This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/5GkzwsX2SAkCt9B6c4atkjd4rkM.roa File: 5GkzwsX2SAkCt9B6c4atkjd4rkM.roa (raw, json) Hash identifier: 8XwwTszWSwQ0ODWiARrL0mvIBAeBsaR0WFrNoJhXWyY= Subject key identifier: E4:69:33:C2:C5:F6:48:09:02:B7:D0:7A:73:86:AD:92:37:78:AE:43 Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861 Certificate serial: 019B7BA37DBE1BBA5C5920B1315C7A0294E9 Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/5GkzwsX2SAkCt9B6c4atkjd4rkM.roa Signing time: Thu 01 Jan 2026 22:17:50 +0000 ROA not before: Thu 01 Jan 2026 22:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51877 IP address blocks: 91.220.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7d:be:1b:ba:5c:59:20:b1:31:5c:7a:02:94:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861 Validity Not Before: Jan 1 22:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e46933c2c5f6480902b7d07a7386ad923778ae43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:4e:90:04:71:bf:10:89:31:ce:69:ea:c2: 11:e2:82:de:f0:30:21:dd:3b:ae:5d:47:ab:5d:88: 15:73:e2:6e:a1:22:ad:76:4f:d7:44:f8:b7:a0:45: b1:18:67:aa:82:2f:e7:ef:29:19:8c:8b:c0:c1:a7: 29:8d:b7:52:a4:ac:96:68:23:df:f7:a3:b0:c0:51: 22:f0:59:04:71:5c:d1:52:9e:ca:77:05:bb:dd:2c: 5a:49:db:99:60:a2:f3:0d:b3:52:6e:c9:fd:69:b5: da:b9:b6:65:14:42:0a:40:9a:a4:54:5b:2d:f4:94: 6d:0d:cf:94:f0:2f:6b:93:0b:ce:da:65:21:c3:9d: e5:62:07:e4:32:01:a3:f4:20:d4:f9:5e:20:a3:75: ca:e8:39:37:04:56:3c:07:41:f9:fe:f9:61:e1:eb: 4c:5f:21:01:43:e5:3e:ae:a5:bb:1b:c7:27:4c:f4: 97:9b:e0:00:5d:aa:32:e3:ff:ba:ba:4f:0d:18:8c: ca:9a:8d:ef:6d:7a:1b:a2:2a:6c:4d:1c:98:03:ba: f4:b2:d7:80:3e:85:c9:85:66:de:2a:c7:8d:e7:c3: 95:c6:47:63:c5:26:3c:c4:d4:2a:54:8a:92:ae:ff: 32:55:d2:a5:42:c9:ea:14:9f:e1:bc:5c:b1:bd:b2: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:69:33:C2:C5:F6:48:09:02:B7:D0:7A:73:86:AD:92:37:78:AE:43 X509v3 Authority Key Identifier: keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/5GkzwsX2SAkCt9B6c4atkjd4rkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.162.0/24 Signature Algorithm: sha256WithRSAEncryption b7:2c:4d:85:74:22:35:bd:3a:58:7f:69:91:26:03:56:52:04: d1:3a:82:bf:b0:68:9d:94:77:7a:65:6d:ad:4a:a2:d3:ab:a5: e1:27:9c:04:4a:9b:5b:1e:df:59:76:4c:fb:64:76:91:29:b5: e1:82:5b:d0:92:cf:d4:19:d5:4b:6f:53:94:6a:f7:27:bb:b4: c0:a3:8b:f2:a0:ce:e7:26:8b:6b:39:de:06:fe:43:25:f9:4f: 00:af:ce:5c:d4:79:5b:cc:55:92:a2:c1:8c:31:03:ac:ea:8b: 7d:fc:03:65:b6:fc:9f:e4:ef:31:8e:90:77:d2:e3:36:d1:a8: c4:ec:e7:9a:ac:15:91:a3:cb:73:db:dd:c0:6f:e0:cc:0e:ec: de:c8:ba:dc:b2:99:be:99:29:cb:80:f4:92:6e:40:fe:48:ea: b0:c8:7a:15:ee:1e:9f:96:32:b3:71:46:f4:86:db:6f:d6:3e: c8:02:f2:69:98:54:32:41:6c:a1:e7:33:80:a1:9f:b1:20:b0: cf:e6:2c:fa:26:a3:7b:8a:1a:25:08:1e:68:44:01:88:96:4a: b4:82:3f:ee:f7:6b:07:75:c3:b1:2c:a1:23:34:6d:34:92:6a: 94:4e:d6:ff:3b:42:60:b6:89:ee:b5:cc:a6:be:2d:5b:52:c4: b3:3e:34:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o32+G7pcWSCxMVx6ApTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTY4ODAxMmMxMjI2NzgxODVmY2ViN2UxMDM3ZjBlMWVk MTc4NjEwHhcNMjYwMTAxMjIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDY5MzNjMmM1ZjY0ODA5MDJiN2QwN2E3Mzg2YWQ5MjM3NzhhZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GtOkARxvxCJMc5p6sIR4oLe8DAh 3TuuXUerXYgVc+JuoSKtdk/XRPi3oEWxGGeqgi/n7ykZjIvAwacpjbdSpKyWaCPf 96OwwFEi8FkEcVzRUp7KdwW73SxaSduZYKLzDbNSbsn9abXaubZlFEIKQJqkVFst 9JRtDc+U8C9rkwvO2mUhw53lYgfkMgGj9CDU+V4go3XK6Dk3BFY8B0H5/vlh4etM XyEBQ+U+rqW7G8cnTPSXm+AAXaoy4/+6uk8NGIzKmo3vbXoboipsTRyYA7r0steA PoXJhWbeKseN58OVxkdjxSY8xNQqVIqSrv8yVdKlQsnqFJ/hvFyxvbLiNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORpM8LF9kgJArfQenOGrZI3eK5DMB8GA1UdIwQY MBaAFIGmiAEsEiZ4GF/Ot+EDfw4e0XhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jN2MyMDctYTNiYS00OWM4LWE4OTQt MDg0ZDQ3NDhjMzg1LzEvNUdrendzWDJTQWtDdDlCNmM0YXRramQ0cmtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jN2MyMDctYTNiYS00OWM4LWE4OTQtMDg0ZDQ3NDhjMzg1 LzEvZ2FhSUFTd1NKbmdZWDg2MzRRTl9EaDdSZUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9yiMA0G CSqGSIb3DQEBCwUAA4IBAQC3LE2FdCI1vTpYf2mRJgNWUgTROoK/sGidlHd6ZW2t SqLTq6XhJ5wESptbHt9Zdkz7ZHaRKbXhglvQks/UGdVLb1OUavcnu7TAo4vyoM7n JotrOd4G/kMl+U8Ar85c1HlbzFWSosGMMQOs6ot9/ANltvyf5O8xjpB30uM20ajE 7OearBWRo8tz293Ab+DMDuzeyLrcspm+mSnLgPSSbkD+SOqwyHoV7h6fljKzcUb0 httv1j7IAvJpmFQyQWyh5zOAoZ+xILDP5iz6JqN7iholCB5oRAGIlkq0gj/u92sH dcOxLKEjNG00kmqUTtb/O0Jgtonutcymvi1bUsSzPjQY -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:44 2026 by rpki-client