This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/gwqrQRv7waRAkJikbIP3xJ5Xd8s.roa File: gwqrQRv7waRAkJikbIP3xJ5Xd8s.roa (raw, json) Hash identifier: sOdnGbvBxW/Gj+cgrcqPDsIz6r7hHDgKTrdy1S7thtk= Subject key identifier: 83:0A:AB:41:1B:FB:C1:A4:40:90:98:A4:6C:83:F7:C4:9E:57:77:CB Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B7F8107327C559B68241AF10DDFE27398 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/gwqrQRv7waRAkJikbIP3xJ5Xd8s.roa Signing time: Fri 02 Jan 2026 16:18:41 +0000 ROA not before: Fri 02 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 45.145.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:07:32:7c:55:9b:68:24:1a:f1:0d:df:e2:73:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Jan 2 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=830aab411bfbc1a4409098a46c83f7c49e5777cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:c2:00:b3:55:78:7e:de:ba:ce:ea:39:fb: 9b:ec:0b:46:dc:6f:b4:ed:7b:8e:ed:9e:ea:b3:53: d9:f9:a9:02:4a:4c:3e:ba:f5:66:e9:83:7f:a6:6c: 53:0f:26:60:a7:6d:d1:02:a4:a9:59:8d:62:8e:71: 98:dc:15:c0:d6:26:46:09:ff:ca:6e:b3:b0:43:5b: e2:1b:73:6c:fa:e0:db:67:dd:81:b0:4a:b7:8d:75: 3e:1f:81:e0:56:09:0b:41:0e:44:3d:c1:d1:5a:05: ff:11:c7:71:6e:31:f4:a6:5f:d6:90:c7:d2:16:76: 32:0a:30:cf:e5:16:b2:43:2e:49:d9:01:26:19:a2: fa:83:7f:ec:bd:21:f9:69:b8:8b:36:7a:97:74:24: 6c:62:89:02:30:07:33:3b:ee:89:6e:ac:fd:56:54: 02:46:5e:d9:29:ac:d7:12:24:a0:36:91:9b:7f:90: c9:7e:cd:5b:5e:d1:ca:86:b5:34:40:c6:d1:48:8f: 69:bd:50:d8:c2:24:66:b6:92:e8:74:0e:4c:6d:49: cb:e6:08:07:f8:ef:47:0e:7d:2c:26:ee:e6:52:fb: 8d:d7:bd:d9:5f:42:25:f5:98:04:e1:35:fd:7c:84: 33:5e:48:da:e4:03:d0:41:ec:7c:50:a1:27:38:39: 66:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:AB:41:1B:FB:C1:A4:40:90:98:A4:6C:83:F7:C4:9E:57:77:CB X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/gwqrQRv7waRAkJikbIP3xJ5Xd8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.16.0/24 Signature Algorithm: sha256WithRSAEncryption b8:7a:68:54:c4:5d:e2:4c:85:0d:bc:cd:21:12:5a:ca:cb:07: da:cf:c4:e6:19:6f:8c:09:ee:69:11:61:e3:4e:9c:e7:70:bd: ad:28:d2:0c:04:c7:aa:27:8b:f1:c2:fd:33:d5:36:6f:36:ac: 6d:5f:91:3f:2f:de:24:66:d8:3f:89:bf:66:86:65:26:d0:18: c7:c1:65:46:d7:f8:e5:b2:b0:0b:96:7e:33:cb:57:a4:de:68: dd:ab:98:e9:a5:31:89:46:4d:3c:10:77:10:09:45:12:89:f7: aa:35:42:3a:84:86:03:d3:57:1b:fb:63:ae:f3:dd:17:b9:f3: 14:f4:39:10:be:be:d3:7b:1f:8c:c2:d7:0f:96:78:70:9f:dd: 07:70:c5:ef:f5:f5:dd:d8:9c:37:d7:64:5b:27:3f:36:05:76: 27:bf:9e:aa:6c:79:8b:51:13:38:1c:93:62:c7:a8:2a:e3:81: a8:d0:a0:ca:3d:ff:38:57:7c:62:d5:8d:b3:3b:42:85:b2:08: 00:fb:61:d9:a5:e6:0b:0d:b9:ec:d8:58:f4:a6:d6:4b:72:bd: 86:c3:a8:01:42:21:89:73:1a:cf:c7:55:67:0f:b8:77:38:fd: 73:84:53:7c:c2:55:5c:1e:aa:6e:56:9a:17:8b:a6:a6:a6:55: 42:fc:90:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gQcyfFWbaCQa8Q3f4nOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjYwMTAyMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzBhYWI0MTFiZmJjMWE0NDA5MDk4YTQ2YzgzZjdjNDllNTc3N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYvCALNVeH7eus7qOfub7AtG3G+0 7XuO7Z7qs1PZ+akCSkw+uvVm6YN/pmxTDyZgp23RAqSpWY1ijnGY3BXA1iZGCf/K brOwQ1viG3Ns+uDbZ92BsEq3jXU+H4HgVgkLQQ5EPcHRWgX/EcdxbjH0pl/WkMfS FnYyCjDP5RayQy5J2QEmGaL6g3/svSH5abiLNnqXdCRsYokCMAczO+6Jbqz9VlQC Rl7ZKazXEiSgNpGbf5DJfs1bXtHKhrU0QMbRSI9pvVDYwiRmtpLodA5MbUnL5ggH +O9HDn0sJu7mUvuN173ZX0Il9ZgE4TX9fIQzXkja5APQQex8UKEnODlmwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIMKq0Eb+8GkQJCYpGyD98SeV3fLMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvZ3dxclFSdjd3YVJBa0ppa2JJUDN4SjVYZDhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZEQMA0G CSqGSIb3DQEBCwUAA4IBAQC4emhUxF3iTIUNvM0hElrKywfaz8TmGW+MCe5pEWHj TpzncL2tKNIMBMeqJ4vxwv0z1TZvNqxtX5E/L94kZtg/ib9mhmUm0BjHwWVG1/jl srALln4zy1ek3mjdq5jppTGJRk08EHcQCUUSifeqNUI6hIYD01cb+2Ou890XufMU 9DkQvr7Tex+MwtcPlnhwn90HcMXv9fXd2Jw312RbJz82BXYnv56qbHmLURM4HJNi x6gq44Go0KDKPf84V3xi1Y2zO0KFsggA+2HZpeYLDbns2Fj0ptZLcr2Gw6gBQiGJ cxrPx1VnD7h3OP1zhFN8wlVcHqpuVpoXi6amplVC/JBu -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:32 2026 by rpki-client