This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/G1V90RC1exZnB2Wm6ZYrCHOL5-g.roa File: G1V90RC1exZnB2Wm6ZYrCHOL5-g.roa (raw, json) Hash identifier: L83WTLt4cwnsIkaZ4Oynv4dQW/obx3iQoamRPQalyjc= Subject key identifier: 1B:55:7D:D1:10:B5:7B:16:67:07:65:A6:E9:96:2B:08:73:8B:E7:E8 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C9D844A3CB755BACD2C237853971 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/G1V90RC1exZnB2Wm6ZYrCHOL5-g.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57318 IP address blocks: 80.233.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c9:d8:44:a3:cb:75:5b:ac:d2:c2:37:85:39:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b557dd110b57b16670765a6e9962b08738be7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:35:bd:e5:99:09:dd:5f:3b:12:15:13:75: 6a:3e:60:2d:15:8d:f7:2d:70:a4:50:7f:4c:3e:a1: de:a6:dc:71:db:e4:71:85:33:21:10:96:c0:4e:dd: 5d:af:f2:b4:3f:ee:03:1d:54:fa:80:1b:4f:35:2a: 10:46:45:9c:02:19:b5:8a:3a:bc:e8:cd:03:58:62: 10:df:c9:13:ed:55:94:e9:a0:59:41:f3:f6:40:67: d7:55:d4:30:30:da:d2:7a:79:3c:96:1b:0d:12:28: a6:72:ba:6e:a4:15:3a:63:89:db:1a:72:ca:e8:b0: 0a:26:49:a7:28:da:c5:f3:09:3d:43:19:d2:7e:d1: 70:f6:3a:9d:db:b2:b5:b1:0c:1d:c6:0e:d4:31:80: fb:8d:ba:33:51:6d:ac:78:59:02:52:99:c4:c9:cb: 87:7f:8f:21:26:37:00:d7:de:b3:25:95:b8:31:13: d6:bb:e1:4c:30:9c:12:3b:fd:21:95:61:c6:ca:3d: e0:aa:c8:15:1c:a7:8f:a6:b1:8f:b2:82:89:17:fc: 86:f2:f4:3f:a3:65:7f:e4:6e:6d:fe:7e:62:38:53: 0c:a0:98:09:bd:5c:4e:7b:fe:40:d0:f0:e5:28:ac: 24:7f:b3:b3:9f:c3:32:cb:50:82:ba:e0:a2:a8:61: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:55:7D:D1:10:B5:7B:16:67:07:65:A6:E9:96:2B:08:73:8B:E7:E8 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/G1V90RC1exZnB2Wm6ZYrCHOL5-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.130.0/24 Signature Algorithm: sha256WithRSAEncryption 09:df:85:ce:0e:e8:85:b6:21:eb:db:7d:b8:6a:40:41:27:00: 50:f7:7d:d5:f4:dc:6d:a0:32:f0:4c:ce:34:de:be:f0:77:54: 99:33:26:fc:7d:5a:e0:a9:51:7e:15:f1:62:47:38:74:c8:0e: 0f:9a:35:56:70:ed:2e:91:1f:91:bb:0b:ef:45:e4:d5:89:3d: 01:21:de:50:fc:1a:34:c1:98:9f:24:ec:4e:bf:f8:04:19:66: bc:4f:7f:f3:5c:41:12:c0:3d:24:6e:6e:eb:35:88:6e:48:96: 81:58:53:50:e6:c3:ab:62:4a:e0:fc:fc:87:23:2b:7a:3b:17: d7:c2:57:b8:24:5f:57:5c:08:f2:d8:4c:7d:94:f4:7d:41:b7: 2a:2d:06:d4:13:f6:3e:02:d1:d4:6e:2e:f0:57:d4:6a:40:15: ff:bd:9c:e1:de:91:0e:7e:2a:15:db:05:23:1a:9f:4b:8b:3b: 20:fb:be:5d:cb:1d:fc:16:9d:95:5d:37:ec:2b:c1:bb:3d:19: 9e:1d:a3:8b:53:4a:29:d6:fd:85:ff:a6:03:36:96:e3:4a:f2: 4d:80:6b:d4:ed:15:a3:8d:66:56:1c:ed:82:15:8a:ee:75:44: d6:3c:a6:eb:52:0b:3f:02:4c:5f:77:d9:8b:8e:95:35:fc:5f: cd:2e:57:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMnYRKPLdVus0sI3hTlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjU1N2RkMTEwYjU3YjE2NjcwNzY1YTZlOTk2MmIwODczOGJlN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Q1veWZCd1fOxIVE3VqPmAtFY33 LXCkUH9MPqHeptxx2+RxhTMhEJbATt1dr/K0P+4DHVT6gBtPNSoQRkWcAhm1ijq8 6M0DWGIQ38kT7VWU6aBZQfP2QGfXVdQwMNrSenk8lhsNEiimcrpupBU6Y4nbGnLK 6LAKJkmnKNrF8wk9QxnSftFw9jqd27K1sQwdxg7UMYD7jbozUW2seFkCUpnEycuH f48hJjcA196zJZW4MRPWu+FMMJwSO/0hlWHGyj3gqsgVHKePprGPsoKJF/yG8vQ/ o2V/5G5t/n5iOFMMoJgJvVxOe/5A0PDlKKwkf7Ozn8Myy1CCuuCiqGHEswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtVfdEQtXsWZwdlpumWKwhzi+foMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvRzFWOTBSQzFleFpuQjJXbTZaWXJDSE9MNS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOmCMA0G CSqGSIb3DQEBCwUAA4IBAQAJ34XODuiFtiHr2324akBBJwBQ933V9NxtoDLwTM40 3r7wd1SZMyb8fVrgqVF+FfFiRzh0yA4PmjVWcO0ukR+RuwvvReTViT0BId5Q/Bo0 wZifJOxOv/gEGWa8T3/zXEESwD0kbm7rNYhuSJaBWFNQ5sOrYkrg/PyHIyt6OxfX wle4JF9XXAjy2Ex9lPR9QbcqLQbUE/Y+AtHUbi7wV9RqQBX/vZzh3pEOfioV2wUj Gp9Lizsg+75dyx38Fp2VXTfsK8G7PRmeHaOLU0op1v2F/6YDNpbjSvJNgGvU7RWj jWZWHO2CFYrudUTWPKbrUgs/Akxfd9mLjpU1/F/NLleR -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:56 2026 by rpki-client