This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GaEBEb_ouXprDavXJKQvOXZ9gNk.roa File: GaEBEb_ouXprDavXJKQvOXZ9gNk.roa (raw, json) Hash identifier: rDd3E1G5L6hUFhu3Edl2WebaS1ZhbGZFE1GPndPAP3s= Subject key identifier: 19:A1:01:11:BF:E8:B9:7A:6B:0D:AB:D7:24:A4:2F:39:76:7D:80:D9 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F810F34FA21B62868201918B072ACBE Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GaEBEb_ouXprDavXJKQvOXZ9gNk.roa Signing time: Fri 02 Jan 2026 16:18:43 +0000 ROA not before: Fri 02 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48955 IP address blocks: 45.13.176.0/23 maxlen: 24 45.13.178.0/24 maxlen: 24 45.93.128.0/22 maxlen: 24 45.95.220.0/22 maxlen: 24 45.131.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:0f:34:fa:21:b6:28:68:20:19:18:b0:72:ac:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19a10111bfe8b97a6b0dabd724a42f39767d80d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:21:95:af:9c:d0:27:a4:c0:72:78:93:a2: f4:67:84:c6:8b:d3:58:cd:a1:25:56:4f:45:2f:5e: 42:97:b2:44:f7:74:3f:75:4f:ea:5e:c3:e0:98:a4: ee:8e:ae:64:82:19:66:37:28:51:d4:05:85:62:1c: c3:df:71:73:6a:1a:be:b7:ae:5a:12:45:ba:b1:c6: bd:c8:44:57:8e:cf:5c:7d:a0:09:0a:8a:d5:0f:27: b0:77:f8:bb:d9:6f:9b:57:b1:ed:3f:07:db:da:84: 7e:ed:79:d0:e5:05:85:bf:a4:b6:04:72:2e:78:65: ae:02:6f:f4:a4:44:c2:f1:21:13:2b:2e:3b:cf:97: c4:44:85:13:fb:80:5e:6e:be:26:0b:b0:9a:af:7e: e8:f3:14:98:18:f4:1b:f3:b5:7d:2b:5a:65:d2:df: 6b:3e:f8:f7:6d:df:05:e7:de:c7:2d:e9:e1:de:65: 55:47:a6:c0:9d:30:e4:ea:24:d9:34:06:ef:7f:8e: 5d:de:66:5f:b7:b5:77:47:ec:1d:3f:d9:ec:9d:31: 5b:94:8d:68:cf:f5:2b:78:01:55:2c:b0:6e:ab:aa: d2:06:5d:0e:66:28:ad:05:bc:ca:32:8b:58:78:04: 6d:20:33:db:0c:75:72:8f:b6:f3:da:93:8c:cf:85: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A1:01:11:BF:E8:B9:7A:6B:0D:AB:D7:24:A4:2F:39:76:7D:80:D9 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/GaEBEb_ouXprDavXJKQvOXZ9gNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.176.0-45.13.178.255 45.93.128.0/22 45.95.220.0/22 45.131.104.0/23 Signature Algorithm: sha256WithRSAEncryption c4:70:ef:fa:51:75:29:ef:68:7d:17:a5:fe:be:8b:63:db:b6: 76:4f:c2:20:34:1c:22:2e:e5:38:61:74:7b:67:03:eb:b2:14: 7e:01:ed:46:41:82:9b:51:63:f2:be:66:13:a5:ff:93:2c:72: ff:f2:d0:fc:33:01:ce:8b:8c:e3:aa:e4:1d:78:3c:ec:d4:4a: 9c:0e:07:73:ce:9b:76:5a:5a:3f:60:b6:2b:06:fa:c2:7f:b2: 96:fc:e9:6b:16:9e:9c:4b:6b:03:bd:f5:b1:53:64:29:79:2c: e4:cb:cc:23:ed:6a:7c:88:8f:31:a0:88:67:82:6f:a3:f7:24: ba:ff:c0:2d:8a:de:27:f2:fc:f2:07:bc:24:6e:fe:6b:7f:9d: 30:1c:9b:e4:22:36:82:3c:39:4f:62:19:1f:ef:95:a9:58:4e: c7:fc:40:48:52:4e:b6:ff:60:3d:18:5b:a9:f7:84:4a:b8:3a: 21:b0:17:c0:11:d3:9d:fe:d6:b9:3f:7f:6a:4b:f5:36:7a:c7: 1a:ca:aa:37:43:34:ed:29:21:f7:d6:8e:10:28:c7:ec:13:37: ab:9b:65:69:76:71:35:83:18:91:9a:cd:50:69:7a:06:93:dd: 8d:d8:3c:9e:68:a1:f1:e3:ce:49:69:8e:50:75:b2:9c:8b:de: ec:79:2c:78 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/gQ80+iG2KGggGRiwcqy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWExMDExMWJmZThiOTdhNmIwZGFiZDcyNGE0MmYzOTc2N2Q4MGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM4hla+c0CekwHJ4k6L0Z4TGi9NY zaElVk9FL15Cl7JE93Q/dU/qXsPgmKTujq5kghlmNyhR1AWFYhzD33Fzahq+t65a EkW6sca9yERXjs9cfaAJCorVDyewd/i72W+bV7HtPwfb2oR+7XnQ5QWFv6S2BHIu eGWuAm/0pETC8SETKy47z5fERIUT+4Bebr4mC7Car37o8xSYGPQb87V9K1pl0t9r Pvj3bd8F597HLenh3mVVR6bAnTDk6iTZNAbvf45d3mZft7V3R+wdP9nsnTFblI1o z/UreAFVLLBuq6rSBl0OZiitBbzKMotYeARtIDPbDHVyj7bz2pOMz4V20wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBmhARG/6Ll6aw2r1ySkLzl2fYDZMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvR2FFQkViX291WHByRGF2WEpLUXZPWFo5Z05rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAQtDbAD BAAtDbIDBAItXYADBAItX9wDBAEtg2gwDQYJKoZIhvcNAQELBQADggEBAMRw7/pR dSnvaH0Xpf6+i2PbtnZPwiA0HCIu5ThhdHtnA+uyFH4B7UZBgptRY/K+ZhOl/5Ms cv/y0PwzAc6LjOOq5B14POzUSpwOB3POm3ZaWj9gtisG+sJ/spb86WsWnpxLawO9 9bFTZCl5LOTLzCPtanyIjzGgiGeCb6P3JLr/wC2K3ify/PIHvCRu/mt/nTAcm+Qi NoI8OU9iGR/vlalYTsf8QEhSTrb/YD0YW6n3hEq4OiGwF8AR053+1rk/f2pL9TZ6 xxrKqjdDNO0pIffWjhAox+wTN6ubZWl2cTWDGJGazVBpegaT3Y3YPJ5oofHjzklp jlB1spyL3ux5LHg= -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:49 2026 by rpki-client