This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Gq44nz0KvU6X_wtbaTL-ZvtaiTI.roa File: Gq44nz0KvU6X_wtbaTL-ZvtaiTI.roa (raw, json) Hash identifier: n4837lG0//lt8BoCCzn/cUfEvTT3LD2vzy03YQSdIAA= Subject key identifier: 1A:AE:38:9F:3D:0A:BD:4E:97:FF:0B:5B:69:32:FE:66:FB:5A:89:32 Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B791116DEA67A4F4B8F511C2AAB006F5F Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Gq44nz0KvU6X_wtbaTL-ZvtaiTI.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 107.181.135.0/24 maxlen: 24 2a07:9940:3333::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:16:de:a6:7a:4f:4b:8f:51:1c:2a:ab:00:6f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aae389f3d0abd4e97ff0b5b6932fe66fb5a8932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:5b:a2:42:b3:60:53:b2:59:08:3e:ad:b7: 3e:4a:67:93:d5:41:15:4c:6e:46:38:e1:dd:ab:06: 00:3a:7e:9a:f5:d7:5a:7f:2d:13:9b:50:0c:1c:92: 36:ed:a2:8c:56:0b:6b:23:84:fb:1c:30:0a:a8:17: d0:98:fa:04:6e:26:ea:1d:8b:3c:2a:aa:25:82:f3: f6:0e:47:c0:41:97:67:aa:16:bb:93:5f:4d:25:1d: 56:34:08:ff:32:c4:55:89:fe:ff:17:38:da:df:c0: 5d:7e:f1:2c:d4:95:ed:74:6d:03:7f:b2:74:89:5b: 12:54:7f:e7:ad:ac:b7:15:50:01:19:5d:c6:bd:c8: 0a:f2:15:2c:70:5c:54:d3:4d:6f:a9:72:99:53:f4: 7a:30:a6:52:d1:22:c6:25:46:17:8a:b3:7d:33:61: 9a:00:6c:ac:fd:34:ac:12:fa:fd:64:30:8e:a4:b1: dc:64:4f:46:9c:7a:ab:aa:0f:2b:5e:54:83:ac:31: c1:47:be:10:7c:06:0b:29:92:b0:59:85:2a:a6:31: 70:37:51:15:67:63:c5:c9:e8:c2:f3:5a:43:93:59: ab:41:44:ad:a0:d5:50:87:2a:f2:ec:f8:06:35:9c: d2:17:9f:d0:cb:a0:80:f5:ae:b8:38:ce:34:97:16: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:38:9F:3D:0A:BD:4E:97:FF:0B:5B:69:32:FE:66:FB:5A:89:32 X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Gq44nz0KvU6X_wtbaTL-ZvtaiTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.181.135.0/24 IPv6: 2a07:9940:3333::/48 Signature Algorithm: sha256WithRSAEncryption b2:42:f4:f9:68:67:50:18:f5:33:09:5c:bf:cf:61:bd:0f:34: 4d:a7:c4:a6:bf:19:55:4e:79:b8:49:af:73:c1:68:26:55:e1: b6:39:76:98:6f:55:71:79:21:d8:ff:54:7d:35:d7:4b:44:53: 23:3a:db:1c:f2:75:a1:8d:1b:37:95:72:02:6e:b3:1a:c0:f0: d7:73:2f:3a:59:9a:4f:32:13:f2:38:d5:b1:1f:d0:9f:34:9a: 0e:28:ef:71:39:1c:5f:5c:31:ac:d0:36:58:d1:97:ca:65:35: f9:3a:45:a0:ab:f3:48:d8:95:fa:9a:8b:7b:c6:5d:b7:6e:29: 66:9f:62:2a:46:d5:42:3b:49:63:cd:88:36:d4:bb:7d:19:3c: b7:dd:26:37:0c:0a:ac:57:58:4f:5a:30:a5:2f:7f:ad:29:c6: 85:78:76:54:7f:e8:a9:d6:2a:af:fa:f9:ae:3d:63:06:c0:ad: 4b:69:09:9b:6b:05:cb:02:05:9e:c9:55:c7:62:64:cf:d1:44: e2:af:8c:85:f6:e7:d4:39:ba:03:b5:60:f4:1f:82:d4:ae:b1: d5:16:f5:45:47:e3:d9:f7:e3:a2:3f:93:ff:47:56:6d:bd:0c: 91:d8:d1:60:52:f0:3c:5c:0c:63:00:62:93:22:ed:59:1c:3f: f4:9a:96:d6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ERbepnpPS49RHCqrAG9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWFlMzg5ZjNkMGFiZDRlOTdmZjBiNWI2OTMyZmU2NmZiNWE4OTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOlbokKzYFOyWQg+rbc+SmeT1UEV TG5GOOHdqwYAOn6a9ddafy0Tm1AMHJI27aKMVgtrI4T7HDAKqBfQmPoEbibqHYs8 KqolgvP2DkfAQZdnqha7k19NJR1WNAj/MsRVif7/Fzja38BdfvEs1JXtdG0Df7J0 iVsSVH/nray3FVABGV3GvcgK8hUscFxU001vqXKZU/R6MKZS0SLGJUYXirN9M2Ga AGys/TSsEvr9ZDCOpLHcZE9GnHqrqg8rXlSDrDHBR74QfAYLKZKwWYUqpjFwN1EV Z2PFyejC81pDk1mrQUStoNVQhyry7PgGNZzSF5/Qy6CA9a64OM40lxYR/wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBquOJ89Cr1Ol/8LW2ky/mb7WokyMB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvR3E0NG56MEt2VTZYX3d0YmFUTC1adnRhaVRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAa7WHMA8E AgACMAkDBwAqB5lAMzMwDQYJKoZIhvcNAQELBQADggEBALJC9PloZ1AY9TMJXL/P Yb0PNE2nxKa/GVVOebhJr3PBaCZV4bY5dphvVXF5Idj/VH0110tEUyM62xzydaGN GzeVcgJusxrA8NdzLzpZmk8yE/I41bEf0J80mg4o73E5HF9cMazQNljRl8plNfk6 RaCr80jYlfqai3vGXbduKWafYipG1UI7SWPNiDbUu30ZPLfdJjcMCqxXWE9aMKUv f60pxoV4dlR/6KnWKq/6+a49YwbArUtpCZtrBcsCBZ7JVcdiZM/RROKvjIX259Q5 ugO1YPQfgtSusdUW9UVH49n346I/k/9HVm29DJHY0WBS8DxcDGMAYpMi7VkcP/Sa ltY= -----END CERTIFICATE-----Generated at Wed Jan 21 15:05:54 2026 by rpki-client