5:98:13:3c:96:26:37:3b:0e:dd:d6:f1:85:de:a3: 9a:56:57:0f:f6:67:0a:87:73:b9:06:7d:d9:43:ca: 66:a6:b8:67:69:f8:8e:49:22:4b:4d:1c:5a:49:57: c9:49:1e:65:2e:b2:af:0c:98:4b:4f:90:99:bb:54: e5:78:42:e9:5d:2b:4b:d5:38:56:94:a9:01:cc:ba: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F9:78:AA:7B:E2:67:C5:F4:D6:54:39:67:4C:AC:4B:00:0D:17:C2 X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/gPl4qnviZ8X01lQ5Z0ysSwANF8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.215.0/24 91.149.228.0/24 91.149.244.0-91.149.251.255 Signature Algorithm: sha256WithRSAEncryption 8c:0b:cb:c2:cf:9b:c6:62:e0:68:34:31:e6:b6:09:96:3a:b0: 6d:f2:94:40:11:00:7e:1f:e7:33:26:c4:87:22:92:b9:96:a6: fe:64:03:41:8c:8f:27:4b:e7:cc:45:be:e4:db:a0:c5:07:ac: 43:8b:75:0d:b8:7c:33:01:5b:e9:30:07:c3:fa:f2:fa:ed:e6: 4b:eb:34:75:93:43:89:53:3a:34:a7:7e:02:82:4e:a7:a1:8f: ed:ad:0e:60:42:98:16:d4:7a:4c:ac:6f:7e:0f:54:97:97:dc: d2:6f:4e:25:f1:97:de:ed:8c:14:9c:27:f3:8d:f1:2f:04:6d: 0c:f6:fd:2b:b7:0e:91:85:50:9d:a8:4f:aa:f1:0f:c1:31:d8: 68:72:6b:01:de:af:48:0a:48:a4:08:1b:60:07:0d:65:cd:fc: df:b8:5e:27:70:8c:f2:a2:b1:7f:75:3d:9b:dd:00:3d:2f:ae: 41:81:4b:2c:6f:81:bd:41:23:8b:1d:82:62:ee:a4:0d:1a:45: 22:18:50:1b:38:1f:85:69:07:a1:1c:9d:31:55:38:2e:63:0e: 09:e4:23:d4:c7:81:82:3b:c1:f4:ef:f5:f6:a0:f3:57:94:95: 3d:72:7b:9c:2c:61:d8:a2:22:94:6e:eb:c5:77:99:22:cd:a3: b2:c7:b3:ef -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3xyVl+evou0kH8zNzZsZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGY5NzhhYTdiZTI2N2M1ZjRkNjU0Mzk2NzRjYWM0YjAwMGQxN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEnlGNHZVMbFKAni60H52IiYPRkn RJIbfRqCQZTzp1byaVhnfQFqTojKlP4nfQPq2T7iNRZwiyJ3nMi/zViFug08n5UE euhNl4x0WZg12udJNxiKXMbf/nxqk9DQxoeQlVWiX7SlZVGZr6ZP/Pc8G+n4nr+q hiqqwITa386LsuujTCV5VJwY3ppSNMlGYv/kZwcI6q0JGE7mIQyv5NaUzvFqOivp Oid/bxI3DzR5JKzE0bzVmBM8liY3Ow7d1vGF3qOaVlcP9mcKh3O5Bn3ZQ8pmprhn afiOSSJLTRxaSVfJSR5lLrKvDJhLT5CZu1TleELpXStL1ThWlKkBzLo9qQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFID5eKp74mfF9NZUOWdMrEsADRfCMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvZ1BsNHFudmlaOFgwMWxRNVoweXNTd0FORjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAW5XXAwQA W5XkMAwDBAJblfQDBAJblfgwDQYJKoZIhvcNAQELBQADggEBAIwLy8LPm8Zi4Gg0 Mea2CZY6sG3ylEARAH4f5zMmxIcikrmWpv5kA0GMjydL58xFvuTboMUHrEOLdQ24 fDMBW+kwB8P68vrt5kvrNHWTQ4lTOjSnfgKCTqehj+2tDmBCmBbUekysb34PVJeX 3NJvTiXxl97tjBScJ/ON8S8EbQz2/Su3DpGFUJ2oT6rxD8Ex2GhyawHer0gKSKQI G2AHDWXN/N+4XidwjPKisX91PZvdAD0vrkGBSyxvgb1BI4sdgmLupA0aRSIYUBs4 H4VpB6EcnTFVOC5jDgnkI9THgYI7wfTv9fag81eUlT1ye5wsYdiiIpRu68V3mSLN o7LHs+8= -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:48 2026 by rpki-client