This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/gsWrUBeqM0EhY9FS-NajkLZ-rCk.roa File: gsWrUBeqM0EhY9FS-NajkLZ-rCk.roa (raw, json) Hash identifier: zszGjcbEnjBUQ9kcf+iql7NUu5G/jl0U+3CAhbnB8b0= Subject key identifier: 82:C5:AB:50:17:AA:33:41:21:63:D1:52:F8:D6:A3:90:B6:7E:AC:29 Certificate issuer: /CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d Certificate serial: 019B7CEE1692BF34FD07EBF9CF863E8487C4 Authority key identifier: 51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/gsWrUBeqM0EhY9FS-NajkLZ-rCk.roa Signing time: Fri 02 Jan 2026 04:18:56 +0000 ROA not before: Fri 02 Jan 2026 04:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48634 IP address blocks: 91.211.156.0/22 maxlen: 22 91.211.156.0/24 maxlen: 24 91.211.157.0/24 maxlen: 24 91.211.158.0/24 maxlen: 24 91.211.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.mft rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:16:92:bf:34:fd:07:eb:f9:cf:86:3e:84:87:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51bdf0d4de40057f5cc3fd1e70bfc11f5351738d Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82c5ab5017aa33412163d152f8d6a390b67eac29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:2c:ac:df:db:3f:d5:bf:c7:da:45:69:0b: 79:ec:7d:f0:3c:b6:72:a0:79:f8:44:e3:a2:01:c1: 47:16:2c:e0:86:a3:7d:69:a5:79:77:46:48:64:3c: 46:59:3b:f1:c1:66:ec:40:86:e1:05:c1:f4:12:33: 19:84:b7:6c:b3:e0:9b:1b:97:4b:f8:db:64:98:9f: 67:bf:63:dc:d7:23:97:12:98:b9:ee:b7:30:ee:2a: 5c:05:67:12:98:0d:3d:dd:31:78:87:be:ed:12:82: 5a:a9:f7:da:e0:06:48:87:f6:dd:ce:4d:9d:2c:c5: 5d:99:1f:37:e3:71:a0:77:2e:39:e1:66:ef:86:3b: 66:59:d8:6b:9b:98:5a:ef:d3:83:4f:08:4e:c9:7d: 14:8d:ef:3f:c8:2b:5d:b8:9f:7b:a0:ac:cf:61:fa: 13:ab:86:47:5a:bd:cf:2b:b5:2e:f4:31:d8:8c:a7: 79:91:53:cf:2b:3f:69:ff:e9:5d:1a:5f:df:90:dc: a4:98:62:40:1e:d5:8f:3b:c4:56:a5:1d:77:b2:3d: 16:ff:d1:17:ac:2f:30:e7:d4:ad:fe:c2:db:3f:47: a3:78:61:7a:c6:b8:0b:bd:37:a9:36:9f:67:1b:79: d1:ef:45:95:67:ae:b0:74:d3:99:77:ac:73:fc:17: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:AB:50:17:AA:33:41:21:63:D1:52:F8:D6:A3:90:B6:7E:AC:29 X509v3 Authority Key Identifier: keyid:51:BD:F0:D4:DE:40:05:7F:5C:C3:FD:1E:70:BF:C1:1F:53:51:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub3w1N5ABX9cw_0ecL_BH1NRc40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/gsWrUBeqM0EhY9FS-NajkLZ-rCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/edae6a-6a5d-4e89-8986-e88d884c20ef/1/Ub3w1N5ABX9cw_0ecL_BH1NRc40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.156.0/22 Signature Algorithm: sha256WithRSAEncryption 65:50:ab:fc:3e:4a:6c:76:bc:cc:08:45:d8:c1:3e:98:4e:db: 39:f5:cc:e1:9b:e5:b6:d1:f4:d1:37:e9:90:ff:6a:2f:f4:e2: 27:bc:1c:a2:fb:52:73:45:33:26:d5:e8:b0:1b:38:43:4b:db: e0:e5:5d:e5:cf:9d:9a:35:56:70:68:0d:79:e5:4b:cd:6e:da: cb:45:33:65:fb:b1:52:69:b0:2f:e7:ae:cb:cb:c4:b7:4e:61: 77:29:be:30:b5:8c:d8:fb:68:3e:41:e4:a4:9b:0d:12:94:bd: 82:6a:f8:90:96:42:21:ff:2b:0d:3e:c7:42:7b:a1:cf:00:89: 14:f6:25:69:6d:db:99:58:43:78:94:67:fb:20:a0:60:33:32: f8:09:47:44:5e:f3:c7:20:01:0d:a1:36:52:63:b3:b9:88:a2: a7:72:c3:85:c0:02:e7:1c:3b:9a:32:9e:28:f5:8d:db:a2:a8: d9:dc:03:65:89:89:b6:5c:15:cc:eb:e2:eb:46:5e:e0:23:0a: c1:77:57:6b:9d:c0:d8:98:00:5e:fb:23:92:00:93:09:9e:9c: 20:a2:49:8a:9d:fa:f2:88:42:70:a7:0f:5e:0b:ad:c4:63:1c: 91:3a:dc:55:4e:03:3f:49:55:4d:1b:77:03:f1:6d:85:7c:3d: fd:ad:e7:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87haSvzT9B+v5z4Y+hIfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYmRmMGQ0ZGU0MDA1N2Y1Y2MzZmQxZTcwYmZjMTFmNTM1 MTczOGQwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmM1YWI1MDE3YWEzMzQxMjE2M2QxNTJmOGQ2YTM5MGI2N2VhYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyAsrN/bP9W/x9pFaQt57H3wPLZy oHn4ROOiAcFHFizghqN9aaV5d0ZIZDxGWTvxwWbsQIbhBcH0EjMZhLdss+CbG5dL +NtkmJ9nv2Pc1yOXEpi57rcw7ipcBWcSmA093TF4h77tEoJaqffa4AZIh/bdzk2d LMVdmR8343Ggdy454WbvhjtmWdhrm5ha79ODTwhOyX0Uje8/yCtduJ97oKzPYfoT q4ZHWr3PK7Uu9DHYjKd5kVPPKz9p/+ldGl/fkNykmGJAHtWPO8RWpR13sj0W/9EX rC8w59St/sLbP0ejeGF6xrgLvTepNp9nG3nR70WVZ66wdNOZd6xz/BcT4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFILFq1AXqjNBIWPRUvjWo5C2fqwpMB8GA1UdIwQY MBaAFFG98NTeQAV/XMP9HnC/wR9TUXONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lZGFlNmEtNmE1ZC00ZTg5LTg5ODYt ZTg4ZDg4NGMyMGVmLzEvZ3NXclVCZXFNMEVoWTlGUy1OYWprTFotckNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lZGFlNmEtNmE1ZC00ZTg5LTg5ODYtZTg4ZDg4NGMyMGVm LzEvVWIzdzFONUFCWDljd18wZWNMX0JIMU5SYzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9OcMA0G CSqGSIb3DQEBCwUAA4IBAQBlUKv8PkpsdrzMCEXYwT6YTts59czhm+W20fTRN+mQ /2ov9OInvByi+1JzRTMm1eiwGzhDS9vg5V3lz52aNVZwaA155UvNbtrLRTNl+7FS abAv567Ly8S3TmF3Kb4wtYzY+2g+QeSkmw0SlL2CaviQlkIh/ysNPsdCe6HPAIkU 9iVpbduZWEN4lGf7IKBgMzL4CUdEXvPHIAENoTZSY7O5iKKncsOFwALnHDuaMp4o 9Y3boqjZ3ANliYm2XBXM6+LrRl7gIwrBd1drncDYmABe+yOSAJMJnpwgokmKnfry iEJwpw9eC63EYxyROtxVTgM/SVVNG3cD8W2FfD39rece -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:14 2026 by rpki-client